infra
/
kubernetes
1
0
Fork 0
Code Pull Requests 4 Activity

invoice-ninja: Update trusted proxies addresses 

Since _ingress-nginx_ no longer runs in the host network namespace,
traffic will appear to come from pods' internal IP addresses now.
Similarly, the network policy for Invoice Ninja needs to be updated to
allow traffic _to_ the ingress controllers' new addresses.
pull/37/head
Dustin 2024-11-22 22:43:16 -06:00
parent 1f7631d6b7
commit 2a90ffc7a9
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
invoice-ninja/invoice-ninja.env
View File

@ -1,6 +1,6 @@
APP_LOGO=https://invoiceninja.pyrocufflink.net/images/logo.png APP_LOGO=https://invoiceninja.pyrocufflink.net/images/logo.png
APP_URL=https://invoiceninja.pyrocufflink.net APP_URL=https://invoiceninja.pyrocufflink.net
TRUSTED_PROXIES=172.30.0.171,172.30.0.172,172.30.0.173 TRUSTED_PROXIES=10.149.0.0/16
MAIL_MAILER=smtp MAIL_MAILER=smtp
MAIL_HOST=mail.pyrocufflink.blue MAIL_HOST=mail.pyrocufflink.blue

2
invoice-ninja/network-policy.yaml
View File

@ -30,7 +30,7 @@ spec:
- port: 25 - port: 25
- to: - to:
- ipBlock: - ipBlock:
cidr: 172.30.0.160/28 cidr: 172.30.0.147/32
ports: ports:
- port: 80 - port: 80
- port: 443 - port: 443