# pihole-svc is type LoadBalancer → k3s klipper-lb (svclb) binds host ports
# 8000/53/67 on the nodes it schedules on. NodePorts are pinned so they
# survive re-creation.
apiVersion: v1
kind: Service
metadata:
  name: pihole-svc
  namespace: pihole
spec:
  type: LoadBalancer
  externalTrafficPolicy: Cluster
  selector:
    app: pihole
  ports:
    - name: http-admin
      port: 8000
      targetPort: 80
      nodePort: 31120
      protocol: TCP
    - name: tcp-53
      port: 53
      targetPort: 53
      nodePort: 32580
      protocol: TCP
    - name: udp-53
      port: 53
      targetPort: 53
      nodePort: 31281
      protocol: UDP
    - name: udp-67
      port: 67
      targetPort: 67
      nodePort: 31025
      protocol: UDP