Tailscale in Kubernetes

Set tailscale operator up in Kubernetes
Configure external services

manifests/apply.sh

@@ -35,6 +35,7 @@ helm upgrade --install cnpg \
     -f values/cnpg.yaml \
     --wait
 sleep 5
+./tailscale/apply.sh
 kubectl apply -k .
 
 ./immich/apply.sh

manifests/databases/postgres-pgadmin.yaml

@@ -91,17 +91,13 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: ingress-pgadmin
-  annotations:
-    ingressClassName: traefik
 spec:
-  rules:
+  ingressClassName: tailscale
-    - host: pgadmin.kubernetes
+  defaultBackend:
-      http:
+    service:
-        paths:
+      name: service-pgadmin
-          - path: /
+      port:
-            pathType: Prefix
+        number: 80
-            backend:
+  tls:
-              service:
+    - hosts:
-                name: service-pgadmin
+        - pgadmin
-                port:
-                  number: 80

manifests/helm/longhorn.yaml

@@ -87,6 +87,22 @@ spec:
 ---
 apiVersion: networking.k8s.io/v1
 kind: Ingress
+metadata:
+  name: longhorn-ingress-tailscale
+  namespace: longhorn-system
+spec:
+  ingressClassName: tailscale
+  defaultBackend:
+    service:
+      name: longhorn-frontend
+      port:
+        number: 80
+  tls:
+    - hosts:
+        - longhorn
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
 metadata:
   name: longhorn-ingress
   namespace: longhorn-system

manifests/immich/ingress.yaml

@@ -22,5 +22,19 @@ spec:
                 name: immich-server
                 port:
                   name: http
-    - <<: *host
+---
-      host: immich.thehellings.com
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  namespace: immich
+  name: immich-ingress-tailscale
+spec:
+  defaultBackend:
+    service:
+      name: immich-server
+      port:
+        name: http
+  ingressClassName: tailscale
+  tls:
+    - hosts:
+        - immich

manifests/matrix/ingress.yaml

@@ -1,21 +1,15 @@
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
-  name: dendrite-ingress
+  namespace: matrix
-  annotations:
+  name: dendrite-ingress-tailscale
-    ingressClassName: traefik
 spec:
-  rules:
+  ingressClassName: tailscale
-    - &host
+  defaultBackend:
-      host: matrix.kubernetes
+    service:
-      http:
+      name: dendrite
-        paths:
+      port:
-          - path: /
+        number: 8008
-            pathType: Prefix
+  tls:
-            backend:
+    - hosts:
-              service:
+        - matrix
-                name: dendrite
-                port:
-                  number: 8008
-    - <<: *host
-      host: matrix.thehellings.com

manifests/tailscale/apply.sh

@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+
+helm repo add tailscale https://pkgs.tailscale.com/helmcharts
+
+helm repo update tailscale
+
+helm upgrade \
+    --install \
+    tailscale-operator \
+    tailscale/tailscale-operator \
+    --namespace=tailscale \
+    --create-namespace \
+    --set-string oauth.clientId="$(bw get username 'ffa188a4-63b2-4926-99f0-b33b0021a4f4')" \
+    --set-string oauth.clientSecret="$(bw get password 'ffa188a4-63b2-4926-99f0-b33b0021a4f4')" \
+    --wait

modules/hm/gui/bookmarks.nix

@@ -208,14 +208,14 @@
             bookmarks = [
               {
                 name = "Longhorn";
-                url = "http://longhorn.kubernetes";
+                url = "http://longhorn.shire-zebra.ts.net";
+              }
+              {
+                name = "PGAdmin4";
+                url = "http://pgadmin.shire-zebra.ts.net/";
               }
             ];
           }
-          {
-            name = "PGAdmin4";
-            url = "http://pgadmin.kubernetes/";
-          }
           {
             name = "Password Hash";
             url = "https://unix4lyfe.org/crypt/";