Delete commit history along with sensitive data

services/Lighttpd/configMap_lighttpd.yml

@@ -0,0 +1,64 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: configmap-lighttpd-conf
+data:
+  lighttpd.conf: |
+    server.modules = (
+        "mod_access",
+        "mod_alias",
+        "mod_compress",
+        "mod_redirect",
+        "mod_rewrite",
+    )
+
+    server.document-root        = "/var/www/html"
+    server.upload-dirs          = ( "/var/cache/lighttpd/uploads" )
+    server.errorlog             = "/var/log/lighttpd/error.log"
+    server.pid-file             = "/var/run/lighttpd.pid"
+    server.username             = "www-data"
+    server.groupname            = "www-data"
+    server.port                 = 8080
+
+    index-file.names            = ( "index.php", "index.html", "index.lighttpd.html" )
+    url.access-deny             = ( "~", ".inc" )
+    static-file.exclude-extensions = ( ".php", ".pl", ".fcgi" )
+
+    compress.cache-dir          = "/var/cache/lighttpd/compress/"
+    compress.filetype           = ( "application/javascript", "text/css", "text/html", "text/plain" )
+
+    include_shell "/usr/share/lighttpd/create-mime.assign.pl"
+    include_shell "/usr/share/lighttpd/include-conf-enabled.pl"
+    include_shell "cat /etc/lighttpd/vhosts.d/*.conf"
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: configmap-lighttpd-vhosts
+data:
+  bessems.com.conf: |
+    $HTTP["host"] =~ "^bessems\.(com|eu)$" {
+      server.document-root = "/var/www/bessems.com/"
+    }
+  gabaldon.eu.conf: |
+    $HTTP["host"] =~ "^gabaldon\.(eu|nl)$" {
+      server.document-root = "/var/www/gabaldon.eu/"
+    }
+  sn.itch.fyi.conf: |
+    $HTTP["host"] == "sn.itch.fyi" {
+      server.document-root = "/var/www/sn.itch.fyi/"
+
+      index-file.names += ("/_h5ai/public/index.php")
+    }
+  spamasaurus.com.conf: |
+    $HTTP["host"] == "spamasaurus.com" {
+      server.document-root = "/var/www/spamasaurus.com/public"
+     }
+  sw.itch.fyi.conf: |
+    $HTTP["host"] == "sw.itch.fyi" {
+      server.document-root = "/var/www/sw.itch.fyi/"
+
+      url.rewrite-once = (
+        "^/api\?(.*)" => "index.php?page=newznabapi&$1"
+      )
+    }

services/Lighttpd/cronJob-Spotweb.yml

@@ -0,0 +1,26 @@
+apiVersion: batch/v1beta1
+kind: CronJob
+metadata:
+  name: cronjob-spotweb-retrievearticles
+spec:
+  schedule: "0 * * * *"
+  successfulJobsHistoryLimit: 1
+  jobTemplate:
+    spec:
+      template:
+        spec:
+          containers:
+          - name: php-retrievearticles
+            image: php:7.4-cli
+            workingDir: /var/www/sw.itch.fyi
+            args:
+            - php
+            - /var/www/sw.itch.fyi/retrieve.php
+            volumeMounts:
+            - name: flexvolsmb-lighttpd-websites
+              mountPath: /var/www/
+          volumes:
+          - name: flexvolsmb-lighttpd-websites
+            persistentVolumeClaim:
+              claimName: flexvolsmb-lighttpd-websites
+          restartPolicy: OnFailure

services/Lighttpd/deploy-Lighttpd.yml

@@ -0,0 +1,137 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: lighttpd
+spec:
+  ports:
+    - protocol: TCP
+      name: web
+      port: 8080
+  selector:
+    app: lighttpd
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: lighttpd
+  labels:
+    app: lighttpd
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: lighttpd
+  template:
+    metadata:
+      labels:
+        app: lighttpd
+    spec:
+      containers:
+      - name: lighttpd-php-pwsh
+        image: djpbessems/lighttpd-php-powershell
+        ports:
+          - name: web
+            containerPort: 8080
+        volumeMounts:
+        - name: configmap-lighttpd-conf
+          mountPath: /etc/lighttpd/lighttpd.conf
+          subPath: lighttpd.conf
+        - name: configmap-lighttpd-vhosts
+          mountPath: /etc/lighttpd/vhosts.d
+        - name: flexvolsmb-lighttpd-data
+          mountPath: /data/scripts
+        - name: flexvolsmb-lighttpd-websites
+          mountPath: /var/www/
+      volumes:
+      - name: configmap-lighttpd-conf
+        configMap:
+          name: configmap-lighttpd-conf
+      - name: configmap-lighttpd-vhosts
+        configMap:
+          name: configmap-lighttpd-vhosts
+      - name: flexvolsmb-lighttpd-data
+        persistentVolumeClaim:
+          claimName: flexvolsmb-lighttpd-data
+      - name: flexvolsmb-lighttpd-websites
+        persistentVolumeClaim:
+          claimName: flexvolsmb-lighttpd-websites
+---
+apiVersion: traefik.containo.us/v1alpha1
+kind: IngressRoute
+metadata:
+  name: lighttpd
+spec:
+  entryPoints:
+    - websecure
+  routes:
+  - match: Host(`bessems.com`) || Host(`bessems.eu`) || Host(`gabaldon.eu`) || Host(`gabaldon.nl`) || Host(`sn.itch.fyi`) || Host(`sw.itch.fyi`) || Host(`spamasaurus.com`)
+    kind: Rule
+    services:
+    - name: lighttpd
+      port: 8080
+    middlewares:
+    - name: security-headers@file
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: flexvolsmb-lighttpd-data
+spec:
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  storageClassName: flexvolsmb-lighttpd-data
+  flexVolume:
+    driver: mount/smb
+    secretRef:
+      name: smb-secret
+    options:
+      opts: domain=bessems.eu,file_mode=0777,dir_mode=0777,iocharset=utf8
+      server: 192.168.11.225
+      share: /K3s.Volumes/lighttpd/data
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: flexvolsmb-lighttpd-websites
+spec:
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  storageClassName: flexvolsmb-lighttpd-websites
+  flexVolume:
+    driver: mount/smb
+    secretRef:
+      name: smb-secret
+    options:
+      opts: domain=bessems.eu,file_mode=0777,dir_mode=0777,iocharset=utf8,nobrl
+      server: 192.168.11.225
+      share: /K3s.Volumes/lighttpd/websites
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: flexvolsmb-lighttpd-data
+  namespace: default
+spec:
+  accessModes:
+    - ReadWriteMany
+  storageClassName: flexvolsmb-lighttpd-data
+  resources:
+    requests:
+      storage: 1Gi
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: flexvolsmb-lighttpd-websites
+  namespace: default
+spec:
+  accessModes:
+    - ReadWriteMany
+  storageClassName: flexvolsmb-lighttpd-websites
+  resources:
+    requests:
+      storage: 1Gi