setting up configuration for proxying

.github/workflows/update-home-server.yml

@@ -31,8 +31,8 @@ jobs:
           pwd
           # echo "$CLOUDFLARE_CONFIG" > /data/cloudflare/cloudflare.ini
           cd home-server
-          docker pull nextcloud:production
+          docker pull -q nextcloud:production
-          docker compose pull
+          docker compose pull -q
           docker compose build
           docker compose up -d
           # docker restart reverse-proxy

kubernetes/nginx-configuration.yaml

@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  labels:
+    app.kubernetes.io/component: controller
+    app.kubernetes.io/instance: ingress-nginx
+    app.kubernetes.io/name: ingress-nginx
+    app.kubernetes.io/part-of: ingress-nginx
+    app.kubernetes.io/version: 1.12.0
+  name: ingress-nginx-controller
+  namespace: ingress-nginx
+data:
+  allow-snippet-annotations: "true"
+  annotations-risk-level: Critical

kubernetes/proxy-ingress/jellyfin-proxy-ingress.yml

@@ -0,0 +1,27 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: jellyfin-proxy-ingress
+  namespace: projects
+spec:
+  ingressClassName: nginx
+  rules:
+  - host: jellyfin.alexmickelson.guru
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: jellyfin-service
+            port:
+              number: 8096
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: jellyfin-service
+  namespace: projects
+spec:
+  type: ExternalName
+  externalName: 100.122.128.107

kubernetes/readme.md

@@ -30,3 +30,11 @@ Currently clouflare domains cannot be CNAME'd to tailscale domains:
 - <https://github.com/tailscale/tailscale/issues/7650>
 - related, different IP addresses: <https://tailscale.com/blog/choose-your-ip#natural-solutions>
 
+
+## Kubernetes ingress controller
+
+```
+kubectl apply -f https://raw.githubusercontent.com/kubernetes/ingress-nginx/controller-v1.12.0/deploy/static/provider/baremetal/deploy.yaml
+``
+
+I'll need to create a custom service to bring in port 80 and 443 later