tls sans

kubernetes/gitea/db.yml

@@ -33,20 +33,19 @@ spec:
           hostPath:
             path: /data/gitea/postgres
             type: DirectoryOrCreate
-
 ---
 apiVersion: v1
 kind: Service
 metadata:
-  name: postgres
+  name: gitea_db
   namespace: projects
   labels:
-    app: postgres
+    app: gitea_db
 spec:
   ports:
     - protocol: TCP
       port: 5432
       targetPort: 5432
   selector:
-    app: postgres
+    app: gitea_db
   type: ClusterIP

kubernetes/gitea/web.yml

@@ -1,23 +1,21 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: gitea
+  name: gitea_web
   namespace: projects
-  labels:
-    app: gitea
 spec:
   replicas: 1
   selector:
     matchLabels:
-      app: gitea
+      app: gitea_web
   template:
     metadata:
       labels:
-        app: gitea
+        app: gitea_web
     spec:
       containers:
         - name: gitea
-          image: docker.io/gitea/gitea:1.23.1
+          image: docker.io/gitea/gitea:1.23
           ports:
             - containerPort: 3000
             - containerPort: 22
@@ -51,7 +49,7 @@ spec:
       volumes:
         - name: gitea-data
           hostPath:
-            path: /mnt/data/gitea
+            path: /data/gitea/data
             type: DirectoryOrCreate
         - name: timezone
           hostPath:
@@ -64,20 +62,16 @@ spec:
 apiVersion: v1
 kind: Service
 metadata:
-  name: gitea
+  name: gitea_web
   namespace: projects
-  labels:
-    app: gitea
 spec:
   type: NodePort
   ports:
     - name: http
       port: 3000
       targetPort: 3000
-      nodePort: 32000
     - name: ssh
       port: 22
       targetPort: 22
-      nodePort: 32222
   selector:
-    app: gitea
+    app: gitea_web

nix/modules/k3s.nix

@@ -6,5 +6,6 @@
   services.k3s.role = "server";
   services.k3s.extraFlags = toString [
     # "--debug" # Optionally add additional args to k3s
+    "--tls-san 100.96.241.36"
   ];
 }