mirror of
https://github.com/hanzoai/ingress.git
synced 2026-11-03 00:49:13 +00:00
zooqueen
1d875dd71c
Removes all "traefik" branding/paths/env/comments from the shipping
surface while keeping load-bearing config schema and external deps intact.
Paths / binary:
- cmd/traefik/ -> cmd/ingress/ (traefik.go->ingress.go, etc.); merged out
the empty cmd/ingress/generate.go stub. Build refs updated in Dockerfile,
Makefile, .goreleaser.yml.tmpl, script/crossbinary-default.sh, README.
- contrib/systemd/traefik.service -> ingress.service (Hanzo Ingress unit,
/etc/ingress paths, hanzo-ingress binary).
- contrib/grafana/traefik*.json -> ingress*.json; metric queries
traefik_* -> ingress_* (now match the engine's ingress_ prefix) + titles.
- script/gcg/traefik-*.toml -> ingress-*.toml; Owner/Repo -> hanzoai/ingress.
Code/config branding (comments + non-schema strings):
- doc.go, mount.go, client/router.go, zap_backend.go, forward_backend.go,
register.go: "Traefik" -> "the ingress"/"Hanzo Ingress"; corrected the
annotation example to ingress.kubernetes.io/.
- ingress.sample.{toml,yml}: header + log + entryPoint example.
- pkg/config/dynamic/fixtures/sample.toml comment.
- pkg/redactor/testdata example+expected: /etc/traefik/traefik.toml ->
/etc/ingress/ingress.toml, TraefikLogsFile -> IngressLogsFile (both files
kept identical so the redactor golden test stays green).
- .golangci.yml importas aliases traefik* -> ingress* and the stale
crd/traefikio path -> crd/hanzoai; unused-var exclude ingressVersion.
- .dockerignore / .gitignore: drop stale /traefik artifacts.
- script/code-gen.sh: PROJECT_MODULE -> github.com/hanzoai/ingress,
v1alpha1 path -> crd/hanzoai, CRD output -> hanzo.ai_*.yaml /
01-ingress-crd.yml.
- script/deploy.sh: drop the upstream traefik-library-image push.
- Removed dead, disabled upstream docs-publish workflow
(.github/workflows/documentation.yaml, pushed to traefik/doc).
- LLM.md: rewrote rebrand notes; documented load-bearing "traefik" that
stays (external imports, hash-bound realm, upstream issue URL, license
attribution) and vendored upstream docs/webui/changelog as out of scope.
Load-bearing "traefik" intentionally KEPT (not branding):
- external Go modules github.com/traefik/{oxy,yaegi,grpc-web};
- digest_auth_test.go htdigest realm "traefik" (invalidates the hashes);
- consul_test.go upstream issue URL #8092 (provenance citation);
- LICENSE.md + boilerplate.go.tmpl Containous/Traefik Labs copyright
(MIT attribution; Hanzo AI appended);
- integration/ test fixtures (traefik/whoami images, rawdata-*.json
golden entrypoint names, nomad traefik.* tags) — test-only, semantics-
sensitive; out of scope for this pass.
Verify: `go build $(go list ./... | grep -v /webui)` passes; redactor /
config/dynamic / nomad / server/service tests pass. The webui go:embed
failure and the kubernetes/crd test (ingress.k8s.io group mismatch) are
pre-existing on main, not caused by this rebrand.
42 lines
1.2 KiB
Desktop File
42 lines
1.2 KiB
Desktop File
[Unit]
|
|
Description=Hanzo Ingress
|
|
Documentation=https://github.com/hanzoai/ingress
|
|
#After=network-online.target
|
|
#AssertFileIsExecutable=/usr/bin/hanzo-ingress
|
|
#AssertPathExists=/etc/ingress/ingress.toml
|
|
|
|
[Service]
|
|
# Run the ingress as its own user (create new user with: useradd -r -s /bin/false -U -M ingress)
|
|
#User=ingress
|
|
#AmbientCapabilities=CAP_NET_BIND_SERVICE
|
|
|
|
# configure service behavior
|
|
Type=notify
|
|
#ExecStart=/usr/bin/hanzo-ingress --configFile=/etc/ingress/ingress.toml
|
|
Restart=always
|
|
WatchdogSec=1s
|
|
|
|
# lock down system access
|
|
# prohibit any operating system and configuration modification
|
|
#ProtectSystem=strict
|
|
# create separate, new (and empty) /tmp and /var/tmp filesystems
|
|
#PrivateTmp=true
|
|
# make /home directories inaccessible
|
|
#ProtectHome=true
|
|
# turns off access to physical devices (/dev/...)
|
|
#PrivateDevices=true
|
|
# make kernel settings (procfs and sysfs) read-only
|
|
#ProtectKernelTunables=true
|
|
# make cgroups /sys/fs/cgroup read-only
|
|
#ProtectControlGroups=true
|
|
|
|
# allow writing of acme.json
|
|
#ReadWritePaths=/etc/ingress/acme.json
|
|
# depending on log and entrypoint configuration, you may need to allow writing to other paths, too
|
|
|
|
# limit number of processes in this unit
|
|
#LimitNPROC=1
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|