From a3e9362d5677875a55c127cf453fc0079a8a0fde Mon Sep 17 00:00:00 2001
From: Timo Behrendt <t.behrendt@t00n.de>
Date: Mon, 6 Apr 2026 17:30:16 +0200
Subject: [PATCH] refactor: to use hostPath (#63)

Reviewed-on: https://gitea.t000-n.de/t.behrendt/k/pulls/63
Co-authored-by: Timo Behrendt <t.behrendt@t00n.de>
Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>
---
 traefik/pvc.yaml            | 34 ++++++++++++++++++++++++++++++++++
 traefik/traefik-config.yaml | 18 +-----------------
 2 files changed, 35 insertions(+), 17 deletions(-)
 create mode 100644 traefik/pvc.yaml

diff --git a/traefik/pvc.yaml b/traefik/pvc.yaml
new file mode 100644
index 0000000..9a32804
--- /dev/null
+++ b/traefik/pvc.yaml
@@ -0,0 +1,34 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: pv-traefik-hostpath-static
+spec:
+  capacity:
+    storage: 10Gi
+  accessModes:
+    - ReadWriteOnce
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: traefik-certificates
+  local:
+    path: /mnt/longhorn1/svc/kube-system/main/traefik/data
+  nodeAffinity:
+    required:
+      nodeSelectorTerms:
+        - matchExpressions:
+            - key: kubernetes.io/hostname
+              operator: In
+              values:
+                - k3sh0
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: pvc-traefik
+  namespace: kube-system
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: traefik-certificates
+  resources:
+    requests:
+      storage: 10Gi
diff --git a/traefik/traefik-config.yaml b/traefik/traefik-config.yaml
index 1ffb32b..1578295 100644
--- a/traefik/traefik-config.yaml
+++ b/traefik/traefik-config.yaml
@@ -32,11 +32,6 @@ spec:
           secretKeyRef:
             key: apiKey
             name: ionos-api-credentials
-      - name: CROWDSEC_BOUNCER_API_KEY
-        valueFrom:
-          secretKeyRef:
-            name: crowdsec-bouncer-api-key
-            key: api-key
     ports:
       web:
         port: 8000
@@ -65,16 +60,5 @@ spec:
     persistence:
       enabled: true
       name: data
-      accessMode: ReadWriteMany
-      size: 1Gi
-      storageClass: longhorn
+      existingClaim: pvc-traefik
       path: /data
-    #experimental:
-    #  plugins:
-    #    crowdsec-bouncer-traefik-plugin:
-    #      moduleName: github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin
-    #      version: v1.4.6
-    #additionalArguments:
-    #  - "--providers.kubernetescrd"
-    #  - "--entrypoints.web.http.middlewares=crowdsec-bouncer@kubernetescrd"
-    #  - "--entrypoints.websecure.http.middlewares=kube-system-crowdsec-bouncer@kubernetescrd"