moore home assistant

apps/homeassistant/overlays/house/ingress.patch.yaml

@@ -0,0 +1,3 @@
+- op: replace
+  path: /spec/routes/0/match
+  value: Host(`home-house.kluster.moll.re`)

apps/homeassistant/overlays/house/kustomization.yaml

@@ -0,0 +1,24 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - ../../base
+  - wireguard-config.sealedsecret.yaml
+
+
+namespace: homeassistant
+nameSuffix: -house
+
+images:
+  - name: wireguard
+    newName: ghcr.io/linuxserver/wireguard
+    newTag: "1.0.20250521"
+
+patches:
+  - path: wireguard.deployment.yaml
+    target:
+      kind: Deployment
+      name: homeassistant
+  - path: ingress.patch.yaml
+    target:
+      kind: IngressRoute

apps/homeassistant/overlays/house/wireguard-config.sealedsecret.yaml

@@ -0,0 +1,16 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: wireguard-config
+  namespace: homeassistant
+spec:
+  encryptedData:
+    wireguard.conf: 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
+  template:
+    metadata:
+      creationTimestamp: null
+      name: wireguard-config
+      namespace: homeassistant
+    type: Opaque

apps/homeassistant/overlays/house/wireguard.deployment.yaml

@@ -0,0 +1,24 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: homeassistant
+spec:
+  template:
+    spec:
+      containers:
+      - name: wireguard-sidecar
+        image: wireguard
+        securityContext:
+          privileged: true
+
+
+      volumeMounts:
+      - name: wireguard-config
+        mountPath: /config/wg_confs/
+
+      volumes:
+      - name: wireguard-config
+        secret:
+          secretName: wireguard-config
+
+