mirror of
https://github.com/michaelthomson0797/fleet-infra.git
synced 2026-02-04 13:09:53 +00:00
85 lines
2.3 KiB
YAML
85 lines
2.3 KiB
YAML
apiVersion: helm.toolkit.fluxcd.io/v2beta1
|
|
kind: HelmRelease
|
|
metadata:
|
|
name: pihole
|
|
namespace: pihole
|
|
spec:
|
|
chart:
|
|
spec:
|
|
chart: pihole
|
|
version: 2.x
|
|
sourceRef:
|
|
kind: HelmRepository
|
|
name: mojo2600
|
|
namespace: flux-system
|
|
interval: 15m
|
|
timeout: 5m
|
|
releaseName: pihole
|
|
values:
|
|
# -- Configuration for the DNS service on port 53
|
|
serviceDns:
|
|
annotations:
|
|
metallb.universe.tf/loadBalancerIPs: 192.168.2.250
|
|
metallb.universe.tf/allow-shared-ip: pihole-svc
|
|
|
|
# -- Configuration for the Ingress
|
|
ingress:
|
|
# -- Generate a Ingress resource
|
|
enabled: true
|
|
|
|
# -- Specify an ingressClassName
|
|
ingressClassName: traefik
|
|
|
|
# -- Annotations for the ingress
|
|
annotations:
|
|
traefik.ingress.kubernetes.io/router.entrypoints: websecure
|
|
traefik.ingress.kubernetes.io/router.tls: "true"
|
|
path: /
|
|
hosts:
|
|
- pihole.michaelthomson.dev
|
|
tls:
|
|
- hosts:
|
|
- pihole.michaelthomson.dev
|
|
secretName: letsencrypt-wildcard-cert-michaelthomson.dev
|
|
|
|
# -- `spec.PersitentVolumeClaim` configuration
|
|
persistentVolumeClaim:
|
|
# -- set to true to use pvc
|
|
enabled: true
|
|
storageClass: longhorn
|
|
|
|
# -- Administrator password when not using an existing secret (see below)
|
|
adminPassword: "admin"
|
|
|
|
# -- Use an existing secret for the admin password.
|
|
admin:
|
|
# -- Specify an existing secret to use as admin password
|
|
existingSecret: ""
|
|
# -- Specify the key inside the secret to use
|
|
passwordKey: "password"
|
|
|
|
adlists:
|
|
{}
|
|
# If you want to provide blocklists, add them here.
|
|
# - https://hosts-file.net/grm.txt
|
|
# - https://reddestdream.github.io/Projects/MinimalHosts/etc/MinimalHostsBlocker/minimalhosts
|
|
|
|
# -- list of whitelisted domains to import during initial start of the container
|
|
whitelist:
|
|
{}
|
|
# If you want to provide whitelisted domains, add them here.
|
|
# - clients4.google.com
|
|
|
|
# -- list of blacklisted domains to import during initial start of the container
|
|
blacklist:
|
|
{}
|
|
# If you want to have special domains blacklisted, add them here
|
|
# - *.blackist.com
|
|
|
|
podDnsConfig:
|
|
enabled: true
|
|
policy: "None"
|
|
nameservers:
|
|
- 127.0.0.1
|
|
- 8.8.8.8
|