| Giorgi Lekveishvili | 6bcc497 | 2023-11-27 20:02:29 +0400 | [diff] [blame] | 1 | DNS: |
| 2 | * API service to watch for new environments |
| 3 | * dnssec-keygen generate |
| 4 | * Keys |
| 5 | * DS record |
| 6 | * Update coredns config |
| 7 | * include dnssec plugin pointing to keys |
| 8 | * Create records file |
| 9 | |
| 10 | wait for longhorn |
| 11 | |
| 12 | |
| 13 | |
| Giorgi Lekveishvili | cd916da | 2023-06-09 12:56:42 +0400 | [diff] [blame] | 14 | Enable kubernetes internal service ip address subnet |
| 15 | kubectl exec -it headscale-0 -n lekva-app-headscale -- headscale --config=/headscale/config/config.yaml routes enable pcloud-ingress -r 1 |
| 16 | |
| 17 | |
| 18 | pihole disable admin password |
| 19 | pihole -a -p |
| 20 | |
| 21 | |
| 22 | longhorn storage dir during bootstrap |
| 23 | |
| 24 | |
| 25 | soft-serve keys in secret for fluxcd bootstrap |
| 26 | |
| 27 | |
| 28 | create_env should initialize repo with config.yaml |
| 29 | |
| 30 | metallb memberlist |
| 31 | kubectl create secret generic -n metallb-system memberlist --from-literal=secretkey="$(openssl rand -base64 128)" |
| 32 | |