temp

2025-11-26 15:44:15 +08:00
parent 1cd698ed64
commit 2418891634
42 changed files with 3715 additions and 5 deletions
--- a/k8s/xiongxiao.me/ingress/apps-ingressroute.yaml
+++ b/k8s/xiongxiao.me/ingress/apps-ingressroute.yaml
@@ -0,0 +1,330 @@
+---
+# Traefik IngressRoute 配置 - 所有服务的路由规则
+# tags: traefik, ingressroute, https, ssl, routing, nginx-migration
+# description: 使用 Traefik IngressRoute CRD 配置所有服务的域名路由和 HTTPS
+# title: Traefik IngressRoute 完整配置
+# createdAt: 2025-11-26
+---
+# Blinko - blinko.xiongxiao.me
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: blinko-https
+  namespace: default
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`blinko.xiongxiao.me`)
+      kind: Rule
+      services:
+        - name: blinko-external
+          port: 3111
+  tls:
+    certResolver: letsencrypt
+---
+# Chat - chat.xiongxiao.me (支持 WebSocket)
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: chat-https
+  namespace: default
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`chat.xiongxiao.me`)
+      kind: Rule
+      services:
+        - name: chat-external
+          port: 3000
+  tls:
+    certResolver: letsencrypt
+---
+# Kevisual - kevisual.xiongxiao.me (支持 WebSocket)
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: kevisual-https
+  namespace: default
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`kevisual.xiongxiao.me`)
+      kind: Rule
+      services:
+        - name: kevisual-external
+          port: 3005
+  tls:
+    certResolver: letsencrypt
+---
+# WWW - www.xiongxiao.me (支持 WebSocket)
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: www-https
+  namespace: default
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`www.xiongxiao.me`)
+      kind: Rule
+      services:
+        - name: www-external
+          port: 3005
+  tls:
+    certResolver: letsencrypt
+---
+# Immich - immich.xiongxiao.me (支持 WebSocket)
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: immich-https
+  namespace: default
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`immich.xiongxiao.me`)
+      kind: Rule
+      services:
+        - name: immich-external
+          port: 2283
+  tls:
+    certResolver: letsencrypt
+---
+# Cloud - cloud.xiongxiao.me
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: cloud-https
+  namespace: default
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`cloud.xiongxiao.me`)
+      kind: Rule
+      services:
+        - name: cloud-external
+          port: 5212
+  tls:
+    certResolver: letsencrypt
+---
+# Docmost - docmost.xiongxiao.me (支持 WebSocket)
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: docmost-https
+  namespace: default
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`docmost.xiongxiao.me`)
+      kind: Rule
+      services:
+        - name: docmost-external
+          port: 3011
+  tls:
+    certResolver: letsencrypt
+---
+# Drawio - drawio.xiongxiao.me (支持 WebSocket)
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: drawio-https
+  namespace: default
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`drawio.xiongxiao.me`)
+      kind: Rule
+      services:
+        - name: drawio-external
+          port: 13000
+  tls:
+    certResolver: letsencrypt
+---
+# Minio - minio.xiongxiao.me (支持 WebSocket)
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: minio-https
+  namespace: default
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`minio.xiongxiao.me`)
+      kind: Rule
+      services:
+        - name: minio-external
+          port: 9000
+  tls:
+    certResolver: letsencrypt
+---
+# NPM - npm.xiongxiao.me
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: npm-https
+  namespace: default
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`npm.xiongxiao.me`)
+      kind: Rule
+      services:
+        - name: npm-external
+          port: 30001
+  tls:
+    certResolver: letsencrypt
+---
+# Gist - gist.xiongxiao.me (支持 WebSocket)
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: gist-https
+  namespace: default
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`gist.xiongxiao.me`)
+      kind: Rule
+      services:
+        - name: gist-external
+          port: 6157
+  tls:
+    certResolver: letsencrypt
+---
+# Webdav - webdav.xiongxiao.me (支持 WebSocket)
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: webdav-https
+  namespace: default
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`webdav.xiongxiao.me`)
+      kind: Rule
+      services:
+        - name: webdav-external
+          port: 6060
+  tls:
+    certResolver: letsencrypt
+---
+# ESM - esm.xiongxiao.me (支持 WebSocket)
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: esm-https
+  namespace: default
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`esm.xiongxiao.me`)
+      kind: Rule
+      services:
+        - name: esm-external
+          port: 12000
+  tls:
+    certResolver: letsencrypt
+---
+# Umami - umami.xiongxiao.me (支持 WebSocket)
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: umami-https
+  namespace: default
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`umami.xiongxiao.me`)
+      kind: Rule
+      services:
+        - name: umami-external
+          port: 4004
+  tls:
+    certResolver: letsencrypt
+---
+# PWD - pwd.xiongxiao.me
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: pwd-https
+  namespace: default
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`pwd.xiongxiao.me`)
+      kind: Rule
+      services:
+        - name: pwd-external
+          port: 8180
+  tls:
+    certResolver: letsencrypt
+---
+# Meilisearch - meilisearch.xiongxiao.me
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: meilisearch-https
+  namespace: default
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`meilisearch.xiongxiao.me`)
+      kind: Rule
+      services:
+        - name: meilisearch-external
+          port: 7700
+  tls:
+    certResolver: letsencrypt
+---
+# Memos - memos.xiongxiao.me
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: memos-https
+  namespace: default
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`memos.xiongxiao.me`)
+      kind: Rule
+      services:
+        - name: memos-external
+          port: 8181
+  tls:
+    certResolver: letsencrypt
+---
+# Gitea - git.xiongxiao.me
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: gitea-https
+  namespace: default
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`git.xiongxiao.me`)
+      kind: Rule
+      services:
+        - name: gitea-external
+          port: 3000
+  tls:
+    certResolver: letsencrypt
--- a/k8s/xiongxiao.me/ingress/rancher-ingress.yaml
+++ b/k8s/xiongxiao.me/ingress/rancher-ingress.yaml
@@ -0,0 +1,26 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: rancher
+  namespace: cattle-system
+  annotations:
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+    traefik.ingress.kubernetes.io/router.tls: "true"
+spec:
+  ingressClassName: traefik
+  rules:
+  - host: rancher.xiongxiao.me
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: rancher
+            port:
+              number: 80
+  tls:
+  - hosts:
+    - rancher.xiongxiao.me
+    secretName: tls-rancher-ingress
--- a/k8s/xiongxiao.me/ingress/verdaccio-ingress.yaml
+++ b/k8s/xiongxiao.me/ingress/verdaccio-ingress.yaml
@@ -0,0 +1,20 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: verdaccio-ingress
+  namespace: default
+spec:
+  ingressClassName: traefik
+  rules:
+  - host: npm.xiongxiao.me
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: verdaccio-service
+            port:
+              number: 4873
+              # curl http://verdaccio-service:4873
+              # wget http://verdaccio-service:4873