update

k8s/xiongxiao.me/traefik/traefik-complete.yaml

@@ -130,7 +130,6 @@ spec:
       labels:
         app: traefik
     spec:
-      hostNetwork: true
       serviceAccountName: traefik
       containers:
       - name: traefik
@@ -141,12 +140,10 @@ spec:
           - --providers.kubernetescrd
           - --entrypoints.web.address=:80
           - --entrypoints.websecure.address=:443
-          # HTTP 自动重定向到 HTTPS
-          - --entrypoints.web.http.redirections.entrypoint.to=websecure
-          - --entrypoints.web.http.redirections.entrypoint.scheme=https
           # Let's Encrypt 配置
           - --certificatesresolvers.letsencrypt.acme.email=root@xiongxiao.me
           - --certificatesresolvers.letsencrypt.acme.storage=/acme/acme.json
+          - --certificatesresolvers.letsencrypt.acme.httpchallenge=true
           - --certificatesresolvers.letsencrypt.acme.httpchallenge.entrypoint=web
           # 使用 Let's Encrypt 生产环境(如果测试,使用 caserver)
           # - --certificatesresolvers.letsencrypt.acme.caserver=https://acme-staging-v02.api.letsencrypt.org/directory
@@ -172,19 +169,22 @@ metadata:
   name: traefik
   namespace: traefik
 spec:
-  type: ClusterIP
+  type: NodePort
   selector:
     app: traefik
   ports:
   - name: web
     port: 80
     targetPort: 80
+    nodePort: 30080  # 外部通过 30080 访问 HTTP
   - name: websecure
     port: 443
     targetPort: 443
+    nodePort: 30443  # 外部通过 30443 访问 HTTPS
   - name: admin
     port: 8080
     targetPort: 8080
+    nodePort: 30808  # Dashboard
 ---
 apiVersion: networking.k8s.io/v1
 kind: IngressClass