From df2a861e9c50a165df97470fe27cb05aed4e5636 Mon Sep 17 00:00:00 2001
From: richard <r_morgan@sympatico.ca>
Date: Sat, 14 Feb 2026 11:47:18 -0500
Subject: [PATCH] wip bunkerweb disabled

---
 ansible-5/roles/prod.k3s/defaults/main.yml             | 2 +-
 ansible-5/roles/prod.k3s/files/bunkerweb/values.yaml   | 3 ++-
 ansible-5/roles/prod.k3s/files/stash/proxy-values.yaml | 4 ++--
 3 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/ansible-5/roles/prod.k3s/defaults/main.yml b/ansible-5/roles/prod.k3s/defaults/main.yml
index 8430be3..96d0c48 100644
--- a/ansible-5/roles/prod.k3s/defaults/main.yml
+++ b/ansible-5/roles/prod.k3s/defaults/main.yml
@@ -131,4 +131,4 @@ apps:
   bunkerweb:
     enabled: true
     namespace: default
-    state: present
+    state: absent
diff --git a/ansible-5/roles/prod.k3s/files/bunkerweb/values.yaml b/ansible-5/roles/prod.k3s/files/bunkerweb/values.yaml
index 634c4b8..687846d 100644
--- a/ansible-5/roles/prod.k3s/files/bunkerweb/values.yaml
+++ b/ansible-5/roles/prod.k3s/files/bunkerweb/values.yaml
@@ -10,7 +10,7 @@ settings:
     # if you have an IP as nameserver then do a reverse DNS lookup: nslookup <IP>
     # most of the time it's coredns.kube-system.svc.cluster.local or kube-dns.kube-system.svc.cluster.local
 #    dnsResolvers: "kube-dns.kube-system.svc.cluster.local"
-    dnsResolvers: "default.svc.cluster.local"
+    dnsResolvers: "kube-dns.kube-system.svc.cluster.local"
 
   kubernetes:
     # We only consider Ingress resources with ingressClass bunkerweb to avoid conflicts with existing ingress controller
@@ -41,6 +41,7 @@ settings:
       # Additional annotations for the Ingress resource
       # Example: {"cert-manager.io/cluster-issuer": "letsencrypt-prod"}
       extraAnnotations:
+        kubernetes.io/ingress.class: "traefik"
         cert-manager.io/cluster-issuer: letsencrypt-production
 
       # Secret name containing TLS certificate
diff --git a/ansible-5/roles/prod.k3s/files/stash/proxy-values.yaml b/ansible-5/roles/prod.k3s/files/stash/proxy-values.yaml
index f21755c..63103df 100644
--- a/ansible-5/roles/prod.k3s/files/stash/proxy-values.yaml
+++ b/ansible-5/roles/prod.k3s/files/stash/proxy-values.yaml
@@ -20,10 +20,10 @@ extraArgs:
   email-domain: "*"
 
 # -- Custom labels to add into metadata
-customLabels: {}
+customLabels: { }
 
 ingress:
-  enabled: true
+  enabled: false
   path: /
   pathType: Prefix
   hosts: