add external ingresses

apps/production/misc-manifests/external-ingresses/home-assistant.yaml

@@ -0,0 +1,51 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: home-assistant
+  namespace: external-ingresses
+spec:
+  ports:
+  - name: app
+    port: 8123
+    protocol: TCP
+    targetPort: 8123
+  clusterIP: None
+  type: ClusterIP
+
+---
+apiVersion: v1
+kind: Endpoints
+metadata:
+  name: home-assistant
+  namespace: external-ingresses
+subsets:
+- addresses:
+  - ip: ${HA_SERVER}
+  ports:
+  - name: app
+    port: 8123
+    protocol: TCP
+
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: home-assistant
+  namespace: external-ingresses
+spec:
+  ingressClassName: nginx
+  rules:
+  - host: &host ha.${PUBLIC_DOMAIN}
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: home-assistant
+            port:
+              number: 8123
+  tls:
+    - secretName: "${CERT_SECRET_NAME}"
+      hosts:
+        - *host

apps/production/misc-manifests/external-ingresses/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - namespace.yaml
+  - home-assistant.yaml

apps/production/misc-manifests/external-ingresses/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: external-ingresses

apps/production/misc-manifests/kustomization.yaml

@@ -1,4 +1,5 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
+  - external-ingresses
   - immich-pvc.yaml

clusters/config/cluster-config.yaml

@@ -8,6 +8,7 @@ data:
   TIMEZONE: Europe/London
   NFS_SERVER: 192.168.0.230
   DNS_SERVER: 192.168.0.226
+  HA_SERVER: 192.168.0.149
   INGRESS_LB_IP: 192.168.0.193
   MARIADB_SERVICE: mariadb.databases.svc.cluster.local
   REDIS_SERVICE: redis-master.redis.svc.cluster.local