moore home assistant

apps/homeassistant/overlays/house/ingress.patch.yaml

@@ -0,0 +1,3 @@
+- op: replace
+  path: /spec/routes/0/match
+  value: Host(`home-house.kluster.moll.re`)

apps/homeassistant/overlays/house/kustomization.yaml

@@ -0,0 +1,24 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - ../../base
+  - wireguard-config.sealedsecret.yaml
+
+
+namespace: homeassistant
+nameSuffix: -house
+
+images:
+  - name: wireguard
+    newName: ghcr.io/linuxserver/wireguard
+    newTag: "1.0.20250521"
+
+patches:
+  - path: wireguard.deployment.yaml
+    target:
+      kind: Deployment
+      name: homeassistant
+  - path: ingress.patch.yaml
+    target:
+      kind: IngressRoute

apps/homeassistant/overlays/house/wireguard-config.sealedsecret.yaml

@@ -0,0 +1,16 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: wireguard-config
+  namespace: homeassistant
+spec:
+  encryptedData:
+    wireguard.conf: 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
+  template:
+    metadata:
+      creationTimestamp: null
+      name: wireguard-config
+      namespace: homeassistant
+    type: Secret

apps/homeassistant/overlays/house/wireguard.deployment.yaml

@@ -0,0 +1,22 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: homeassistant
+spec:
+  template:
+    spec:
+      containers:
+      - name: wireguard-sidecar
+        image: wireguard
+
+
+      volumeMounts:
+      - name: wireguard-config
+        mountPath: /config/wg_confs/
+
+      volumes:
+      - name: wireguard-config
+        secret:
+          secretName: wireguard-config
+
+