add before change

Nginx.kube.yaml

@@ -4,8 +4,8 @@ metadata:
   name: reverse-proxy
 ---
 apiVersion: apps/v1
-#kind: Deployment
+kind: Deployment
-kind: DaemonSet
+#kind: DaemonSet
 metadata:
   name: reverse-proxy
   namespace: reverse-proxy
@@ -21,9 +21,9 @@ spec:
       labels:
         app: reverse-proxy
     spec:
-      hostNetwork: true
+      #hostNetwork: true
-      dnsPolicy: ClusterFirstWithHostNet   # required when hostNetwork: true
+      #dnsPolicy: ClusterFirstWithHostNet   # required when hostNetwork: true
-      #nodeName: kube-master
+      nodeName: kube-master
       # Allows the sidecar to see and signal the Nginx process
       shareProcessNamespace: true
       containers:
@@ -67,27 +67,27 @@ spec:
               cpu: 250m
               memory: 250Mi
 
-      - name: watcher
+#      - name: watcher
-        image: alpine:latest
+#        image: alpine:latest
-        command: ["/bin/sh", "-c"]
+#        command: ["/bin/sh", "-c"]
-        args:
+#        args:
-          - |
+#          - |#
 
-             apk add --no-cache inotify-tools;
+#             apk add --no-cache inotify-tools;
-             # Ensure file exists so inotify doesn't fail
+#             # Ensure file exists so inotify doesn't fail
-             touch /etc/nginx/blacklisted.d/blacklisted-sessions.conf;
+#             touch /etc/nginx/blacklisted.d/blacklisted-sessions.conf;
-             echo "Watcher started on /etc/nginx/blacklisted.d/blacklisted-sessions.conf"
+#             echo "Watcher started on /etc/nginx/blacklisted.d/blacklisted-sessions.conf"
         
-             while inotifywait -e modify /etc/nginx/blacklisted.d/blacklisted-sessions.conf; do
+#             while inotifywait -e modify /etc/nginx/blacklisted.d/blacklisted-sessions.conf; do
-               echo "Change detected, waiting 5 seconds to batch updates..."
+#               echo "Change detected, waiting 5 seconds to batch updates..."
-               sleep 5;
+#               sleep 5;
           
-               # Check if Nginx is actually running before signaling
+#               # Check if Nginx is actually running before signaling
-               if pgrep nginx > /dev/null; then
+#               if pgrep nginx > /dev/null; then
-                 echo "Reloading Nginx..."
+#                 echo "Reloading Nginx..."
-                 pkill -HUP nginx
+#                 pkill -HUP nginx
-               fi
+#               fi
-             done
+#             done
 
         volumeMounts:
         - name: blacklisted-memory-volume
@@ -95,12 +95,12 @@ spec:
       tolerations:
       # these tolerations are to have the daemonset runnable on control plane nodes
       # remove them if your control plane nodes should not run pods
-      - key: node-role.kubernetes.io/control-plane
+      #- key: node-role.kubernetes.io/control-plane
-        operator: Exists
+      #  operator: Exists
-        effect: NoSchedule
+      #  effect: NoSchedule
-      - key: node-role.kubernetes.io/master
+      #- key: node-role.kubernetes.io/master
-        operator: Exists
+      #  operator: Exists
-        effect: NoSchedule
+      #  effect: NoSchedule
 
       volumes:
       - name: reverse-proxy-log
@@ -193,6 +193,6 @@ spec:
 
 
   type: LoadBalancer
-  externalTrafficPolicy: Local
+  #externalTrafficPolicy: Local
   selector:
     app: reverse-proxy

terraform/variables.auto.tfvars

@@ -13,6 +13,7 @@ nginx_sites = {
   }
 
   bookstack = {
+    enabled = false
     #    service     = "webserver.bookstack.svc"
     service     = "bookstack-svc.bookstack.svc"
     proxy_cache = false
@@ -195,6 +196,7 @@ client_max_body_size 20m;
     enabled = false
   }
   qbittorrent = {
+    enabled     = false
     service     = "qbittorrent-svc.servarr.svc:8080"
     geoip_allow = ["FR", "GB", "NL"]
 
@@ -476,7 +478,7 @@ client_max_body_size 20m;
     service = "emailproxy-svc.paper.svc:80"
   }
   tdarr = {
-    #enabled = false
+    enabled              = false
     service              = "tdarr-svc.servarr.svc:8265"
     extra-value-location = <<EOT
     proxy_set_header Connection "upgrade";