feat: add n8n service and ingress

Reviewed-on: #105

deployments/apps/khalisio/deployment.yaml

@@ -20,6 +20,10 @@ spec:
       labels:
         app: khalisio
     spec:
+      imagePullSecrets:
+        - name: ghcr-pull-secret
+      nodeSelector:
+        kubernetes.io/arch: amd64
       containers:
         - name: web
           image: ghcr.io/richard-callis/portfolio:latest

deployments/apps/n8n/ingress.yaml

@@ -0,0 +1,24 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: n8n
+  namespace: apps
+  annotations:
+    khalisio.io/crowdsec-bouncer: "true"
+    khalisio.io/authentik-policy: "policy:n8n"
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+spec:
+  ingressClassName: traefik
+  tls:
+    - hosts: [n8n.khalisio.com]
+      secretName: n8n-tls
+  rules:
+    - host: n8n.khalisio.com
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: n8n
+                port: { number: 80 }

deployments/apps/n8n/service.yaml

@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: n8n
+  namespace: apps
+spec:
+  selector:
+    app: n8n
+  ports:
+    - name: http
+      port: 80
+      targetPort: 5678
+  type: ClusterIP

deployments/media/transmission/configmap.yaml

@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: transmission-config
+  namespace: media
+data:
+  peer-port: "0"

deployments/media/transmission/deployment.yaml

@@ -0,0 +1,85 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: transmission
+  namespace: media
+  labels:
+    app: transmission
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: transmission
+  template:
+    metadata:
+      labels:
+        app: transmission
+    spec:
+      containers:
+        - name: gluetun
+          image: ghcr.io/qmcgaw/gluetun:v3.40.0
+          env:
+            - name: OPENVPN_PROVIDER
+              value: "PROTONVPN"
+            - name: OPENVPN_USERNAME
+              valueFrom:
+                secretKeyRef:
+                  name: transmission-vpn-secret
+                  key: username
+            - name: OPENVPN_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: transmission-vpn-secret
+                  key: password
+            - name: SERVER_COUNTRIES
+              value: "US"
+            - name: FIREWALL_ENABLED
+              value: "off"
+            - name: DOT_ENABLED
+              value: "true"
+          ports:
+            - name: http
+              containerPort: 8000
+          volumeMounts:
+            - name: config
+              mountPath: /config
+        - name: transmission
+          image: lscr.io/linuxserver/transmission:latest
+          env:
+            - name: PUID
+              value: "1000"
+            - name: PGID
+              value: "1000"
+            - name: TZ
+              value: "America/New_York"
+            - name: USER
+              value: "admin"
+            - name: PASS
+              value: "admin"
+            - name: TRANSMISSION_WEB_HOME
+              value: "/combui"
+            - name: PEER_PORT
+              valueFrom:
+                configMapKeyRef:
+                  name: transmission-config
+                  key: peer-port
+          ports:
+            - name: http
+              containerPort: 9091
+            - name: peer
+              containerPort: 0
+              protocol: TCP
+            - name: peer-udp
+              containerPort: 0
+              protocol: UDP
+          volumeMounts:
+            - name: config
+              mountPath: /config
+            - name: downloads
+              mountPath: /downloads
+      volumes:
+        - name: config
+          emptyDir: {}
+        - name: downloads
+          persistentVolumeClaim:
+            claimName: media-data

deployments/media/transmission/ingress.yaml

@@ -0,0 +1,20 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: transmission
+  namespace: media
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+spec:
+  rules:
+    - host: transmission.khalis.corp
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: transmission
+                port:
+                  name: http

deployments/media/transmission/service.yaml

@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: transmission
+  namespace: media
+spec:
+  selector:
+    app: transmission
+  ports:
+    - name: http
+      port: 9091
+      targetPort: http
+  type: ClusterIP