pihole ingress

pihole/dns-endpoint.yaml

@@ -0,0 +1,12 @@
+apiVersion: externaldns.k8s.io/v1alpha1
+kind: DNSEndpoint
+metadata:
+  name: pihole.michaelthomson.dev
+  namespace: pihole
+spec:
+  endpoints:
+  - dnsName: pihole.michaelthomson.dev
+    recordTTL: 180
+    recordType: CNAME
+    targets:
+    - server.michaelthomson.dev

pihole/helmrelease-pihole.yaml

@@ -150,25 +150,25 @@ spec:
     # -- Configuration for the Ingress
     ingress:
       # -- Generate a Ingress resource
-      enabled: false
+      enabled: true
 
       # -- Specify an ingressClassName
-      # ingressClassName: nginx
+      ingressClassName: traefik
 
       # -- Annotations for the ingress
       annotations:
-        {}
-        # kubernetes.io/ingress.class: nginx
-        # kubernetes.io/tls-acme: "true"
+        traefik.ingress.kubernetes.io/router.entrypoints: websecure
+        traefik.ingress.kubernetes.io/router.middlewares: traefik-authentik@kubernetescrd
+        traefik.ingress.kubernetes.io/router.tls: "true"
       path: /
       hosts:
         # virtualHost (default value is pi.hole) will be appended to the hosts
-        - chart-example.local
-      tls: []
-      #  - secretName: chart-example-tls
-      #    hosts:
-      #     #- virtualHost (default value is pi.hole) will be appended to the hosts
-      #      - chart-example.local
+        - pihole.michaelthomson.dev
+      tls:
+        - hosts:
+            # virtualHost (default value is pi.hole) will be appended to the hosts
+            - pihole.michaelthomson.dev
+          secretName: letsencrypt-wildcard-cert-michaelthomson.dev
 
     # -- Probes configuration
     probes: