feat(data): pg-hk 重新部署
这个提交包含在:
@@ -20,7 +20,7 @@ spec:
|
|||||||
port: 5432
|
port: 5432
|
||||||
db_name: crowdsec
|
db_name: crowdsec
|
||||||
user: app
|
user: app
|
||||||
password: iUYXiu1ZfQdnKTAS3tj8c6dD7OHKlFPrwmzEXNpvcS6nLswV6JPg6YoK1gqZk1sO
|
password: nyrHzh9WWlDZzvVw7bDFo74gKb9zsls0Sy7OwRTDWiRTNPQQQkW85taUFAoX2AIC
|
||||||
sslmode: require
|
sslmode: require
|
||||||
agent:
|
agent:
|
||||||
affinity:
|
affinity:
|
||||||
|
|||||||
@@ -47,7 +47,7 @@ spec:
|
|||||||
host: cnpg-cluster-hk-rw.infra-data:5432
|
host: cnpg-cluster-hk-rw.infra-data:5432
|
||||||
name: grafana
|
name: grafana
|
||||||
user: app
|
user: app
|
||||||
password: iUYXiu1ZfQdnKTAS3tj8c6dD7OHKlFPrwmzEXNpvcS6nLswV6JPg6YoK1gqZk1sO
|
password: nyrHzh9WWlDZzvVw7bDFo74gKb9zsls0Sy7OwRTDWiRTNPQQQkW85taUFAoX2AIC
|
||||||
|
|
||||||
persistence:
|
persistence:
|
||||||
type: pvc
|
type: pvc
|
||||||
|
|||||||
@@ -64,7 +64,7 @@ spec:
|
|||||||
- name: API_URL
|
- name: API_URL
|
||||||
value: "http://crowdsec-service.infra-monitor.svc.cluster.local:8080"
|
value: "http://crowdsec-service.infra-monitor.svc.cluster.local:8080"
|
||||||
- name: API_KEY
|
- name: API_KEY
|
||||||
value: "NQLDIAxiToOs3PmChTq5Vl+ByY3GAffyhEFqIXDpvU4"
|
value: "rgILO2mh/t+30LMvzyyMXbfHRmDfBkDDkhEflzHaoQ0"
|
||||||
- name: BOUNCER_CONFIG
|
- name: BOUNCER_CONFIG
|
||||||
value: "/crowdsec/crowdsec-bouncer.conf"
|
value: "/crowdsec/crowdsec-bouncer.conf"
|
||||||
command: ['sh', '-c', "bash /docker_start.sh; mkdir -p /lua_plugins/crowdsec/; cp -R /crowdsec/* /lua_plugins/crowdsec/"]
|
command: ['sh', '-c', "bash /docker_start.sh; mkdir -p /lua_plugins/crowdsec/; cp -R /crowdsec/* /lua_plugins/crowdsec/"]
|
||||||
|
|||||||
@@ -0,0 +1,15 @@
|
|||||||
|
apiVersion: helm.cattle.io/v1
|
||||||
|
kind: HelmChart
|
||||||
|
metadata:
|
||||||
|
name: tailscale-derp
|
||||||
|
namespace: infra-net
|
||||||
|
spec:
|
||||||
|
repo: https://devcm-repo.github.io/helm-charts
|
||||||
|
chart: tailscale-derp
|
||||||
|
version: 0.0.3
|
||||||
|
targetNamespace: infra-net
|
||||||
|
valuesContent: |-
|
||||||
|
nodeSelector:
|
||||||
|
kubernetes.io/hostname: tthk
|
||||||
|
drep:
|
||||||
|
hostname: 'derp-hk.dev.cm'
|
||||||
@@ -10,11 +10,6 @@ vim /etc/hosts
|
|||||||
curl -fsSL https://tailscale.com/install.sh | sh
|
curl -fsSL https://tailscale.com/install.sh | sh
|
||||||
```
|
```
|
||||||
|
|
||||||
### 开启tailscale的自动更新
|
|
||||||
```shell
|
|
||||||
tailscale set --auto-update
|
|
||||||
```
|
|
||||||
|
|
||||||
### 开启ip转发
|
### 开启ip转发
|
||||||
```shell
|
```shell
|
||||||
echo 'net.ipv4.ip_forward = 1' | tee -a /etc/sysctl.d/99-tailscale.conf
|
echo 'net.ipv4.ip_forward = 1' | tee -a /etc/sysctl.d/99-tailscale.conf
|
||||||
|
|||||||
在新议题中引用
屏蔽一个用户