initial refactor

infrastructure/controllers/traefik/dns-endpoint.yaml

@@ -0,0 +1,12 @@
+apiVersion: externaldns.k8s.io/v1alpha1
+kind: DNSEndpoint
+metadata:
+  name: server.michaelthomson.dev
+  namespace: traefik
+spec:
+  endpoints:
+  - dnsName: server.michaelthomson.dev
+    recordTTL: 180
+    recordType: A
+    targets:
+    - 192.168.2.200

infrastructure/controllers/traefik/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: traefik

infrastructure/controllers/traefik/release.yaml

@@ -0,0 +1,42 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: traefik
+  namespace: traefik
+spec:
+  chart:
+    spec:
+      chart: traefik
+      version: 27.x 
+      sourceRef:
+        kind: HelmRepository
+        name: traefik
+  interval: 15m
+  timeout: 5m
+  releaseName: traefik
+  values:
+    providers:
+      kubernetesCRD:
+        allowCrossNamespace: true
+    ingressRoute:
+      dashboard:
+        matchRule: Host(`server.michaelthomson.dev`)
+        entryPoints: ["websecure"]
+        tls:
+          secretName: letsencrypt-wildcard-cert-michaelthomson.dev
+          domains:
+            - main: server.michaelthomson.dev
+    ports:
+      wireguard-udp:
+        port: 51822
+        protocol: UDP
+        expose:
+          default: true
+
+    service:
+      annotations: 
+        metallb.universe.tf/loadBalancerIPs: 192.168.2.200
+
+    logs:
+      access:
+        enabled: true

infrastructure/controllers/traefik/repository.yaml

@@ -0,0 +1,8 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: traefik
+  namespace: traefik
+spec:
+  interval: 15m
+  url: https://helm.traefik.io/traefik