feat: migrate dns names to ip

cluster/apps/data/volumes/nfs-backups-data.yaml

@@ -3,7 +3,6 @@ kind: StorageClass
 apiVersion: storage.k8s.io/v1
 metadata:
   name: nfs-backups-data
-  namespace: data
 provisioner: nfs
 reclaimPolicy: Retain
 ---
@@ -20,7 +19,7 @@ spec:
     - ReadWriteMany
   persistentVolumeReclaimPolicy: Retain
   nfs:
-    server: truenas.${SECRET_CLUSTER_DOMAIN_ROOT}.
+    server: "${LOCAL_LAN_TRUENAS}"
     path: "/mnt/storage/backups"
 ---
 apiVersion: v1

cluster/apps/data/volumes/nfs-home-claude-data.yaml

@@ -3,7 +3,6 @@ kind: StorageClass
 apiVersion: storage.k8s.io/v1
 metadata:
   name: nfs-home-claude-data
-  namespace: data
 provisioner: nfs
 reclaimPolicy: Retain
 ---
@@ -20,7 +19,7 @@ spec:
     - ReadWriteMany
   persistentVolumeReclaimPolicy: Retain
   nfs:
-    server: truenas.${SECRET_CLUSTER_DOMAIN_ROOT}.
+    server: "${LOCAL_LAN_TRUENAS}"
     path: "/mnt/storage/home/claude"
 ---
 apiVersion: v1

cluster/apps/data/volumes/nfs-home-helene-data.yaml

@@ -3,7 +3,6 @@ kind: StorageClass
 apiVersion: storage.k8s.io/v1
 metadata:
   name: nfs-home-helene-data
-  namespace: data
 provisioner: nfs
 reclaimPolicy: Retain
 ---
@@ -20,7 +19,7 @@ spec:
     - ReadWriteMany
   persistentVolumeReclaimPolicy: Retain
   nfs:
-    server: truenas.${SECRET_CLUSTER_DOMAIN_ROOT}.
+    server: "${LOCAL_LAN_TRUENAS}"
     path: "/mnt/storage/home/helene"
 ---
 apiVersion: v1

cluster/apps/data/volumes/nfs-music-data.yaml

@@ -3,7 +3,6 @@ kind: StorageClass
 apiVersion: storage.k8s.io/v1
 metadata:
   name: nfs-music-data
-  namespace: data
 provisioner: nfs
 reclaimPolicy: Retain
 ---
@@ -20,7 +19,7 @@ spec:
     - ReadWriteMany
   persistentVolumeReclaimPolicy: Retain
   nfs:
-    server: truenas.${SECRET_CLUSTER_DOMAIN_ROOT}.
+    server: "${LOCAL_LAN_TRUENAS}"
     path: "/mnt/storage/music"
 ---
 apiVersion: v1

cluster/apps/data/volumes/nfs-photo-data.yaml

@@ -3,7 +3,6 @@ kind: StorageClass
 apiVersion: storage.k8s.io/v1
 metadata:
   name: nfs-photo-data
-  namespace: data
 provisioner: nfs
 reclaimPolicy: Retain
 ---
@@ -20,7 +19,7 @@ spec:
     - ReadWriteMany
   persistentVolumeReclaimPolicy: Retain
   nfs:
-    server: truenas.${SECRET_CLUSTER_DOMAIN_ROOT}.
+    server: "${LOCAL_LAN_TRUENAS}"
     path: "/mnt/storage/photo"
 ---
 apiVersion: v1

cluster/apps/data/volumes/nfs-shared-documents-data.yaml

@@ -3,7 +3,6 @@ kind: StorageClass
 apiVersion: storage.k8s.io/v1
 metadata:
   name: nfs-shared-documents-data
-  namespace: data
 provisioner: nfs
 reclaimPolicy: Retain
 ---
@@ -20,7 +19,7 @@ spec:
     - ReadWriteMany
   persistentVolumeReclaimPolicy: Retain
   nfs:
-    server: truenas.${SECRET_CLUSTER_DOMAIN_ROOT}.
+    server: "${LOCAL_LAN_TRUENAS}"
     path: "/mnt/storage/shared-documents"
 ---
 apiVersion: v1

cluster/apps/data/volumes/nfs-video-data.yaml

@@ -3,7 +3,6 @@ kind: StorageClass
 apiVersion: storage.k8s.io/v1
 metadata:
   name: nfs-video-data
-  namespace: data
 provisioner: nfs
 reclaimPolicy: Retain
 ---
@@ -20,7 +19,7 @@ spec:
     - ReadWriteMany
   persistentVolumeReclaimPolicy: Retain
   nfs:
-    server: truenas.${SECRET_CLUSTER_DOMAIN_ROOT}.
+    server: "${LOCAL_LAN_TRUENAS}"
     path: "/mnt/storage/video"
 ---
 apiVersion: v1

cluster/apps/development/gitea/backup-job.yaml

@@ -32,7 +32,7 @@ spec:
                   cp /opt/id_rsa ~/.ssh/id_rsa
                   chmod 600 ~/.ssh/id_rsa
 
-                  ssh -o StrictHostKeyChecking=no homelab@truenas.${SECRET_CLUSTER_DOMAIN_ROOT}. << 'EOF'
+                  ssh -o StrictHostKeyChecking=no homelab@${LOCAL_LAN_TRUENAS} << 'EOF'
 
