Deploy various k8s services on mieshu

51 files changed, 1858 insertions, 0 deletions

diff --git a/data.d/k3s-master/manifests.d/mieshu/base-system/certmanager/letsencrypt-production.yaml b/data.d/k3s-master/manifests.d/mieshu/base-system/certmanager/letsencrypt-production.yaml
new file mode 100644
index 0000000..dbff2c2
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/base-system/certmanager/letsencrypt-production.yaml
@@ -0,0 +1,16 @@
+---
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-production
+spec:
+  acme:
+    email: root@tyil.net
+    server: https://acme-v02.api.letsencrypt.org/directory
+    privateKeySecretRef:
+      name: clusterissuer-letsencrypt-production
+    solvers:
+    - http01:
+        ingress:
+          class: traefik
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/base-system/certmanager/letsencrypt-staging.yaml b/data.d/k3s-master/manifests.d/mieshu/base-system/certmanager/letsencrypt-staging.yaml
new file mode 100644
index 0000000..9b0a27d
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/base-system/certmanager/letsencrypt-staging.yaml
@@ -0,0 +1,17 @@
+---
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-staging
+spec:
+  acme:
+    email: root@tyil.net
+    server: https://acme-staging-v02.api.letsencrypt.org/directory
+    privateKeySecretRef:
+      name: clusterissuer-letsencrypt-staging
+    solvers:
+    - http01:
+        ingress:
+          class: traefik
+      selector: {}
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/kube-system/treafik/middleware-https.yaml b/data.d/k3s-master/manifests.d/mieshu/kube-system/treafik/middleware-https.yaml
new file mode 100644
index 0000000..0bfb82c
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/kube-system/treafik/middleware-https.yaml
@@ -0,0 +1,11 @@
+---
+apiVersion: traefik.containo.us/v1alpha1
+kind: Middleware
+metadata:
+  name: redirect-https
+  namespace: kube-system
+spec:
+  redirectScheme:
+    scheme: https
+    permanent: true
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/cgit/configmap.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/cgit/configmap.yaml
new file mode 100644
index 0000000..bdbc8b2
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/cgit/configmap.yaml
@@ -0,0 +1,68 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: cgit
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: cgit
+    app.kubernetes.io/part-of: personal-services
+data:
+  cgitrc: |
+    root-desc=All public repos from tyil
+
+    source-filter=/usr/lib/cgit/filters/syntax-highlighting.sh
+    about-filter=/usr/lib/cgit/filters/about-formatting.sh
+
+    readme=:INSTALL
+    readme=:INSTALL.htm
+    readme=:INSTALL.html
+    readme=:INSTALL.md
+    readme=:INSTALL.mkd
+    readme=:INSTALL.rst
+    readme=:INSTALL.txt
+    readme=:README
+    readme=:README.htm
+    readme=:README.html
+    readme=:README.md
+    readme=:README.mkd
+    readme=:README.pod6
+    readme=:README.rakudoc
+    readme=:README.rst
+    readme=:README.txt
+    readme=:install
+    readme=:install.htm
+    readme=:install.html
+    readme=:install.md
+    readme=:install.mkd
+    readme=:install.rst
+    readme=:install.txt
+    readme=:readme
+    readme=:readme.htm
+    readme=:readme.html
+    readme=:readme.md
+    readme=:readme.mkd
+    readme=:readme.rst
+    readme=:readme.txt
+
+    css=/cgit-css/cgit.css
+    logo=/cgit-css/cgit.png
+
+    #cache-root=/var/cache/cgit
+    #cache-size=1000
+
+    clone-prefix=https://git.tyil.nl
+    enable-git-config=1
+    enable-index-links=1
+    enable-index-owner=0
+    enable-log-filecount=1
+    enable-log-linecount=1
+    remove-suffix=1
+    robots=index, follow
+    scan-path=/srv/git/
+    section-from-path=1
+    snapshots=tar.gz tar.bz2
+    virtual-root=/
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/cgit/deployment.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/cgit/deployment.yaml
new file mode 100644
index 0000000..ddb27ac
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/cgit/deployment.yaml
@@ -0,0 +1,50 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: cgit
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: cgit
+    app.kubernetes.io/part-of: personal-services
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/created-by: tyil
+      app.kubernetes.io/managed-by: manual
+      app.kubernetes.io/name: cgit
+      app.kubernetes.io/part-of: personal-services
+  strategy:
+    type: RollingUpdate
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/created-by: tyil
+        app.kubernetes.io/managed-by: manual
+        app.kubernetes.io/name: cgit
+        app.kubernetes.io/part-of: personal-services
+    spec:
+      containers:
+      - image: emarcs/nginx-cgit
+        name: cgit
+        ports:
+        - containerPort: 80
+        volumeMounts:
+        - mountPath: /srv/git
+          name: data
+        - mountPath: /etc/cgitrc
+          subPath: cgitrc
+          name: config
+      restartPolicy: Always
+      volumes:
+      - name: data
+        hostPath:
+          path: /mnt/pool/git
+          type: DirectoryOrCreate
+      - name: config
+        configMap:
+          name: cgit
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/cgit/ingress.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/cgit/ingress.yaml
new file mode 100644
index 0000000..4dcf92e
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/cgit/ingress.yaml
@@ -0,0 +1,31 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: cgit
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: cgit
+    app.kubernetes.io/part-of: personal-services
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-production"
+spec:
+  ingressClassName: traefik
+  tls:
+  - hosts:
+    - git.tyil.nl
+    secretName: tls-nl.tyil.git
+  rules:
+  - host: git.tyil.nl
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: cgit
+            port:
+              number: 80
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/cgit/service.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/cgit/service.yaml
new file mode 100644
index 0000000..ac2ab26
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/cgit/service.yaml
@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: cgit
