1
0
Fork 0

home-assistant: Use subdomain for Zigbee/Z-wave UI

Having the Z-Wave and Zigbee admin interfaces exposed as sub-paths under
*homeassistant.pyrocufflink.blue* made it difficult to use Authelia.
Since I have a Firefox container tab specifically for Home Assistant,
the login redirect would open a new tab in a different container, since
Authelia is hosted at *auth.pyrocufflink.blue*.  In order to log in, I
would have to temporarily disable "designated sites only" for the Home
Assistant tab container.  Using subdomains for the admin interfaces
avoids this issue, since I can use a different container for them, one
that does not have the "designated sites only" setting, since I am less
worried about accidentally leaking data to sites on the Internet from
them.
Dustin 2023-08-02 20:03:42 -05:00
parent 0cbda0fd73
commit 81266d4ef9
1 changed files with 6 additions and 10 deletions

View File

@ -39,15 +39,14 @@ metadata:
nginx.ingress.kubernetes.io/auth-response-headers: Remote-User,Remote-Name,Remote-Groups,Remote-Email nginx.ingress.kubernetes.io/auth-response-headers: Remote-User,Remote-Name,Remote-Groups,Remote-Email
nginx.ingress.kubernetes.io/auth-snippet: | nginx.ingress.kubernetes.io/auth-snippet: |
proxy_set_header X-Forwarded-Method $request_method; proxy_set_header X-Forwarded-Method $request_method;
nginx.ingress.kubernetes.io/use-regex: 'true' nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
nginx.ingress.kubernetes.io/rewrite-target: /$1
spec: spec:
ingressClassName: nginx ingressClassName: nginx
rules: rules:
- host: homeassistant.pyrocufflink.blue - host: zigbee.pyrocufflink.blue
http: http:
paths: paths:
- path: /zigbee/(.*) - path: /
pathType: Prefix pathType: Prefix
backend: backend:
service: service:
@ -72,17 +71,14 @@ metadata:
nginx.ingress.kubernetes.io/auth-response-headers: Remote-User,Remote-Name,Remote-Groups,Remote-Email nginx.ingress.kubernetes.io/auth-response-headers: Remote-User,Remote-Name,Remote-Groups,Remote-Email
nginx.ingress.kubernetes.io/auth-snippet: | nginx.ingress.kubernetes.io/auth-snippet: |
proxy_set_header X-Forwarded-Method $request_method; proxy_set_header X-Forwarded-Method $request_method;
nginx.ingress.kubernetes.io/use-regex: 'true' nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
nginx.ingress.kubernetes.io/rewrite-target: /$1
nginx.ingress.kubernetes.io/configuration-snippet: |
proxy_set_header X-External-Path /zwave;
spec: spec:
ingressClassName: nginx ingressClassName: nginx
rules: rules:
- host: homeassistant.pyrocufflink.blue - host: zwave.pyrocufflink.blue
http: http:
paths: paths:
- path: /zwave/(.*) - path: /
pathType: Prefix pathType: Prefix
backend: backend:
service: service: