From 30eeabb58b9f4475a17f4a9c9bc5c6e1f1ca25ac Mon Sep 17 00:00:00 2001
From: Elam Monnot <elam.monnot@ip-192-168-0-21>
Date: Thu, 6 Apr 2023 09:15:43 +0200
Subject: [PATCH] feat: added nginx ingress

---
 roles/peertube/files/finish      |  6 ++++++
 roles/peertube/files/values.yaml | 10 +++++-----
 2 files changed, 11 insertions(+), 5 deletions(-)

diff --git a/roles/peertube/files/finish b/roles/peertube/files/finish
index c24de5c..8ffe212 100644
--- a/roles/peertube/files/finish
+++ b/roles/peertube/files/finish
@@ -1,4 +1,10 @@
 export KUBECONFIG=/etc/rancher/k3s/k3s.yaml;
+helm upgrade --install ingress-nginx ingress-nginx \
+  --repo https://kubernetes.github.io/ingress-nginx \
+  --namespace ingress-nginx --create-namespace;
+sleep 15;
+openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout ${KEY_FILE} -out ${CERT_FILE} -subj "/CN=${HOST}/O=${HOST}" -addext "subjectAltName = DNS:${HOST}";
+kubectl create secret tls tls-peertube --key ${KEY_FILE} --cert ${CERT_FILE};
 helm repo add postgresql https://charts.bitnami.com/bitnami;
 helm repo add redis https://charts.bitnami.com/bitnami;
 helm repo add mail https://bokysan.github.io/docker-postfix;
diff --git a/roles/peertube/files/values.yaml b/roles/peertube/files/values.yaml
index 3ac429b..2e660f4 100644
--- a/roles/peertube/files/values.yaml
+++ b/roles/peertube/files/values.yaml
@@ -98,21 +98,21 @@ redis:
 
 ## ingress configuration is very specific this part must be configured or else you'll get 503 or 404 errors
 ingress:
-  enabled: false
+  enabled: true
   className: ""
   annotations: 
     kubernetes.io/ingress.class: nginx
     nginx.ingress.kubernetes.io/proxy-body-size: 4G # this caps the size of imported videos, if set low this might prevent you from uploading videos
     # kubernetes.io/tls-acme: "true"
   hosts:
-    - host: # your domain here
+    - host: s-peertube.gsb.lan
       paths:
         - path: /
           pathType: ImplementationSpecific
-  tls: 
-  #  - secretName: chart-example-tls
+  tls:
+    - secretName: tls-peertube
     - hosts:
-      -  # your domain here
+      -  s-peertube.gsb.lan
 
 resources: {}
 autoscaling: