diff --git a/services/Gitea/application-gitea.yaml b/services/Gitea/application-gitea.yaml index c6fba4a..e9c5d86 100644 --- a/services/Gitea/application-gitea.yaml +++ b/services/Gitea/application-gitea.yaml @@ -21,7 +21,6 @@ spec: targetRevision: master - repoURL: https://dl.gitea.com/charts/ chart: gitea - # targetRevision: 11.0.0 targetRevision: 12.7.0 helm: valueFiles: diff --git a/services/NextExplorer/_namespace-nextexplorer.yml b/services/NextExplorer/_namespace-nextexplorer.yml new file mode 100644 index 0000000..fc710ee --- /dev/null +++ b/services/NextExplorer/_namespace-nextexplorer.yml @@ -0,0 +1,4 @@ +apiVersion: v1 +kind: Namespace +metadata: + name: nextexplorer diff --git a/services/NextExplorer/application-nextexplorer.yaml b/services/NextExplorer/application-nextexplorer.yaml new file mode 100644 index 0000000..aecd303 --- /dev/null +++ b/services/NextExplorer/application-nextexplorer.yaml @@ -0,0 +1,18 @@ +apiVersion: argoproj.io/v1alpha1 +kind: Application +metadata: + name: nextexplorer + namespace: argo-cd +spec: + destination: + namespace: nextexplorer + server: https://kubernetes.default.svc + project: default + syncPolicy: + automated: {} + syncOptions: + - CreateNamespace=true + sources: + - repoURL: https://code.spamasaurus.com/djpbessems/Kubernetes.K3s.installLog + path: services/NextExplorer + targetRevision: HEAD diff --git a/services/NextExplorer/deployment-nextexplorer.yaml b/services/NextExplorer/deployment-nextexplorer.yaml new file mode 100644 index 0000000..de9397c --- /dev/null +++ b/services/NextExplorer/deployment-nextexplorer.yaml @@ -0,0 +1,50 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nextexplorer + namespace: nextexplorer + labels: + app: nextexplorer +spec: + replicas: 1 + selector: + matchLabels: + app: nextexplorer + template: + metadata: + labels: + app: nextexplorer + spec: + containers: + - name: nextexplorer + image: ghcr.io/cerede2000/explorer:3.5.0-lean + env: + - name: PUBLIC_URL +# value: https://st.itch.fyi + value: https://st.itch.fyi + - name: SESSION_SECRET + value: VPd67z54NMceyvnPNaSCtktuePTbcIPU + ports: + - name: web + containerPort: 3000 + volumeMounts: + - mountPath: /config + name: csismb-nextexplorer-config + - mountPath: /cache + name: csismb-nextexplorer-cache + - mountPath: /mnt/Storage + name: csismb-nextexplorer-storage + securityContext: + fsGroup: 1000 + runAsUser: 1000 + runAsGroup: 1000 + volumes: + - name: csismb-nextexplorer-config + persistentVolumeClaim: + claimName: csismb-nextexplorer-config + - name: csismb-nextexplorer-cache + persistentVolumeClaim: + claimName: csismb-nextexplorer-cache + - name: csismb-nextexplorer-storage + persistentVolumeClaim: + claimName: csismb-nextexplorer-storage diff --git a/services/NextExplorer/ingressroute-nextexplorer.yaml b/services/NextExplorer/ingressroute-nextexplorer.yaml new file mode 100644 index 0000000..ac98786 --- /dev/null +++ b/services/NextExplorer/ingressroute-nextexplorer.yaml @@ -0,0 +1,17 @@ +apiVersion: traefik.io/v1alpha1 +kind: IngressRoute +metadata: + name: nextexplorer + namespace: nextexplorer +spec: + entryPoints: + - websecure + routes: + - match: Host(`st.itch.fyi`) + kind: Rule + services: + - name: nextexplorer + port: 3000 + middlewares: + - name: security-headers@file + # - name: compression@file diff --git a/services/NextExplorer/persistentvolume-csismb-nextexplorer-cache.yaml b/services/NextExplorer/persistentvolume-csismb-nextexplorer-cache.yaml new file mode 100644 index 0000000..8f99d3b --- /dev/null +++ b/services/NextExplorer/persistentvolume-csismb-nextexplorer-cache.yaml @@ -0,0 +1,31 @@ +apiVersion: v1 +kind: PersistentVolume +metadata: + annotations: + pv.kubernetes.io/provisioned-by: smb.csi.k8s.io + name: csismb-nextexplorer-cache +spec: + capacity: + storage: 1Gi + accessModes: + - ReadWriteMany + persistentVolumeReclaimPolicy: Retain + storageClassName: csismb-nextexplorer-cache + mountOptions: + - dir_mode=0777 + - file_mode=0777 + - nobrl + - cache=strict + - mfsymlinks + - noserverino # required to prevent data corruption + csi: + driver: smb.csi.k8s.io + # volumeHandle format: {smb-server-address}#{sub-dir-name}#{share-name} + # make sure this value is unique for every share in the cluster + volumeHandle: 192.168.154.195#nextexplorer#cache + volumeAttributes: + source: //192.168.154.195/K3s.Volumes + subDir: nextexplorer/cache + nodeStageSecretRef: + name: smb-credentials + namespace: nextexplorer diff --git a/services/NextExplorer/persistentvolume-csismb-nextexplorer-config.yaml b/services/NextExplorer/persistentvolume-csismb-nextexplorer-config.yaml new file mode 100644 index 0000000..fb956a5 --- /dev/null +++ b/services/NextExplorer/persistentvolume-csismb-nextexplorer-config.yaml @@ -0,0 +1,31 @@ +apiVersion: v1 +kind: PersistentVolume +metadata: + annotations: + pv.kubernetes.io/provisioned-by: smb.csi.k8s.io + name: csismb-nextexplorer-config +spec: + capacity: + storage: 1Gi + accessModes: + - ReadWriteMany + persistentVolumeReclaimPolicy: Retain + storageClassName: csismb-nextexplorer-config + mountOptions: + - dir_mode=0777 + - file_mode=0777 + - nobrl + - cache=strict + - mfsymlinks + - noserverino # required to prevent data corruption + csi: + driver: smb.csi.k8s.io + # volumeHandle format: {smb-server-address}#{sub-dir-name}#{share-name} + # make sure this value is unique for every share in the cluster + volumeHandle: 192.168.154.195#nextexplorer#config + volumeAttributes: + source: //192.168.154.195/K3s.Volumes + subDir: nextexplorer/config + nodeStageSecretRef: + name: smb-credentials + namespace: nextexplorer diff --git a/services/NextExplorer/persistentvolume-csismb-nextexplorer-storage.yaml b/services/NextExplorer/persistentvolume-csismb-nextexplorer-storage.yaml new file mode 100644 index 0000000..f4e8ad3 --- /dev/null +++ b/services/NextExplorer/persistentvolume-csismb-nextexplorer-storage.yaml @@ -0,0 +1,31 @@ +apiVersion: v1 +kind: PersistentVolume +metadata: + annotations: + pv.kubernetes.io/provisioned-by: smb.csi.k8s.io + name: csismb-nextexplorer-storage +spec: + capacity: + storage: 1Gi + accessModes: + - ReadWriteMany + persistentVolumeReclaimPolicy: Retain + storageClassName: csismb-nextexplorer-storage + mountOptions: + - dir_mode=0777 + - file_mode=0777 + - nobrl + - cache=strict + - mfsymlinks + - noserverino # required to prevent data corruption + csi: + driver: smb.csi.k8s.io + # volumeHandle format: {smb-server-address}#{sub-dir-name}#{share-name} + # make sure this value is unique for every share in the cluster + volumeHandle: 192.168.154.195#nextexplorer#storage + volumeAttributes: + source: //192.168.154.195/K3s.Volumes + subDir: nextexplorer/storage + nodeStageSecretRef: + name: smb-credentials + namespace: nextexplorer diff --git