feat: add k8s config

Co-authored-by: winston <hey@winston.sh>

cluster/cert-manager/cluster-issuer.yaml

@@ -0,0 +1,25 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt
+spec:
+  acme:
+    server: https://acme-v02.api.letsencrypt.org/directory
+    email: sgoudham@gmail.com
+    privateKeySecretRef:
+      name: le-goudham-com
+    solvers:
+      - selector:
+          dnsZones:
+            - goudham.com
+        dns01:
+          webhook:
+            groupName: porkbun
+            solverName: porkbun
+            config:
+              apiKeySecretRef:
+                name: porkbun-key
+                key: api-key
+              secretKeySecretRef:
+                name: porkbun-key
+                key: secret-key

cluster/cert-manager/secrets/porkbun-key.sealed.json

@@ -0,0 +1,21 @@
+{
+  "kind": "SealedSecret",
+  "apiVersion": "bitnami.com/v1alpha1",
+  "metadata": {
+    "name": "porkbun-key",
+    "namespace": "cert-manager"
+  },
+  "spec": {
+    "template": {
+      "metadata": {
+        "name": "porkbun-key",
+        "namespace": "cert-manager"
+      },
+      "type": "Opaque"
+    },
+    "encryptedData": {
+      "api-key": "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",
+      "secret-key": "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"
+    }
+  }
+}

cluster/enso-bot/secrets/enso-bot-database.sealed.json

@@ -0,0 +1,24 @@
+{
+  "kind": "SealedSecret",
+  "apiVersion": "bitnami.com/v1alpha1",
+  "metadata": {
+    "name": "enso-bot-database",
+    "namespace": "enso-bot"
+  },
+  "spec": {
+    "template": {
+      "metadata": {
+        "name": "enso-bot-database",
+        "namespace": "enso-bot"
+      },
+      "type": "Opaque"
+    },
+    "encryptedData": {
+      "host": "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",
+      "name": "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",
+      "pass": "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",
+      "port": "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",
+      "user": "AgBkTCnwkBHjBdUBpCde7DcsKBW8/S2uBsTTnkI5odnNAD/jCHh9TJoIa45eEn0IMo5WZYW8Sd+y1u475h3Mys6vlkX3RAY8FrQV2I7ZoQX9CZSYKYgziYnMhPKlgpFXr3aneAr6bzuhYC6gBzaIflS7QNUlspu/E7x1syYbFYDimkLuzA9uHqY4HmSOE7eunJjquZ1GlP23YgP45Z4eIHF8g02by0Wmc0x86ZAjWpbVOepeAuLgZ7wKYggwwKPZxWzNdiNWm9xCpDGVWTcGkLfdlkiifP/DTujxy3vo326okkLAb9GGjDBxMY4wsl9kklQCsOTWVmy7vz5+o9FjgpWN3bDKJej6+jQAwBuq2BL3deR1aBFRRczPDQwt86W6nM96aIA+AMs84uCylO4LXEkGwbLWToahCixMa1eNEwoeJekKDc2nnlJybAq7PWyM3ZWoRMvfRvYJO4d1VPNRktht4ABA41Wx8x0zj0gGvDGHKlKyWf52fQRQiA2pvNWvkBu/bTXMxblbGwlLC52PAJKP3t/yKa0DVaacfE5qS7SpiuPzDePm4uWF0L/4GTg/8SZsdQJLspBSGZSZh2YMZ4SwRJgN7q/9xZhVhRS1kc/s0ieo3ftlBNeRAlVcfdWjflOP4P4rMQzp2uACwwbEpK+SKcgsGIjsfex4c53eV4syhQpeCVfXRx7SXjV/cvB15E4L/c3UKg=="
+    }
+  }
+}

cluster/enso-bot/secrets/enso-bot-rewrite-database.sealed.json

@@ -0,0 +1,23 @@
+{
+  "kind": "SealedSecret",
+  "apiVersion": "bitnami.com/v1alpha1",
+  "metadata": {
+    "name": "enso-bot-rewrite-database",
+    "namespace": "enso-bot"
+  },
+  "spec": {
+    "template": {
+      "metadata": {
+        "name": "enso-bot-rewrite-database",
+        "namespace": "enso-bot"
+      },
+      "type": "Opaque"
+    },
+    "encryptedData": {
+      "ENSO_HOST": "AgAYGtmmhKHZ9/S9T2N/Sg37xE7I3en1cZSHS4tiBpeOG02R37LOzEXWXneUhH59dRhNJg+z240Bdx+fEtvwzBPgMuqhgXEKx3/hXjiZqHLEOLwwC1NAfzfWanjjrsWv7Uk+8OBKPiFaG3Ihv92jUh8HaIu3uXYMnD3UoXZlwyjOYhTysGUp5xwVGGeD0e3E7G0NFG4b0bihXrqzZ5Vb2p+aV8pUKBT5X1zBKaQWASgZCyeBVgBwTpTAvqKuITYtoXM9sZlzxX73MCU6cZIowtq0Sy08GDfIUTW6iwhmnrPDsD+rpGKLZasu26Q1gAbqF0fo2QoZ50t7E/o1Zi/4KskUdsuOaaZdGJH+IAmvUPpK/U9ffSy8C7a/8GlJpfaQsWARvVqZndLosHKiT+bDeDESWXWOBbypKPUxPCUkg5loCmiIFja7RgfY7zld/0srfcFE/pEbwv4dv7r4f//Buwt9+uAIsnaRiTNHBbCcxodQdshjlBJGjSMKBwMuvbkHHJ/VJBsfvT7ybOB43CATsConsQjs9EAhVvZTa+QtBU2RpEyi4oBUG1Ifee6Zm1Ft/sOu6m/4Q+Rvv6NCNz2cVMol1U/WsZktexe7Crc1M88MltE0Ex0UVMOIWhwxCjM22E9MbkdIyTdi5c5X+OTLHT2BVFzwT83Gd1Giz3chBrPhbH3vWD45voVou084U/IXKeuseMrtqmnRze4=",
+      "ENSO_PASSWORD": "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",
+      "ENSO_PORT": "AgBALDXqWa0Q7wfzRl79FjUFRh6JiscnQcpFPqRBQ8pGji+SFpxJ/ResZjeQKTfsvEQEAaqlLJPVKOajzZxJgfW4nhaV0falTAN51vZW8Jg3R3SHks2V94YONV5qjufLPcEtF8w9TuTSFxXDDRBYCJE1DLQ8h3iw+6Pu49cg6llfD7YGpFwpCOmXLnjlS37zo2BilySQdX3iND20NjJXB88tmwLyI6E8DX2cxjqp8cjh6ustwap9J8CvRFWqYpbHekRDs3N5h8e7Idkz3dW6xt6JGPxx8kkn7YwPo8Fku2X4tmSh6NCHrb+gPXcXxYIeOw8V5qZDNOyMBL6XyWnj2cZbMeCn/ySgu+Fo+K13eaQErBBIbmUHbDeaCdsLvaIeYf/6WJAilA2xxOELOajRRyCAkJYdxszld523jw4ZUqMN7Zvrm8tkBxAWw1OH4fhpNq7zrlPOxMhlCI+eE8AsmhrdZ2ikwHNsMI9Xh6j7Xrabtos5vrMoPjM6z/kAZXElkYW83O+a9XTpdTb9+etWH9HjEQL/q2s7VfmnpbMM6zWKfCjAf7S+b36zlv74CKY62OGxCLPEegZO/5S3ipcqej18B+4PNheSUOKZO2gZl2BO+5LK9IUvu0BqUFt/9rvhvtzo3WNI43voec1kCLYiS3WBJXRxbeETkyNK0NN+lmQbpN9up/O1afCUXE6wZWl4nY3Ed6CW",
+      "ENSO_USER": "AgAjg7tEKzpiGyEscn/WO+2H4u3JwcKGHru6Ikl7q/PNqzDfVM+zUgbO9wYeiCliuNfdOA4/G36TOaczAEv98IdT8Dx8/LdCK3gdBO680/E7K/ND+AP/2D9SMuW5C8Nn2s4LQ4BZ/USn8iCo30+cpBLVW1ZJOwLLFl9HWW5K9O7cAOg2klHQP+SaiWmp9+lHvuUnRm1EBjn/7IENExtrHJTeTw7AKKh0Qyv2XTbgWZkmRqO9uh+omdNFlixkVYU+xhWboEdc+rJNe6SrqgwDEAUjXQu+sKKGc/QJ9673Zl+IO803pfF7cym8oy4foZ+RH7yznfDFyfrAmOM4VluLqbY853DWhODbU/xCVSaJlnW0YJOjCSAd1zDzEiI5ynm8X9N2v1hVoO6ZedPbVvnqwJUCtu0uS/avCfJv72q2N34BDUh7ZnEyXzhDIkNltkW9V3nDTPMje9gFSN5qbHj0D7xDQV1JYjJFBj9UF8Lc9MWTKq1TMVF4ovCqFK/D6NQWQGDoOp0zCHUsql/gUVGIfPolsLOB6KpmLvtAv/URwxaVDZ8i/UbFANWyLS6IkVH8ch1UNIQ4T7leaRUlFSMDz0sv/6Jy8RzSr2TQWPwwsfTTaAZKbdm86g43WmvyYFXXDi708ofBAS7CqOjgpqwBOc+s+rKzKZ4iDE/Vr6biWfbRtAkNZc/vqPxdvSfRHTOii7q7jZ1bQg=="
+    }
+  }
+}

