traefik/pvc.yaml

@@ -0,0 +1,34 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: pv-traefik-hostpath-static
+spec:
+  capacity:
+    storage: 10Gi
+  accessModes:
+    - ReadWriteOnce
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: traefik-certificates
+  local:
+    path: /mnt/longhorn1/svc/kube-system/main/traefik/data
+  nodeAffinity:
+    required:
+      nodeSelectorTerms:
+        - matchExpressions:
+            - key: kubernetes.io/hostname
+              operator: In
+              values:
+                - k3sh0
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: pvc-traefik
+  namespace: kube-system
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: traefik-certificates
+  resources:
+    requests:
+      storage: 10Gi

traefik/traefik-config.yaml

@@ -32,11 +32,6 @@ spec:
           secretKeyRef:
             key: apiKey
             name: ionos-api-credentials
-      - name: CROWDSEC_BOUNCER_API_KEY
-        valueFrom:
-          secretKeyRef:
-            name: crowdsec-bouncer-api-key
-            key: api-key
     ports:
       web:
         port: 8000
@@ -65,16 +60,5 @@ spec:
     persistence:
       enabled: true
       name: data
-      accessMode: ReadWriteMany
-      size: 1Gi
-      storageClass: longhorn
+      existingClaim: pvc-traefik
       path: /data
-    #experimental:
-    #  plugins:
-    #    crowdsec-bouncer-traefik-plugin:
-    #      moduleName: github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin
-    #      version: v1.4.6
-    #additionalArguments:
-    #  - "--providers.kubernetescrd"
-    #  - "--entrypoints.web.http.middlewares=crowdsec-bouncer@kubernetescrd"
-    #  - "--entrypoints.websecure.http.middlewares=kube-system-crowdsec-bouncer@kubernetescrd"