Blue Jay
ef442e29eb
Zabbix, IRC, Mail, Guacamole, Matrix, TeamSpeak, Intranet, PKI Web, FC Landing. All with cert-manager TLS, Traefik IngressRoutes, Longhorn PVCs.
249 lines
7.0 KiB
YAML
249 lines
7.0 KiB
YAML
# FlowerCore Landing Page
|
|
# Blue Jay Lab branded landing page
|
|
# ArgoCD managed - BlueJay Lab
|
|
---
|
|
# fc-system namespace is shared; don't overwrite if it exists
|
|
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
name: fc-system
|
|
labels:
|
|
app.kubernetes.io/part-of: bluejay-infra
|
|
---
|
|
# Landing page HTML
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: fc-landing-html
|
|
namespace: fc-system
|
|
data:
|
|
index.html: |
|
|
<!DOCTYPE html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="utf-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1">
|
|
<title>FlowerCore - Blue Jay Lab</title>
|
|
<style>
|
|
* { margin: 0; padding: 0; box-sizing: border-box; }
|
|
body {
|
|
font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
|
|
background: linear-gradient(135deg, #0a1628 0%, #1a2744 50%, #0d1f3c 100%);
|
|
color: #e0e8f0;
|
|
min-height: 100vh;
|
|
display: flex;
|
|
flex-direction: column;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
.hero {
|
|
text-align: center;
|
|
padding: 3rem;
|
|
max-width: 800px;
|
|
}
|
|
.logo {
|
|
font-size: 5rem;
|
|
margin-bottom: 1.5rem;
|
|
filter: drop-shadow(0 0 20px rgba(74, 158, 255, 0.3));
|
|
}
|
|
h1 {
|
|
font-size: 3rem;
|
|
background: linear-gradient(135deg, #4a9eff, #7ab3ff);
|
|
-webkit-background-clip: text;
|
|
-webkit-text-fill-color: transparent;
|
|
background-clip: text;
|
|
margin-bottom: 0.5rem;
|
|
}
|
|
.subtitle {
|
|
font-size: 1.3rem;
|
|
color: #7ab3ff;
|
|
font-weight: 300;
|
|
margin-bottom: 3rem;
|
|
}
|
|
.services {
|
|
display: grid;
|
|
grid-template-columns: repeat(auto-fit, minmax(200px, 1fr));
|
|
gap: 1rem;
|
|
width: 100%;
|
|
max-width: 700px;
|
|
padding: 0 1rem;
|
|
}
|
|
.service {
|
|
background: rgba(74, 158, 255, 0.08);
|
|
border: 1px solid rgba(74, 158, 255, 0.2);
|
|
border-radius: 8px;
|
|
padding: 1.2rem;
|
|
text-decoration: none;
|
|
color: inherit;
|
|
transition: all 0.2s;
|
|
}
|
|
.service:hover {
|
|
background: rgba(74, 158, 255, 0.15);
|
|
border-color: rgba(74, 158, 255, 0.5);
|
|
transform: translateY(-2px);
|
|
}
|
|
.service h3 { color: #4a9eff; font-size: 0.95rem; margin-bottom: 0.3rem; }
|
|
.service p { color: #8aa8c4; font-size: 0.8rem; }
|
|
.footer {
|
|
margin-top: 3rem;
|
|
color: #4a6580;
|
|
font-size: 0.8rem;
|
|
}
|
|
</style>
|
|
</head>
|
|
<body>
|
|
<div class="hero">
|
|
<div class="logo">🌻</div>
|
|
<h1>FlowerCore</h1>
|
|
<p class="subtitle">Blue Jay Lab</p>
|
|
</div>
|
|
<div class="services">
|
|
<a class="service" href="https://gitea.iamworkin.lan">
|
|
<h3>Gitea</h3>
|
|
<p>Git repositories</p>
|
|
</a>
|
|
<a class="service" href="https://argocd.iamworkin.lan">
|
|
<h3>ArgoCD</h3>
|
|
<p>GitOps deployments</p>
|
|
</a>
|
|
<a class="service" href="https://zabbix.iamworkin.lan">
|
|
<h3>Zabbix</h3>
|
|
<p>Monitoring</p>
|
|
</a>
|
|
<a class="service" href="https://guac.iamworkin.lan">
|
|
<h3>Guacamole</h3>
|
|
<p>Remote desktop</p>
|
|
</a>
|
|
<a class="service" href="https://element.iamworkin.lan">
|
|
<h3>Element</h3>
|
|
<p>Matrix chat</p>
|
|
</a>
|
|
<a class="service" href="https://mail.iamworkin.lan">
|
|
<h3>Mail</h3>
|
|
<p>Snappymail webmail</p>
|
|
</a>
|
|
<a class="service" href="https://intranet.iamworkin.lan">
|
|
<h3>Intranet</h3>
|
|
<p>Lab portal</p>
|
|
</a>
|
|
<a class="service" href="https://pki.iamworkin.lan">
|
|
<h3>PKI</h3>
|
|
<p>Certificates</p>
|
|
</a>
|
|
</div>
|
|
<p class="footer">FlowerCore · RKE2 on Harvester · ArgoCD managed</p>
|
|
</body>
|
|
</html>
|
|
---
|
|
# nginx configuration
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: fc-landing-nginx-conf
|
|
namespace: fc-system
|
|
data:
|
|
default.conf: |
|
|
server {
|
|
listen 80;
|
|
server_name _;
|
|
root /usr/share/nginx/html;
|
|
index index.html;
|
|
|
|
location / {
|
|
try_files $uri $uri/ =404;
|
|
}
|
|
|
|
location /healthz {
|
|
access_log off;
|
|
return 200 "ok";
|
|
add_header Content-Type text/plain;
|
|
}
|
|
}
|
|
---
|
|
# Landing Page Deployment
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: fc-landing
|
|
namespace: fc-system
|
|
labels:
|
|
app: fc-landing
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app: fc-landing
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: fc-landing
|
|
spec:
|
|
containers:
|
|
- name: nginx
|
|
image: nginx:alpine
|
|
ports:
|
|
- containerPort: 80
|
|
name: http
|
|
volumeMounts:
|
|
- name: nginx-conf
|
|
mountPath: /etc/nginx/conf.d/default.conf
|
|
subPath: default.conf
|
|
- name: html
|
|
mountPath: /usr/share/nginx/html
|
|
resources:
|
|
requests:
|
|
memory: 16Mi
|
|
cpu: 5m
|
|
limits:
|
|
memory: 64Mi
|
|
cpu: 50m
|
|
livenessProbe:
|
|
httpGet:
|
|
path: /healthz
|
|
port: 80
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 10
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /healthz
|
|
port: 80
|
|
initialDelaySeconds: 3
|
|
periodSeconds: 5
|
|
volumes:
|
|
- name: nginx-conf
|
|
configMap:
|
|
name: fc-landing-nginx-conf
|
|
- name: html
|
|
configMap:
|
|
name: fc-landing-html
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: fc-landing
|
|
namespace: fc-system
|
|
spec:
|
|
selector:
|
|
app: fc-landing
|
|
ports:
|
|
- port: 80
|
|
targetPort: 80
|
|
name: http
|
|
---
|
|
# Traefik IngressRoute (internal only, no public cert needed)
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: IngressRoute
|
|
metadata:
|
|
name: fc-landing
|
|
namespace: fc-system
|
|
spec:
|
|
entryPoints:
|
|
- websecure
|
|
routes:
|
|
- match: Host(`flowercore.iamworkin.lan`)
|
|
kind: Rule
|
|
services:
|
|
- name: fc-landing
|
|
port: 80
|
|
tls: {}
|