cluster/enso-bot/secrets/enso-bot-rewrite.sealed.json

@@ -0,0 +1,20 @@
+{
+  "kind": "SealedSecret",
+  "apiVersion": "bitnami.com/v1alpha1",
+  "metadata": {
+    "name": "enso-bot-rewrite",
+    "namespace": "enso-bot"
+  },
+  "spec": {
+    "template": {
+      "metadata": {
+        "name": "enso-bot-rewrite",
+        "namespace": "enso-bot"
+      },
+      "type": "Opaque"
+    },
+    "encryptedData": {
+      "ENSO_TOKEN": "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"
+    }
+  }
+}

cluster/enso-bot/secrets/enso-bot.sealed.json

@@ -0,0 +1,26 @@
+{
+  "kind": "SealedSecret",
+  "apiVersion": "bitnami.com/v1alpha1",
+  "metadata": {
+    "name": "enso-bot",
+    "namespace": "enso-bot"
+  },
+  "spec": {
+    "template": {
+      "metadata": {
+        "name": "enso-bot",
+        "namespace": "enso-bot"
+      },
+      "type": "Opaque"
+    },
+    "encryptedData": {
+      "discord_bots_bots_auth": "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",
+      "discord_token": "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",
+      "disforge_auth": "AgDGgqijbch+4Hy6disl9puK4MPlh4qZ7ljctVF2isg0WaolutsayFp140rCnRN8Tr0wF+arAxAjSyTupdx2Rwm6QK0mEjaHRZLbprxl/YlOXl1E/NlbGRYuD+8Y2CocMEKUr+1AwC3pz4jscS2E1ZnOFxUWAGgQtqDW/Wt9SfXO1TblNtuDuRITU8fNbdG1H4r/Axnpna/HrtPSS1gz8O9C2ZYGh3jD4nlaiNapFEcj7NET+hsxDllughr2FgOaHoNrO40JWqm4lnhqGevzicarckKPu01UiuLh6+NCj4JstT4qzF4Cbe4zA62iEOQl5y6z9MMKQukf/0gXy62EvvAPuRBGFwFDjPFUXvHfIR2Z7t8I39SfAyFsVh8fS/jqWfDnluNfGGnWYoJ1v4hi4kx6co9oxp05iy7EsmUBfJ55Gin2GCjZDKanWMiszY9SGa3IUOi/18t/JxFARiw0PH/MHW3G9LLk2DSWwVLr6tNanhNKcJuIXURJ1ZxFBqIT4SG+97T+ikFCWp/mbcKwtPl9hUyOW3FDzGI71X3EaQKM+wbdycfiKiTIq8DwkxgV9ylTEG5UdAy7xlPF9RCH+1cy1dBAIB9Mny8q57FoEHGfWX0dRuaDUOvABV9fl1f3H56Dhuy8Iwg5hmZmOjjhyHqlCEVPKHiz6T0tlI5RkwC3peg3TG/o5myE8vsZ+jWB/yUJPHx2lpoybe3oV47SqzROQnxyE76sLOE9X00O4xSw/wPLXHwFTO8MskrkfuYBn3rScQcC3XfBmL3RnbkYUnrZ",
+      "mywaifulist_auth": "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",
+      "statcord_auth": "AgAEQcW/YXB5bN/n+xIW/uCwy+1uFcqw2k8vruUE6vJ/34hbmb2qou4TgHnD0VBcPdoitB9s/tbG7QQkpFPGB9b6FzxHw7Bi5lPYsoqZR5EKbTav53tdgXbGWmRE1e7PJWpABubTPiDHh2QuviXUSTkU57YI+SRmiAW9ZCBcH0eTubTvldI0UefCaFQifvxXVW3iN9Lgtf6hontLKf5Y2qtwZFeSNUm3Rb4FWzMk7VLD5vlxZ+t9gXqifGGBgKNCLXinY8hg+WwmjmjGjN6wEndwmQPUF2HPSBF7JQ/g1wuZj8cCD72wG1oli8dtYhqGFBUKoCax5yJtT1FScHwFuLg3Cdd83Tb/0m0B//SQHZdcvQfvYyJck3Mjd0Z249rqdbqeUJ7wuqRIDpsVFVC63n8VG1jjMeHbs5euDb5sLCTOfOH7XYzXTk0UUc2+8DDbn/pYusuZS8kQnypsUMrAAyXduniYUbvej7z7qiG6wyzcFmHzNwx/dT7L4w131Z4Y5S2kZFR0U+yULY/jhjGHwcszVhK2ZSo5HIgitVStZ121DDXVGvgsfXXI1Ya87zitxamhn9W9n7V/t/HdbgzK8C0c7rqNP53yT/+vUS64ftKrnWSAh9WuwIVsTeoJXxHtZoYZn1AoCT4VygTQspI7iLfpCxKsuAVQAJ6sKWf2MG1Cm4/AB3k6lgC8bGjszQAJHkWwi8ontWC0c+LLm0ynh2Ue6ZaBMA==",
+      "tenor_auth": "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",
+      "top_gg_auth": "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"
+    }
+  }
+}

