fix: add CoreDNS rewrite for img.riotpiao.com
Cloudflare Tunnel's origin service for img.riotpiao.com self-references the same public hostname (same pattern as paperless/forgejo/authentik) - without this rewrite, cloudflared's in-cluster DNS resolution has nowhere to loop back to, and TLS to the raw ingress-nginx service name fails cert validation (cert is only valid for *.riotpiao.com).
This commit is contained in:
@@ -34,6 +34,7 @@
|
||||
rewrite name portainer.riotpiao.com ingress-nginx-controller.ingress-nginx.svc.cluster.local
|
||||
rewrite name longhorn.riotpiao.com ingress-nginx-controller.ingress-nginx.svc.cluster.local
|
||||
rewrite name paperless.riotpiao.com ingress-nginx-controller.ingress-nginx.svc.cluster.local
|
||||
rewrite name img.riotpiao.com ingress-nginx-controller.ingress-nginx.svc.cluster.local
|
||||
|
||||
kubernetes cluster.local in-addr.arpa ip6.arpa {
|
||||
pods insecure
|
||||
|
||||
Reference in New Issue
Block a user