Merge branch 'main' of ssh://gitssh.forust.xyz:2221/forust/homelab

_collect_event_times re-clicked every a.event-link and waited ~3s per
event for a visible span.data, but the calendar embeds all times in
div.event-full-info[data-event-full-info-id] span.data already. The old
loop took ~109s for 25 events and collected 0 (original divs stay
sf-hidden), effectively hanging /diary. Now a single evaluate reads all
times (~3.7s), parsing HH:MM from p.date span.data.

edu_master/.env.example

@@ -9,5 +9,6 @@ WEBINAR_CHECK_INTERVAL=60
 REDIS_HOST=redis
 REDIS_PORT=6379
 PLAYWRIGHT_WS=ws://playwright-service:3000/ws
+TZ=Europe/Kyiv
 WEBINAR_TELEGRAM_TOKEN=your_telegram_bot_token_here
 WEBINAR_ADMIN_ID=123456789

edu_master/k8s/restore-seed-job.yaml.example

@@ -1,17 +1,17 @@
-# Разовый Job для переноса состояния redis из docker compose в k8s (maintenance window).
-# Файл .example -> deploy-пайплайн его не применяет (маска *.example.yaml).
+# One-time Job to migrate redis state from docker compose to k8s (maintenance window).
+# The .example file is not applied by the deploy pipeline (mask *.example.yaml).
 #
 # Runbook:
-#   1. docker compose -f <repo>/edu_master/compose.yaml stop        # SIGTERM -> redis сбросит dump.rdb
+#   1. docker compose -f <repo>/edu_master/compose.yaml stop        # SIGTERM -> redis will flush dump.rdb
 #   2. docker run --rm -v edu_master_redis-data:/data \
 #        -v /tmp/edu-master-backup:/backup \
 #        redis:alpine sh -c "cp /data/dump.rdb /backup/ && ls -la /backup"
 #   3. kubectl apply -f edu_master/k8s/namespace.yaml
-#   4. kubectl apply -f <только PVC из redis.yaml>                  # seed строго ДО старта redis-пода
+#   4. kubectl apply -f <only the PVC from redis.yaml>              # seed must come BEFORE redis pod starts
 #   5. kubectl apply -f edu_master/k8s/restore-seed-job.yaml.example
 #      kubectl wait --for=condition=complete job/redis-restore-seed -n edu-master --timeout=120s
 #   6. kubectl delete job redis-restore-seed -n edu-master
-#   7. kubectl apply -f edu_master/k8s/ -R                           # остальные манифесты
+#   7. kubectl apply -f edu_master/k8s/ -R                           # apply remaining manifests
 apiVersion: batch/v1
 kind: Job
 metadata:
@@ -47,4 +47,4 @@ spec:
         - name: backup
           hostPath:
             path: /tmp/edu-master-backup
-            type: DirectoryOrCreate
+            type: DirectoryOrCreate

edu_master/k8s/secrets.yaml.example

@@ -5,7 +5,7 @@ metadata:
   namespace: edu-master
 type: Opaque
 stringData:
-  # PHPSESSID keeper
+  # Session keeper credentials
   KEEPER_LOGIN: ""
   KEEPER_PASSWORD: ""
   KEEPER_INTERVAL: "10"
@@ -23,4 +23,5 @@ stringData:
   WEBINAR_CHECK_INTERVAL: "60"
   # Database
   REDIS_HOST: "redis"
-  REDIS_PORT: "6379"
+  REDIS_PORT: "6379"
+  TZ: "Europe/Kyiv"

edu_master/k8s/webinar-checker.yaml

@@ -15,9 +15,9 @@ spec:
       labels:
         app: edu-master-webinar-checker
     spec:
+      # Enforces dependency order like compose depends_on:
+      # redis healthy -> session-keeper healthy (EXISTS EDU_PHPSESSID) -> playwright started
       initContainers:
-        # Держит порядок зависимостей как в compose depends_on:
-        # redis healthy -> session-keeper healthy (EXISTS EDU_PHPSESSID) -> playwright started
         - name: wait-deps
           image: redis:alpine
           command:
@@ -50,6 +50,9 @@ spec:
           envFrom:
             - secretRef:
                 name: edu-master-secrets
+          env:
+            - name: TZ
+              value: "Europe/Kyiv"
           resources:
             requests:
               cpu: 25m

esp32/ingress.yaml

@@ -0,0 +1,95 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: esp32
+  labels:
+    app.kubernetes.io/name: esp32
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: esp
+  namespace: esp32
+  labels:
+    app.kubernetes.io/name: esp32
+spec:
+  type: ClusterIP
+  ports:
+    - name: http
+      port: 80
+      targetPort: 80
+---
+apiVersion: v1
+kind: Endpoints
+metadata:
+  name: esp
+  namespace: esp32
+  labels:
+    app.kubernetes.io/name: esp32
+subsets:
+  - addresses:
+      - ip: 192.168.88.88
+    ports:
+      - name: http
+        port: 80
+---
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: strip-esp-headers
+  namespace: esp32
+  labels:
+    app.kubernetes.io/name: esp32
+spec:
+  headers:
+    customRequestHeaders:
+      Cookie: ""
+      Referer: ""
+      Origin: ""
+      User-Agent: ""
+      Accept: ""
+      Accept-Encoding: ""
+      Accept-Language: ""
+      Upgrade-Insecure-Requests: ""
+      Cache-Control: ""
+      Pragma: ""
+      Connection: ""
+      Te: ""
+      Sec-Fetch-Dest: ""
+      Sec-Fetch-Mode: ""
+      Sec-Fetch-Site: ""
+      Sec-Fetch-User: ""
+      Sec-CH-UA: ""
+      Sec-CH-UA-Mobile: ""
+      Sec-CH-UA-Platform: ""
+      X-Forwarded-For: ""
+      X-Forwarded-Host: ""
+      X-Forwarded-Port: ""
+      X-Forwarded-Proto: ""
+      X-Forwarded-Server: ""
+      Forwarded: ""
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: esp
+  namespace: esp32
+  labels:
+    app.kubernetes.io/name: esp32
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`esp.forust.xyz`)
+      kind: Rule
+      middlewares:
+        - name: strip-esp-headers
+          namespace: esp32
+      services:
+        - kind: Service
+          name: esp
+          namespace: esp32
+          port: 80
+  tls:
+    certResolver: letsencrypt