a/services/NextExplorer/persistentvolumeclaim-csismb-nextexplorer-cache.yaml b/services/NextExplorer/persistentvolumeclaim-csismb-nextexplorer-cache.yaml new file mode 100644 index 0000000..6774d61 --- /dev/null +++ b/services/NextExplorer/persistentvolumeclaim-csismb-nextexplorer-cache.yaml @@ -0,0 +1,12 @@ +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: csismb-nextexplorer-cache + namespace: nextexplorer +spec: + accessModes: + - ReadWriteMany + storageClassName: csismb-nextexplorer-cache + resources: + requests: + storage: 1Gi diff --git a/services/NextExplorer/persistentvolumeclaim-csismb-nextexplorer-config.yaml b/services/NextExplorer/persistentvolumeclaim-csismb-nextexplorer-config.yaml new file mode 100644 index 0000000..2b01ded --- /dev/null +++ b/services/NextExplorer/persistentvolumeclaim-csismb-nextexplorer-config.yaml @@ -0,0 +1,12 @@ +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: csismb-nextexplorer-config + namespace: nextexplorer +spec: + accessModes: + - ReadWriteMany + storageClassName: csismb-nextexplorer-config + resources: + requests: + storage: 1Gi diff --git a/services/NextExplorer/persistentvolumeclaim-csismb-nextexplorer-storage.yaml b/services/NextExplorer/persistentvolumeclaim-csismb-nextexplorer-storage.yaml new file mode 100644 index 0000000..9d367da --- /dev/null +++ b/services/NextExplorer/persistentvolumeclaim-csismb-nextexplorer-storage.yaml @@ -0,0 +1,12 @@ +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: csismb-nextexplorer-storage + namespace: nextexplorer +spec: + accessModes: + - ReadWriteMany + storageClassName: csismb-nextexplorer-storage + resources: + requests: + storage: 1Gi diff --git a/services/NextExplorer/sealedsecret-smb-credentials.yaml b/services/NextExplorer/sealedsecret-smb-credentials.yaml new file mode 100644 index 0000000..d6c27f6 --- /dev/null +++ b/services/NextExplorer/sealedsecret-smb-credentials.yaml @@ -0,0 +1,14 @@ +apiVersion: bitnami.com/v1alpha1 +kind: SealedSecret +metadata: + name: smb-credentials + namespace: nextexplorer +spec: + encryptedData: + password: AgAALnoFrXInmYq1KdcLcjbIyVHO+5GL9j/tDC/iOimKeW+ZfSY0EuXQnyDvk3a6F1qLObHTDv7Ur+aMQlvgZtg/FyAoQuzGYtf0DBgdRqFa0xIkz/zPOE0UaT2Tm1UFCm5TSrqWKlxg+T44z9aOJtW9KdWJEstLThmxVGNBZs5/QLrhWmke/WnDtcBz/GSGqS82YXntAl7kbygoG7/y/TNo91dhgPil7kB1ot7cQAsmCpncAFoWKN3Y1xjfs2zdWi8LqfdI5hNvY43AmOEeIirD+am53OgqsjdeQZ2xi+sTH5bHqLcH6Cjvw2HuKLyiDGnqBdAQhK+fZKwJp/GD3mdUWSrBtt6DHoyrYCBL/Sf0v+P7uyDDhdfMi+O+hZb2sEImKJNbzPTznKwVWL2fmCdiE/ga5pk2nW1YVzPCfAE3JywvtY3KJxyRuaybS9LLGYSC71PRJqZFcPs0gNzecb/YliN+Aexm6g+VXG13MN3o31ldLyk0zuo5/IX8m8KU5dWUH1iS1jN1Af1at6nk5hbJzs2GtxtlvV8AlfA74gRar+R4m6PesVFJ53EHQiqzNmr54yw4MF4hJiP9z82K3UWFlXWOY0YmOBwuAyJogxm+4ULcFAGE/4xrV/jpKHBFkowGBOMuIDBx2gLTG7IJjsRmgLJfhzOIHoVdvkuOvm69JqJIdPkOJTACVLJgZ07wcXYHdFgennlKwEY2r9lIZVdu + username: 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 + template: + metadata: + name: smb-credentials + namespace: nextexplorer + type: Opaque diff --git a/services/NextExplorer/service-nextexplorer.yaml b/services/NextExplorer/service-nextexplorer.yaml new file mode 100644 index 0000000..7d09444 --- /dev/null +++ b/services/NextExplorer/service-nextexplorer.yaml @@ -0,0 +1,12 @@ +apiVersion: v1 +kind: Service +metadata: + name: nextexplorer + namespace: nextexplorer +spec: + ports: + - protocol: TCP + name: web + port: 3000 + selector: + app: nextexplorer