From dfef5bea63d615cae06eb94d03dc3d0fef23d94b Mon Sep 17 00:00:00 2001
From: Eric Meehan <eric@eom.dev>
Date: Wed, 15 Jul 2026 13:23:08 -0400
Subject: [PATCH] Secured rpc login

---
 tasks/main.yml | 55 +++++++++++++++++++++++++++++++++++++++++---------
 1 file changed, 45 insertions(+), 10 deletions(-)

diff --git a/tasks/main.yml b/tasks/main.yml
index d984974..5525edf 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -1,6 +1,5 @@
-#SPDX-License-Identifier: MIT-0
 ---
-# tasks file for ansible-role-monero
+# tasks file for monero
 - name: Create Monero namespace
   k8s:
     state: present
@@ -158,6 +157,33 @@
                     mountPath: /data
                   - name: monerotls
                     mountPath: /etc/letsencrypt
+            volumes:
+              - name: monerod
+                persistentVolumeClaim:
+                  claimName: data
+              - name: monerotls
+                secret:
+                  secretName: monerotls
+
+- name: deploy p2pool
+  k8s:
+    definition:
+      apiVersion: v1
+      kind: Deployment
+      metadata:
+        name: p2pool
+        namespace: monero
+      spec:
+        replicas: 1
+        selector:
+          matchLabels:
+            app: p2pool
+        template:
+          metadata:
+            labels:
+              app: p2pool
+          spec:
+            containers:
               - name: p2pool
                 image: ericomeehan/p2pool:latest
                 imagePullPolicy: IfNotPresent
@@ -165,7 +191,7 @@
                   - p2pool
                 args:
                   - "--host"
-                  - "127.0.0.1"
+                  - "monerod"
                   - "--rpc-port"
                   - "18081"
                   - "--wallet"
@@ -181,6 +207,7 @@
                   - "--tls-cert-key"
                   - "/etc/letsencrypt/tls.key"
                   - "--rpc-ssl"
+                  - "--rpc-login={{ monerod_user }}:{{ monerod_password }}"
                 ports:
                   - containerPort: 3333
                   - containerPort: 37889
@@ -190,20 +217,14 @@
                   - name: tls
                     mountPath: /etc/letsencrypt
             volumes:
-              - name: monerod
-                persistentVolumeClaim:
-                  claimName: data
               - name: p2pool
                 persistentVolumeClaim:
                   claimName: p2pool
-              - name: monerotls
-                secret:
-                  secretName: monerotls
               - name: tls
                 secret:
                   secretName: tls
 
-- name: Create Service for Monero
+- name: monero service
   k8s:
     definition:
       apiVersion: v1
@@ -221,6 +242,20 @@
             name: rpc
           - port: 18083
             name: zmq
+        type: LoadBalancer
+
+- name: p2pool service
+  k8s:
+    definition:
+      apiVersion: v1
+      kind: Service
+      metadata:
+        name: p2pool
+        namespace: monero
+      spec:
+        selector:
+          app: p2pool
+        ports:
           - port: 3333
             name: mine
           - port: 37889