ports

kubernetes/ingress/values.yml

@@ -0,0 +1,9 @@
+controller:
+  hostNetwork: true
+  dnsPolicy: ClusterFirstWithHostNet
+  # kind: DaemonSet
+  # hostPort:
+  #   enabled: true
+  #   ports:
+  #     http: 80
+  #     https: 443

kubernetes/readme.md

@@ -37,4 +37,12 @@ Currently clouflare domains cannot be CNAME'd to tailscale domains:
 kubectl apply -f https://raw.githubusercontent.com/kubernetes/ingress-nginx/controller-v1.12.0/deploy/static/provider/baremetal/deploy.yaml
 ``
 
-I'll need to create a custom service to bring in port 80 and 443 later
+I'll need to create a custom service to bring in port 80 and 443 later
+
+```
+helm upgrade --install ingress-nginx ingress-nginx \
+  --repo https://kubernetes.github.io/ingress-nginx \
+  --namespace ingress-nginx \
+  --create-namespace \
+  -f values.yml
+```

nix/modules/k3s.nix

@@ -9,4 +9,12 @@
     "--disable=traefik"
     "--tls-san 100.122.128.107"
   ];
+  networking.firewall.allowedTCPPorts = [
+    443
+    80
+  ];
+  networking.firewall.allowedUDPPorts = [
+    443
+    80
+  ];
 }