nginx poc

3 files changed, 29 insertions, 0 deletions

diff --git a/helmfile.yaml b/helmfile.yaml
index c1b6ea8..fe8d7f3 100644
--- a/helmfile.yaml
+++ b/helmfile.yaml
@@ -1,3 +1,4 @@
 helmfiles:
   - path: ./third-party/prometheus/helmfile.yaml
   - path: ./third-party/grafana/helmfile.yaml
+  - path: ./third-party/nginx/helmfile.yaml
diff --git a/third-party/nginx/helmfile.yaml b/third-party/nginx/helmfile.yaml
new file mode 100644
index 0000000..a33c107
--- /dev/null
+++ b/third-party/nginx/helmfile.yaml
@@ -0,0 +1,10 @@
+repositories:
+  - name: bitnami
+    url: https://charts.bitnami.com/bitnami
+
+releases:
+  - name: nginx
+    namespace: default
+    chart: bitnami/nginx
+    values:
+      - ./values.yaml
diff --git a/third-party/nginx/values.yaml b/third-party/nginx/values.yaml
new file mode 100644
index 0000000..d8f23ae
--- /dev/null
+++ b/third-party/nginx/values.yaml
@@ -0,0 +1,18 @@
+service:
+  type: ClusterIP
+  port: 80
+ingress:
+  enabled: true
+  hostname: k3s.topkek.cloud # Replace with your actual domain
+  annotations:
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+    traefik.ingress.kubernetes.io/router.tls: "true"
+    traefik.ingress.kubernetes.io/router.tls.certresolver: "default"
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+    traefik.ingress.kubernetes.io/redirect-entry-point: https
+    traefik.ingress.kubernetes.io/router.tls.domains.0.main: topkek.cloud
+    traefik.ingress.kubernetes.io/router.tls.domains.0.sans: k3s.topkek.cloud
+  tls:
+    - hosts:
+        - k3s.topkek.cloud
+      secretName: k3-topkek-cloud-tls