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: cgit
+    app.kubernetes.io/part-of: personal-services
+spec:
+  selector:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: cgit
+    app.kubernetes.io/part-of: personal-services
+  ports:
+  - name: http
+    port: 80
+    targetPort: 80
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/deployment-kroki-blockdiag.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/deployment-kroki-blockdiag.yaml
new file mode 100644
index 0000000..6eb7fea
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/deployment-kroki-blockdiag.yaml
@@ -0,0 +1,34 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: kroki-blockdiag
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: kroki-blockdiag
+    app.kubernetes.io/part-of: personal-services
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/created-by: tyil
+      app.kubernetes.io/managed-by: manual
+      app.kubernetes.io/name: kroki-blockdiag
+      app.kubernetes.io/part-of: personal-services
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/created-by: tyil
+        app.kubernetes.io/managed-by: manual
+        app.kubernetes.io/name: kroki-blockdiag
+        app.kubernetes.io/part-of: personal-services
+    spec:
+      containers:
+      - image: yuzutech/kroki-blockdiag
+        name: blockdiag
+        ports:
+        - containerPort: 8001
+      restartPolicy: Always
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/deployment-kroki-bpmn.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/deployment-kroki-bpmn.yaml
new file mode 100644
index 0000000..26acd15
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/deployment-kroki-bpmn.yaml
@@ -0,0 +1,34 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: kroki-bpmn
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: kroki-bpmn
+    app.kubernetes.io/part-of: personal-services
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/created-by: tyil
+      app.kubernetes.io/managed-by: manual
+      app.kubernetes.io/name: kroki-bpmn
+      app.kubernetes.io/part-of: personal-services
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/created-by: tyil
+        app.kubernetes.io/managed-by: manual
+        app.kubernetes.io/name: kroki-bpmn
+        app.kubernetes.io/part-of: personal-services
+    spec:
+      containers:
+      - image: yuzutech/kroki-bpmn
+        name: bpmn
+        ports:
+        - containerPort: 8003
+      restartPolicy: Always
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/deployment-kroki-excalidraw.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/deployment-kroki-excalidraw.yaml
new file mode 100644
index 0000000..d1c6699
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/deployment-kroki-excalidraw.yaml
@@ -0,0 +1,34 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: kroki-excalidraw
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: kroki-excalidraw
+    app.kubernetes.io/part-of: personal-services
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/created-by: tyil
+      app.kubernetes.io/managed-by: manual
+      app.kubernetes.io/name: kroki-excalidraw
+      app.kubernetes.io/part-of: personal-services
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/created-by: tyil
+        app.kubernetes.io/managed-by: manual
+        app.kubernetes.io/name: kroki-excalidraw
+        app.kubernetes.io/part-of: personal-services
+    spec:
+      containers:
+      - image: yuzutech/kroki-excalidraw
+        name: excalidraw
+        ports:
+        - containerPort: 8004
+      restartPolicy: Always
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/deployment-kroki-mermaid.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/deployment-kroki-mermaid.yaml
new file mode 100644
index 0000000..ee6edaf
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/deployment-kroki-mermaid.yaml
@@ -0,0 +1,33 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: kroki-mermaid
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: kroki-mermaid
+    app.kubernetes.io/part-of: personal-services
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/created-by: tyil
+      app.kubernetes.io/managed-by: manual
+      app.kubernetes.io/name: kroki-mermaid
+      app.kubernetes.io/part-of: personal-services
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/created-by: tyil
+        app.kubernetes.io/managed-by: manual
+        app.kubernetes.io/name: kroki-mermaid
+        app.kubernetes.io/part-of: personal-services
+    spec:
+      containers:
+      - image: yuzutech/kroki-mermaid
+        name: mermaid
+        ports:
+        - containerPort: 8002
+      restartPolicy: Always
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/deployment-kroki.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/deployment-kroki.yaml
new file mode 100644
index 0000000..f192697
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/deployment-kroki.yaml
@@ -0,0 +1,53 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: kroki
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: kroki
+    app.kubernetes.io/part-of: personal-services
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/created-by: tyil
+      app.kubernetes.io/managed-by: manual
+      app.kubernetes.io/name: kroki
+      app.kubernetes.io/part-of: personal-services
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/created-by: tyil
+        app.kubernetes.io/managed-by: manual
+        app.kubernetes.io/name: kroki
+        app.kubernetes.io/part-of: personal-services
+    spec:
+      containers:
+      - image: yuzutech/kroki
+        name: kroki
+        env:
+        - name: KROKI_BLOCKDIAG_HOST
+          value: kroki-blockdiag
+        - name: KROKI_BLOCKDIAG_PORT
+          value: "80"
+        - name: KROKI_BPMN_HOST
+          value: kroki-bpmn
+        - name: KROKI_BPMN_PORT
+          value: "80"
+        - name: KROKI_EXCALIDRAW_HOST
+          value: kroki-excalidraw
+        - name: KROKI_EXCALIDRAW_PORT
+          value: "80"
+        - name: KROKI_MERMAID_HOST
+          value: kroki-mermaid
+        - name: KROKI_MERMAID_PORT
+          value: "80"
+        - name: KROKI_MAX_URI_LENGTH
+          value: "4096"
+        ports:
+        - containerPort: 8000
+      restartPolicy: Always
