Funk-lab/ansible/group_vars/all/vars.yml at f34956f569a90fe57a6f32e983fb8fd794dfd3d0 - akadmin/Funk-lab - Forgejo: Beyond coding. We forge.

akadmin/Funk-lab

mirror of https://github.com/Alkatrazz24/Funk-lab.git synced 2026-07-08 14:34:43 +02:00

alkatrazz f34956f569 feat(infra): domaine public funklab.online + HTTPS Let's Encrypt (fondation)

- traefik : values.yaml versionné (réplique existant + certResolver ACME
  HTTP-01 + acme.json persistant) — appliqué par helm upgrade (hors ArgoCD).
  Redirect HTTP→HTTPS scopée funklab.online (ne casse pas *.lab.local).
- gateway : DNAT 80/443 → Traefik + rate-limit
- dnsmasq : split-horizon *.funklab.online → Traefik (var public_domain)
- doc : admin/k8s/public-domain.md (archi, OVH/Freebox, helm, ajout d'app)

Appliqué et vérifié : helm upgrade OK (services *.lab.local intacts),
resolver ACME chargé, DNAT/dnsmasq en place. En attente DNS OVH + Freebox
pour l'émission des certificats.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-07 13:17:02 +02:00

10 lines

261 B

YAML

Raw Blame History

 ---
 admin_user: alkatrazz
 dns_domain: lab.local
 public_domain: funklab.online   # domaine public (OVH) — apps exposées en HTTPS via Traefik
 ntp_servers:
   - 0.fr.pool.ntp.org
   - 1.fr.pool.ntp.org
 cluster_network: 192.168.10.0/24
 wan_gateway: 192.168.1.254