283 lines
8.3 KiB
YAML
283 lines
8.3 KiB
YAML
# Dustin Tenant — timeforta.co
|
|
# Placeholder landing page served by nginx
|
|
# ArgoCD managed - BlueJay Lab
|
|
---
|
|
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
name: tenant-dustin
|
|
labels:
|
|
app.kubernetes.io/part-of: bluejay-infra
|
|
flowercore.io/tenant: dustin
|
|
---
|
|
# NOTE: The TLS secret cf-origin-timeforta-co must be created in this namespace
|
|
# separately from a Cloudflare Origin Certificate covering *.timeforta.co.
|
|
# Create with: kubectl create secret tls cf-origin-timeforta-co \
|
|
# --cert=timeforta-co-origin.pem --key=timeforta-co-origin-key.pem \
|
|
# -n tenant-dustin
|
|
---
|
|
# Landing page HTML
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: dustin-web-html
|
|
namespace: tenant-dustin
|
|
data:
|
|
index.html: |
|
|
<!DOCTYPE html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="utf-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1">
|
|
<title>Time For Taco — timeforta.co</title>
|
|
<style>
|
|
* { margin: 0; padding: 0; box-sizing: border-box; }
|
|
body {
|
|
font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
|
|
background: #0A1628;
|
|
color: #e0e8f0;
|
|
min-height: 100vh;
|
|
display: flex;
|
|
flex-direction: column;
|
|
align-items: center;
|
|
justify-content: center;
|
|
overflow: hidden;
|
|
}
|
|
.bg {
|
|
position: fixed;
|
|
inset: 0;
|
|
background:
|
|
radial-gradient(ellipse 80% 60% at 50% 0%, rgba(43,138,255,0.15) 0%, transparent 70%),
|
|
radial-gradient(ellipse 60% 50% at 80% 100%, rgba(43,138,255,0.08) 0%, transparent 60%),
|
|
linear-gradient(135deg, #0A1628 0%, #111E36 50%, #0A1628 100%);
|
|
z-index: 0;
|
|
}
|
|
.container {
|
|
position: relative;
|
|
z-index: 1;
|
|
text-align: center;
|
|
padding: 2rem;
|
|
max-width: 640px;
|
|
width: 100%;
|
|
}
|
|
.badge {
|
|
display: inline-block;
|
|
background: rgba(43,138,255,0.12);
|
|
border: 1px solid rgba(43,138,255,0.25);
|
|
border-radius: 20px;
|
|
padding: 0.4rem 1.2rem;
|
|
font-size: 0.8rem;
|
|
color: #2B8AFF;
|
|
letter-spacing: 0.08em;
|
|
text-transform: uppercase;
|
|
margin-bottom: 2rem;
|
|
}
|
|
.icon {
|
|
font-size: 4rem;
|
|
margin-bottom: 1.5rem;
|
|
filter: drop-shadow(0 0 30px rgba(43,138,255,0.3));
|
|
}
|
|
h1 {
|
|
font-size: 2.8rem;
|
|
font-weight: 700;
|
|
background: linear-gradient(135deg, #2B8AFF 0%, #6BB3FF 100%);
|
|
-webkit-background-clip: text;
|
|
-webkit-text-fill-color: transparent;
|
|
background-clip: text;
|
|
margin-bottom: 0.5rem;
|
|
}
|
|
.domain {
|
|
font-size: 1.1rem;
|
|
color: #6BB3FF;
|
|
font-weight: 300;
|
|
font-family: 'SF Mono', 'Fira Code', 'Consolas', monospace;
|
|
margin-bottom: 2.5rem;
|
|
}
|
|
.status {
|
|
display: inline-flex;
|
|
align-items: center;
|
|
gap: 0.5rem;
|
|
background: rgba(43,138,255,0.08);
|
|
border: 1px solid rgba(43,138,255,0.15);
|
|
border-radius: 8px;
|
|
padding: 1rem 2rem;
|
|
margin-bottom: 2rem;
|
|
}
|
|
.status .dot {
|
|
width: 8px;
|
|
height: 8px;
|
|
background: #2B8AFF;
|
|
border-radius: 50%;
|
|
animation: pulse 2s ease-in-out infinite;
|
|
}
|
|
@keyframes pulse {
|
|
0%, 100% { opacity: 0.4; }
|
|
50% { opacity: 1; box-shadow: 0 0 8px rgba(43,138,255,0.6); }
|
|
}
|
|
.status p {
|
|
font-size: 0.95rem;
|
|
color: #8aa8c4;
|
|
}
|
|
.divider {
|
|
