@@ -136,10 +136,53 @@ netbird:
136136 IDP_SERVICE_ACCOUNT_USER : netbird/idpServiceAccountUser
137137 IDP_SERVICE_ACCOUNT_PASSWORD : netbird/idpServiceAccountPassword
138138 DATASTORE_ENCRYPTION_KEY : netbird/datastoreEncryptionKey
139+ useBackwardsGrpcService : true
140+ serviceGrpc :
141+ annotations :
142+ traefik.ingress.kubernetes.io/service.serversscheme : h2c
143+ ingressGrpc :
144+ enabled : true
145+ className : traefik-cert-manager
146+ tls :
147+ - hosts :
148+ - vpn.example.com
149+ secretName : vpn.example.com
150+ hosts :
151+ - host : vpn.example.com
152+ paths :
153+ - path : /management
154+ pathType : ImplementationSpecific
155+ ingress :
156+ enabled : true
157+ className : traefik-cert-manager
158+ tls :
159+ - hosts :
160+ - vpn.example.com
161+ secretName : vpn.example.com
162+ hosts :
163+ - host : vpn.example.com
164+ paths :
165+ - path : /api
166+ pathType : ImplementationSpecific
139167
140168 signal :
141169 image :
142170 tag : 0.55.1
171+ service :
172+ annotations :
173+ traefik.ingress.kubernetes.io/service.serversscheme : h2c
174+ ingress :
175+ enabled : true
176+ className : traefik-cert-manager
177+ tls :
178+ - hosts :
179+ - vpn.example.com
180+ secretName : vpn.example.com
181+ hosts :
182+ - host : vpn.example.com
183+ paths :
184+ - path : /signalexchange
185+ pathType : ImplementationSpecific
143186
144187 relay :
145188 image :
@@ -150,6 +193,18 @@ netbird:
150193 NB_EXPOSED_ADDRESS : rels://vpn.example.com:443/relay
151194 envFromSecret :
152195 NB_AUTH_SECRET : netbird/relayPassword
196+ ingress :
197+ enabled : true
198+ className : traefik-cert-manager
199+ tls :
200+ - hosts :
201+ - vpn.example.com
202+ secretName : vpn.example.com
203+ hosts :
204+ - host : vpn.example.com
205+ paths :
206+ - path : /relay
207+ pathType : ImplementationSpecific
153208
154209 dashboard :
155210 enabled : true
@@ -163,11 +218,22 @@ netbird:
163218 NETBIRD_MGMT_API_ENDPOINT : https://vpn.example.com:443
164219 NETBIRD_MGMT_GRPC_API_ENDPOINT : https://vpn.example.com:443
165220 # OIDC
166- AUTH_CLIENT_SECRET :
167221 AUTH_AUTHORITY : https://keycloak.example.com/auth/realms/Obmondo
168222 USE_AUTH0 : false
169223 AUTH_SUPPORTED_SCOPES : openid profile email offline_access netbird-vpn-api
170224 NETBIRD_TOKEN_SOURCE : accessToken
225+ ingress :
226+ enabled : true
227+ className : traefik-cert-manager
228+ tls :
229+ - hosts :
230+ - vpn.example.com
231+ secretName : vpn.example.com
232+ hosts :
233+ - host : vpn.example.com
234+ paths :
235+ - path : /
236+ pathType : ImplementationSpecific
171237
172238coturn :
173239 coturn :
0 commit comments