| Giorgi Lekveishvili | e009a5d | 2024-01-05 14:10:11 +0400 | [diff] [blame] | 1 | input: { |
| 2 | network: #Network |
| 3 | subdomain: string |
| 4 | } |
| 5 | |
| 6 | _domain: "\(input.subdomain).\(input.network.domain)" |
| 7 | |
| Giorgi Lekveishvili | ef21c13 | 2024-01-17 18:57:58 +0400 | [diff] [blame] | 8 | name: "Pi-hole" |
| 9 | namespace: "app-pihole" |
| Giorgi Lekveishvili | e009a5d | 2024-01-05 14:10:11 +0400 | [diff] [blame] | 10 | readme: "Installs pihole at https://\(_domain)" |
| Giorgi Lekveishvili | ef21c13 | 2024-01-17 18:57:58 +0400 | [diff] [blame] | 11 | description: "Pi-hole is a Linux network-level advertisement and Internet tracker blocking application which acts as a DNS sinkhole and optionally a DHCP server, intended for use on a private network." |
| 12 | icon: "<svg xmlns='http://www.w3.org/2000/svg' width='50' height='50' viewBox='0 0 24 24'><path fill='currentColor' d='M4.344 0c.238 4.792 3.256 7.056 6.252 7.376c.165-1.692-4.319-5.6-4.319-5.6c-.008-.011.009-.025.019-.014c0 0 4.648 4.01 5.423 5.645c2.762-.15 5.196-1.947 5-4.912c0 0-4.12-.613-5 4.618C11.48 2.753 8.993 0 4.344 0zM12 7.682v.002a3.68 3.68 0 0 0-2.591 1.077L4.94 13.227a3.683 3.683 0 0 0-.86 1.356a3.31 3.31 0 0 0-.237 1.255A3.681 3.681 0 0 0 4.92 18.45l4.464 4.466a3.69 3.69 0 0 0 2.251 1.06l.002.001c.093.01.187.015.28.017l-.1-.008c.06.003.117.009.177.009l-.077-.001L12 24l-.004-.005a3.68 3.68 0 0 0 2.61-1.077l4.469-4.465a3.683 3.683 0 0 0 1.006-1.888l.012-.063a3.682 3.682 0 0 0 .057-.541l.003-.061c0-.017.003-.05.004-.06h-.002a3.683 3.683 0 0 0-1.077-2.607l-4.466-4.468a3.694 3.694 0 0 0-1.564-.927l-.07-.02a3.43 3.43 0 0 0-.946-.133L12 7.682zm3.165 3.357c.023 1.748-1.33 3.078-1.33 4.806c.164 2.227 1.733 3.207 3.266 3.146c-.035.003-.068.007-.104.009c-1.847.135-3.209-1.326-5.002-1.326c-2.23.164-3.21 1.736-3.147 3.27l-.008-.104c-.133-1.847 1.328-3.21 1.328-5.002c-.173-2.32-1.867-3.284-3.46-3.132c.1-.011.203-.021.31-.027c1.847-.133 3.209 1.328 5.002 1.328c2.082-.155 3.074-1.536 3.145-2.968zM4.344 0c.238 4.792 3.256 7.056 6.252 7.376c.165-1.692-4.319-5.6-4.319-5.6c-.008-.011.009-.025.019-.014c0 0 4.648 4.01 5.423 5.645c2.762-.15 5.196-1.947 5-4.912c0 0-4.12-.613-5 4.618C11.48 2.753 8.993 0 4.344 0zM12 7.682v.002a3.68 3.68 0 0 0-2.591 1.077L4.94 13.227a3.683 3.683 0 0 0-.86 1.356a3.31 3.31 0 0 0-.237 1.255A3.681 3.681 0 0 0 4.92 18.45l4.464 4.466a3.69 3.69 0 0 0 2.251 1.06l.002.001c.093.01.187.015.28.017l-.1-.008c.06.003.117.009.177.009l-.077-.001L12 24l-.004-.005a3.68 3.68 0 0 0 2.61-1.077l4.469-4.465a3.683 3.683 0 0 0 1.006-1.888l.012-.063a3.682 