nginx-internal.yaml

---
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
  name: ingress-nginx-internal
  namespace: kube-system
spec:
  interval: 5m
  chart:
    spec:
      # renovate: registryUrl=https://kubernetes.github.io/ingress-nginx
      chart: ingress-nginx
      version: 4.12.0
      sourceRef:
        kind: HelmRepository
        name: ingress-nginx-charts
        namespace: flux-system
      interval: 5m
  values:
    controller:
      ingressClass: nginx-internal
      ingressClassByName: true
      ingressClassResource:
        name: nginx-internal
        enabled: true
        default: true
        controllerValue: "k8s.io/ingress-nginx-internal"
      admissionWebhooks:
        objectSelector:
          matchExpressions:
            - key: ingress-class
              operator: In
              values:
                - nginx-internal
      replicaCount: 2
      config:
        custom-http-errors: 404,401,403,500,503
        hsts-max-age: "31449600"
      use-forwarded-headers: "true"
      service:
        type: LoadBalancer
        exernalIPs:
          - ${SVC_NGINX_INTERNAL_IP}
        loadBalancerIP: ${SVC_NGINX_INTERNAL_IP}
        externalTrafficPolicy: Local
      metrics:
        enabled: true
        serviceMonitor:
          enabled: true
          namespace: kube-system
        prometheusRule:
          enabled: false
      tolerations:
        - key: "arm"
          operator: "Exists"
      extraArgs:
        default-ssl-certificate: "cert-manager/acme-crt-secret"
      resources:
        requests:
          memory: 500Mi
          cpu: 25m
        limits:
          memory: 600Mi
    defaultBackend:
      enabled: true
      image:
        repository: ghcr.io/tarampampam/error-pages
        tag: 3.3.1
      extraEnvs:
        - { name: TEMPLATE_NAME, value: shuffle }
        - { name: SHOW_DETAILS, value: "false" }
      resources:
        requests:
          memory: 250Mi
          cpu: 25m
        limits:
          memory: 350Mi