Externalize networking (welcome Wild Central!)

plausible/versions/3/ingress.yaml

@@ -2,19 +2,8 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: plausible
-  annotations:
-    traefik.ingress.kubernetes.io/router.entrypoints: websecure
-    traefik.ingress.kubernetes.io/router.tls: "true"
-    traefik.ingress.kubernetes.io/router.middlewares: plausible-private-network-access@kubernetescrd
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
-  tls:
-  - hosts:
-    - {{ .domain }}
-    secretName: {{ .tlsSecretName }}
   rules:
   - host: {{ .domain }}
     http:

plausible/versions/3/kustomization.yaml

@@ -16,5 +16,4 @@ resources:
   - service-clickhouse.yaml
   - deployment.yaml
   - service.yaml
-  - middleware.yaml
   - ingress.yaml

plausible/versions/3/manifest.yaml

@@ -1,11 +1,9 @@
-version: v3.2.1-1
+version: v3.2.1-2
 requires:
-  - name: postgres
+- name: postgres
 defaultConfig:
   namespace: plausible
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: plausible.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   plausibleStorage: 1Gi
   clickhouseStorage: 10Gi
   db:
@@ -15,19 +13,20 @@ defaultConfig:
     user: plausible
   clickhouse:
     host: clickhouse
-    port: "8123"
+    port: '8123'
     db: plausible_events_db
-  disableRegistration: "false"
+  disableRegistration: 'false'
   central:
     headers:
       response:
         Access-Control-Allow-Private-Network: 'true'
 defaultSecrets:
-  - key: dbPassword
-  - key: secretKeySeed
-  - key: secretKeyBase
-    default: '{{ crypto.SHA256 .secrets.secretKeySeed }}'
-  - key: dbUrl
-    default: 'postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable'
+- key: dbPassword
+- key: secretKeySeed
+- key: secretKeyBase
+  default: '{{ crypto.SHA256 .secrets.secretKeySeed }}'
+- key: dbUrl
+  default: postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host
+    }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable
 requiredSecrets:
-  - postgres.password
+- postgres.password

plausible/versions/3/middleware.yaml

@@ -1,8 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
-  name: private-network-access
-spec:
-  headers:
-    customResponseHeaders:
-      Access-Control-Allow-Private-Network: "true"