cluster/gitea/.gitignore

@@ -0,0 +1 @@
+/conf/public/css

cluster/gitea/conf/templates/custom/extra_links_footer.tmpl

@@ -0,0 +1,48 @@
+<a class="item" href="https://github.com/sgoudham">
+<svg class="svg" aria-hidden="true" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg" width="16" height="16"><path d="m12 .297c-6.63 0-12 5.373-12 12 0 5.303 3.438 9.8 8.205 11.385.6.113.82-.258.82-.577 0-.285-.01-1.04-.015-2.04-3.338.724-4.042-1.61-4.042-1.61-.546-1.385-1.335-1.755-1.335-1.755-1.087-.744.084-.729.084-.729 1.205.084 1.838 1.236 1.838 1.236 1.07 1.835 2.809 1.305 3.495.998.108-.776.417-1.305.76-1.605-2.665-.3-5.466-1.332-5.466-5.93 0-1.31.465-2.38 1.235-3.22-.135-.303-.54-1.523.105-3.176 0 0 1.005-.322 3.3 1.23.96-.267 1.98-.399 3-.405 1.02.006 2.04.138 3 .405 2.28-1.552 3.285-1.23 3.285-1.23.645 1.653.24 2.873.12 3.176.765.84 1.23 1.91 1.23 3.22 0 4.61-2.805 5.625-5.475 5.92.42.36.81 1.096.81 2.22 0 1.606-.015 2.896-.015 3.286 0 .315.21.69.825.57 4.801-1.574 8.236-6.074 8.236-11.369 0-6.627-5.373-12-12-12"></path></svg>
+GitHub
+</a>
+<a class="item" href="https://twitter.com/RealGoudham">
+<svg class="svg" xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 24 24"><path d="M24 4.557c-.883.392-1.832.656-2.828.775 1.017-.609 1.798-1.574 2.165-2.724-.951.564-2.005.974-3.127 1.195-.897-.957-2.178-1.555-3.594-1.555-3.179 0-5.515 2.966-4.797 6.045-4.091-.205-7.719-2.165-10.148-5.144-1.29 2.213-.669 5.108 1.523 6.574-.806-.026-1.566-.247-2.229-.616-.054 2.281 1.581 4.415 3.949 4.89-.693.188-1.452.232-2.224.084.626 1.956 2.444 3.379 4.6 3.419-2.07 1.623-4.678 2.348-7.29 2.04 2.179 1.397 4.768 2.212 7.548 2.212 9.142 0 14.307-7.721 13.995-14.646.962-.695 1.797-1.562 2.457-2.549z"/></svg>
+Twitter
+</a>
+<a class="item" href="https://discord.gg/bMpucndUMv">
+<svg class="svg" aria-hidden="true" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg" width="16" height="16"><path d="M20.317 4.3698a19.7913 19.7913 0 00-4.8851-1.5152.0741.0741 0 00-.0785.0371c-.211.3753-.4447.8648-.6083 1.2495-1.8447-.2762-3.68-.2762-5.4868 0-.1636-.3933-.4058-.8742-.6177-1.2495a.077.077 0 00-.0785-.037 19.7363 19.7363 0 00-4.8852 1.515.0699.0699 0 00-.0321.0277C.5334 9.0458-.319 13.5799.0992 18.0578a.0824.0824 0 00.0312.0561c2.0528 1.5076 4.0413 2.4228 5.9929 3.0294a.0777.0777 0 00.0842-.0276c.4616-.6304.8731-1.2952 1.226-1.9942a.076.076 0 00-.0416-.1057c-.6528-.2476-1.2743-.5495-1.8722-.8923a.077.077 0 01-.0076-.1277c.1258-.0943.2517-.1923.3718-.2914a.0743.0743 0 01.0776-.0105c3.9278 1.7933 8.18 1.7933 12.0614 0a.0739.0739 0 01.0785.0095c.1202.099.246.1981.3728.2924a.077.077 0 01-.0066.1276 12.2986 12.2986 0 01-1.873.8914.0766.0766 0 00-.0407.1067c.3604.698.7719 1.3628 1.225 1.9932a.076.076 0 00.0842.0286c1.961-.6067 3.9495-1.5219 6.0023-3.0294a.077.077 0 00.0313-.0552c.5004-5.177-.8382-9.6739-3.5485-13.6604a.061.061 0 00-.0312-.0286zM8.02 15.3312c-1.1825 0-2.1569-1.0857-2.1569-2.419 0-1.3332.9555-2.4189 2.157-2.4189 1.2108 0 2.1757 1.0952 2.1568 2.419 0 1.3332-.9555 2.4189-2.1569 2.4189zm7.9748 0c-1.1825 0-2.1569-1.0857-2.1569-2.419 0-1.3332.9554-2.4189 2.1569-2.4189 1.2108 0 2.1757 1.0952 2.1568 2.419 0 1.3332-.946 2.4189-2.1568 2.4189Z"></path></svg>
+Discord
+</a>
+<a class="item" href="https://www.linkedin.com/in/sgoudham/">
+<svg class="svg" xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 24 24"><path d="M19 0h-14c-2.761 0-5 2.239-5 5v14c0 2.761 2.239 5 5 5h14c2.762 0 5-2.239 5-5v-14c0-2.761-2.238-5-5-5zm-11 19h-3v-11h3v11zm-1.5-12.268c-.966 0-1.75-.79-1.75-1.764s.784-1.764 1.75-1.764 1.75.79 1.75 1.764-.783 1.764-1.75 1.764zm13.5 12.268h-3v-5.604c0-3.368-4-3.113-4 0v5.604h-3v-11h3v1.765c1.396-2.586 7-2.777 7 2.476v6.759z"/></svg>
+LinkedIn
+</a>
+<a class="item" href="https://gitea.catppuccin.com">
+<svg class="svg" version="1.2" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1024 1024" width="16" height="16">
+	<title>catppuccin-svg</title>
+	<style>
+		.s0 { fill: none } 
+		.s1 { fill: #c6a0f6 } 
+		.s2 { fill: #7dc4e4 } 
+		.s3 { fill: #a6da95 } 
+		.s4 { fill: #eed49f } 
+		.s5 { fill: #f5a97f } 
+		.s6 { fill: #ed8796 } 
+		.s7 { fill: #171622 } 
+		.s8 { fill: #c2cbf1 } 
+		.s9 { fill: #e48c9c } 
+	</style>
+	<path id="Layer" class="s0" d="m0 0h1024v1024h-1024z"/>
+	<path id="Layer" fill-rule="evenodd" class="s1" d="m1008.2 487.9q0.6 12 0.6 24.1c0 195.6-112.3 365.1-275.6 447l-192.1-4z"/>
+	<path id="Layer" fill-rule="evenodd" class="s2" d="m961.3 299c27.2 57.7 43.7 121.6 46.9 188.9l-467.1 467.1-231.1-4.8z"/>
+	<path id="Layer" fill-rule="evenodd" class="s3" d="m864.2 160.2c39.8 40.1 72.7 87 97.1 138.8l-651.3 651.2-38-0.8v0.2c-41.4-22.9-79.2-51.5-112.3-84.9z"/>
+	<path id="Layer" fill-rule="evenodd" class="s4" d="m726.8 61.8c51.3 24.9 97.7 58.3 137.4 98.4l-704.5 704.5c-39.8-40-72.9-86.7-97.4-138.4z"/>
+	<path id="Layer" fill-rule="evenodd" class="s5" d="m539.3 13.5c66.8 3.7 130.2 20.7 187.5 48.3l-664.5 664.5c-27.3-57.6-44-121.3-47.4-188.4z"/>
+	<path id="Layer" fill-rule="evenodd" class="s6" d="m14.9 537.9q-0.7-12.9-0.7-25.9c0-275.6 222.8-499.3 497.3-499.3q14 0 27.8 0.8z"/>
