xavor/kubernetes
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

añadido apolo

Browse Source
This commit is contained in:
xguefer
2025-08-17 10:15:19 +02:00
parent 2a3067dc0b
commit 31a109fd5c
68 changed files with 2416 additions and 26 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
apolo/configmaps/configmap-coredns.yaml Normal file
View File

@@ -0,0 +1,26 @@
apiVersion: v1
kind: ConfigMap
metadata:
name: coredns-custom
namespace: apolo
data:
Corefile: |
.:53 {
log
errors
health
reload
hosts {
192.168.200.10 backend.apolo.c2et.net
192.168.200.10 portal.apolo.c2et.net
192.168.200.10 colossus.apolo.c2et.net
192.168.200.13 chat.apolo.c2et.net
192.168.200.13 muc.chat.apolo.c2et.net
192.168.200.12 streaming.apolo.c2et.net
192.168.200.14 meeting.apolo.c2et.net
fallthrough
}
forward . /etc/resolv.conf
cache 120
# prometheus 0.0.0.0:9153 # <- activa si quieres métricas
}

8
apolo/configmaps/configmap-ejabberd-inetrc.yaml Normal file
View File

@@ -0,0 +1,8 @@
apiVersion: v1
kind: ConfigMap
metadata:
name: apolo-ejabberd-inetrc
namespace: apolo
data:
inetrc: |
{file, resolv, "/etc/resolv.conf"}.