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/ingress-kroki.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/ingress-kroki.yaml
new file mode 100644
index 0000000..bffcfd3
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/ingress-kroki.yaml
@@ -0,0 +1,30 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: kroki
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: kroki
+    app.kubernetes.io/part-of: personal-services
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-production"
+spec:
+  tls:
+  - hosts:
+    - kroki.tyil.nl
+    secretName: tls-nl.tyil.kroki
+  rules:
+  - host: kroki.tyil.nl
+    http:
+      paths:
+      - pathType: Prefix
+        path: "/"
+        backend:
+          service:
+            name: kroki-http
+            port:
+              number: 80
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/service-kroki-blockdiag.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/service-kroki-blockdiag.yaml
new file mode 100644
index 0000000..7ac6c4e
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/service-kroki-blockdiag.yaml
@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: kroki-blockdiag
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: kroki-blockdiag
+    app.kubernetes.io/part-of: personal-services
+spec:
+  selector:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: kroki-blockdiag
+    app.kubernetes.io/part-of: personal-services
+  ports:
+  - name: http
+    port: 80
+    targetPort: 8001
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/service-kroki-bpmn.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/service-kroki-bpmn.yaml
new file mode 100644
index 0000000..73e2c58
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/service-kroki-bpmn.yaml
@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: kroki-bpmn
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: kroki-bpmn
+    app.kubernetes.io/part-of: personal-services
+spec:
+  selector:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: kroki-bpmn
+    app.kubernetes.io/part-of: personal-services
+  ports:
+  - name: http
+    port: 80
+    targetPort: 8003
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/service-kroki-excalidraw.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/service-kroki-excalidraw.yaml
new file mode 100644
index 0000000..a011428
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/service-kroki-excalidraw.yaml
@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: kroki-excalidraw
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: kroki-excalidraw
+    app.kubernetes.io/part-of: personal-services
+spec:
+  selector:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: kroki-excalidraw
+    app.kubernetes.io/part-of: personal-services
+  ports:
+  - name: http
+    port: 80
+    targetPort: 8004
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/service-kroki-mermaid.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/service-kroki-mermaid.yaml
new file mode 100644
index 0000000..872433c
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/service-kroki-mermaid.yaml
@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: kroki-mermaid
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: kroki-mermaid
+    app.kubernetes.io/part-of: personal-services
+spec:
+  selector:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: kroki-mermaid
+    app.kubernetes.io/part-of: personal-services
+  ports:
+  - name: http
+    port: 80
+    targetPort: 8002
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/service-kroki.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/service-kroki.yaml
new file mode 100644
index 0000000..0c98dc8
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/service-kroki.yaml
@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: kroki
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: kroki
+    app.kubernetes.io/part-of: personal-services
+spec:
+  selector:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: kroki
+    app.kubernetes.io/part-of: personal-services
+  ports:
+  - name: http
+    port: 80
+    targetPort: 8000
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/lldap/ingress.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/lldap/ingress.yaml
index 35180f9..4982b4b 100644
--- a/data.d/k3s-master/manifests.d/mieshu/personal-services/lldap/ingress.yaml
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/lldap/ingress.yaml
@@ -9,8 +9,15 @@ metadata:
     app.kubernetes.io/managed-by: manual
     app.kubernetes.io/name: lldap
     app.kubernetes.io/part-of: personal-services
+  annotations:
+    traefik.ingress.kubernetes.io/router.middlewares: kube-system-redirect-https@kubernetescrd
+    cert-manager.io/cluster-issuer: "letsencrypt-production"
 spec:
   ingressClassName: traefik
+  tls:
+  - hosts:
+    - ldap.tyil.nl
+    secretName: tls-nl.tyil.ldap
   rules:
   - host: ldap.tyil.nl
     http:
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/nextcloud/cron.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/nextcloud/cron.yaml
new file mode 100644
index 0000000..d362c05
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/nextcloud/cron.yaml
@@ -0,0 +1,33 @@
+---
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: nextcloud
+  namespace: personal-services
+spec:
+  schedule: "*/5 * * * *"
+  jobTemplate:
+    spec:
+      template:
+        spec:
+          securityContext:
+            runAsUser: 33
+            runAsGroup: 33
+          containers:
+          - name: nextcloud
+            image: nextcloud:27
+            command:
+            - php
+            args:
+            - -f
+            - /var/www/html/cron.php
+            volumeMounts:
+            - mountPath: /var/www/html
+              name: data
+          restartPolicy: OnFailure
+          volumes:
+          - name: data
+            hostPath:
+              path: /mnt/pool/nextcloud
+              type: Directory
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/nextcloud/deployment.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/nextcloud/deployment.yaml
new file mode 100644
index 0000000..2713a14
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/nextcloud/deployment.yaml
