feat: migrate ingresses to nginx

cluster/apps/home-automation/emqx/helm-release.yaml

@@ -61,7 +61,8 @@ spec:
       dashboard:
         enabled: true
         annotations:
-          traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
+          kubernetes.io/ingress.class: "nginx"
+          # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
         path: /
         hosts:
           - emqx.${SECRET_CLUSTER_DOMAIN}
@@ -102,10 +103,10 @@ spec:
                 path: /spec/externalIPs
                 value:
                   - "${CLUSTER_LB_EMQX}"
-          - target:
-              kind: Ingress
-              name: emqx-dashboard
-            patch:
-              - op: add
-                path: /spec/ingressClassName
-                value: traefik
+          # - target:
+          #     kind: Ingress
+          #     name: emqx-dashboard
+          #   patch:
+          #     - op: add
+          #       path: /spec/ingressClassName
+          #       value: traefik

cluster/apps/home-automation/frigate/helm-release.yaml

@@ -95,10 +95,13 @@ spec:
     ingress:
       main:
         enabled: true
-        ingressClassName: "traefik"
+        # ingressClassName: "traefik"
         annotations:
-          traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
-          traefik.ingress.kubernetes.io/router.middlewares: networking-forward-auth@kubernetescrd
+          kubernetes.io/ingress.class: "nginx"
+          nginx.ingress.kubernetes.io/auth-url: "http://authelia.networking.svc.cluster.local/api/verify"
+          nginx.ingress.kubernetes.io/auth-signin: "https://login.${SECRET_CLUSTER_DOMAIN}"
+          # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
+          # traefik.ingress.kubernetes.io/router.middlewares: networking-forward-auth@kubernetescrd
         hosts:
           - host: "frigate.${SECRET_CLUSTER_DOMAIN}"
             paths:

cluster/apps/home-automation/home-assistant/helm-release.yaml

@@ -47,9 +47,10 @@ spec:
     ingress:
       main:
         enabled: true
-        ingressClassName: "traefik"
+        # ingressClassName: "traefik"
         annotations:
-          traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
+          kubernetes.io/ingress.class: "nginx"
+          # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
         hosts:
           - host: "hass.${SECRET_CLUSTER_DOMAIN}"
             paths:
@@ -101,10 +102,13 @@ spec:
           - "/config/.vscode"
         ingress:
           enabled: true
-          ingressClassName: "traefik"
+          # ingressClassName: "traefik"
           annotations:
-            traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
-            traefik.ingress.kubernetes.io/router.middlewares: networking-forward-auth@kubernetescrd
+          kubernetes.io/ingress.class: "nginx"
+          nginx.ingress.kubernetes.io/auth-url: "http://authelia.networking.svc.cluster.local/api/verify"
+          nginx.ingress.kubernetes.io/auth-signin: "https://login.${SECRET_CLUSTER_DOMAIN}"
+            # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
+            # traefik.ingress.kubernetes.io/router.middlewares: networking-forward-auth@kubernetescrd
           hosts:
             - host: "hass-config.${SECRET_CLUSTER_DOMAIN}"
               paths:

cluster/apps/home-automation/zigbee2mqtt/helm-release.yaml

@@ -73,10 +73,13 @@ spec:
     ingress:
       main:
         enabled: true
-        ingressClassName: "traefik"
+        # ingressClassName: "traefik"
         annotations:
-          traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
-          traefik.ingress.kubernetes.io/router.middlewares: networking-forward-auth@kubernetescrd
+          kubernetes.io/ingress.class: "nginx"
+          nginx.ingress.kubernetes.io/auth-url: "http://authelia.networking.svc.cluster.local/api/verify"
+          nginx.ingress.kubernetes.io/auth-signin: "https://login.${SECRET_CLUSTER_DOMAIN}"
+          # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
+          # traefik.ingress.kubernetes.io/router.middlewares: networking-forward-auth@kubernetescrd
         hosts:
           - host: "zigbee.${SECRET_CLUSTER_DOMAIN}"
             paths:

cluster/apps/home-automation/zwavejs2mqtt/helm-release.yaml

@@ -37,10 +37,13 @@ spec:
     ingress:
       main:
         enabled: true
-        ingressClassName: "traefik"
+        # ingressClassName: "traefik"
         annotations:
-          traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
-          traefik.ingress.kubernetes.io/router.middlewares: networking-forward-auth@kubernetescrd
+          kubernetes.io/ingress.class: "nginx"
+          nginx.ingress.kubernetes.io/auth-url: "http://authelia.networking.svc.cluster.local/api/verify"
+          nginx.ingress.kubernetes.io/auth-signin: "https://login.${SECRET_CLUSTER_DOMAIN}"
+          # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
+          # traefik.ingress.kubernetes.io/router.middlewares: networking-forward-auth@kubernetescrd
         hosts:
           - host: zwave.${SECRET_CLUSTER_DOMAIN}
             paths: