Tailscale in Kubernetes

Set tailscale operator up in Kubernetes
Configure external services

manifests/apply.sh

@@ -35,6 +35,7 @@ helm upgrade --install cnpg \
     -f values/cnpg.yaml \
     --wait
 sleep 5
+./tailscale/apply.sh
 kubectl apply -k .
 
 ./immich/apply.sh

manifests/databases/postgres-pgadmin.yaml

@@ -91,17 +91,13 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: ingress-pgadmin
-  annotations:
-    ingressClassName: traefik
 spec:
-  rules:
-    - host: pgadmin.kubernetes
-      http:
-        paths:
-          - path: /
-            pathType: Prefix
-            backend:
+  ingressClassName: tailscale
+  defaultBackend:
     service:
       name: service-pgadmin
       port:
         number: 80
+  tls:
+    - hosts:
+        - pgadmin

manifests/helm/longhorn.yaml

@@ -87,6 +87,22 @@ spec:
 ---
 apiVersion: networking.k8s.io/v1
 kind: Ingress
+metadata:
+  name: longhorn-ingress-tailscale
+  namespace: longhorn-system
+spec:
+  ingressClassName: tailscale
+  defaultBackend:
+    service:
+      name: longhorn-frontend
+      port:
+        number: 80
+  tls:
+    - hosts:
+        - longhorn
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
 metadata:
   name: longhorn-ingress
   namespace: longhorn-system

manifests/immich/ingress.yaml

@@ -22,5 +22,19 @@ spec:
                 name: immich-server
                 port:
                   name: http
-    - <<: *host
-      host: immich.thehellings.com
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  namespace: immich
+  name: immich-ingress-tailscale
+spec:
+  defaultBackend:
+    service:
+      name: immich-server
+      port:
+        name: http
+  ingressClassName: tailscale
+  tls:
+    - hosts:
+        - immich

manifests/matrix/ingress.yaml

@@ -1,21 +1,15 @@
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
-  name: dendrite-ingress
-  annotations:
-    ingressClassName: traefik
+  namespace: matrix
+  name: dendrite-ingress-tailscale
 spec:
-  rules:
-    - &host
-      host: matrix.kubernetes
-      http:
-        paths:
-          - path: /
-            pathType: Prefix
-            backend:
+  ingressClassName: tailscale
+  defaultBackend:
     service:
       name: dendrite
       port:
         number: 8008
-    - <<: *host
-      host: matrix.thehellings.com
+  tls:
+    - hosts:
+        - matrix

manifests/tailscale/apply.sh

@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+
+helm repo add tailscale https://pkgs.tailscale.com/helmcharts
+
+helm repo update tailscale
+
+helm upgrade \
+    --install \
+    tailscale-operator \
+    tailscale/tailscale-operator \
+    --namespace=tailscale \
+    --create-namespace \
+    --set-string oauth.clientId="$(bw get username 'ffa188a4-63b2-4926-99f0-b33b0021a4f4')" \
+    --set-string oauth.clientSecret="$(bw get password 'ffa188a4-63b2-4926-99f0-b33b0021a4f4')" \
+    --wait

modules/hm/gui/bookmarks.nix

@@ -208,13 +208,13 @@
             bookmarks = [
               {
                 name = "Longhorn";
-                url = "http://longhorn.kubernetes";
-              }
-            ];
+                url = "http://longhorn.shire-zebra.ts.net";
               }
               {
                 name = "PGAdmin4";
-            url = "http://pgadmin.kubernetes/";
+                url = "http://pgadmin.shire-zebra.ts.net/";
+              }
+            ];
           }
           {
             name = "Password Hash";