feat: add calibre, portainer, egress-gateway, trivy-system, kyverno, olallalab

apps/calibre/values.yaml

@@ -0,0 +1,12 @@
+image:
+  tag: 0.6.24
+
+persistence:
+  books:
+    enabled: true
+    accessMode: ReadWriteOnce
+    size: 2Gi
+  config:
+    enabled: true
+    accessMode: ReadWriteOnce
+    size: 1Gi

apps/egress-gateway/values.yaml

@@ -0,0 +1,85 @@
+replicaCount: 2
+
+resources:
+  limits:
+    cpu: 200m
+    memory: 128Mi
+  requests:
+    cpu: 50m
+    memory: 32Mi
+
+service:
+  type: ClusterIP
+  ports:
+  - name: http
+    port: 80
+    targetPort: 8080
+  - name: https
+    port: 443
+    targetPort: 8443
+  - name: smtp-submission
+    port: 587
+    targetPort: 5870
+  - name: smtps
+    port: 465
+    targetPort: 4650
+
+networkPolicy:
+  enabled: true
+  allowExternal: true
+  extraIngress:
+  - ports:
+    - port: 8443
+      protocol: TCP
+    - port: 5870
+      protocol: TCP
+    - port: 4650
+      protocol: TCP
+
+configuration: |
+  global
+    log stdout format raw local0 info
+    maxconn 4096
+
+  defaults
+    log global
+    mode tcp
+    option tcplog
+    option dontlognull
+    timeout connect 10s
+    timeout client  1m
+    timeout server  1m
+
+  # ── HTTP → NPM (192.168.1.10) ──────────────────────────────────────
+  frontend fe_http
+    bind *:8080
+    default_backend be_npm_http
+
+  backend be_npm_http
+    server npm 192.168.1.10:80 check
+
+  # ── HTTPS → NPM con SNI passthrough ────────────────────────────────
+  frontend fe_https
+    bind *:8443
+    tcp-request inspect-delay 5s
+    tcp-request content accept if { req_ssl_hello_type 1 }
+    default_backend be_npm_https
+
+  backend be_npm_https
+    server npm 192.168.1.10:443 check
+
+  # ── SMTP submission (587) → Mailcow ────────────────────────────────
+  frontend fe_smtp_587
+    bind *:5870
+    default_backend be_mailcow_587
+
+  backend be_mailcow_587
+    server mailcow 192.168.1.30:587 check
+
+  # ── SMTPS (465) → Mailcow ──────────────────────────────────────────
+  frontend fe_smtps
+    bind *:4650
+    default_backend be_mailcow_465
+
+  backend be_mailcow_465
+    server mailcow 192.168.1.30:465 check

apps/olallalab/deployment.yaml

@@ -0,0 +1,45 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: oligo-tools
+  namespace: olallalab
+  labels:
+    app: oligo-tools
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: oligo-tools
+  template:
+    metadata:
+      labels:
+        app: oligo-tools
+    spec:
+      containers:
+      - name: oligo-tools
+        image: alexandrev/oligo-tools:20231223
+        ports:
+        - containerPort: 8080
+          name: http
+        resources:
+          limits:
+            cpu: 1000m
+            memory: 512Mi
+        livenessProbe:
+          httpGet:
+            path: /
+            port: 8080
+          initialDelaySeconds: 10
+          periodSeconds: 20
+        readinessProbe:
+          httpGet:
+            path: /
+            port: 8080
+          initialDelaySeconds: 5
+          periodSeconds: 10
+        startupProbe:
+          tcpSocket:
+            port: 8080
+          failureThreshold: 1
+          periodSeconds: 240
+          timeoutSeconds: 240

