feat(k8s): add K8s manifests for all homelab services

traefik, gitea, adguard, nextcloud, errorpages, homepages,
uptime-kuma, kener, checkmk, headscale, dockmon, metube,
downtify, portainer, netronome, userbot

Includes Helm values, deployments, services, ingress routes,
configmaps, secrets (placeholders), postgres statefulsets,
kustomize overlays, and Traefik dynamic configuration.

homepages/k8s/homepages.yaml

@@ -0,0 +1,65 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: forust-homepage-service
+  namespace: homepages
+spec:
+  selector:
+    app: forust-homepage
+  ports:
+  - port: 80
+    targetPort: 80
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: forust-homepage-deployment
+  namespace: homepages
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: forust-homepage
+  template:
+    metadata:
+      labels:
+        app: forust-homepage
+    spec:
+      containers:
+      - name: forust-homepage
+        image: gcr.forust.xyz/forust/forust-homepage:latest
+        ports:
+        - containerPort: 80
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: xdfnx-homepage-service
+  namespace: homepages
+spec:
+  selector:
+    app: xdfnx-homepage
+  ports:
+  - port: 80
+    targetPort: 80
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: xdfnx-homepage-deployment
+  namespace: homepages
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: xdfnx-homepage
+  template:
+    metadata:
+      labels:
+        app: xdfnx-homepage
+    spec:
+      containers:
+      - name: xdfnx-homepage
+        image: gcr.forust.xyz/forust/xdfnx-homepage:latest
+        ports:
+        - containerPort: 80

homepages/k8s/ingress.yaml

@@ -0,0 +1,101 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: forust-homepage-prod
+  namespace: homepages
+spec:
+  entryPoints:
+    - websecure
+  routes:
+  - match: Host(`forust.xyz`)
+    kind: Rule
+    services:
+    - name: forust-homepage-service
+      port: 80
+  tls:
+    {}
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: forust-homepage-local
+  namespace: homepages
+spec:
+  entryPoints:
+    - websecure
+  routes:
+  - match: Host(`landing.workstation.internal`)
+    kind: Rule
+    services:
+    - name: forust-homepage-service
+      port: 80
+  tls:
+    secretName: local-tls
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: forust-homepage-dev
+  namespace: homepages
+spec:
+  entryPoints:
+    - websecure
+  routes:
+  - match: Host(`landing.gigaforust.internal`)
+    kind: Rule
+    services:
+    - name: forust-homepage-service
+      port: 80
+  tls:
+    secretName: local-tls
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: xdfnx-homepage-prod
+  namespace: homepages
+spec:
+  entryPoints:
+    - websecure
+  routes:
+  - match: Host(`xdfnx.cfd`)
+    kind: Rule
+    services:
+    - name: xdfnx-homepage-service
+      port: 80
+  tls:
+    {}
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: xdfnx-homepage-local
+  namespace: homepages
+spec:
+  entryPoints:
+    - websecure
+  routes:
+  - match: Host(`xdfnx.workstation.internal`)
+    kind: Rule
+    services:
+    - name: xdfnx-homepage-service
+      port: 80
+  tls:
+    secretName: local-tls
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: xdfnx-homepage-dev
+  namespace: homepages
+spec:
+  entryPoints:
+    - websecure
+  routes:
+  - match: Host(`xdfnx.gigaforust.internal`)
+    kind: Rule
+    services:
+    - name: xdfnx-homepage-service
+      port: 80
+  tls:
+    secretName: local-tls

homepages/k8s/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: homepages