width: 40px;
|
|
height: 2px;
|
|
background: linear-gradient(90deg, transparent, rgba(43,138,255,0.4), transparent);
|
|
margin: 2rem auto;
|
|
}
|
|
.footer {
|
|
color: #3a5570;
|
|
font-size: 0.75rem;
|
|
line-height: 1.6;
|
|
}
|
|
.footer a {
|
|
color: #4a7a9e;
|
|
text-decoration: none;
|
|
}
|
|
@media (max-width: 480px) {
|
|
h1 { font-size: 2rem; }
|
|
.icon { font-size: 3rem; }
|
|
.container { padding: 1.5rem; }
|
|
}
|
|
</style>
|
|
</head>
|
|
<body>
|
|
<div class="bg"></div>
|
|
<div class="container">
|
|
<div class="badge">Dustin's Space</div>
|
|
<div class="icon">🌮</div>
|
|
<h1>Time For Taco</h1>
|
|
<p class="domain">timeforta.co</p>
|
|
<div class="status">
|
|
<span class="dot"></span>
|
|
<p>Coming Soon</p>
|
|
</div>
|
|
<div class="divider"></div>
|
|
<p class="footer">
|
|
Powered by <a href="https://flowercore.io">FlowerCore</a>
|
|
</p>
|
|
</div>
|
|
</body>
|
|
</html>
|
|
---
|
|
# nginx configuration
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: dustin-web-nginx-conf
|
|
namespace: tenant-dustin
|
|
data:
|
|
default.conf: |
|
|
server {
|
|
listen 80;
|
|
server_name _;
|
|
root /usr/share/nginx/html;
|
|
index index.html;
|
|
|
|
location / {
|
|
try_files $uri $uri/ =404;
|
|
}
|
|
|
|
location /healthz {
|
|
access_log off;
|
|
return 200 "ok";
|
|
add_header Content-Type text/plain;
|
|
}
|
|
}
|
|
---
|
|
# Deployment
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: dustin-web
|
|
namespace: tenant-dustin
|
|
labels:
|
|
app: dustin-web
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app: dustin-web
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: dustin-web
|
|
annotations:
|
|
flowercore.io/healthz-auth-policy: "allow-anonymous"
|
|
spec:
|
|
containers:
|
|
- name: nginx
|
|
image: nginx:alpine
|
|
ports:
|
|
- containerPort: 80
|
|
name: http
|
|
volumeMounts:
|
|
- name: nginx-conf
|
|
mountPath: /etc/nginx/conf.d/default.conf
|
|
subPath: default.conf
|
|
- name: html
|
|
mountPath: /usr/share/nginx/html
|
|
resources:
|
|
requests:
|
|
memory: 32Mi
|
|
cpu: 10m
|
|
limits:
|
|
memory: 64Mi
|
|
cpu: 50m
|
|
livenessProbe:
|
|
httpGet:
|
|
path: /healthz
|
|
port: 80
|
|
httpHeaders:
|
|
- name: X-Forwarded-Proto
|
|
value: https
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 10
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /healthz
|
|
port: 80
|
|
httpHeaders:
|
|
- name: X-Forwarded-Proto
|
|
value: https
|
|
initialDelaySeconds: 3
|
|
periodSeconds: 5
|
|
volumes:
|
|
- name: nginx-conf
|
|
configMap:
|
|
name: dustin-web-nginx-conf
|
|
- name: html
|
|
configMap:
|
|
name: dustin-web-html
|
|
---
|
|
# Service
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: dustin-web
|
|
namespace: tenant-dustin
|
|
spec:
|
|
selector:
|
|
app: dustin-web
|
|
ports:
|
|
- port: 80
|
|
targetPort: 80
|
|
name: http
|
|
---
|
|
# Traefik IngressRoute — public via Cloudflare
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: IngressRoute
|
|
metadata:
|
|
name: dustin-web
|
|
namespace: tenant-dustin
|
|
spec:
|
|
entryPoints:
|
|
- websecure
|
|
routes:
|
|
- match: (Host(`timeforta.co`) || Host(`www.timeforta.co`)) && (Method(`GET`) || Method(`HEAD`))
|
|
kind: Rule
|
|
services:
|
|
- name: dustin-web
|
|
port: 80
|
|
tls:
|
|
secretName: cf-origin-timeforta-co
|