                     WORK_DIR="/mnt/storage/backups/gitea"
 

cluster/apps/media/volumes/nfs-downloads-media.yaml

@@ -18,7 +18,7 @@ spec:
     - ReadWriteMany
   persistentVolumeReclaimPolicy: Retain
   nfs:
-    server: truenas.${SECRET_CLUSTER_DOMAIN_ROOT}.
+    server: "${LOCAL_LAN_TRUENAS}"
     path: "/mnt/storage/downloads"
 ---
 apiVersion: v1

cluster/apps/media/volumes/nfs-music-media.yaml

@@ -18,7 +18,7 @@ spec:
     - ReadWriteMany
   persistentVolumeReclaimPolicy: Retain
   nfs:
-    server: truenas.${SECRET_CLUSTER_DOMAIN_ROOT}.
+    server: "${LOCAL_LAN_TRUENAS}"
     path: "/mnt/storage/music"
 ---
 apiVersion: v1

cluster/apps/media/volumes/nfs-photo-media.yaml

@@ -18,7 +18,7 @@ spec:
     - ReadWriteMany
   persistentVolumeReclaimPolicy: Retain
   nfs:
-    server: truenas.${SECRET_CLUSTER_DOMAIN_ROOT}.
+    server: "${LOCAL_LAN_TRUENAS}"
     path: "/mnt/storage/photo"
 ---
 apiVersion: v1

cluster/apps/media/volumes/nfs-video-media.yaml

@@ -18,7 +18,7 @@ spec:
     - ReadWriteMany
   persistentVolumeReclaimPolicy: Retain
   nfs:
-    server: truenas.${SECRET_CLUSTER_DOMAIN_ROOT}.
+    server: "${LOCAL_LAN_TRUENAS}"
     path: "/mnt/storage/video"
 ---
 apiVersion: v1

cluster/apps/monitoring/blackbox-exporter/helm-release.yaml

@@ -44,25 +44,25 @@ spec:
         scrapeTimeout: 30s
       targets:
         - name: truenas
-          url: truenas.${SECRET_CLUSTER_DOMAIN_ROOT}.
+          url: "${LOCAL_LAN_TRUENAS}"
           module: icmp
         - name: truenas-remote
-          url: truenas-remote.${SECRET_CLUSTER_DOMAIN_ROOT}.
+          url: "${LOCAL_LAN_TRUENAS_REMOTE}"
           module: icmp
         - name: borgbackup
-          url: borgbackup.${SECRET_CLUSTER_DOMAIN_ROOT}.
+          url: "${LOCAL_LAN_BORGBACKUP}"
           module: icmp
         - name: k3s-server
-          url: k3s-server.${SECRET_CLUSTER_DOMAIN_ROOT}.
+          url: "${LOCAL_LAN_K3SSERVER}"
           module: icmp
         - name: k3s-worker1
-          url: k3s-worker1.${SECRET_CLUSTER_DOMAIN_ROOT}.
+          url: "${LOCAL_LAN_K3SWORKER1}"
           module: icmp
         - name: k3s-worker2
-          url: k3s-worker2.${SECRET_CLUSTER_DOMAIN_ROOT}.
+          url: "${LOCAL_LAN_K3SWORKER2}"
           module: icmp
         - name: k3s-worker3
-          url: k3s-worker3.${SECRET_CLUSTER_DOMAIN_ROOT}.
+          url: "${LOCAL_LAN_K3SWORKER3}"
           module: icmp
     prometheusRule:
       enabled: true

cluster/apps/monitoring/kube-prometheus-stack/helm-release.yaml

@@ -248,7 +248,7 @@ spec:
             scrape_interval: 60s
             metrics_path: "/metrics"
             static_configs:
-              - targets: ["opnsense.${SECRET_CLUSTER_DOMAIN_ROOT}.:9273"]
+              - targets: ["${LOCAL_LAN_OPNSENSE}:9273"]
                 labels:
                   app: "opnsense"
           - job_name: "hass"
@@ -264,14 +264,14 @@ spec:
             scrape_interval: 60s
             metrics_path: "/metrics"
             static_configs:
-              - targets: ["truenas.${SECRET_CLUSTER_DOMAIN_ROOT}.:9273"]
+              - targets: ["${LOCAL_LAN_TRUENAS}:9273"]
                 labels:
                   app: "truenas"
           - job_name: "truenas-remote"
             scrape_interval: 60s
             metrics_path: "/metrics"
             static_configs:
-              - targets: ["truenas-remote.${SECRET_CLUSTER_DOMAIN_ROOT}.:9273"]
+              - targets: ["${LOCAL_LAN_TRUENAS_REMOTE}:9273"]
                 labels:
                   app: "truenas-remote"
           # Example scrape config for probing ingresses via the Blackbox Exporter.

cluster/base-custom/settings/cluster-settings.yaml

@@ -16,3 +16,11 @@ data:
   CLUSTER_LB_EMQX: 192.168.169.109
   CLUSTER_LB_TDARR: 192.168.169.110
   LOCAL_LAN: 192.168.8.0/22
+  LOCAL_LAN_OPNSENSE: 192.168.8.1
+  LOCAL_LAN_TRUENAS: 192.168.9.10
+  LOCAL_LAN_TRUENAS_REMOTE: 10.10.0.2
+  LOCAL_LAN_BORGBACKUP: 192.168.9.20
+  LOCAL_LAN_K3SSERVER: 192.168.9.100
+  LOCAL_LAN_K3SWORKER1: 192.168.9.105
+  LOCAL_LAN_K3SWORKER2: 192.168.9.106
+  LOCAL_LAN_K3SWORKER3: 192.168.9.107