Reset git history for making manifests public

2026-05-31 22:14:43 +02:00
commit 0140810d60
411 changed files with 42163 additions and 0 deletions
--- a/README.md
+++ b/README.md
@@ -0,0 +1,158 @@
+# Kubernetes Manifests Repository
+
+This repository contains Kubernetes manifest files for a comprehensive self-hosted platform running 40+ applications across various categories. This infrastructure was created for the migration from Docker to Kubernetes (K3S).
+
+## Overview
+
+This infrastructure provides a complete solution for:
+- Media management and streaming
+- AI/ML workloads
+- Development and CI/CD workflows
+- Productivity and collaboration tools
+- Network and system administration
+- Storage and backup solutions
+
+All applications are managed using GitOps principles with ArgoCD and utilize cert-manager for automated TLS certificate management.
+
+## Repository Structure
+
+The repository is organized with one directory per application, containing all necessary Kubernetes resources:
+
+```
+├── argocd/              # GitOps continuous deployment
+├── cert-manager/        # TLS certificate management
+├── metallb/             # Load balancer
+├── kubevip/             # High availability
+├── longhorn/            # Distributed storage
+├── envoy-gateway/       # Kubernetes Gateway API configuration
+├── infisical/           # Secrets management
+├── authentik/           # Identity provider and SSO
+├── it-tools/            # IT utilities
+├── jellyfin/            # Media server
+├── seerr/               # Media request management
+├── immich/              # Photo and video management
+├── minecraft/           # Game servers
+├── gitea/               # Git service
+├── jenkins/             # CI/CD automation
+├── n8n/                 # Workflow automation
+├── react-resume/        # Resume builder application
+├── passbolt/            # Password manager
+├── wikijs/              # Documentation wiki
+├── zipline/             # File sharing
+├── gotify/              # Push notification server
+├── ntfy/                # Push notifications
+├── bentopdf/            # PDF conversion
+├── excalidraw/          # Whiteboard / diagramming
+├── searxng/             # Privacy-respecting search engine
+├── uptime-kuma/         # Uptime monitoring
+├── shelfmark/           # Bookmarks manager
+├── openwebui/           # Web UI for AI models
+├── ollama/              # Local LLM runner
+├── comfyui/             # Stable Diffusion workflow UI
+├── minio-aistor/        # S3-compatible object storage
+├── databasus/           # Database management
+├── netbootxyz/          # Network boot service
+├── technitium/          # DNS server
+├── azure-ddns-python/   # Dynamic DNS updater
+├── victoria-metrics/    # Metrics, monitoring and logging
+├── proxmox/             # Virtualization platform
+├── unifi/               # Network controller
+├── truenas/             # Storage system
+├── deprecated/          # No longer active configurations (kept for reference)
+└── future-plans/        # Configurations planned for future use
+```
+
+## Categories
+
+### Core Infrastructure
+- **ArgoCD**: GitOps continuous deployment and application management
+- **cert-manager**: Automated TLS certificate provisioning using Azure DNS
+- **MetalLB**: Bare-metal load balancer
+- **KubeVIP**: High-availability control plane
+- **Longhorn**: Distributed block storage
+- **Envoy Gateway**: Kubernetes Gateway API implementation
+- **Infisical**: Secrets management platform
+- **Authentik**: Identity provider and SSO
+
+### Media & Entertainment
+- **Jellyfin**: Media streaming server
+- **Seerr**: Media request and discovery
+- **Immich**: Self-hosted photo and video management
+- **Minecraft**: Game servers (ATM-10, Homestead and Stacia 2 Expert modpacks)
+
+### AI & Machine Learning
+- **Ollama**: Local LLM runner
+- **Open WebUI**: Web interface for AI models
+- **ComfyUI**: Stable Diffusion workflow UI
+
+### Development & CI/CD
+- **Gitea**: Self-hosted Git service with Actions runner
+- **Jenkins**: Automation server for CI/CD pipelines
+- **n8n**: Workflow automation platform
+- **MinIO AIStor**: S3-compatible object storage
+
+### Productivity & Collaboration
+- **React-Resume**: Resume builder with MinIO and PostgreSQL
+- **Passbolt**: Team password manager
+- **Wiki.js**: Modern documentation platform
+- **Zipline**: File sharing and screenshot service
+- **Gotify**: Push notification server with REST API and WebSocket support
+- **Ntfy**: Push notification service
+- **BentoPDF**: PDF conversion service
+- **Excalidraw**: Online whiteboard and diagramming tool
+- **SearXNG**: Privacy-respecting metasearch engine
+- **Shelfmark**: Bookmarks manager
+- **Databasus**: Database management UI
+- **Uptime Kuma**: Uptime and status monitoring
+
+### Administration & Monitoring
+- **IT-Tools**: Collection of useful IT utilities
+- **Technitium**: DNS server with web interface
+- **Azure DDNS Python**: Dynamic DNS updater for Azure DNS
+- **NetbootXYZ**: Network boot service for OS installation
+- **VictoriaMetrics**: Metrics collection, monitoring and logging stack (includes VictoriaLogs)
+
+### External Service Integration
+- **Proxmox**: Virtualization platform integration
+- **UniFi**: Network controller integration
+- **TrueNAS**: Storage system integration
+
+## Common Patterns
+
+### Networking
+- **Ingress Controller**: Envoy Gateway (Kubernetes Gateway API)
+- **TLS**: Automated certificate management via cert-manager with Azure DNS validation
+- **Load Balancer**: MetalLB for external access
+
+### Storage
+- **Persistent Storage**: Longhorn distributed storage
+- **StatefulSets**: Used for applications requiring persistent state
+- **PersistentVolumeClaims**: Separate PVCs for different data types (config, data, backups)
+- **Static Volumes**: `longhorn-static` StorageClass used for manually pre-provisioned volumes
+
+### Security
+- **Secrets Management**: Infisical operator syncs secrets into Kubernetes as native Secrets
+- **TLS**: All web interfaces secured with HTTPS
+- **SSO**: Authentik for centralized authentication
+
+### Application Architecture
+- **Multi-tier Applications**: Separate deployments for apps and databases
+- **Configuration Management**: ConfigMaps for application settings
+- **Service Discovery**: ClusterIP services with internal DNS
+
+## Deployment
+
+This repository is designed for GitOps deployment using ArgoCD:
+
+1. ArgoCD monitors this repository for changes
+2. Changes are automatically synced to the cluster
+3. Applications are deployed with declarative configurations
+4. Rollbacks are possible through Git history
+
+## Infrastructure Requirements
+
+- **Kubernetes Cluster**: K3S v1.33+
+- **Storage**: Longhorn distributed storage
+- **Load Balancer**: MetalLB configured
+- **DNS**: Azure DNS for certificate validation
+- **Secrets**: Infisical instance for secret management