feat(k8s): add K8s manifests for all homelab services

traefik, gitea, adguard, nextcloud, errorpages, homepages, uptime-kuma, kener, checkmk, headscale, dockmon, metube, downtify, portainer, netronome, userbot Includes Helm values, deployments, services, ingress routes, configmaps, secrets (placeholders), postgres statefulsets, kustomize overlays, and Traefik dynamic configuration.
2026-06-08 10:51:04 +02:00
parent f3d04e935c
commit 36922a177c
60 changed files with 2596 additions and 5 deletions
@@ -0,0 +1,115 @@
+# Nextcloud
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: nextcloud-dev
+  namespace: nextcloud
+spec:
+  entryPoints:
+    - websecure
+  routes:
+  - match: Host(`nextcloud.gigaforust.internal`)
+    kind: Rule
+    middlewares:
+    - name: nextcloud-chain@file
+    services:
+    - name: nextcloud-apache
+      port: 11000
+  tls:
+    secretName: local-tls
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: nextcloud-local
+  namespace: nextcloud
+spec:
+  entryPoints:
+    - websecure
+  routes:
+  - match: Host(`nextcloud.workstation.internal`)
+    kind: Rule
+    middlewares:
+    - name: nextcloud-chain@file
+    services:
+    - name: nextcloud-apache
+      port: 11000
+  tls:
+    secretName: local-tls
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: nextcloud-prod
+  namespace: nextcloud
+spec:
+  entryPoints:
+    - websecure
+  routes:
+  - match: Host(`nextcloud.forust.xyz`)
+    kind: Rule
+    middlewares:
+    - name: nextcloud-chain@file
+    services:
+    - name: nextcloud-apache
+      port: 11000
+  tls:
+    {}
+---
+# Nextcloud AIO
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: naio-dev
+  namespace: nextcloud
+spec:
+  entryPoints:
+    - websecure
+  routes:
+  - match: Host(`naio.gigaforust.internal`)
+    kind: Rule
+    services:
+    - name: nextcloud-aio
+      port: 8080
+      scheme: https
+      serversTransport: insecureTransport@file
+  tls:
+    secretName: local-tls
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: naio-local
+  namespace: nextcloud
+spec:
+  entryPoints:
+    - websecure
+  routes:
+  - match: Host(`naio.workstation.internal`)
+    kind: Rule
+    services:
+    - name: nextcloud-aio
+      port: 8080
+      scheme: https
+      serversTransport: insecureTransport@file
+  tls:
+    secretName: local-tls
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: naio-prod
+  namespace: nextcloud
+spec:
+  entryPoints:
+    - websecure
+  routes:
+  - match: Host(`naio.forust.xyz`)
+    kind: Rule
+    services:
+    - name: nextcloud-aio
+      port: 8080
+      scheme: https
+      serversTransport: insecureTransport@file
+  tls:
+    {}