website

bootstrap/imagerepositories/imagerepository-michaelthomson.yaml

@@ -0,0 +1,10 @@
+apiVersion: image.toolkit.fluxcd.io/v1beta2
+kind: ImageRepository
+metadata:
+  name: michaelthomson
+  namespace: flux-system
+spec:
+  image: gitea.michaelthomson.dev/mthomson/michaelthomson
+  interval: 5m
+  secretRef:
+    name: gitea-registry-auth

bootstrap/namespaces/namespace-michaelthomson.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: michaelthomson

bootstrap/secrets/gitea-registry-auth.yaml

@@ -0,0 +1,15 @@
+kind: SealedSecret
+apiVersion: bitnami.com/v1alpha1
+metadata:
+  name: gitea-registry-auth
+  namespace: flux-system
+  creationTimestamp:
+spec:
+  template:
+    metadata:
+      name: gitea-registry-auth
+      namespace: flux-system
+      creationTimestamp:
+    type: kubernetes.io/dockerconfigjson
+  encryptedData:
+    ".dockerconfigjson": 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

michaelthomson/deployment.yaml

@@ -0,0 +1,21 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: michaelthomson
+  namespace: michaelthomson
+spec:
+  selector:
+    matchLabels:
+      app: michaelthomson
+  template:
+    metadata:
+      labels:
+        app: michaelthomson
+    spec:
+      containers:
+      - name: michaelthomson
+        image: gitea.michaelthomson.dev/mthomson/michaelthomson:latest
+        ports:
+        - containerPort: 3000
+          name: http
+          protocol: TCP

michaelthomson/dns-endpoint.yaml

@@ -0,0 +1,15 @@
+apiVersion: externaldns.k8s.io/v1alpha1
+kind: DNSEndpoint
+metadata:
+  name: michaelthomson.dev
+  namespace: michaelthomson
+spec:
+  endpoints:
+  - dnsName: michaelthomson.dev
+    recordTTL: 180
+    recordType: A
+    targets:
+      - 142.126.163.72
+    providerSpecific:
+      - name: external-dns.alpha.kubernetes.io/cloudflare-proxied
+        value: "true"

michaelthomson/ingress.yaml

@@ -0,0 +1,24 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: michaelthomson
+  namespace: michaelthomson
+  annotations:
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+    traefik.ingress.kubernetes.io/router.tls: "true"
+spec:
+  rules:
+  - host: michaelthomson.dev
+    http:
+      paths:
+      - pathType: ImplementationSpecific
+        path: /
+        backend:
+          service:
+            name: michaelthomson
+            port: 
+              name: http
+  tls:
+    - hosts:
+        - michaelthomson.dev
+      secretName: letsencrypt-wildcard-cert-michaelthomson.dev

michaelthomson/service.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: michaelthomson
+  namespace: michaelthomson
+spec:
+  selector:
+    app: michaelthomson
+  ports:
+  - port: 80
+    targetPort: http
+    name: http