working on getting gitea working

kubernetes/gitea/web.yml

@@ -61,6 +61,8 @@ kind: Service
 metadata:
   name: gitea-web-svc
   namespace: projects
+  annotations:
+    tailscale.com/expose: "true" # exposes IP directly
 spec:
   type: NodePort
   ports:
@@ -79,7 +81,7 @@ metadata:
   name: gitea
   namespace: projects
   annotations:
-    cert-manager.io/cluster-issuer: cloudflare-issuer
+    cert-manager.io/cluster-issuer: cloudflare-issuer # not really working with tailscale
 spec:
   ingressClassName: tailscale
   tls:

kubernetes/readme.md

@@ -1,5 +1,9 @@
 # sources
 
+> note: k0s never works as well as you think
+
+<https://k3s.io/>
+
 
 nix instructions: <https://github.com/NixOS/nixpkgs/blob/master/pkgs/applications/networking/cluster/k3s/README.md>
 
@@ -21,3 +25,8 @@ helm upgrade \
   --wait
 ```
 
+
+Currently clouflare domains cannot be CNAME'd to tailscale domains:
+- <https://github.com/tailscale/tailscale/issues/7650>
+- related, different IP addresses: <https://tailscale.com/blog/choose-your-ip#natural-solutions>
+