+	<path id="Layer" fill-rule="evenodd" class="s7" d="m272 949.4q11.1-85.5 33-149.7c-70.3-36.2-122.3-97-134.4-184.8-10.6-76.5 6.9-165.7 52.4-229-11.2-42.4-26.4-124.1-15.3-170.5 2.9-12.2 14-20.4 26.5-19.7 59.3 3.7 107.4 27 146.2 72.2 72.9-27.2 165.5-26.8 225.7-9.2 31.6-43.9 69-67.6 118.6-79.8 11.6-2.8 23.4 2.5 28.9 13.2 22.2 43 24.6 103.5 13.2 153.7 143.2 138.6 106.6 340.4-52.3 436.4q17.5 85.4 19.4 176.8c-66.8 33.5-142.2 52.3-221.9 52.3-87 0-168.8-22.4-240-61.9z"/>
+	<path id="Layer" fill-rule="evenodd" class="s8" d="m677.6 391.1c33.7-2 62.7 20.5 71.7 51.4 0.9 3.1-0.4 6.2-3.2 7.8-2.8 1.6-6.2 1.2-8.5-1.1-15-15-35.7-23.7-57.9-22.6-22 1.2-41 11.7-53.6 27.6-1.9 2.4-5 3.2-7.8 1.8-2.8-1.3-4.3-4.2-3.8-7.3 4.9-30.6 29.9-55.6 63.1-57.6zm-218.9 5.3c19.2-1.2 37.1 5 51.5 16.2 14.5 11.3 25.5 27.7 30.7 46.5 1 3.8-0.5 7.7-3.7 9.6-3.2 1.9-7.1 1.3-9.7-1.5-17.2-18.2-41-29-66.4-27.7-25.1 1.3-46.7 14.1-60.9 33.3-2.2 2.9-5.7 3.8-8.9 2.2-3.1-1.6-4.9-5.2-4.3-8.9 2.7-18.5 11.2-35.3 23.6-47.7 12.5-12.6 29.1-20.8 48.1-22zm144.6 115.4q15.4-1 29.9-1.9c3.2-0.2 6.3 2.4 7.9 6.6 1.5 4.2 1.2 8.8-0.8 11.9-12.9 19.6-21 29.2-30.5 30.4-9.8 1.2-21.4-6.7-42.2-23.1-3.7-3-5.8-8.1-5.3-13.1 0.4-5 3.4-8.4 7.5-8.7q17.3-1.1 33.5-2.1zm6.6 70.6c2.5-3.2 6.3-3.9 9.5-1.7 10.2 7.1 19.1 9.6 26.7 7.9 7.4-1.7 15.4-3.3 21.7-13.2 9.7-15.2 12.4-5.6 7.5 6.7-3 7.5-8.8 16.4-16.9 22.2-8.2 6-19.2 9.1-32.6 4.4-4.7-1.7-9.5-0.6-13.5 3.1-9.4 8.5-20.8 13.2-32.6 13.4-12.4 0.2-25.5-4.5-37.5-15.4-13.3-12-13.2-25.2 8.4-11.9 12.6 7.9 23.6 5.6 33.2 3.7 9.3-1.8 18-8.2 26.1-19.2z"/>
+	<path id="Layer" fill-rule="evenodd" class="s9" d="m603.6 851.6c-10 20.6-34.2 37.3-55.1 39-2.3 0.2-4.4-0.9-5.5-2.9-16.7-29-18.5-61-13-87.9 0.4-1.6 1.3-2.9 2.7-3.7q2.1-1.3 4.5-0.7 42.5 11.9 64.3 30.5 15-19.9 41.6-27.5 1.1-0.3 2.2-0.1 1.2 0.1 2.2 0.6 1 0.6 1.7 1.4 0.7 0.9 1 2c6.5 21.3 8.3 44.1 2.7 64.7-0.8 3-4.7 5.4-8.5 4.4-14.7-3.9-29.9-11.2-40.8-19.8z"/>
+</svg>
+Catppuccin
+</a>
+<a class="item" href="https://goudham.com">
+<svg class="svg" xmlns="http://www.w3.org/2000/svg" xml:space="preserve" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:2" width="16" height="16" viewBox="0 0 360 270"><path d="m341 200-.245 51H5v-41c0-5.519 4.481-10 10-10h326Z" style="fill:#1e1e2e"/><path d="M355 250h-44.245c4.519-.223 29.245-2.697 29.245-30.068V200h5c5.519 0 10 4.481 10 10v40Z" style="fill:#11111b"/><path d="m51.186 250-5.359 20H0v-20h51.186Z" style="fill:#f38ba8"/><path d="M111.394 270H44.827l5.359-20h66.567l-5.359 20Z" style="fill:#fab387"/><path d="M115.753 250h66.568l-5.359 20h-66.568l5.359-20Z" style="fill:#f9e2af"/><path d="M181.321 250h66.567l-5.359 20h-66.567l5.359-20Z" style="fill:#a6e3a1"/><path d="M308.097 270h-66.568l5.359-20h66.567l-5.358 20Z" style="fill:#89dceb"/><path d="M312.455 250H360v20h-52.903l5.358-20Z" style="fill:#cba6f7"/><path d="M321 0v149.932c0 27.371-25.726 30.845-30.245 31.068H20V10c0-5.519 4.481-10 10-10h291Z" style="fill:#eff1f5"/><path d="M320 149.932V0h10c5.519 0 10 4.481 10 10v190H20v-20h270.755c4.519-.223 29.245-2.697 29.245-30.068Z" style="fill:#dce0e8"/><path d="M145 190v10h50v-17.5c0 4.139-3.361 7.5-7.5 7.5H145Zm50-12.548v.048-.048Zm-49.985-.433-.003.047.003-.047Zm.019-.238-.004.047a7.5 7.5 0 0 1 .004-.047Zm49.906-.236a8.514 8.514 0 0 0 .011.094l-.011-.094Zm-.132-.738a7.47 7.47 0 0 0 .02.091l-.02-.091Zm-49.523-.359-.025.089a7.448 7.448 0 0 1 .025-.089Zm.621-1.522-.043.08a7.91 7.91 0 0 1 .043-.08Zm48.188 0a8.8 8.8 0 0 0 .043.08l-.043-.08Zm-48.008-.314-.046.078a7.485 7.485 0 0 1 .046-.078Zm47.313-.741c-.037-.047-.074-.094-.113-.141.058.07.114.141.169.212l-.056-.071Zm-46.569-.278-.059.068a8.663 8.663 0 0 1 .059-.068Zm46.221-.135c.04.045.08.089.119.135l-.059-.068-.06-.067Zm-.249-.26a7.956 7.956 0 0 0 .064.064l-.064-.064Zm-45.604 0-.064.064c.063-.064.127-.128.193-.19-.044.042-.087.083-.129.126Zm.26-.249-.066.061a7.582 7.582 0 0 1 .066-.061Zm44.881-.178a7.347 7.347 0 0 0 .068.059l-.068-.059Zm-43.649-.731-.078.046.078-.046Zm.892-.45-.084.036.084-.036Z" style="fill:#6c7086"/><path d="M195 177.5c0-4.139-3.361-7.5-7.5-7.5h-35a7.504 7.504 0 0 0-7.5 7.5V190h42.5c4.139 0 7.5-3.361 7.5-7.5v-5Z" style="fill:#7f849c"/><path d="M80 137.5c0-4.139-3.361-7.5-7.5-7.5h-15a7.504 7.504 0 0 0-7.5 7.5v10c0 4.139 3.361 7.5 7.5 7.5h15c4.139 0 7.5-3.361 7.5-7.5v-10ZM280 137.5c0-4.139-3.361-7.5-7.5-7.5h-15a7.504 7.504 0 0 0-7.5 7.5v10c0 4.139 3.361 7.5 7.5 7.5h15c4.139 0 7.5-3.361 7.5-7.5v-10Z" style="fill:#f5c2e7"/><path d="M215 100v2.5c0 4.139 3.361 7.5 7.5 7.5h35c4.139 0 7.5-3.361 7.5-7.5v-10c0 4.139-3.361 7.5-7.5 7.5H215Z" style="fill:#6c7086"/><path d="M265 67.5c0-4.139-3.361-7.5-7.5-7.5h-35a7.504 7.504 0 0 0-7.5 7.5V100h42.5c4.139 0 7.5-3.361 7.5-7.5v-25Zm-5 2.5c0-2.76-2.24-5-5-5h-5c-2.76 0-5 2.24-5 5v5c0 2.76 2.24 5 5 5h5c2.76 0 5-2.24 5-5v-5Z" style="fill:#7f849c"/><path d="M260 70c0-2.76-2.24-5-5-5h-5c-2.76 0-5 2.24-5 5v5c0 2.76 2.24 5 5 5h5c2.76 0 5-2.24 5-5v-5Z" style="fill:#eff1f5"/><path d="M75 100v2.5c0 4.139 3.361 7.5 7.5 7.5h35c4.139 0 7.5-3.361 7.5-7.5v-10c0 4.139-3.361 7.5-7.5 7.5H75Z" style="fill:#6c7086"/><path d="M125 67.5c0-4.139-3.361-7.5-7.5-7.5h-35a7.504 7.504 0 0 0-7.5 7.5V100h42.5c4.139 0 7.5-3.361 7.5-7.5v-25Zm-5 2.5c0-2.76-2.24-5-5-5h-5c-2.76 0-5 2.24-5 5v5c0 2.76 2.24 5 5 5h5c2.76 0 5-2.24 5-5v-5Z" style="fill:#7f849c"/><path d="M120 70c0-2.76-2.24-5-5-5h-5c-2.76 0-5 2.24-5 5v5c0 2.76 2.24 5 5 5h5c2.76 0 5-2.24 5-5v-5Z" style="fill:#eff1f5"/></svg>
+Website
+</a>