@@ -0,0 +1,44 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: nextcloud
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: nextcloud
+    app.kubernetes.io/part-of: personal-services
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/created-by: tyil
+      app.kubernetes.io/managed-by: manual
+      app.kubernetes.io/name: nextcloud
+      app.kubernetes.io/part-of: personal-services
+  strategy:
+    type: RollingUpdate
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/created-by: tyil
+        app.kubernetes.io/managed-by: manual
+        app.kubernetes.io/name: nextcloud
+        app.kubernetes.io/part-of: personal-services
+    spec:
+      containers:
+      - image: nextcloud:27
+        name: nextcloud
+        ports:
+        - containerPort: 80
+        volumeMounts:
+        - mountPath: /var/www/html
+          name: data
+      restartPolicy: Always
+      volumes:
+      - name: data
+        hostPath:
+          path: /mnt/pool/nextcloud
+          type: Directory
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/nextcloud/ingress.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/nextcloud/ingress.yaml
new file mode 100644
index 0000000..106926f
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/nextcloud/ingress.yaml
@@ -0,0 +1,31 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: nextcloud
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: nextcloud
+    app.kubernetes.io/part-of: personal-services
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-production"
+spec:
+  ingressClassName: traefik
+  tls:
+  - hosts:
+    - cloud.tyil.nl
+    secretName: tls-nl.tyil.cloud
+  rules:
+  - host: cloud.tyil.nl
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: nextcloud
+            port:
+              number: 80
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/nextcloud/service.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/nextcloud/service.yaml
new file mode 100644
index 0000000..fd9a7d6
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/nextcloud/service.yaml
@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: nextcloud
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: nextcloud
+    app.kubernetes.io/part-of: personal-services
+spec:
+  selector:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: nextcloud
+    app.kubernetes.io/part-of: personal-services
+  ports:
+  - name: http
+    port: 80
+    targetPort: 80
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/servarr/bazarr/deployment.yaml b/data.d/k3s-master/manifests.d/mieshu/servarr/bazarr/deployment.yaml
new file mode 100644
index 0000000..a68d587
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/servarr/bazarr/deployment.yaml
@@ -0,0 +1,77 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: bazarr
+  namespace: servarr
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: bazarr
+    app.kubernetes.io/part-of: servarr
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/created-by: tyil
+      app.kubernetes.io/managed-by: manual
+      app.kubernetes.io/name: bazarr
+      app.kubernetes.io/part-of: servarr
+  strategy:
+    type: Recreate
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/created-by: tyil
+        app.kubernetes.io/managed-by: manual
+        app.kubernetes.io/name: bazarr
+        app.kubernetes.io/part-of: servarr
+    spec:
+      containers:
+      - image: hotio/bazarr:testing
+        name: bazarr
+        env:
+        - name: TZ
+          value: "Europe/Amsterdam"
+        - name: UMASK
+          value: "002"
+        - name: GUID
+          value: "169"
+        - name: PUID
+          value: "169"
+        ports:
+        - containerPort: 6767
+        volumeMounts:
+        - mountPath: /mnt/pool/media/anime-series/exported
+          name: anime-series
+        - mountPath: /mnt/pool/media/anime-movies/exported
+          name: anime-movies
+        - mountPath: /mnt/pool/media/series/exported
+          name: series
+        - mountPath: /mnt/pool/media/movies/exported
+          name: movies
+        - mountPath: /config
+          name: config
+      restartPolicy: Always
+      volumes:
+      - name: anime-series
+        hostPath:
+          path: /mnt/pool/media/anime-series/exported
+          type: Directory
+      - name: anime-movies
+        hostPath:
+          path: /mnt/pool/media/anime-movies/exported
+          type: Directory
+      - name: series
+        hostPath:
+          path: /mnt/pool/media/series/exported
+          type: Directory
+      - name: movies
+        hostPath:
+          path: /mnt/pool/media/movies/exported
+          type: Directory
+      - name: config
+        hostPath:
+          path: /etc/servarr/bazarr
+          type: Directory
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/servarr/bazarr/ingress.yaml b/data.d/k3s-master/manifests.d/mieshu/servarr/bazarr/ingress.yaml
new file mode 100644
index 0000000..9b3266c
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/servarr/bazarr/ingress.yaml
@@ -0,0 +1,31 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: bazarr
+  namespace: servarr
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: bazarr
+    app.kubernetes.io/part-of: servarr
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-production"
+spec:
+  ingressClassName: traefik
+  tls:
+  - hosts:
+    - bazarr.arr.tyil.nl
+    secretName: tls-nl.tyil.arr.bazarr
+  rules:
+  - host: bazarr.arr.tyil.nl
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: bazarr
+            port:
+              number: 80
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/servarr/bazarr/service.yaml b/data.d/k3s-master/manifests.d/mieshu/servarr/bazarr/service.yaml
new file mode 100644
index 0000000..1f3cc23
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/servarr/bazarr/service.yaml
@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: bazarr
+  namespace: servarr
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: bazarr
+    app.kubernetes.io/part-of: servarr
+spec:
+  selector:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: bazarr
+    app.kubernetes.io/part-of: servarr
+  ports:
+  - name: http
+    port: 80
+    targetPort: 6767
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/servarr/dirlist/deployment.yaml b/data.d/k3s-master/manifests.d/mieshu/servarr/dirlist/deployment.yaml