3.682 0 0 0 .057-.541l.003-.061c0-.017.003-.05.004-.06h-.002a3.683 3.683 0 0 0-1.077-2.607l-4.466-4.468a3.694 3.694 0 0 0-1.564-.927l-.07-.02a3.43 3.43 0 0 0-.946-.133L12 7.682zm3.165 3.357c.023 1.748-1.33 3.078-1.33 4.806c.164 2.227 1.733 3.207 3.266 3.146c-.035.003-.068.007-.104.009c-1.847.135-3.209-1.326-5.002-1.326c-2.23.164-3.21 1.736-3.147 3.27l-.008-.104c-.133-1.847 1.328-3.21 1.328-5.002c-.173-2.32-1.867-3.284-3.46-3.132c.1-.011.203-.021.31-.027c1.847-.133 3.209 1.328 5.002 1.328c2.082-.155 3.074-1.536 3.145-2.968z'/></svg>" |
| Giorgi Lekveishvili | e009a5d | 2024-01-05 14:10:11 +0400 | [diff] [blame] | 13 | |
| 14 | images: { |
| 15 | pihole: { |
| 16 | repository: "pihole" |
| 17 | name: "pihole" |
| 18 | tag: "v5.8.1" |
| 19 | pullPolicy: "IfNotPresent" |
| 20 | } |
| 21 | } |
| 22 | |
| 23 | charts: { |
| 24 | pihole: { |
| 25 | chart: "charts/pihole" |
| 26 | sourceRef: { |
| 27 | kind: "GitRepository" |
| 28 | name: "pcloud" |
| 29 | namespace: global.id |
| 30 | } |
| 31 | } |
| 32 | } |
| 33 | |
| 34 | helm: { |
| 35 | pihole: { |
| 36 | chart: charts.pihole |
| 37 | values: { |
| 38 | domain: _domain |
| 39 | pihole: { |
| 40 | fullnameOverride: "pihole" |
| 41 | persistentVolumeClaim: { // TODO(gio): create volume separately as a dependency |
| 42 | enabled: true |
| 43 | size: "5Gi" |
| 44 | } |
| 45 | admin: { |
| 46 | enabled: false |
| 47 | } |
| 48 | ingress: { |
| 49 | enabled: false |
| 50 | } |
| 51 | serviceDhcp: { |
| 52 | enabled: false |
| 53 | } |
| 54 | serviceDns: { |
| 55 | type: "ClusterIP" |
| 56 | } |
| 57 | serviceWeb: { |
| 58 | type: "ClusterIP" |
| 59 | http: { |
| 60 | enabled: true |
| 61 | } |
| 62 | https: { |
| 63 | enabled: false |
| 64 | } |
| 65 | } |
| 66 | virtualHost: _domain |
| 67 | resources: { |
| 68 | requests: { |
| 69 | cpu: "250m" |
| 70 | memory: "100M" |
| 71 | } |
| 72 | limits: { |
| 73 | cpu: "500m" |
| 74 | memory: "250M" |
| 75 | } |
| 76 | } |
| 77 | image: { |
| 78 | repository: images.pihole.fullName |
| 79 | tag: images.pihole.tag |
| 80 | pullPolicy: images.pihole.pullPolicy |
| 81 | } |
| 82 | } |
| 83 | oauth2: { |
| 84 | secretName: "oauth2-secret" |
| 85 | configName: "oauth2-proxy" |
| 86 | hydraAdmin: "http://hydra-admin.\(global.namespacePrefix)core-auth.svc" |
| 87 | } |
| 88 | hydraPublic: "https://hydra.\(global.domain)" |
| 89 | profileUrl: "https://accounts-ui.\(global.domain)" |
| 90 | ingressClassName: input.network.ingressClass |
| 91 | certificateIssuer: input.network.certificateIssuer |
| 92 | } |
| 93 | } |
| 94 | } |