disable middlewares on internal ingress

2026-04-14 16:59:52 +01:00
parent 40d4c92271
commit 663049fb89
1 changed files with 41 additions and 41 deletions
--- a/deploy/infra/ingress-web.yaml
+++ b/deploy/infra/ingress-web.yaml
@@ -15,47 +15,47 @@ spec:

  routes:

-    # AUTHENTIK OUTPOST
-    - match: Host(`cloud.limbosolutions.com`)  && PathPrefix(`/outpost.goauthentik.io`)
-      kind: Rule
-      services:
-        - name: ak-outpost-authentik-embedded-outpost
-          namespace: id-limbosolutions-com
-          port: 9000
+    # # AUTHENTIK OUTPOST
+    # - match: Host(`cloud.limbosolutions.com`)  && PathPrefix(`/outpost.goauthentik.io`)
+    #   kind: Rule
+    #   services:
+    #     - name: ak-outpost-authentik-embedded-outpost
+    #       namespace: id-limbosolutions-com
+    #       port: 9000


-    # PUBLIC SHARES (NO SSO)
-    - match: Host(`cloud.limbosolutions.com`) &&
-            (PathPrefix(`/s/`) ||
-              PathPrefix(`/index.php/s/`) ||
-              PathPrefix(`/public.php/`) ||
-              PathPrefix(`/remote.php/dav/public-files/`))
-      kind: Rule
-      services:
-        - name: nextcloud
-          port: 8080
-      middlewares:
-        - name: rate-limit
-        - name: nextcloud-security-headers
+    # # PUBLIC SHARES (NO SSO)
+    # - match: Host(`cloud.limbosolutions.com`) &&
+    #         (PathPrefix(`/s/`) ||
+    #           PathPrefix(`/index.php/s/`) ||
+    #           PathPrefix(`/public.php/`) ||
+    #           PathPrefix(`/remote.php/dav/public-files/`))
+    #   kind: Rule
+    #   services:
+    #     - name: nextcloud
+    #       port: 8080
+    #   middlewares:
+    #     - name: rate-limit
+    #     - name: nextcloud-security-headers

-    # Sync clients + mobile app (no SSO)
-    - match: Host(`cloud.limbosolutions.com`) &&
-         (PathPrefix(`/remote.php/dav`) ||
-          PathPrefix(`/remote.php/webdav`) ||
-          PathPrefix(`/remote.php/caldav`) ||
-          PathPrefix(`/remote.php/carddav`) ||
-          PathPrefix(`/ocs/v1.php`) ||
-          PathPrefix(`/ocs/v2.php`) ||
-          PathPrefix(`/status.php`) ||
-          PathPrefix(`/index.php/login/v2`) ||
-          PathPrefix(`/index.php/login/v2/poll`))
-      kind: Rule
-      services:
-        - name: nextcloud
-          port: 8080
-      middlewares:
-        - name: webdav-strip-auth
-        - name: rate-limit
+    # # Sync clients + mobile app (no SSO)
+    # - match: Host(`cloud.limbosolutions.com`) &&
+    #      (PathPrefix(`/remote.php/dav`) ||
+    #       PathPrefix(`/remote.php/webdav`) ||
+    #       PathPrefix(`/remote.php/caldav`) ||
+    #       PathPrefix(`/remote.php/carddav`) ||
+    #       PathPrefix(`/ocs/v1.php`) ||
+    #       PathPrefix(`/ocs/v2.php`) ||
+    #       PathPrefix(`/status.php`) ||
+    #       PathPrefix(`/index.php/login/v2`) ||
+    #       PathPrefix(`/index.php/login/v2/poll`))
+    #   kind: Rule
+    #   services:
+    #     - name: nextcloud
+    #       port: 8080
+    #   middlewares:
+    #     #- name: webdav-strip-auth
+    #     #- name: rate-limit

    # 3) EVERYTHING ELSE (SSO REQUIRED)
    - match: Host(`cloud.limbosolutions.com`)
@@ -63,10 +63,10 @@ spec:
      services:
        - name: nextcloud
          port: 8080
-      middlewares:
+      middlewares: []
         #- name: authentik-forward-auth
-         - name: nextcloud-security-headers
-         - name: rate-limit
+         #- name: nextcloud-security-headers
+         #- name: rate-limit