new file mode 100644
index 0000000..07cc09b
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/servarr/dirlist/deployment.yaml
@@ -0,0 +1,85 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: dirlist
+  namespace: servarr
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: dirlist
+    app.kubernetes.io/part-of: servarr
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/created-by: tyil
+      app.kubernetes.io/managed-by: manual
+      app.kubernetes.io/name: dirlist
+      app.kubernetes.io/part-of: servarr
+  strategy:
+    type: RollingUpdate
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/created-by: tyil
+        app.kubernetes.io/managed-by: manual
+        app.kubernetes.io/name: dirlist
+        app.kubernetes.io/part-of: servarr
+    spec:
+      containers:
+      - image: docker.io/svenstaro/miniserve:latest
+        args:
+        - --enable-tar
+        - --enable-tar-gz
+        - --qrcode
+        - /var/www
+        name: miniserve
+        ports:
+        - containerPort: 8080
+        volumeMounts:
+        - mountPath: /var/www/anime-movies
+          name: anime-movies
+          readOnly: true
+        - mountPath: /var/www/anime-series
+          name: anime-series
+          readOnly: true
+        - mountPath: /var/www/books
+          name: books
+          readOnly: true
+        - mountPath: /var/www/movies
+          name: movies
+          readOnly: true
+        - mountPath: /var/www/music
+          name: music
+          readOnly: true
+        - mountPath: /var/www/series
+          name: series
+          readOnly: true
+      restartPolicy: Always
+      volumes:
+      - name: anime-series
+        hostPath:
+          path: /mnt/pool/media/anime-series/exported
+          type: Directory
+      - name: anime-movies
+        hostPath:
+          path: /mnt/pool/media/anime-movies/exported
+          type: Directory
+      - name: books
+        hostPath:
+          path: /mnt/pool/media/books/exported
+          type: Directory
+      - name: movies
+        hostPath:
+          path: /mnt/pool/media/movies/exported
+          type: Directory
+      - name: music
+        hostPath:
+          path: /mnt/pool/media/music/exported
+          type: Directory
+      - name: series
+        hostPath:
+          path: /mnt/pool/media/series/exported
+          type: Directory
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/servarr/dirlist/ingress.yaml b/data.d/k3s-master/manifests.d/mieshu/servarr/dirlist/ingress.yaml
new file mode 100644
index 0000000..7eb008d
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/servarr/dirlist/ingress.yaml
@@ -0,0 +1,31 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: dirlist
+  namespace: servarr
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: dirlist
+    app.kubernetes.io/part-of: servarr
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-production"
+spec:
+  ingressClassName: traefik
+  tls:
+  - hosts:
+    - media.tyil.nl
+    secretName: tls-nl.tyil.media
+  rules:
+  - host: media.tyil.nl
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: dirlist
+            port:
+              number: 80
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/servarr/dirlist/service.yaml b/data.d/k3s-master/manifests.d/mieshu/servarr/dirlist/service.yaml
new file mode 100644
index 0000000..31f638f
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/servarr/dirlist/service.yaml
@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: dirlist
+  namespace: servarr
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: dirlist
+    app.kubernetes.io/part-of: servarr
+spec:
+  selector:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: dirlist
+    app.kubernetes.io/part-of: servarr
+  ports:
+  - name: http
+    port: 80
+    targetPort: 8080
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/servarr/jellyfin/deployment.yaml b/data.d/k3s-master/manifests.d/mieshu/servarr/jellyfin/deployment.yaml
new file mode 100644
index 0000000..09f87af
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/servarr/jellyfin/deployment.yaml
@@ -0,0 +1,92 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: jellyfin
+  namespace: servarr
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: jellyfin
+    app.kubernetes.io/part-of: servarr
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/created-by: tyil
+      app.kubernetes.io/managed-by: manual
+      app.kubernetes.io/name: jellyfin
+      app.kubernetes.io/part-of: servarr
+  strategy:
+    type: Recreate
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/created-by: tyil
+        app.kubernetes.io/managed-by: manual
+        app.kubernetes.io/name: jellyfin
+        app.kubernetes.io/part-of: servarr
+    spec:
+      containers:
+      - image: jellyfin/jellyfin
+        name: jellyfin
+        ports:
+        - containerPort: 8096
+        volumeMounts:
+        - mountPath: /var/media/anime-movies
+          name: anime-movies
+          readOnly: true
+        - mountPath: /var/media/anime-series
+          name: anime-series
+          readOnly: true
+        - mountPath: /var/media/books
+          name: books
+          readOnly: true
+        - mountPath: /var/media/movies
+          name: movies
+          readOnly: true
+        - mountPath: /var/media/music
+          name: music
+          readOnly: true
+        - mountPath: /var/media/series
+          name: series
+          readOnly: true
+        - mountPath: /config
+          name: config
+        - mountPath: /cache
+          name: cache
+      restartPolicy: Always
+      volumes:
+      - name: anime-movies
+        hostPath:
+          path: /mnt/pool/media/anime-movies/exported
+          type: Directory
+      - name: anime-series
+        hostPath:
+          path: /mnt/pool/media/anime-series/exported
+          type: Directory
+      - name: books
+        hostPath:
+          path: /mnt/pool/media/books/exported
+          type: Directory
+      - name: movies
+        hostPath:
+          path: /mnt/pool/media/movies/exported
+          type: Directory
+      - name: music
+        hostPath:
+          path: /mnt/pool/media/music/exported
+          type: Directory
