rename

infra/values/eks-prod/gitea-values.yaml

@@ -0,0 +1,7 @@
+# AWS EBS gp3 storage class (requires EBS CSI driver)
+persistence:
+  storageClass: gp3
+postgresql:
+  primary:
+    persistence:
+      storageClass: gp3

infra/values/eks-prod/opencost-values.yaml

@@ -0,0 +1,13 @@
+# AWS native pricing via Cost and Usage Reports
+opencost:
+  exporter:
+    customPricing:
+      enabled: true
+      provider: aws
+    aws:
+      service_key_name: ""      # <- populate or use IRSA
+      service_key_secret: ""
+      spot_data_region: ""
+      spot_data_bucket: ""
+      spot_data_prefix: ""
+      account_id: ""

infra/values/eks-prod/traefik-values.yaml

@@ -0,0 +1,18 @@
+# AWS EKS — NLB with Proxy Protocol v2 for real client IPs
+service:
+  annotations:
+    service.beta.kubernetes.io/aws-load-balancer-type: "external"
+    service.beta.kubernetes.io/aws-load-balancer-nlb-target-type: "ip"
+    service.beta.kubernetes.io/aws-load-balancer-scheme: "internet-facing"
+    service.beta.kubernetes.io/aws-load-balancer-proxy-protocol: "*"
+ports:
+  web:
+    proxyProtocol:
+      trustedIPs: "10.0.0.0/8"       # <- adjust to your VPC CIDR
+    forwardedHeaders:
+      trustedIPs: "10.0.0.0/8"
+  websecure:
+    proxyProtocol:
+      trustedIPs: "10.0.0.0/8"
+    forwardedHeaders:
+      trustedIPs: "10.0.0.0/8"