cluster/gitea/conf/templates/home.tmpl

@@ -0,0 +1,33 @@
+{{template "base/head" .}}
+<div role="main" aria-label="{{if .IsSigned}}{{.locale.Tr "dashboard"}}{{else}}{{.locale.Tr "home"}}{{end}}" class="page-content home">
+	<div class="gt-mb-5 gt-px-5">
+		<div class="center">
+			<img class="logo" width="220" height="220" src="{{AssetUrlPrefix}}/img/logo.svg" alt="{{.locale.Tr "logo"}}">
+			<div class="hero">
+				<h1 class="ui icon header title">
+					{{AppName}}
+				</h1>
+				<h2>{{.locale.Tr "startpage.app_desc"}}</h2>
+			</div>
+		</div>
+	</div>
+	<div class="ui stackable middle very relaxed page grid">
+		<div class="eight wide center column">
+			<h1 class="hero ui icon header">
+				{{svg "octicon-key"}} {{.locale.Tr "startpage.why"}}
+			</h1>
+			<p class="large">
+				{{.locale.Tr "startpage.why_desc" | Str2html}}
+			</p>
+		</div>
+		<div class="eight wide center column">
+			<h1 class="hero ui icon header">
+				{{svg "octicon-code"}} {{.locale.Tr "startpage.open_source"}}
+			</h1>
+			<p class="large">
+				{{.locale.Tr "startpage.open_source_why" | Str2html}}
+			</p>
+		</div>
+	</div>
+</div>
+{{template "base/footer" .}}

cluster/gitea/secrets/postgres-password.sealed.json

@@ -0,0 +1,21 @@
+{
+  "kind": "SealedSecret",
+  "apiVersion": "bitnami.com/v1alpha1",
+  "metadata": {
+    "name": "postgres-password",
+    "namespace": "gitea"
+  },
+  "spec": {
+    "template": {
+      "metadata": {
+        "name": "postgres-password",
+        "namespace": "gitea"
+      },
+      "type": "Opaque"
+    },
+    "encryptedData": {
+      "password": "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",
+      "postgres-password": "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"
+    }
+  }
+}