+      - name: series
+        hostPath:
+          path: /mnt/pool/media/series/exported
+          type: Directory
+      - name: cache
+        hostPath:
+          path: /var/cache/jellyfin
+          type: Directory
+      - name: config
+        hostPath:
+          path: /etc/servarr/jellyfin
+          type: Directory
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/servarr/jellyfin/ingress.yaml b/data.d/k3s-master/manifests.d/mieshu/servarr/jellyfin/ingress.yaml
new file mode 100644
index 0000000..a537f2b
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/servarr/jellyfin/ingress.yaml
@@ -0,0 +1,31 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: jellyfin
+  namespace: servarr
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: jellyfin
+    app.kubernetes.io/part-of: servarr
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-production"
+spec:
+  ingressClassName: traefik
+  tls:
+  - hosts:
+    - tv.tyil.nl
+    secretName: tls-nl.tyil.tv
+  rules:
+  - host: tv.tyil.nl
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: jellyfin
+            port:
+              number: 80
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/servarr/jellyfin/service.yaml b/data.d/k3s-master/manifests.d/mieshu/servarr/jellyfin/service.yaml
new file mode 100644
index 0000000..cc0ae84
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/servarr/jellyfin/service.yaml
@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: jellyfin
+  namespace: servarr
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: jellyfin
+    app.kubernetes.io/part-of: servarr
+spec:
+  selector:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: jellyfin
+    app.kubernetes.io/part-of: servarr
+  ports:
+  - name: http
+    port: 80
+    targetPort: 8096
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/servarr/lidarr/deployment.yaml b/data.d/k3s-master/manifests.d/mieshu/servarr/lidarr/deployment.yaml
new file mode 100644
index 0000000..019c618
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/servarr/lidarr/deployment.yaml
@@ -0,0 +1,59 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: lidarr
+  namespace: servarr
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: lidarr
+    app.kubernetes.io/part-of: servarr
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/created-by: tyil
+      app.kubernetes.io/managed-by: manual
+      app.kubernetes.io/name: lidarr
+      app.kubernetes.io/part-of: servarr
+  strategy:
+    type: Recreate
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/created-by: tyil
+        app.kubernetes.io/managed-by: manual
+        app.kubernetes.io/name: lidarr
+        app.kubernetes.io/part-of: servarr
+    spec:
+      containers:
+      - image: hotio/lidarr:release
+        name: lidarr
+        env:
+        - name: TZ
+          value: "Europe/Amsterdam"
+        - name: UMASK
+          value: "002"
+        - name: GUID
+          value: "169"
+        - name: PUID
+          value: "169"
+        ports:
+        - containerPort: 8686
+        volumeMounts:
+        - mountPath: /mnt/pool/media/music
+          name: music
+        - mountPath: /config
+          name: config
+      restartPolicy: Always
+      volumes:
+      - name: music
+        hostPath:
+          path: /mnt/pool/media/music
+          type: Directory
+      - name: config
+        hostPath:
+          path: /etc/servarr/lidarr
+          type: Directory
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/servarr/lidarr/ingress.yaml b/data.d/k3s-master/manifests.d/mieshu/servarr/lidarr/ingress.yaml
new file mode 100644
index 0000000..9e6fdf0
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/servarr/lidarr/ingress.yaml
@@ -0,0 +1,31 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: lidarr
+  namespace: servarr
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: lidarr
+    app.kubernetes.io/part-of: servarr
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-production"
+spec:
+  ingressClassName: traefik
+  tls:
+  - hosts:
+    - lidarr.arr.tyil.nl
+    secretName: tls-nl.tyil.arr.lidarr
+  rules:
+  - host: lidarr.arr.tyil.nl
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: lidarr
+            port:
+              number: 80
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/servarr/lidarr/service.yaml b/data.d/k3s-master/manifests.d/mieshu/servarr/lidarr/service.yaml
new file mode 100644
index 0000000..f154924
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/servarr/lidarr/service.yaml
@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: lidarr
+  namespace: servarr
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: lidarr
+    app.kubernetes.io/part-of: servarr
+spec:
+  selector:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: lidarr
+    app.kubernetes.io/part-of: servarr
+  ports:
+  - name: http
+    port: 80
+    targetPort: 8686
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/servarr/prowlarr/deployment.yaml b/data.d/k3s-master/manifests.d/mieshu/servarr/prowlarr/deployment.yaml
new file mode 100644
index 0000000..3ee6fcc
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/servarr/prowlarr/deployment.yaml
@@ -0,0 +1,53 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: prowlarr
+  namespace: servarr
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: prowlarr
+    app.kubernetes.io/part-of: servarr
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/created-by: tyil
+      app.kubernetes.io/managed-by: manual
+      app.kubernetes.io/name: prowlarr
+      app.kubernetes.io/part-of: servarr
+  strategy:
+    type: Recreate
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/created-by: tyil
+        app.kubernetes.io/managed-by: manual
+        app.kubernetes.io/name: prowlarr
+        app.kubernetes.io/part-of: servarr
+    spec:
+      containers:
+      - image: cr.hotio.dev/hotio/prowlarr:nightly
+        name: prowlarr
+        env:
+        - name: TZ
+          value: "Europe/Amsterdam"
+        - name: UMASK
+          value: "002"
+        - name: GUID
+          value: "169"
+        - name: PUID
+          value: "169"
+        ports:
+        - containerPort: 9696
+        volumeMounts:
+        - mountPath: /config
+          name: config
