mTLS 2

2025-11-29 21:41:50 +01:00
parent be2654ac98
commit 5decf79bee
3 changed files with 5 additions and 0 deletions
--- a/.gitignore
+++ b/.gitignore
@@ -65,3 +65,4 @@ poetry.lock
 apps/homekit/homekit.state
 tools/ca/
 tools/clients/
--- a/deployment/api-deployment.yaml
+++ b/deployment/api-deployment.yaml
@@ -107,6 +107,8 @@ metadata:
  name: api-ingress
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-production-http
    traefik.ingress.kubernetes.io/router.middlewares: homea2-mtls-auth@kubernetescrd,homea2-security-headers@kubernetescrd
    traefik.ingress.kubernetes.io/router.tls.options: homea2-homea2-mtls@kubernetescrd
    # Traefik 2 mTLS Configuration
    traefik.ingress.kubernetes.io/router.tls.options: homea2-mtls@kubernetescrd
    traefik.ingress.kubernetes.io/router.middlewares: homea2-mtls-auth@kubernetescrd
--- a/deployment/ui-deployment.yaml
+++ b/deployment/ui-deployment.yaml
@@ -84,6 +84,8 @@ metadata:
  name: ui-ingress
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-production-http
    traefik.ingress.kubernetes.io/router.middlewares: homea2-mtls-auth@kubernetescrd,homea2-security-headers@kubernetescrd
    traefik.ingress.kubernetes.io/router.tls.options: homea2-homea2-mtls@kubernetescrd
    # Traefik 2 mTLS Configuration
    traefik.ingress.kubernetes.io/router.tls.options: homea2-mtls@kubernetescrd
    traefik.ingress.kubernetes.io/router.middlewares: homea2-mtls-auth@kubernetescrd