apps/olallalab/ingress.yaml

@@ -0,0 +1,42 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: oligo-tools-ingress
+  namespace: olallalab
+  annotations:
+    nginx.ingress.kubernetes.io/rewrite-target: /
+spec:
+  ingressClassName: public
+  rules:
+  - host: oligo-tools.alexandre-vazquez.cloud
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: oligo-tools
+            port:
+              number: 80
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: oligo-tools-ingress-internal
+  namespace: olallalab
+  annotations:
+    nginx.ingress.kubernetes.io/rewrite-target: /
+    external-dns.alpha.kubernetes.io/hostname: oligo-tools.alexandre-vazquez.internal
+spec:
+  ingressClassName: public
+  rules:
+  - host: oligo-tools.alexandre-vazquez.internal
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: oligo-tools
+            port:
+              number: 80

apps/olallalab/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: olallalab

apps/olallalab/service.yaml

@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: oligo-tools
+  namespace: olallalab
+  labels:
+    app: oligo-tools
+spec:
+  ports:
+  - port: 80
+    targetPort: 8080
+  selector:
+    app: oligo-tools

argocd/applications/calibre.yaml

@@ -0,0 +1,25 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: calibre
+  namespace: argocd
+spec:
+  project: default
+  sources:
+  - repoURL: https://k8s-home-lab.github.io/helm-charts/
+    chart: calibre-web
+    targetRevision: 9.0.2
+    helm:
+      releaseName: calibre-web
+      valueFiles:
+      - $values/apps/calibre/values.yaml
+  - repoURL: https://gitea.alexandre-vazquez.cloud/baphemot/gitops.git
+    targetRevision: HEAD
+    ref: values
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: calibre
+  syncPolicy:
+    syncOptions:
+    - CreateNamespace=true
+    - ServerSideApply=true

argocd/applications/egress-gateway.yaml

@@ -0,0 +1,25 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: egress-gateway
+  namespace: argocd
+spec:
+  project: default
+  sources:
+  - repoURL: https://charts.bitnami.com/bitnami
+    chart: haproxy
+    targetRevision: 3.4.12
+    helm:
+      releaseName: egress-gateway
+      valueFiles:
+      - $values/apps/egress-gateway/values.yaml
+  - repoURL: https://gitea.alexandre-vazquez.cloud/baphemot/gitops.git
+    targetRevision: HEAD
+    ref: values
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: egress-gateway
+  syncPolicy:
+    syncOptions:
+    - CreateNamespace=true
+    - ServerSideApply=true

argocd/applications/kyverno.yaml

@@ -0,0 +1,20 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: kyverno
+  namespace: argocd
+spec:
+  project: default
+  source:
+    repoURL: https://kyverno.github.io/kyverno/
+    chart: kyverno
+    targetRevision: 3.x
+    helm:
+      releaseName: kyverno
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: kyverno
+  syncPolicy:
+    syncOptions:
+    - CreateNamespace=true
+    - ServerSideApply=true

argocd/applications/olallalab.yaml

@@ -0,0 +1,18 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: olallalab
+  namespace: argocd
+spec:
+  project: default
+  source:
+    repoURL: https://gitea.alexandre-vazquez.cloud/baphemot/gitops.git
+    targetRevision: HEAD
+    path: apps/olallalab
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: olallalab
+  syncPolicy:
+    syncOptions:
+    - CreateNamespace=true
+    - ServerSideApply=true

argocd/applications/portainer.yaml

@@ -0,0 +1,20 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: portainer
+  namespace: argocd
+spec:
+  project: default
+  source:
+    repoURL: https://portainer.github.io/k8s/
+    chart: portainer
+    targetRevision: 1.0.51
+    helm:
+      releaseName: portainer
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: portainer
+  syncPolicy:
+    syncOptions:
+    - CreateNamespace=true
+    - ServerSideApply=true

argocd/applications/trivy-system.yaml

@@ -0,0 +1,20 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: trivy-system
+  namespace: argocd
+spec:
+  project: default
+  source:
+    repoURL: https://aquasecurity.github.io/helm-charts/
+    chart: trivy-operator
+    targetRevision: 0.18.4
+    helm:
+      releaseName: trivy-operator
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: trivy-system
+  syncPolicy:
+    syncOptions:
+    - CreateNamespace=true
+    - ServerSideApply=true