akadmin/Funk-lab
1
0
Fork 0
mirror of https://github.com/Alkatrazz24/Funk-lab.git synced 2026-07-10 11:34:42 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(infra): domaine public funklab.online + HTTPS Let's Encrypt (fondation) (#88)

Browse source 
- traefik : values.yaml versionné (réplique existant + certResolver ACME
  HTTP-01 + acme.json persistant) — appliqué par helm upgrade (hors ArgoCD).
  Redirect HTTP→HTTPS scopée funklab.online (ne casse pas *.lab.local).
- gateway : DNAT 80/443 → Traefik + rate-limit
- dnsmasq : split-horizon *.funklab.online → Traefik (var public_domain)
- doc : admin/k8s/public-domain.md (archi, OVH/Freebox, helm, ajout d'app)

Appliqué et vérifié : helm upgrade OK (services *.lab.local intacts),
resolver ACME chargé, DNAT/dnsmasq en place. En attente DNS OVH + Freebox
pour l'émission des certificats.

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
ALI YESILKAYA 2026-07-07 15:59:26 +02:00 • committed by GitHub
parent f9a916988b
commit cd0dacbc9a
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
6 changed files with 202 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
ansible/group_vars/all/vars.yml
View file

@ -1,6 +1,7 @@
---
admin_user: alkatrazz
dns_domain: lab.local
public_domain: funklab.online # domaine public (OVH) — apps exposées en HTTPS via Traefik
ntp_servers:
- 0.fr.pool.ntp.org
- 1.fr.pool.ntp.org