From b0a7fa16c108ca1fd87141c9fc624d127ca8100d Mon Sep 17 00:00:00 2001
From: Kat Inskip <kat@inskip.me>
Date: Mon, 1 May 2023 09:31:28 -0700
Subject: [PATCH] [TRAEFIK] Expose over tailscale

---
 cluster/traefik.tf                     | 2 ++
 nixos/roles/k8s-cluster/kubernetes.nix | 6 +++++-
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/cluster/traefik.tf b/cluster/traefik.tf
index 54fcfc26..22c4a342 100644
--- a/cluster/traefik.tf
+++ b/cluster/traefik.tf
@@ -21,6 +21,8 @@ resource "helm_release" "traefik" {
                 traefik = {
                     traefik = {
                         hostPort = 9000
+                        hostIP = "100.105.14.66"
+                        expose = true
                     }
                     web = {
                         hostPort = 80
diff --git a/nixos/roles/k8s-cluster/kubernetes.nix b/nixos/roles/k8s-cluster/kubernetes.nix
index fdd2ad95..20471d38 100644
--- a/nixos/roles/k8s-cluster/kubernetes.nix
+++ b/nixos/roles/k8s-cluster/kubernetes.nix
@@ -11,7 +11,11 @@ in {
   ];
 
   networking = {
-    firewall.allowedTCPPorts = [kubeMasterAPIServerPort];
+    firewall.allowedTCPPorts = [
+      kubeMasterAPIServerPort
+      443
+      80
+    ];
     extraHosts = "${kubeMasterIP} ${kubeMasterHostname}";
   };