test

d4rkfella · Jan 16, 2025 · 2a83bcd · 2a83bcd
1 parent 13daf2c
commit 2a83bcd
Show file tree

Hide file tree

Showing 2 changed files with 0 additions and 25 deletions.
diff --git a/kubernetes/main/apps/network/nginx/external/externalsecret.yaml b/kubernetes/main/apps/network/nginx/external/externalsecret.yaml
@@ -2,25 +2,6 @@
 # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json
 apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
-metadata:
-  name: &secret nginx-external-secret
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault-backend
-  target:
-    name: *secret
-    template:
-      engineVersion: v2
-      data:
-        MAXMIND_LICENSE_KEY: "{{ .MAXMIND_LICENSE_KEY }}"
-  dataFrom:
-    - extract:
-        key: secrets/maxmind
----
-# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json
-apiVersion: external-secrets.io/v1beta1
-kind: ExternalSecret
 metadata:
   name: &secret nginx-external-dhparam
 spec:

diff --git a/kubernetes/main/apps/network/nginx/external/helmrelease.yaml b/kubernetes/main/apps/network/nginx/external/helmrelease.yaml
@@ -22,11 +22,6 @@ spec:
     remediation:
       strategy: rollback
       retries: 3
-  valuesFrom:
-    - targetPath: controller.maxmindLicenseKey
-      kind: Secret
-      name: nginx-external-secret
-      valuesKey: MAXMIND_LICENSE_KEY
   values:
     fullnameOverride: nginx-external
     controller:
@@ -81,7 +76,6 @@ spec:
         ssl-protocols: TLSv1.3
         ssl-ciphers: ECDHE+AESGCM:DHE+AESGCM
         ssl-dh-param: network/nginx-external-dhparam
-        use-geoip2: "true"
         use-forwarded-headers: "true"
         proxy-real-ip-cidr: "103.21.244.0/22,103.22.200.0/22,103.31.4.0/22,104.16.0.0/13,104.24.0.0/14,108.162.192.0/18,131.0.72.0/22,141.101.64.0/18,162.158.0.0/15,172.64.0.0/13,173.245.48.0/20,188.114.96.0/20,190.93.240.0/20,197.234.240.0/22,198.41.128.0/17,172.16.0.0/16"
         use-http2: "true"