cluster/gitea/values.yaml

@@ -0,0 +1,107 @@
+service:
+  http:
+    type: ClusterIP
+    port: 3000
+  ssh:
+    type: LoadBalancer
+    port: 22
+
+ingress:
+  enabled: true
+  hosts:
+    - host: gitea.goudham.com
+      paths:
+        - path: /
+          pathType: Prefix
+  tls:
+    - hosts:
+        - gitea.goudham.com
+
+persistence:
+  enabled: true
+  size: 50Gi
+
+gitea:
+  config:
+    APP_NAME: "Hammy's Gitea"
+    RUN_MODE: "prod"
+    RUN_USER: "git"
+    ui:
+      THEMES: "catppuccin-frappe-blue,catppuccin-frappe-flamingo,catppuccin-frappe-green,catppuccin-frappe-lavender,catppuccin-frappe-maroon,catppuccin-frappe-mauve,catppuccin-frappe-peach,catppuccin-frappe-pink,catppuccin-frappe-red,catppuccin-frappe-rosewater,catppuccin-frappe-sapphire,catppuccin-frappe-sky,catppuccin-frappe-teal,catppuccin-frappe-yellow,catppuccin-latte-blue,catppuccin-latte-flamingo,catppuccin-latte-green,catppuccin-latte-lavender,catppuccin-latte-maroon,catppuccin-latte-mauve,catppuccin-latte-peach,catppuccin-latte-pink,catppuccin-latte-red,catppuccin-latte-rosewater,catppuccin-latte-sapphire,catppuccin-latte-sky,catppuccin-latte-teal,catppuccin-latte-yellow,catppuccin-macchiato-blue,catppuccin-macchiato-flamingo,catppuccin-macchiato-green,catppuccin-macchiato-lavender,catppuccin-macchiato-maroon,catppuccin-macchiato-mauve,catppuccin-macchiato-peach,catppuccin-macchiato-pink,catppuccin-macchiato-red,catppuccin-macchiato-rosewater,catppuccin-macchiato-sapphire,catppuccin-macchiato-sky,catppuccin-macchiato-teal,catppuccin-macchiato-yellow,catppuccin-mocha-blue,catppuccin-mocha-flamingo,catppuccin-mocha-green,catppuccin-mocha-lavender,catppuccin-mocha-maroon,catppuccin-mocha-mauve,catppuccin-mocha-peach,catppuccin-mocha-pink,catppuccin-mocha-red,catppuccin-mocha-rosewater,catppuccin-mocha-sapphire,catppuccin-mocha-sky,catppuccin-mocha-teal,catppuccin-mocha-yellow"
+      DEFAULT_THEME: "catppuccin-mocha-pink"
+      THEME_COLOR_META_TAG: "#f5c2e7"
+    ui.meta:
+      AUTHOR: "Hammy's Gitea"
+      DESCRIPTION: "Welcome to my personal space on the internet where I create and manage my personal projects without relying on major centralised services :D"
+      KEYWORDS: "go,git,self-hosted,gitea,goudham,hammy,catppuccin,open-source"
+    api:
+      ENABLE_SWAGGER: "false"
+    i18n:
+      LANGS: "en-US"
+      NAMES: "English"
+    session:
+      PROVIDER: "db"
+      COOKIE_SECURE: "true"
+    service:
+      DISABLE_REGISTRATION: "true"
+    repository.pull-request:
+      DEFAULT_MERGE_STYLE: "rebase"
+    server:
+      LFS_START_SERVER: "true"
+      SSH_EXPOSE_ANONYMOUS: "true"
+  ssh:
+    logLevel: "INFO"
+  livenessProbe:
+    enabled: true
+    tcpSocket:
+      port: http
+    initialDelaySeconds: 200
+    timeoutSeconds: 1
+    periodSeconds: 10
+    successThreshold: 1
+    failureThreshold: 10
+  readinessProbe:
+    enabled: true
+    tcpSocket:
+      port: http
+    initialDelaySeconds: 5
+    timeoutSeconds: 1
+    periodSeconds: 10
+    successThreshold: 1
+    failureThreshold: 3
+
+memcached:
+  enabled: true
+  service:
+    ports:
+      memcached: 11211
+postgresql:
+  enabled: true
+  global:
+    postgresql:
+      auth:
+        database: gitea
+        username: gitea
+        existingSecret: postgres-password
+      service:
+        ports:
+          postgresql: 5432
+  primary:
+    persistence:
+      size: 10Gi
+
+# https://gitea.com/gitea/helm-chart/issues/414
+statefulset:
+  env:
+    - name: ENV_TO_INI__database__PASSWD
+      valueFrom:
+        secretKeyRef:
+          name: postgres-password
+          key: password
+
+checkDeprecation: true
+test:
+  enabled: true
+  image:
+    name: busybox
+    tag: latest

cluster/kubernetes-dashboard/resources/cluster-role-binding.yaml

@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: hammy
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cluster-admin
+subjects:
+- kind: ServiceAccount
+  name: hammy
+  namespace: kubernetes-dashboard

cluster/kubernetes-dashboard/resources/insecure-skip-verify.yaml

@@ -0,0 +1,13 @@
+# It's VERY hard to verify that kubernetes certificates are signed by them.
+# Mostly due to: https://github.com/kubernetes/dashboard/issues/4684
+
+# Traefik's insecureSkipVerify doesn't validate the internal chain of certifictes
+# and therefore allows the entire thing to work. DON'T ACTUALLY RUN THIS IN PRODUCTION
+# ref: https://doc.traefik.io/traefik/routing/services/#insecureskipverify
+apiVersion: traefik.io/v1alpha1
+kind: ServersTransport
+metadata:
+  name: insecure-skip-verify
+  namespace: kubernetes-dashboard
+spec:
+  insecureSkipVerify: true

cluster/kubernetes-dashboard/resources/service-account.yaml

@@ -0,0 +1,5 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: hammy
+  namespace: kubernetes-dashboard

cluster/kubernetes-dashboard/values.yaml

@@ -0,0 +1,46 @@
+# Copyright 2017 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+resources:
+  requests:
+    cpu: 100m
+    memory: 200Mi
+  limits:
+    cpu: 2
+    memory: 200Mi
+
+protocolHttp: false
+
+service:
+  type: ClusterIP
+  externalPort: 443
+  annotations:
+    traefik.ingress.kubernetes.io/service.serverstransport: "kubernetes-dashboard-insecure-skip-verify@kubernetescrd"
+  clusterServiceLabel:
+    enabled: true
+    key: "kubernetes.io/cluster-service"
+
+ingress:
+  enabled: true
+  paths:
+    - /
+  hosts:
+    - kubernetes.goudham.com
+  tls:
+    - hosts:
+        - kubernetes.goudham.com
+
+livenessProbe:
+  initialDelaySeconds: 30
+  timeoutSeconds: 30

cluster/minecraft-server/resources/minecraft-load-balancer.yaml

@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: minecraft-load-balancer
+  namespace: minecraft-server
+spec:
+  selector:
+    cursed: minecraft
+  type: LoadBalancer
+  ports:
+    - name: minecraft
+      protocol: TCP
+      port: 25565
+      targetPort: 25565

cluster/minecraft-server/secrets/minecraft-rcon.sealed.json

@@ -0,0 +1,22 @@
+{
+  "kind": "SealedSecret",
+  "apiVersion": "bitnami.com/v1alpha1",
+  "metadata": {
+    "name": "minecraft-rcon",
+    "namespace": "minecraft-server",
+    "creationTimestamp": null
+  },
+  "spec": {
+    "template": {
+      "metadata": {
+        "name": "minecraft-rcon",
+        "namespace": "minecraft-server",
+        "creationTimestamp": null
+      },
+      "type": "Opaque"
+    },
+    "encryptedData": {
+      "rcon-password": "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"
+    }
+  }
+}

