traefik: apply forgejo-ratelimit once

k3s-host/setup.sh

@@ -199,6 +199,7 @@ function setup_k8s_apply() {
 function setup_k8s_traefik() {
 	# https://github.com/traefik/traefik-helm-chart?tab=readme-ov-file#deploying-traefik
 	$SELF_DIR/subst.sh traefik.yml | helm upgrade --install --namespace kube-system traefik -f - --set installCRDs=true --version $TRAEFIK_VERSION oci://ghcr.io/traefik/helm/traefik
+	setup_k8s_apply traefik-rate-limit.yml
 }
 
 function setup_k8s_nfs() {

k3s-host/traefik-rate-limit.yml

@@ -0,0 +1,9 @@
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: forgejo-ratelimit
+spec:
+  # https://doc.traefik.io/traefik/v3.1/middlewares/http/ratelimit/
+  rateLimit:
+    average: 10
+    burst: 20

k8s-forgejo/next-values.yml

@@ -24,15 +24,6 @@ service:
     port: 2222
 
 extraDeploy:
-  - apiVersion: traefik.io/v1alpha1
-    kind: Middleware
-    metadata:
-      name: forgejo-ratelimit
-    spec:
-      # https://doc.traefik.io/traefik/v3.1/middlewares/http/ratelimit/
-      rateLimit:
-        average: 10
-        burst: 20
   # Route from traefik to forgejo
   - apiVersion: traefik.io/v1alpha1
     kind: IngressRouteTCP