Erich Blume
df372fccb6
All checks were successful
Deploy Fly.io Proxy / deploy (push) Successful in 1m57s
## Summary - Add nginx server block for `cv.eblu.me` (static site, same pattern as docs) - Add DNS CNAME record in Pulumi (`cv.eblu.me` → `blumeops-proxy.fly.dev`) - Add `cv.eblu.me` cert to `fly-setup` mise task - Tag CV Tailscale ingress with `tag:flyio-target` for ACL access - Remove `/_error` test endpoint from docs proxy ## Deployment and Testing - [ ] `argocd app set cv --revision cv/public-cv-eblu-me && argocd app sync cv` - [ ] `fly certs add cv.eblu.me -a blumeops-proxy` - [ ] `mise run fly-deploy` - [ ] Verify proxy: `curl -I -H "Host: cv.eblu.me" https://blumeops-proxy.fly.dev/` - [ ] `mise run dns-preview` then `mise run dns-up` - [ ] Verify live: `curl -I https://cv.eblu.me` - [ ] Merge, then `argocd app set cv --revision main && argocd app sync cv` Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/173
27 lines
680 B
YAML
27 lines
680 B
YAML
---
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: Ingress
|
|
metadata:
|
|
name: cv-tailscale
|
|
namespace: cv
|
|
annotations:
|
|
tailscale.com/proxy-class: "default"
|
|
tailscale.com/proxy-group: "ingress"
|
|
tailscale.com/tags: "tag:k8s,tag:flyio-target"
|
|
gethomepage.dev/enabled: "true"
|
|
gethomepage.dev/name: "CV"
|
|
gethomepage.dev/group: "Apps"
|
|
gethomepage.dev/icon: "mdi-file-document"
|
|
gethomepage.dev/description: "Resume / CV"
|
|
gethomepage.dev/href: "https://cv.ops.eblu.me"
|
|
gethomepage.dev/pod-selector: "app=cv"
|
|
spec:
|
|
ingressClassName: tailscale
|
|
defaultBackend:
|
|
service:
|
|
name: cv
|
|
port:
|
|
number: 80
|
|
tls:
|
|
- hosts:
|
|
- cv
|