Remove adguard — home DNS server, no purpose on GCP

2026-04-27 18:27:21 -05:00
parent fb5b93f9d7
commit 60f4e0693e
8 changed files with 0 additions and 364 deletions
@@ -1,15 +0,0 @@
---
-# TLS certificate for DoT (DNS-over-TLS) on dot.nook.family:853
-# Issued via cert-manager DNS-01 challenge (Cloudflare)
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
-  name: adguard-dot-tls
-  namespace: dns
-spec:
-  secretName: adguard-dot-tls
-  issuerRef:
-    name: letsencrypt-prod
-    kind: ClusterIssuer
-  dnsNames:
-    - dot.nook.family
@@ -1,53 +0,0 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: adguard-defaults
-  namespace: dns
-data:
-  AdGuardHome.yaml: |
-    dns:
-      bind_hosts:
-        - 0.0.0.0
-      port: 53
-      upstream_dns:
-        - https://dns.cloudflare.com/dns-query
-        - https://dns.google/dns-query
-      bootstrap_dns:
-        - 1.1.1.1
-        - 8.8.8.8
-        - 9.9.9.10
-        - 149.112.112.10
-      upstream_mode: load_balance
-      cache_enabled: true
-      cache_size: 4194304
-    filters:
-      - enabled: true
-        url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_1.txt
-        name: AdGuard DNS filter
-        id: 1
-      - enabled: true
-        url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_2.txt
-        name: AdAway Default Blocklist
-        id: 2
-      - enabled: true
-        url: https://big.oisd.nl/domainswild
-        name: OISD Big
-        id: 3
-      - enabled: true
-        url: https://easylist.to/easylist/easylist.txt
-        name: EasyList
-        id: 4
-      - enabled: true
-        url: https://easylist.to/easylist/easyprivacy.txt
-        name: EasyPrivacy
-        id: 5
-    tls:
-      enabled: true
-      server_name: dot.nook.family
-      port_dns_over_tls: 853
-      certificate_path: /etc/adguard/tls/tls.crt
-      private_key_path: /etc/adguard/tls/tls.key
-      allow_unencrypted_doh: true
-    filtering:
-      filtering_enabled: true
-      rewrites: []
@@ -1,39 +0,0 @@
---
-# ddclient — dynamic DNS daemon keeping dot.nook.family pointed at home public IP
-# Updates Cloudflare A record every 5 minutes (required for DoT port 853, no CF proxy)
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: ddclient
-  namespace: dns
-  labels:
-    app: ddclient
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: ddclient
-  template:
-    metadata:
-      labels:
-        app: ddclient
-    spec:
-      containers:
-        - name: ddclient
-          image: ghcr.io/linuxserver/ddclient:latest
-          command: ["ddclient", "-file", "/etc/ddclient/ddclient.conf", "-daemon", "300", "-noquiet", "-foreground"]
-          volumeMounts:
-            - name: config
-              mountPath: /etc/ddclient/ddclient.conf
-              subPath: ddclient.conf
-              readOnly: true
-          resources:
-            requests:
-              memory: 32Mi
-              cpu: 10m
-            limits:
-              memory: 64Mi
-      volumes:
-        - name: config
-          secret:
-            secretName: ddclient-config
@@ -1,39 +0,0 @@
---
-# ddclient-config — Cloudflare credentials for dynamic DNS updates
-# cloudflare_api_key and cloudflare_email stored in Vault at secret/cloudflare
-apiVersion: external-secrets.io/v1beta1
-kind: ExternalSecret
-metadata:
-  name: ddclient-config
-  namespace: dns
-spec:
-  refreshInterval: 1h
-  secretStoreRef:
-    name: vault
-    kind: ClusterSecretStore
-  target:
-    name: ddclient-config
-    creationPolicy: Owner
-    template:
-      data:
-        ddclient.conf: |
-          daemon=300
-          syslog=yes
-          pid=/var/run/ddclient/ddclient.pid
-          use=web, web=https://api.ipify.org
-
-          protocol=cloudflare
-          zone=nook.family
-          ttl=120
-          login={{ .cloudflare_email }}
-          password={{ .cloudflare_api_key }}
-          dot.nook.family
-  data:
-    - secretKey: cloudflare_api_key
-      remoteRef:
-        key: secret/data/cloudflare
-        property: api_key
-    - secretKey: cloudflare_email
-      remoteRef:
-        key: secret/data/cloudflare
-        property: email
@@ -1,25 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: adguard
-  namespace: dns
-  annotations:
-    traefik.ingress.kubernetes.io/router.entrypoints: websecure
-    cert-manager.io/cluster-issuer: letsencrypt-prod
-spec:
-  ingressClassName: traefik
-  tls:
-    - hosts:
-        - dns.nook.family
-      secretName: adguard-tls
-  rules:
-    - host: dns.nook.family
-      http:
-        paths:
-          - path: /
-            pathType: Prefix
-            backend:
-              service:
-                name: adguard-ui
-                port:
-                  number: 3000
@@ -1,26 +0,0 @@
---
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: adguard-config
-  namespace: dns
-spec:
-  storageClassName: local-path
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 1Gi
---
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: adguard-data
-  namespace: dns
-spec:
-  storageClassName: local-path
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 5Gi