initial: yandex-prod gitops infrastructure

Gitea + ArgoCD + cert-manager + Traefik + CNPG + monitoring + loki + alloy matrix homeservers for mrt0rtikize.ru, t0rt1k.tech, roglog.space

argocd/apps/traefik.yaml

@@ -17,6 +17,9 @@ spec:
       values: |
         deployment:
           kind: DaemonSet
+          podAnnotations:
+            prometheus.io/scrape: "true"
+            prometheus.io/port: "9100"
 
         ingressClass:
           enabled: true
@@ -27,6 +30,13 @@ spec:
           - "--ping=true"
           - "--metrics.prometheus=true"
           - "--metrics.prometheus.entrypoint=metrics"
+          - "--entryPoints.ssh.address=:2222/tcp"
+          - "--entryPoints.rtc-tcp-mrt0rtikize.address=:30009/tcp"
+          - "--entryPoints.rtc-udp-mrt0rtikize.address=:30008/udp"
+          - "--entryPoints.rtc-tcp-t0rt1k.address=:30007/tcp"
+          - "--entryPoints.rtc-udp-t0rt1k.address=:30006/udp"
+          - "--entryPoints.rtc-tcp-roglog.address=:30005/tcp"
+          - "--entryPoints.rtc-udp-roglog.address=:30004/udp"
           - "--providers.kubernetesingress.ingressclass=traefik"
           - "--providers.kubernetesingress.ingressendpoint.publishedservice=traefik/traefik"
           - "--accesslog=true"
@@ -36,16 +46,65 @@ spec:
           web:
             port: 8080
             exposedPort: 80
-            redirectTo: websecure
+            http:
+              redirections:
+                entryPoint:
+                  to: websecure
+                  scheme: https
+                  permanent: true
           websecure:
             port: 8443
             exposedPort: 443
+          ssh:
+            port: 2222
+            exposedPort: 22
+            protocol: TCP
+            expose:
+              default: true
+          rtc-tcp-mrt0rtikize:
+            port: 30009
+            exposedPort: 30009
+            protocol: TCP
+            expose:
+              default: true
+          rtc-udp-mrt0rtikize:
+            port: 30008
+            exposedPort: 30008
+            protocol: UDP
+            expose:
+              default: true
+          rtc-tcp-t0rt1k:
+            port: 30007
+            exposedPort: 30007
+            protocol: TCP
+            expose:
+              default: true
+          rtc-udp-t0rt1k:
+            port: 30006
+            exposedPort: 30006
+            protocol: UDP
+            expose:
+              default: true
+          rtc-tcp-roglog:
+            port: 30005
+            exposedPort: 30005
+            protocol: TCP
+            expose:
+              default: true
+          rtc-udp-roglog:
+            port: 30004
+            exposedPort: 30004
+            protocol: UDP
+            expose:
+              default: true
           metrics:
             port: 9100
-            expose: false
+            expose:
+              default: false
           traefik:
             port: 9000
-            expose: false
+            expose:
+              default: false
 
         service:
           type: LoadBalancer
@@ -54,10 +113,6 @@ spec:
             service.beta.kubernetes.io/yandex-load-balancer-specification: '{"type": "network-load-balancer"}'
             service.beta.kubernetes.io/yandex-load-balancer-type: external
 
-        podAnnotations:
-          prometheus.io/scrape: "true"
-          prometheus.io/port: "9100"
-
         resources:
           requests:
             cpu: 100m