home-assistant: Use subdomain for Zigbee/Z-wave UI
Having the Z-Wave and Zigbee admin interfaces exposed as sub-paths under *homeassistant.pyrocufflink.blue* made it difficult to use Authelia. Since I have a Firefox container tab specifically for Home Assistant, the login redirect would open a new tab in a different container, since Authelia is hosted at *auth.pyrocufflink.blue*. In order to log in, I would have to temporarily disable "designated sites only" for the Home Assistant tab container. Using subdomains for the admin interfaces avoids this issue, since I can use a different container for them, one that does not have the "designated sites only" setting, since I am less worried about accidentally leaking data to sites on the Internet from them.
parent
0cbda0fd73
commit
81266d4ef9
|
@ -39,15 +39,14 @@ metadata:
|
||||||
nginx.ingress.kubernetes.io/auth-response-headers: Remote-User,Remote-Name,Remote-Groups,Remote-Email
|
nginx.ingress.kubernetes.io/auth-response-headers: Remote-User,Remote-Name,Remote-Groups,Remote-Email
|
||||||
nginx.ingress.kubernetes.io/auth-snippet: |
|
nginx.ingress.kubernetes.io/auth-snippet: |
|
||||||
proxy_set_header X-Forwarded-Method $request_method;
|
proxy_set_header X-Forwarded-Method $request_method;
|
||||||
nginx.ingress.kubernetes.io/use-regex: 'true'
|
nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
|
||||||
nginx.ingress.kubernetes.io/rewrite-target: /$1
|
|
||||||
spec:
|
spec:
|
||||||
ingressClassName: nginx
|
ingressClassName: nginx
|
||||||
rules:
|
rules:
|
||||||
- host: homeassistant.pyrocufflink.blue
|
- host: zigbee.pyrocufflink.blue
|
||||||
http:
|
http:
|
||||||
paths:
|
paths:
|
||||||
- path: /zigbee/(.*)
|
- path: /
|
||||||
pathType: Prefix
|
pathType: Prefix
|
||||||
backend:
|
backend:
|
||||||
service:
|
service:
|
||||||
|
@ -72,17 +71,14 @@ metadata:
|
||||||
nginx.ingress.kubernetes.io/auth-response-headers: Remote-User,Remote-Name,Remote-Groups,Remote-Email
|
nginx.ingress.kubernetes.io/auth-response-headers: Remote-User,Remote-Name,Remote-Groups,Remote-Email
|
||||||
nginx.ingress.kubernetes.io/auth-snippet: |
|
nginx.ingress.kubernetes.io/auth-snippet: |
|
||||||
proxy_set_header X-Forwarded-Method $request_method;
|
proxy_set_header X-Forwarded-Method $request_method;
|
||||||
nginx.ingress.kubernetes.io/use-regex: 'true'
|
nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
|
||||||
nginx.ingress.kubernetes.io/rewrite-target: /$1
|
|
||||||
nginx.ingress.kubernetes.io/configuration-snippet: |
|
|
||||||
proxy_set_header X-External-Path /zwave;
|
|
||||||
spec:
|
spec:
|
||||||
ingressClassName: nginx
|
ingressClassName: nginx
|
||||||
rules:
|
rules:
|
||||||
- host: homeassistant.pyrocufflink.blue
|
- host: zwave.pyrocufflink.blue
|
||||||
http:
|
http:
|
||||||
paths:
|
paths:
|
||||||
- path: /zwave/(.*)
|
- path: /
|
||||||
pathType: Prefix
|
pathType: Prefix
|
||||||
backend:
|
backend:
|
||||||
service:
|
service:
|
||||||
|
|
Loading…
Reference in New Issue