Reset git history for making manifests public

2026-06-01 11:06:25 +02:00
commit 9109e5724d
398 changed files with 41799 additions and 0 deletions
--- a/README.md
+++ b/README.md
@@ -0,0 +1,131 @@
+# Kubernetes Manifests Repository
+
+This repository contains Kubernetes manifest files for a comprehensive self-hosted platform running 40+ applications across various categories. This infrastructure was created for the migration from Docker to Kubernetes (K3S).
+
+All applications are managed using GitOps principles with ArgoCD and utilize cert-manager for automated TLS certificate management.
+
+## Repository Structure
+
+The repository is organized with one directory per application, containing all necessary Kubernetes resources:
+
+```
+├── argocd/              # GitOps continuous deployment
+├── cert-manager/        # TLS certificate management
+├── metallb/             # Load balancer
+├── kubevip/             # High availability
+├── longhorn/            # Distributed storage
+├── cloud-native-postgres/ # PostgreSQL operator
+├── envoy-gateway/       # Kubernetes Gateway API configuration
+├── infisical/           # Secrets management
+├── authentik/           # Identity provider and SSO
+├── it-tools/            # IT utilities
+├── jellyfin/            # Media server
+├── immich/              # Photo and video management
+├── minecraft/           # Game servers
+├── gitea/               # Git service
+├── jenkins/             # CI/CD automation
+├── n8n/                 # Workflow automation
+├── react-resume/        # Resume builder application
+├── passbolt/            # Password manager
+├── wikijs/              # Documentation wiki
+├── zipline/             # File sharing
+├── gotify/              # Push notification server
+├── ntfy/                # Push notifications
+├── bentopdf/            # PDF conversion
+├── excalidraw/          # Whiteboard / diagramming
+├── searxng/             # Privacy-respecting search engine
+├── uptime-kuma/         # Uptime monitoring
+├── openwebui/           # Web UI for AI models
+├── ollama/              # Local LLM runner
+├── comfyui/             # Stable Diffusion workflow UI
+├── minio-aistor/        # S3-compatible object storage
+├── databasus/           # Database management
+├── netbootxyz/          # Network boot service
+├── technitium/          # DNS server
+├── azure-ddns-python/   # Dynamic DNS updater
+├── victoria-metrics/    # Metrics and monitoring
+├── proxmox/             # Virtualization platform
+├── unifi/               # Network controller
+├── truenas/             # Storage system
+└── deprecated/          # Deprecated applications
+```
+
+## Categories
+
+### Core Infrastructure
+- **ArgoCD**: GitOps continuous deployment and application management
+- **cert-manager**: Automated TLS certificate provisioning using Azure DNS
+- **MetalLB**: Bare-metal load balancer (IP pool: 10.8.11.100-10.8.11.150)
+- **KubeVIP**: High-availability control plane
+- **Longhorn**: Distributed block storage
+- **Cloud Native Postgres**: PostgreSQL operator for database management
+- **Envoy Gateway**: Kubernetes Gateway API implementation
+- **Infisical**: Secrets management platform
+- **Authentik**: Identity provider and SSO
+
+### Media & Entertainment
+- **Jellyfin**: Media streaming server
+- **Immich**: Self-hosted photo and video management
+- **Minecraft**: Game servers (ATM-10 and Stacia 2 Expert modpacks)
+
+### AI & Machine Learning
+- **Ollama**: Local LLM runner
+- **Open WebUI**: Web interface for AI models
+- **ComfyUI**: Stable Diffusion workflow UI
+
+### Development & CI/CD
+- **Gitea**: Self-hosted Git service with container registry
+- **Jenkins**: Automation server for CI/CD pipelines
+- **n8n**: Workflow automation platform
+- **MinIO AIStor**: S3-compatible object storage
+
+### Productivity & Collaboration
+- **React-Resume**: Resume builder with MinIO and PostgreSQL
+- **Passbolt**: Team password manager
+- **Wiki.js**: Modern documentation platform
+- **Zipline**: File sharing and screenshot service
+- **Gotify**: Push notification server with REST API and WebSocket support
+- **Ntfy**: Push notification service
+- **BentoPDF**: PDF conversion service
+- **Excalidraw**: Online whiteboard and diagramming tool
+- **SearXNG**: Privacy-respecting metasearch engine
+- **Databasus**: Database management UI
+- **Uptime Kuma**: Uptime and status monitoring
+
+### Administration & Monitoring
+- **IT-Tools**: Collection of useful IT utilities
+- **Technitium**: DNS server with web interface
+- **Azure DDNS Python**: Dynamic DNS updater for Azure DNS
+- **NetbootXYZ**: Network boot service for OS installation
+- **VictoriaMetrics**: Metrics collection and monitoring stack
+
+### External Service Integration
+- **Proxmox**: Virtualization platform integration
+- **UniFi**: Network controller integration
+- **TrueNAS**: Storage system integration
+
+### Deprecated
+- **Nginx Ingress Controller**: Replaced by Envoy Gateway; dropped after upstream support ended in March 2025
+- **Psono**: Self-hosted password manager; replaced by Passbolt
+- **Vaultwarden**: Self-hosted Bitwarden server; no longer in use
+
+## Infrastructure
+
+- **Kubernetes Cluster**: K3S v1.33+
+- **Ingress**: Envoy Gateway (Kubernetes Gateway API)
+- **Load Balancer**: MetalLB (IP pool: 10.8.11.100-10.8.11.150)
+- **Storage**: Longhorn distributed storage, separate PVCs per data type
+- **TLS**: cert-manager with Azure DNS validation, domain *.jsme.be
+- **Secrets**: Infisical secrets management
+- **SSO**: Authentik for centralized authentication
+- **RBAC**: Role-based access control for ArgoCD and service accounts
+
+## Deployment
+
+ArgoCD monitors this repository and automatically syncs changes to the cluster. Rollbacks are possible through Git history.
+
+## Maintenance
+
+- **GitOps**: All changes made through Git commits
+- **Certificate Renewal**: Automated via cert-manager
+- **Updates**: Managed through image tag updates in manifests