- 3-node HA cluster (k3s v1.36.3+k3s1, embedded etcd) on Hetzner - Netbird VPN mesh (wt0) for all cluster traffic - Longhorn distributed storage (2 replicas, /var/lib/longhorn/) - Traefik ingress (3 replicas, LoadBalancer on all node IPs) - cert-manager with Let's Encrypt (auto-renewing TLS) - Gitea (git + container registry) with SQLite on Longhorn - 4 migrated workloads: wolsey, school-games (3 variants), randomly - All HelmCharts and workload manifests as YAML - deploy.sh for one-shot cluster setup
10 lines
81 B
Plaintext
10 lines
81 B
Plaintext
# Sensitive files - never commit
|
|
*.env
|
|
.env
|
|
secrets/
|
|
*.key
|
|
*.pem
|
|
|
|
# OS
|
|
.DS_Store
|