249
apolo/configmaps/configmap-ejabberd.yaml Normal file
View File

@@ -0,0 +1,249 @@
apiVersion: v1
kind: ConfigMap
metadata:
name: apolo-ejabberd-config
namespace: apolo
data:
ejabberd.yml: |
define_macro:
HOST: "chat.apolo.c2et.net"
ADMIN: "admin@chat.apolo.c2et.net"
hosts:
- "@HOST@"
loglevel: info
certfiles:
- /home/ejabberd/conf/chat.pem
# Usamos bundle de CAs del sistema
ca_file: "/etc/ssl/certs/ca-certificates.crt"
auth_method: [external]
extauth_program: "/usr/local/bin/auth"
extauth_pool_size: 3
auth_use_cache: false
listen:
-
port: 5222
ip: "::"
module: ejabberd_c2s
max_stanza_size: 262144
shaper: c2s_shaper
access: c2s
starttls_required: true
-
port: 5223
ip: "::"
module: ejabberd_c2s
max_stanza_size: 262144
shaper: c2s_shaper
access: c2s
tls: true
-
port: 5269
ip: "::"
module: ejabberd_s2s_in
max_stanza_size: 524288
shaper: s2s_shaper
-
port: 5443
ip: "::"
module: ejabberd_http
tls: true
request_handlers:
/admin: ejabberd_web_admin
/api: mod_http_api
/bosh: mod_bosh
/captcha: ejabberd_captcha
/upload: mod_http_upload
/ws: ejabberd_http_ws
/oauth: ejabberd_oauth
-
port: 5280
ip: "::"
module: ejabberd_http
request_handlers:
/admin: ejabberd_web_admin
/api: mod_http_api
/bosh: mod_bosh
/ws: ejabberd_http_ws
-
port: 1880
ip: "::"
module: ejabberd_http
request_handlers:
/: ejabberd_web_admin
-
port: 1883
ip: "::"
module: mod_mqtt
backlog: 1000
s2s_use_starttls: optional
acl:
local:
user_regexp: ""
loopback:
ip:
- 127.0.0.0/8
- ::1/128
admin:
- user: "admin@chat.apolo.c2et.net"
access_rules:
local:
allow: local
c2s:
deny: blocked
allow: all
announce:
allow: admin
configure:
allow: admin
muc_create:
allow: local
pubsub_createnode:
allow: local
trusted_network:
allow: loopback
api_permissions:
"ejabberd API":
from: mod_http_api
who: admin
what:
- "*"
"console commands":
from: ejabberd_ctl
who: all
what: "*"
"webadmin commands":
from: ejabberd_web_admin
who: admin
what: "*"
"admin access":
who:
access:
allow:
- acl: loopback
- acl: admin
oauth:
scope: "ejabberd:admin"
access:
allow:
- acl: loopback
- acl: admin
what:
- "*"
- "!stop"
- "!start"
"public commands":
who:
ip: 127.0.0.1/8
what:
- status
- connected_users_number
shaper:
normal:
rate: 3000
burst_size: 20000
fast: 100000
shaper_rules:
max_user_sessions: 10
max_user_offline_messages:
5000: admin
100: all
c2s_shaper:
none: admin
normal: all
s2s_shaper: fast
max_s2s_connections: 1
modules:
mod_adhoc: {}
mod_admin_extra: {}
mod_announce:
access: announce
mod_avatar: {}
mod_blocking: {}
mod_bosh: {}
mod_caps: {}
mod_carboncopy: {}
mod_client_state: {}
mod_configure: {}
mod_disco: {}
mod_fail2ban:
c2s_max_auth_failures: 7
c2s_auth_ban_lifetime: 3600
mod_http_api: {}
mod_http_upload:
put_url: https://@HOST@:5443/upload
custom_headers:
"Access-Control-Allow-Origin": "https://@HOST@"
"Access-Control-Allow-Methods": "GET,HEAD,PUT,OPTIONS"
"Access-Control-Allow-Headers": "Content-Type,Authorization"
mod_last: {}
mod_mam:
assume_mam_usage: true
default: always
mod_mqtt: {}
mod_muc:
host: "muc.@HOST@"
access:
- allow
access_admin:
- allow: admin
access_create: muc_create
access_persistent: muc_create
access_mam:
- allow
default_room_options:
allow_subscription: true
mam: true
persistent: true
mod_muc_admin: {}
mod_muc_occupantid: {}
mod_offline:
access_max_user_messages: max_user_offline_messages
mod_ping: {}
mod_privacy: {}
mod_private: {}
mod_proxy65:
access: local
max_connections: 5
port: 7777
mod_pubsub:
access_createnode: pubsub_createnode
plugins:
- flat
- pep
force_node_config:
storage:bookmarks:
access_model: whitelist
mod_push: {}
mod_push_keepalive: {}
mod_register:
ip_access: trusted_network
welcome_message:
subject: "Welcome to @HOST@"
body: "Hi.\n\nWelcome to XRF Chat.\n\n"
registration_watchers:
- "admin@chat.apolo.c2et.net"
mod_roster:
versioning: true
mod_sip: {}
mod_s2s_bidi: {}
mod_s2s_dialback: {}
mod_shared_roster: {}
mod_stream_mgmt:
resend_on_timeout: if_offline
mod_vcard: {}
mod_vcard_xupdate: {}
mod_version:
show_os: false

18
apolo/configmaps/configmap-kms-api.yaml Normal file
View File

@@ -0,0 +1,18 @@
apiVersion: v1
kind: ConfigMap
metadata:
name: apolo-kurento-api-config
namespace: apolo
labels:
app.kubernetes.io/name: apolo-kurento-api
app.kubernetes.io/part-of: apolo
app.kubernetes.io/component: kurento-api
data:
ENV: "development"
PORT: "3000"
KURENTO_WS_URI: "ws://apolo-kms:8888/kurento"
API_BASE_URL: "https://backend.apolo.c2et.net"
DASHBOARD_USERNAME: "admin"
SSL_KEY_PATH: "/app/keys/kurento.key"
SSL_CERT_PATH: "/app/keys/kurento.crt"
SSL_CA_PATH: "/app/keys/ca.crt"

16
apolo/configmaps/configmap-kms.yaml Normal file
View File

@@ -0,0 +1,16 @@
apiVersion: v1
kind: ConfigMap
metadata:
name: apolo-kms-env
namespace: apolo
labels:
app.kubernetes.io/name: apolo-kms
app.kubernetes.io/part-of: apolo
data:
ENV: "development"
KMS_MIN_PORT: "40000"
KMS_MAX_PORT: "40099"
KMS_STUN_IP: "stun.l.google.com"
KMS_STUN_PORT: "19302"
KMS_EXTERNAL_IPV4: "meeting.apolo.c2et.net"
GST_DEBUG: "3,Kurento*:4"

