Merge branch 'main' of ssh://gitssh.forust.xyz:2221/forust/homelab

removes automatic redeploy on push to main; deploy now runs only on
explicit manual trigger

.gitea/workflows/deploy.yaml

@@ -1,9 +1,6 @@
 name: deploy
 
 on:
-  push:
-    branches:
-      - main
   workflow_dispatch:
 
 concurrency:

.github/workflows/deploy.yaml

@@ -1,9 +1,6 @@
 name: deploy
 
 on:
-  push:
-    branches:
-      - main
   workflow_dispatch:
 
 concurrency:

esp32/ingress.yaml

@@ -0,0 +1,95 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: esp32
+  labels:
+    app.kubernetes.io/name: esp32
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: esp
+  namespace: esp32
+  labels:
+    app.kubernetes.io/name: esp32
+spec:
+  type: ClusterIP
+  ports:
+    - name: http
+      port: 80
+      targetPort: 80
+---
+apiVersion: v1
+kind: Endpoints
+metadata:
+  name: esp
+  namespace: esp32
+  labels:
+    app.kubernetes.io/name: esp32
+subsets:
+  - addresses:
+      - ip: 192.168.88.88
+    ports:
+      - name: http
+        port: 80
+---
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: strip-esp-headers
+  namespace: esp32
+  labels:
+    app.kubernetes.io/name: esp32
+spec:
+  headers:
+    customRequestHeaders:
+      Cookie: ""
+      Referer: ""
+      Origin: ""
+      User-Agent: ""
+      Accept: ""
+      Accept-Encoding: ""
+      Accept-Language: ""
+      Upgrade-Insecure-Requests: ""
+      Cache-Control: ""
+      Pragma: ""
+      Connection: ""
+      Te: ""
+      Sec-Fetch-Dest: ""
+      Sec-Fetch-Mode: ""
+      Sec-Fetch-Site: ""
+      Sec-Fetch-User: ""
+      Sec-CH-UA: ""
+      Sec-CH-UA-Mobile: ""
+      Sec-CH-UA-Platform: ""
+      X-Forwarded-For: ""
+      X-Forwarded-Host: ""
+      X-Forwarded-Port: ""
+      X-Forwarded-Proto: ""
+      X-Forwarded-Server: ""
+      Forwarded: ""
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: esp
+  namespace: esp32
+  labels:
+    app.kubernetes.io/name: esp32
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`esp.forust.xyz`)
+      kind: Rule
+      middlewares:
+        - name: strip-esp-headers
+          namespace: esp32
+      services:
+        - kind: Service
+          name: esp
+          namespace: esp32
+          port: 80
+  tls:
+    certResolver: letsencrypt