Resource sizing;Adding authentication to website subfolder;Adding quicktips

README.md

@@ -354,3 +354,16 @@ sed -e 's|stun://<ipaddress>|stun://<ipaddress>:3479|' -i /etc/persistent/cfg/mg
 
       
       kubectl apply -f system/InotifyMaxWatchers/daemonSet-InotifyMaxWatchers.yml
+* Debug DNS lookups within the cluster:
+
+      
+      kubectl run -it --rm dnsutils --restart=Never --image=gcr.io/kubernetes-e2e-test-images/dnsutils -- nslookup [-debug] [fqdn]
+  or
+      
+      kubectl run -it --rm busybox --restart=Never --image=busybox:1.28 -- nslookup api.github.com [-debug] [fqdn]
+* Delete namespaces stuck in `Terminating` state:
+
+      
+      kubectl get namespace <name> -o json | jq -j '.spec.finalizers=null' > tmp.json
+      kubectl replace --raw "/api/v1/namespaces/<name>/finalize" -f ./tmp.json
+      rm ./tmp.json

services/Lighttpd/configMap-Lighttpd.yml

@@ -7,6 +7,8 @@ data:
     server.modules = (
         "mod_access",
         "mod_alias",
+        "mod_auth",
+        "mod_authn_file",
         "mod_compress",
         "mod_redirect",
         "mod_rewrite",
@@ -20,6 +22,9 @@ data:
     server.groupname            = "www-data"
     server.port                 = 8080
 
+    auth.backend = "plain"
+    auth.backend.plain.userfile = "/etc/lighttpd/.htpasswd"
+
     index-file.names            = ( "index.php", "index.html", "index.lighttpd.html" )
     url.access-deny             = ( "~", ".inc" )
     static-file.exclude-extensions = ( ".php", ".pl", ".fcgi" )
@@ -30,6 +35,8 @@ data:
     include_shell "/usr/share/lighttpd/create-mime.assign.pl"
     include_shell "/usr/share/lighttpd/include-conf-enabled.pl"
     include_shell "cat /etc/lighttpd/vhosts.d/*.conf"
+  .htpasswd: |
+    readaccess:7eds8PvDwgkWvFZRnyKpTUDTzgi87mh4
 ---
 apiVersion: v1
 kind: ConfigMap
@@ -50,6 +57,15 @@ data:
 
       index-file.names += ("/_h5ai/public/index.php")
     }
+    $HTTP["url"] =~ "^/repository|^/Repository" {
+      auth.require = (
+        "" => (
+          "method"  => "basic",
+          "realm"   => "Restricted access",
+          "require" => "user=readaccess"
+        )
+      )
+    }
   spamasaurus.com.conf: |
     $HTTP["host"] == "spamasaurus.com" {
       server.document-root = "/var/www/spamasaurus.com/public"

services/Lighttpd/deploy-Lighttpd.yml

@@ -36,6 +36,9 @@ spec:
         - name: configmap-lighttpd-conf
           mountPath: /etc/lighttpd/lighttpd.conf
           subPath: lighttpd.conf
+        - name: configmap-lighttpd-conf
+          mountPath: /etc/lighttpd/.htpasswd
+          subPath: .htpasswd
         - name: configmap-lighttpd-vhosts
           mountPath: /etc/lighttpd/vhosts.d
         - name: flexvolsmb-lighttpd-data

services/PVR/deploy-Plex.yml

@@ -66,7 +66,7 @@ spec:
           claimName: flexvolsmb-pvr-movies
       - name: emptydir-plex-transcode
         emptyDir:
-          medium: Memory
+#          medium: Memory
 ---
 apiVersion: traefik.containo.us/v1alpha1
 kind: IngressRoute

services/Unifi/deploy-Unifi.yml

@@ -123,4 +123,4 @@ spec:
   storageClassName: longhorn
   resources:
     requests:
-      storage: 1Gi
+      storage: 2Gi