16
apolo/configmaps/configmap-mediamtx.yaml Normal file
View File

@@ -0,0 +1,16 @@
apiVersion: v1
kind: ConfigMap
metadata:
name: apolo-mediamtx-env
namespace: apolo
labels:
app.kubernetes.io/name: apolo-mediamtx
app.kubernetes.io/part-of: apolo
data:
MTX_PROTOCOLS: "tcp"
MTX_RTSP_ADDRESS: "0.0.0.0:8554"
MTX_RTMP_ADDRESS: "0.0.0.0:1935"
MTX_HLS_ADDRESS: "0.0.0.0:8887"
# Usa el FQDN que verán los clientes dentro de la VPN.
# Si tus players/portal usan .net -> deja .net ; si mantienen .com, cámbialo aquí a .com
MTX_EXTERNAL_ADDRESS: "streaming.apolo.c2et.net"

30
apolo/configmaps/configmap-portal-proxy.yaml Normal file
View File

@@ -0,0 +1,30 @@
apiVersion: v1
kind: ConfigMap
metadata:
name: apolo-portal-proxy
namespace: apolo
data:
default.conf: |
server {
listen 8080;
# Proxy al portal real (escucha en 3000 dentro del mismo Pod)
location / {
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
# Fuerza contenido sin comprimir desde upstream para poder sub_filter
proxy_set_header Accept-Encoding "";
# Reescrituras .com -> .net en las respuestas al cliente
sub_filter_once off;
sub_filter_types *;
sub_filter 'https://backend.apolo.c2et.com' 'https://backend.apolo.c2et.net';
sub_filter 'wss://backend.apolo.c2et.com' 'wss://backend.apolo.c2et.net';
proxy_pass http://127.0.0.1:3000;
}
}

21
apolo/configmaps/configmap-streamer.yaml Normal file
View File

@@ -0,0 +1,21 @@
apiVersion: v1
kind: ConfigMap
metadata:
name: apolo-streamer-config
namespace: apolo
labels:
app.kubernetes.io/name: apolo-streamer
app.kubernetes.io/part-of: apolo
app.kubernetes.io/component: streamer
data:
PORT: "80"
PUSHER_CLUSTER: "eu"
FALLBACK_VIDEO: 'file:///usr/app/files/media/fallback.mp4'
STREAM_SERVER_URL: '^rtmp:\/\/(localhost|127.0.0.1|172.19.127.147|172.17.0.1|media-server|streaming.apolo.c2et.com):[0-9]{3,4}\/\S+$'
STREAM_SERVER_ID_CREATOR: '^rtmp:\/\/(localhost|127.0.0.1|172.19.127.147|172.17.0.1|media-server|streaming.apolo.c2et.com):[0-9]{3,4}\/'
MEDIA_SERVER_API_URL: 'http://streaming.apolo.c2et.com'
STREAMER_SERVER_API_URL: 'http://streaming.apolo.c2et.com'
MEDIA_SERVER_HOSTNAME: 'streaming.apolo.c2et.com'
BACKEND_DEV: 'backend.apolo.c2et.com'
BACKEND_PRE: 'backend.apolo.c2et.com'
BACKEND_PRO: 'https://backend.apolo.c2et.com'

12
apolo/configmaps/configmap-web.yaml Normal file
View File

@@ -0,0 +1,12 @@
apiVersion: v1
kind: ConfigMap
metadata:
name: apolo-web-config
namespace: apolo
labels:
app.kubernetes.io/name: apolo-web
app.kubernetes.io/part-of: apolo
data:
SERVER_NAME: "backend.apolo.c2et.net"
PHP_HOST: "apolo-php"
PHP_PORT: "9000"