From 17a0f23bbbc5672ccf217d28c622e8f9a274fbac Mon Sep 17 00:00:00 2001
From: Gabriel Radureau <arcodange@gmail.com>
Date: Mon, 1 Dec 2025 16:22:44 +0100
Subject: [PATCH] declare gitea external service

---
 .../arcodange/factory/playbooks/01_system.yml   | 17 +++++++++++++++--
 1 file changed, 15 insertions(+), 2 deletions(-)

diff --git a/ansible/arcodange/factory/playbooks/01_system.yml b/ansible/arcodange/factory/playbooks/01_system.yml
index d7bc423..dab36e4 100644
--- a/ansible/arcodange/factory/playbooks/01_system.yml
+++ b/ansible/arcodange/factory/playbooks/01_system.yml
@@ -206,10 +206,22 @@
               spec:
                 repo: https://traefik.github.io/charts
                 chart: traefik
-                version: v37.0.0
+                version: v37.4.0
                 targetNamespace: kube-system
                 valuesContent: |-
                   {{ traefik_helm_values | to_nice_yaml | indent( width=4 ) }}
+              ---
+              apiVersion: v1
+              kind: Service
+              metadata:
+                name: gitea-external
+                namespace: kube-system
+              spec:
+                type: ExternalName
+                externalName: {{ hostvars[groups.gitea[0]]['preferred_ip'] }}
+                ports:
+                  - port: 3000
+                    targetPort: 3000
           vars:
             traefik_config_yaml:
               http:
@@ -281,7 +293,7 @@
                     - name: data
                       mountPath: /data
               # default is https://github.com/traefik/traefik-helm-chart/blob/v25.0.0/traefik/values.yaml <- for v25 (`kubectl describe deployments.apps traefik -n kube-system | grep helm.sh/chart`)
-              # current is https://github.com/traefik/traefik-helm-chart/blob/v30.1.0/traefik/values.yaml
+              # current is https://github.com/traefik/traefik-helm-chart/blob/v37.4.0/traefik/values.yaml
               nodeSelector:
                 node-role.kubernetes.io/control-plane: 'true' # make predictible choice of node to direct https traffic to this node and avoid NAT/loss of client IP
               service:
@@ -347,6 +359,7 @@
                 - '--providers.file.filename=/config/dynamic.yaml'
                 - '--providers.kubernetesingress.ingressendpoint.publishedservice=kube-system/traefik'
                 - "--providers.kubernetescrd.allowcrossnamespace=true"
+                - "--providers.kubernetescrd.allowExternalNameServices=true"
               certificatesResolvers:
                 letsencrypt:
                   acme: