ingress

.gitignore

@@ -0,0 +1,2 @@
+cert/tls.key
+cert/tls.crt

.woodpecker.yml

@@ -1,19 +1,4 @@
 steps:
-  build:
-    image: plugins/kaniko
-    settings:
-      repo: ${FORGE_NAME}/${CI_REPO}
-      registry: 
-        from_secret: container_registry
-      tags: latest,${CI_COMMIT_SHA},${CI_COMMIT_TAG}
-      username: 
-        from_secret: container_registry_username
-      password: 
-        from_secret: container_registry_password
-      dockerfile: Dockerfile
-    when:
-      - event: [push, tag]
-
   deploy:
     image: portainer/kubectl-shell:latest
     secrets:

cert/create.sh

@@ -0,0 +1,4 @@
+#!/bin/bash
+
+kubectl create secret tls zigbee2mqtt-cert -n homea --cert=tls.crt --key=tls.key
+

deployment/deploy.yml

@@ -35,6 +35,9 @@ spec:
           envFrom:
             - configMapRef:
                 name: zigbee2mqtt-config
+          ports:
+            - containerPort: 8080
+              protocol: TCP
       volumes:
         - name: zigbee2mqtt
           persistentVolumeClaim:

deployment/ingress.yml

@@ -0,0 +1,36 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: zigbee2mqtt
+spec:
+  type: ClusterIP
+  selector:
+    app: zigbee2mqtt
+  ports:
+    - name: http
+      protocol: TCP
+      port: 8080
+      targetPort: 8080
+---       
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: zigbee2mqtt
+spec:
+  ingressClassName: traefik-internal
+  tls:
+    - hosts:
+        - zigbee2mqtt.hottis.de
+      secretName: zigbee2mqtt-cert
+  rules:
+    - host: zigbee2mqtt.hottis.de
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service: 
+                name: zigbee2mqtt
+                port: 
+                  number: 8080