mirror of
https://github.com/dredx/prole.git
synced 2026-09-27 07:54:30 +00:00
792329ddd2
- k3s role: persist svc.prole.org reachability with a systemd oneshot that inserts ACCEPT rules ahead of Tailscale filter rules (configurable ports/chain). - init_monitoring: enable Grafana datasource sidecar and provision a stable Prometheus datasource (uid 'prometheus') so CloudNativePG dashboards bind correctly. - tests: assert datasource sidecar config and datasource ConfigMap is applied. Co-authored-by: Junie <junie@jetbrains.com>
14 lines
310 B
Django/Jinja
14 lines
310 B
Django/Jinja
[Unit]
|
|
Description=Prole: ensure svc.prole.org ports are ACCEPTed before Tailscale filter rules
|
|
Wants=network-online.target
|
|
After=network-online.target
|
|
After=tailscaled.service
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
ExecStart=/usr/local/sbin/prole-svc-iptables-allow
|
|
RemainAfterExit=yes
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|