cluster/minecraft-server/values.yaml

@@ -0,0 +1,88 @@
+resources:
+  requests:
+    memory: 3096Mi
+
+strategyType: Recreate
+
+livenessProbe:
+  command:
+    - mc-health
+  initialDelaySeconds: 30
+  periodSeconds: 5
+  failureThreshold: 20
+  successThreshold: 1
+  timeoutSeconds: 1
+readinessProbe:
+  command:
+    - mc-health
+  initialDelaySeconds: 30
+  periodSeconds: 5
+  failureThreshold: 20
+  successThreshold: 1
+  timeoutSeconds: 1
+startupProbe:
+  command:
+    - mc-health
+  enabled: false
+  failureThreshold: 30
+  periodSeconds: 10
+
+minecraftServer:
+  eula: "TRUE"
+  version: "1.19.4"
+  type: "VANILLA"
+  difficulty: normal
+  whitelist: "Hamothy_,Aishwxyra"
+  viewDistance: 16
+  motd: "Criminal Offensive Side-EYE"
+  pvp: true
+  levelType: DEFAULT
+  worldSaveName: MyWorld
+  memory: 2512M
+  overrideServerProperties: true
+  serviceType: ClusterIP
+  servicePort: 25565
+
+  rcon:
+    enabled: true
+    existingSecret: minecraft-rcon
+    secretKey: rcon-password
+
+persistence:
+  dataDir:
+    enabled: true
+    Size: 10Gi
+
+mcbackup:
+  enabled: true
+
+  image:
+    repository: itzg/mc-backup
+    tag: latest
+    pullPolicy: IfNotPresent
+
+  initialDelay: 2m
+  backupInterval: "2h"
+  pauseIfNoPlayers: "true"
+  pruneBackupsDays: 14
+  rconRetries: 5
+  rconRetryInterval: 10s
+  excludes: "*.jar,cache,logs"
+  backupMethod: tar
+  destDir: /backups
+  linkLatest: "false"
+  compressMethod: "gzip"
+
+  resources:
+    requests:
+      memory: 512Mi
+
+  persistence:
+    backupDir:
+      enabled: true
+      Size: 20Gi
+
+deploymentLabels:
+  cursed: minecraft
+podLabels:
+  cursed: minecraft

cluster/monitoring/values.yaml

@@ -1,111 +1,31 @@
-# Default values for uptime-kuma.
-# This is a YAML-formatted file.
-# Declare variables to be passed into your templates.
-
-image:
-  repository: louislam/uptime-kuma
-  pullPolicy: IfNotPresent
-  # Overrides the image tag whose default is the chart appVersion.
-  tag: "1.21.2-debian"
-
-imagePullSecrets: []
-nameOverride: ""
-fullnameOverride: ""
-
 # If this option is set to false a StateFulset instead of a Deployment is used
 useDeploy: true
 
-serviceAccount:
-  # Specifies whether a service account should be created
-  create: false
-  # Annotations to add to the service account
-  annotations: {}
-  # The name of the service account to use.
-  # If not set and create is true, a name is generated using the fullname template
-  name: ""
-
-podAnnotations: {}
-podLabels: {}
-  # app: uptime-kuma
 podEnv:
-  # a default port must be set. required by container
   - name: "UPTIME_KUMA_PORT"
     value: "3001"
 
-podSecurityContext: {}
-  # fsGroup: 2000
-
-securityContext: {}
-  # capabilities:
-  #   drop:
-  #   - ALL
-  # readOnlyRootFilesystem: true
-  # runAsNonRoot: true
-  # runAsUser: 1000
-
 service:
   type: ClusterIP
   port: 3001
-  nodePort:
-  annotations: {}
 
 ingress:
-  enabled: false
+  enabled: true
-  # className: ""
-  extraLabels: {}
-    # vhost: uptime-kuma.company.corp
-  annotations:
-    nginx.ingress.kubernetes.io/proxy-read-timeout: "3600"
-    nginx.ingress.kubernetes.io/proxy-send-timeout: "3600"
-    nginx.ingress.kubernetes.io/server-snippets: |
-      location / {
-        proxy_set_header Upgrade $http_upgrade;
-        proxy_http_version 1.1;
-        proxy_set_header X-Forwarded-Host $http_host;
-        proxy_set_header X-Forwarded-Proto $scheme;
-        proxy_set_header X-Forwarded-For $remote_addr;
-        proxy_set_header Host $host;
-        proxy_set_header Connection "upgrade";
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header   Upgrade $http_upgrade;
-        proxy_cache_bypass $http_upgrade;
-      }
   hosts:
-    - host: chart-example.local
+    - host: status.goudham.com
       paths:
         - path: /
-          pathType: ImplementationSpecific
+          pathType: Prefix
-
   tls:
-    []
+    - hosts:
-    # - secretName: chart-example-tls
+        - status.goudham.com
-    #   hosts:
-    #     - chart-example.local
 
 resources: {}
-  # We usually recommend not to specify default resources and to leave this as a conscious
-  # choice for the user. This also increases chances charts run on environments with little
-  # resources, such as Minikube. If you do want to specify resources, uncomment the following
-  # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
-  # limits:
-  #   cpu: 100m
-  #   memory: 128Mi
-  # requests:
-  #   cpu: 100m
-  #   memory: 128Mi
-
-nodeSelector: {}
-
-tolerations: []
-
-affinity: {}
 
 livenessProbe:
   enabled: true
   timeoutSeconds: 2
   initialDelaySeconds: 15
-
 readinessProbe:
   enabled: true
   initialDelaySeconds: 5
@@ -113,13 +33,7 @@ readinessProbe:
 volume:
   enabled: true
   accessMode: ReadWriteOnce
-  size: 4Gi
+  size: 8Gi
-  # If you want to use a storage class other than the default, uncomment this
-  # line and define the storage class name
-  # storageClassName:
-  # Reuse your own pre-existing PVC.
-  existingClaim: ""
 
 strategy:
   type: Recreate
-

cluster/openebs/values.yaml

@@ -0,0 +1,34 @@
+crd:
+  enableInstall: true
+
+localprovisioner:
+  enabled: true
+  deviceClass:
+    enabled: false
+  hostpathClass:
+    enabled: true
+    isDefaultClass: true
+ndm:
+  enabled: false
+ndmOperator:
+  enabled: false
+ndmExporter:
+  enabled: false
+webhook:
+  enabled: true
+nfs-provisioner:
+  enabled: false
+mayastor:
+  enabled: false
+jiva:
+  enabled: false
+cstor:
+  enabled: false
+openebs-ndm:
+  enabled: false
+localpv-provisioner:
+  enabled: false
+zfs-localpv:
+  enabled: false
+lvm-localpv:
+  enabled: false

cluster/traefik/certificate.yaml

@@ -0,0 +1,14 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: le-goudham-com
+  namespace: traefik
+spec:
+  commonName: goudham.com
+  dnsNames:
+  - goudham.com
+  - '*.goudham.com'
+  issuerRef:
+    kind: ClusterIssuer
+    name: letsencrypt
+  secretName: goudham-com-cert

cluster/traefik/values.yaml

@@ -0,0 +1,33 @@
+deployment:
+  enabled: true
+  kind: Deployment
+ingressRoute:
+  dashboard:
+    enabled: true
+    matchRule: PathPrefix(`/dashboard`) || PathPrefix(`/api`)
+ports:
+  traefik:
+    expose: false
+    port: 9000
+  web:
+    redirectTo: websecure
+  websecure:
+    http3:
+      enabled: true
+    tls:
+      enabled: true
+service:
+  enabled: true
+  spec:
+    externalTrafficPolicy: Local
+    loadBalancerIP: 185.162.251.168
+  type: LoadBalancer
+extraObjects:
+  - apiVersion: traefik.containo.us/v1alpha1
+    kind: TLSStore
+    metadata:
+      name: default
+      namespace: traefik
+    spec:
+      defaultCertificate:
+        secretName: goudham-com-cert

