Added README

.gitea/workflows/build.yaml

@@ -71,16 +71,18 @@ jobs:
           SOURCE_DATE_EPOCH: ${{ env.TIMESTAMP }}
 
       - name: Kustomize manifests
+        if: gitea.ref_type == 'tag'
         run: |
           ./kustomize build ./manifests | sed "s/\${DIGEST}/${{ steps.build.outputs.digest }}/" > ./manifests.yaml
 
       - name: Push manifests
+        if: gitea.ref_type == 'tag'
         run: |
-          flux push artifact oci://$OCI_REPO/manifests:${{ gitea.head_ref || gitea.ref_name }} \
+          flux push artifact oci://$OCI_REPO/manifests:latest \
             --path="./manifests.yaml" \
             --source="$(git config --get remote.origin.url)" \
             --revision="$(git rev-parse HEAD)" \
             $(echo "${{ steps.meta.outputs.labels }}" | sed -e 's/^/-a /')
 
-          flux tag artifact oci://$OCI_REPO/manifests:${{ gitea.head_ref || gitea.ref_name }} \
+          flux tag artifact oci://$OCI_REPO/manifests:latest \
             $(echo "${{ steps.meta.outputs.tags }}" | sed -e 's/^.*:/--tag /')

manifests/access-control-rule.yaml

@@ -1,7 +0,0 @@
-apiVersion: authelia.huizinga.dev/v1
-kind: AccessControlRule
-metadata:
-  name: tunnel
-spec:
-  domain: "*.tunnel.${domain}"
-  policy: one_factor

manifests/config-map-authelia-acl.yaml

@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: authelia-acl
+  annotations:
+    config.huizinga.dev/fragment: authelia-acl
+data:
+  rules: |
+    - domain: "*.tunnel.${domain}"
+      policy: one_factor

manifests/deployment.yaml

@@ -17,8 +17,6 @@ spec:
       annotations:
         kubectl.kubernetes.io/default-container: siranga
     spec:
-      # Service links cause issues with the HTTP_PORT and SSH_PORT env variables
-      enableServiceLinks: false
       containers:
         - name: siranga
           image: git.huizinga.dev/dreaded_x/siranga@${DIGEST}

manifests/ingress-route.yaml

@@ -10,6 +10,6 @@ spec:
       kind: Rule
       services:
         - name: http
-          port: http
+          port: 3000
   tls:
     secretName: tunnel-tls

manifests/kustomization.yaml

@@ -4,9 +4,9 @@ namespace: siranga
 resources:
   - ./namespace.yaml
   - ./service-user.yaml
-  - ./secret-siranga-key.yaml
+  - ./secret-tunnel-key.yaml
   - ./deployment.yaml
   - ./service.yaml
   - ./certificate.yaml
   - ./ingress-route.yaml
-  - ./access-control-rule.yaml
+  - ./config-map-authelia-acl.yaml

manifests/service.yaml

@@ -4,8 +4,9 @@ metadata:
   name: http
 spec:
   ports:
-    - name: http
+    - name: "3000"
       port: 3000
+      targetPort: 3000
   selector:
     app: siranga
 ---
@@ -18,7 +19,7 @@ metadata:
 spec:
   type: LoadBalancer
   ports:
-    - name: ssh
+    - name: "2222"
       port: 22
       targetPort: 2222
   selector:

src/main.rs

@@ -24,19 +24,11 @@ async fn main() -> color_eyre::Result<()> {
 
     let env_filter = EnvFilter::try_from_default_env().or_else(|_| EnvFilter::try_new("info"))?;
 
-    if std::env::var("CARGO").is_ok() {
+    let logger = tracing_subscriber::fmt::layer().compact();
-        let logger = tracing_subscriber::fmt::layer().compact();
+    tracing_subscriber::Registry::default()
-        tracing_subscriber::Registry::default()
+        .with(logger)
-            .with(logger)
+        .with(env_filter)
-            .with(env_filter)
+        .init();
-            .init();
-    } else {
-        let logger = tracing_subscriber::fmt::layer().json();
-        tracing_subscriber::Registry::default()
-            .with(logger)
-            .with(env_filter)
-            .init();
-    }
 
     info!(
         "Starting {} ({})",
@@ -53,10 +45,10 @@ async fn main() -> color_eyre::Result<()> {
     };
 
     let http_port = std::env::var("HTTP_PORT")
-        .map(|port| port.parse().wrap_err_with(|| format!("HTTP_PORT={port}")))
+        .map(|port| port.parse())
         .unwrap_or(Ok(3000))?;
     let ssh_port = std::env::var("SSH_PORT")
-        .map(|port| port.parse().wrap_err_with(|| format!("SSH_PORT={port}")))
+        .map(|port| port.parse())
         .unwrap_or(Ok(2222))?;
 
     let domain =