+      restartPolicy: Always
+      volumes:
+      - name: config
+        hostPath:
+          path: /etc/servarr/prowlarr
+          type: Directory
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/servarr/prowlarr/ingress.yaml b/data.d/k3s-master/manifests.d/mieshu/servarr/prowlarr/ingress.yaml
new file mode 100644
index 0000000..2a716da
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/servarr/prowlarr/ingress.yaml
@@ -0,0 +1,31 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: prowlarr
+  namespace: servarr
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: prowlarr
+    app.kubernetes.io/part-of: servarr
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-production"
+spec:
+  ingressClassName: traefik
+  tls:
+  - hosts:
+    - prowlarr.arr.tyil.nl
+    secretName: tls-nl.tyil.arr.prowlarr
+  rules:
+  - host: prowlarr.arr.tyil.nl
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: prowlarr
+            port:
+              number: 80
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/servarr/prowlarr/service.yaml b/data.d/k3s-master/manifests.d/mieshu/servarr/prowlarr/service.yaml
new file mode 100644
index 0000000..ff16907
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/servarr/prowlarr/service.yaml
@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: prowlarr
+  namespace: servarr
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: prowlarr
+    app.kubernetes.io/part-of: servarr
+spec:
+  selector:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: prowlarr
+    app.kubernetes.io/part-of: servarr
+  ports:
+  - name: http
+    port: 80
+    targetPort: 9696
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/servarr/radarr/deployment.yaml b/data.d/k3s-master/manifests.d/mieshu/servarr/radarr/deployment.yaml
new file mode 100644
index 0000000..7b93088
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/servarr/radarr/deployment.yaml
@@ -0,0 +1,65 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: radarr
+  namespace: servarr
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: radarr
+    app.kubernetes.io/part-of: servarr
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/created-by: tyil
+      app.kubernetes.io/managed-by: manual
+      app.kubernetes.io/name: radarr
+      app.kubernetes.io/part-of: servarr
+  strategy:
+    type: Recreate
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/created-by: tyil
+        app.kubernetes.io/managed-by: manual
+        app.kubernetes.io/name: radarr
+        app.kubernetes.io/part-of: servarr
+    spec:
+      containers:
+      - image: hotio/radarr:release
+        name: radarr
+        env:
+        - name: TZ
+          value: "Europe/Amsterdam"
+        - name: UMASK
+          value: "002"
+        - name: GUID
+          value: "169"
+        - name: PUID
+          value: "169"
+        ports:
+        - containerPort: 8787
+        volumeMounts:
+        - mountPath: /mnt/pool/media/anime-movies
+          name: anime-movies
+        - mountPath: /mnt/pool/media/movies
+          name: movies
+        - mountPath: /config
+          name: config
+      restartPolicy: Always
+      volumes:
+      - name: anime-movies
+        hostPath:
+          path: /mnt/pool/media/anime-movies
+          type: Directory
+      - name: movies
+        hostPath:
+          path: /mnt/pool/media/movies
+          type: Directory
+      - name: config
+        hostPath:
+          path: /etc/servarr/radarr
+          type: Directory
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/servarr/radarr/ingress.yaml b/data.d/k3s-master/manifests.d/mieshu/servarr/radarr/ingress.yaml
new file mode 100644
index 0000000..41d5265
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/servarr/radarr/ingress.yaml
@@ -0,0 +1,31 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: radarr
+  namespace: servarr
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: radarr
+    app.kubernetes.io/part-of: servarr
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-production"
+spec:
+  ingressClassName: traefik
+  tls:
+  - hosts:
+    - radarr.arr.tyil.nl
+    secretName: tls-nl.tyil.arr.radarr
+  rules:
+  - host: radarr.arr.tyil.nl
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: radarr
+            port:
+              number: 80
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/servarr/radarr/service.yaml b/data.d/k3s-master/manifests.d/mieshu/servarr/radarr/service.yaml
new file mode 100644
index 0000000..28df782
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/servarr/radarr/service.yaml
@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: radarr
+  namespace: servarr
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: radarr
+    app.kubernetes.io/part-of: servarr
+spec:
+  selector:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: radarr
+    app.kubernetes.io/part-of: servarr
+  ports:
+  - name: http
+    port: 80
+    targetPort: 7878
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/servarr/readarr/deployment.yaml b/data.d/k3s-master/manifests.d/mieshu/servarr/readarr/deployment.yaml
new file mode 100644
index 0000000..8b44e2f
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/servarr/readarr/deployment.yaml
@@ -0,0 +1,59 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: readarr
+  namespace: servarr
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: readarr
+    app.kubernetes.io/part-of: servarr
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/created-by: tyil
+      app.kubernetes.io/managed-by: manual
+      app.kubernetes.io/name: readarr
+      app.kubernetes.io/part-of: servarr
+  strategy:
+    type: Recreate
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/created-by: tyil
+        app.kubernetes.io/managed-by: manual
+        app.kubernetes.io/name: readarr
+        app.kubernetes.io/part-of: servarr
+    spec:
+      containers:
+      - image: hotio/readarr:testing
+        name: readarr
+        env:
+        - name: TZ
+          value: "Europe/Amsterdam"
+        - name: UMASK
+          value: "002"
+        - name: GUID
+          value: "169"
+        - name: PUID
+          value: "169"
+        ports:
+        - containerPort: 8787
+        volumeMounts:
+        - mountPath: /mnt/pool/media/books
