simple321vip
4da6832b44
- 命名重构：tenant → customer（对齐后端 R1 重构） - Tenant → Customer / tenant_id → customerId - tenantStore → customerStore / getTenant/setTenant → getCustomer/setCustomer - cookie key tenant → customer, HTTP header tenantId → customerId - 后端契约更新：AuthResponse 加 sub 字段 - 接口 URL 修复：/auth/oidc/callback → /api/v1/auth/oidc/callback - 依赖升级：vue 3.5 / element-plus 2.8 / vite 5 / typescript 5.6 / sass 1.79 - 删 node-sass / scss / sass-loader / moment / mock/index.ts - 配置文件拆分：.env.development / .env.production / .env.example - 删除冗余 view/auth/auth/callback.vue 副本 - .gitignore 增加 dist / .opencode / tmp - 新增 AGENT.md 与后端风格对齐
49 lines
1.4 KiB
YAML
49 lines
1.4 KiB
YAML
# ========== 5. Ingress 配置 ==========
|
||
# 使用 cert-manager 自动管理 Let's Encrypt 证书
|
||
# 如未安装 cert-manager: kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.14.0/cert-manager.yaml
|
||
---
|
||
apiVersion: networking.k8s.io/v1
|
||
kind: Ingress
|
||
metadata:
|
||
name: authentik
|
||
namespace: auth
|
||
annotations:
|
||
kubernetes.io/ingress.class: "nginx"
|
||
cert-manager.io/cluster-issuer: "letsencrypt-prod"
|
||
nginx.ingress.kubernetes.io/proxy-body-size: "50m"
|
||
nginx.ingress.kubernetes.io/proxy-read-timeout: "300"
|
||
nginx.ingress.kubernetes.io/proxy-send-timeout: "300"
|
||
spec:
|
||
tls:
|
||
- hosts:
|
||
- auth.violin-work.online
|
||
secretName: authentik-tls
|
||
rules:
|
||
- host: auth.violin-work.online
|
||
http:
|
||
paths:
|
||
- path: /
|
||
pathType: Prefix
|
||
backend:
|
||
service:
|
||
name: authentik-server
|
||
port:
|
||
number: 80
|
||
|
||
---
|
||
# 如果没有 cert-manager，用这个 ClusterIssuer（先安装 cert-manager）
|
||
# apiVersion: cert-manager.io/v1
|
||
# kind: ClusterIssuer
|
||
# metadata:
|
||
# name: letsencrypt-prod
|
||
# spec:
|
||
# acme:
|
||
# server: https://acme-v02.api.letsencrypt.org/directory
|
||
# email: YOUR_EMAIL@domain.com # ⚠️ 改成你的邮箱
|
||
# privateKeySecretRef:
|
||
# name: letsencrypt-prod
|
||
# solvers:
|
||
# - http01:
|
||
# ingress:
|
||
# class: nginx
|