cluster/website/README.md

@@ -0,0 +1,9 @@
+# Setup
+
+1. `kubectl create namespace website`
+2. `kubectl create deployment website --image sgoudham/website:latest --port 3000`
+3. `kubectl expose deployment website --port 3000`
+4. `kubectl create ingress website --rule=goudham.com/\*=website:3000,tls`
+5. `kubectl get deployment.apps website -o yaml > deployment.yaml`
+6. `kubectl get services website -o yaml > service.yaml`
+7. `kubectl get ingress website -o yaml > ingress.yaml`

cluster/website/deployment.yaml

@@ -0,0 +1,36 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app: website
+  name: website
+  namespace: website
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: website
+  strategy:
+    rollingUpdate:
+      maxSurge: 25%
+      maxUnavailable: 25%
+    type: RollingUpdate
+  template:
+    metadata:
+      labels:
+        app: website
+    spec:
+      containers:
+      - image: sgoudham/website:latest
+        imagePullPolicy: IfNotPresent
+        name: website
+        ports:
+        - containerPort: 3000
+          protocol: TCP
+        livenessProbe:
+          httpGet:
+            path: /
+            port: 3000
+        resources: {}
+      dnsPolicy: ClusterFirst
+      restartPolicy: Always

cluster/website/ingress.yaml

@@ -0,0 +1,45 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  labels:
+    app: website
+  name: website
+  namespace: website
+  annotations:
+    traefik.ingress.kubernetes.io/router.entrypoints: web, websecure
+    traefik.ingress.kubernetes.io/router.middlewares: website-drop-www-redirect@kubernetescrd
+spec:
+  ingressClassName: traefik
+  rules:
+    - host: goudham.com
+      http:
+        paths:
+          - backend:
+              service:
+                name: website
+                port:
+                  number: 3000
+            path: /
+            pathType: Prefix
+    - host: www.goudham.com
+      http:
+        paths:
+          - backend:
+              service:
+                name: website
+                port:
+                  number: 3000
+            path: /
+            pathType: Prefix
+  tls:
+    - hosts:
+        - goudham.com
+---
+apiVersion: traefik.containo.us/v1alpha1
+kind: Middleware
+metadata:
+  name: drop-www-redirect
+spec:
+  redirectRegex:
+    regex: ^https://www.goudham.com/(.*)
+    replacement: https://goudham.com/${1}

cluster/website/service.yaml

@@ -0,0 +1,20 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app: website
+  name: website
+  namespace: website
+spec:
+  internalTrafficPolicy: Cluster
+  ipFamilies:
+  - IPv4
+  ipFamilyPolicy: SingleStack
+  ports:
+  - port: 3000
+    protocol: TCP
+    targetPort: 3000
+  selector:
+    app: website
+  sessionAffinity: None
+  type: ClusterIP

cluster/winston-bot/deployment.yaml

@@ -0,0 +1,34 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app: winston-bot
+  name: winston-bot
+  namespace: winston-bot
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: winston-bot
+  strategy:
+    rollingUpdate:
+      maxSurge: 25%
+      maxUnavailable: 25%
+    type: RollingUpdate
+  template:
+    metadata:
+      labels:
+        app: winston-bot
+    spec:
+      containers:
+        - image: sgoudham/winston-bot:latest
+          imagePullPolicy: Always
+          name: winston-bot
+          resources: {}
+          envFrom:
+            - secretRef:
+                name: token
+            - secretRef:
+                name: spotify
+      dnsPolicy: ClusterFirst
+      restartPolicy: Always

cluster/winston-bot/secrets/spotify.sealed.json

@@ -0,0 +1,21 @@
+{
+  "kind": "SealedSecret",
+  "apiVersion": "bitnami.com/v1alpha1",
+  "metadata": {
+    "name": "spotify",
+    "namespace": "winston-bot"
+  },
+  "spec": {
+    "template": {
+      "metadata": {
+        "name": "spotify",
+        "namespace": "winston-bot"
+      },
+      "type": "Opaque"
+    },
+    "encryptedData": {
+      "SPOTIFY_CLIENT_ID": "AgBayOJ26O/nwX17HYW9315u8XsXeYsogg8dv6hgwUSd4YGSgdMQHL4r1Jmj6JqNIdazvKUeRxaCzSB+u02NrvWuNDZDdWgeLO/F2d6Yk3KySjT2YprGdvH1Z0nDzTcKdl4EAy924Mt0Z0uQbUtRF+L/oCR/UKa/0MfrYK8UABp4kvgyAAiWTzzTM9M3sO42LWr7jNwvhi41uxfTDjMgSQFWW4kQaONjUSA2t62/17FTF3e87PwDMmlybedqzrJk6+IBKH2mg4Mm5cqRcAJ+rUQuJKpHqHaqrbibv1XyEhcHhmZKdziCnw5uC+Xyx6vd623s49YTao/VarYwyRjn6fWO2LoxKTLhUAZMgIkjwd35BOV4vT5/zKhIgKIyXrhC7g5gHY5ZhO8t/xWiTcU5RmGZaDrPavPXDvv1z6WRkAtKrNI/wJswsdDdbxvjcvvJAvhswCUPq21dur5wHwYZtkQbSbcIHRFw3W3hnba276e1VDUDLyH1PN3haQFt0tNz0hbaWpp4siFeA1hR6mrrdoEuuQAzo9GYhLQ0PkP3Z0XtU+5rUosZUDa6ePlwqVc5EGz40QqY4N4p/fuXvwA6BI/zN+6N3cK6gLoZrv7UIvLPadqoXnYGhWigzj6ym2RgONCvk06YAf9iDHjch/HOzskHGEmbcMly1iwS4IoAewLTynG/XWN2rx/n4B2266Y57bfiTTnd2jJd81Yna/y3z+uWa7fFH2BFKiidXXqw1P5jiw==",
+      "SPOTIFY_CLIENT_SECRET": "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"
+    }
+  }
+}

cluster/winston-bot/secrets/token.sealed.json

@@ -0,0 +1,20 @@
+{
+  "kind": "SealedSecret",
+  "apiVersion": "bitnami.com/v1alpha1",
+  "metadata": {
+    "name": "token",
+    "namespace": "winston-bot"
+  },
+  "spec": {
+    "template": {
+      "metadata": {
+        "name": "token",
+        "namespace": "winston-bot"
+      },
+      "type": "Opaque"
+    },
+    "encryptedData": {
+      "WINSTON_TOKEN": "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"
+    }
+  }
+}

templates/pod-failsafe.yaml

@@ -0,0 +1,20 @@
+# If I screw up the files on a volume that prevent a pod from booting up,
+# I can use this temporary pod which attaches to the volume to fix my mistakes.
+apiVersion: v1
+kind: Pod
+metadata:
+  name: ubuntu
+spec:
+  containers:
+  - name: ubuntu
+    resources: {}
+    image: ubuntu:latest
+    command: [ "/bin/bash", "-c", "--" ]
+    args: [ "while true; do sleep 30; done;" ]
+    volumeMounts:
+      - mountPath: /data
+        name: data
+  volumes:
+    - name: data
+      persistentVolumeClaim:
+        claimName: minecraft-minecraft-datadir