+          name: books
+        - mountPath: /config
+          name: config
+      restartPolicy: Always
+      volumes:
+      - name: books
+        hostPath:
+          path: /mnt/pool/media/books
+          type: Directory
+      - name: config
+        hostPath:
+          path: /etc/servarr/readarr
+          type: Directory
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/servarr/readarr/ingress.yaml b/data.d/k3s-master/manifests.d/mieshu/servarr/readarr/ingress.yaml
new file mode 100644
index 0000000..df4fcbd
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/servarr/readarr/ingress.yaml
@@ -0,0 +1,31 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: readarr
+  namespace: servarr
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: readarr
+    app.kubernetes.io/part-of: servarr
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-production"
+spec:
+  ingressClassName: traefik
+  tls:
+  - hosts:
+    - readarr.arr.tyil.nl
+    secretName: tls-nl.tyil.arr.readarr
+  rules:
+  - host: readarr.arr.tyil.nl
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: readarr
+            port:
+              number: 80
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/servarr/readarr/service.yaml b/data.d/k3s-master/manifests.d/mieshu/servarr/readarr/service.yaml
new file mode 100644
index 0000000..3d6cdc7
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/servarr/readarr/service.yaml
@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: readarr
+  namespace: servarr
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: readarr
+    app.kubernetes.io/part-of: servarr
+spec:
+  selector:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: readarr
+    app.kubernetes.io/part-of: servarr
+  ports:
+  - name: http
+    port: 80
+    targetPort: 8787
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/servarr/sonarr/deployment.yaml b/data.d/k3s-master/manifests.d/mieshu/servarr/sonarr/deployment.yaml
new file mode 100644
index 0000000..c6ad6df
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/servarr/sonarr/deployment.yaml
@@ -0,0 +1,65 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: sonarr
+  namespace: servarr
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: sonarr
+    app.kubernetes.io/part-of: servarr
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/created-by: tyil
+      app.kubernetes.io/managed-by: manual
+      app.kubernetes.io/name: sonarr
+      app.kubernetes.io/part-of: servarr
+  strategy:
+    type: Recreate
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/created-by: tyil
+        app.kubernetes.io/managed-by: manual
+        app.kubernetes.io/name: sonarr
+        app.kubernetes.io/part-of: servarr
+    spec:
+      containers:
+      - image: hotio/sonarr:release
+        name: sonarr
+        env:
+        - name: TZ
+          value: "Europe/Amsterdam"
+        - name: UMASK
+          value: "002"
+        - name: GUID
+          value: "169"
+        - name: PUID
+          value: "169"
+        ports:
+        - containerPort: 8787
+        volumeMounts:
+        - mountPath: /mnt/pool/media/anime-series
+          name: anime-series
+        - mountPath: /mnt/pool/media/series
+          name: series
+        - mountPath: /config
+          name: config
+      restartPolicy: Always
+      volumes:
+      - name: anime-series
+        hostPath:
+          path: /mnt/pool/media/anime-series
+          type: Directory
+      - name: series
+        hostPath:
+          path: /mnt/pool/media/series
+          type: Directory
+      - name: config
+        hostPath:
+          path: /etc/servarr/sonarr
+          type: Directory
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/servarr/sonarr/ingress.yaml b/data.d/k3s-master/manifests.d/mieshu/servarr/sonarr/ingress.yaml
new file mode 100644
index 0000000..5bd1f0f
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/servarr/sonarr/ingress.yaml
@@ -0,0 +1,31 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: sonarr
+  namespace: servarr
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: sonarr
+    app.kubernetes.io/part-of: servarr
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-production"
+spec:
+  ingressClassName: traefik
+  tls:
+  - hosts:
+    - sonarr.arr.tyil.nl
+    secretName: tls-nl.tyil.arr.sonarr
+  rules:
+  - host: sonarr.arr.tyil.nl
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: sonarr
+            port:
+              number: 80
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/servarr/sonarr/service.yaml b/data.d/k3s-master/manifests.d/mieshu/servarr/sonarr/service.yaml
new file mode 100644
index 0000000..5251050
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/servarr/sonarr/service.yaml
@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: sonarr
+  namespace: servarr
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: sonarr
+    app.kubernetes.io/part-of: servarr
+spec:
+  selector:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: sonarr
+    app.kubernetes.io/part-of: servarr
+  ports:
+  - name: http
+    port: 80
+    targetPort: 8989
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/servarr/unpackerr/deployment.yaml b/data.d/k3s-master/manifests.d/mieshu/servarr/unpackerr/deployment.yaml
new file mode 100644
index 0000000..44e3f51
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/servarr/unpackerr/deployment.yaml
@@ -0,0 +1,87 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: unpackerr
+  namespace: servarr
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: unpackerr
+    app.kubernetes.io/part-of: servarr
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/created-by: tyil
+      app.kubernetes.io/managed-by: manual
+      app.kubernetes.io/name: unpackerr
+      app.kubernetes.io/part-of: servarr
+  strategy:
+    type: Recreate
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/created-by: tyil
+        app.kubernetes.io/managed-by: manual
+        app.kubernetes.io/name: unpackerr
+        app.kubernetes.io/part-of: servarr
+    spec:
+      containers:
+      - image: golift/unpackerr:latest
+        name: unpackerr
+        env:
+        - name: TZ
+          value: "Europe/Amsterdam"
+        - name: UMASK
+          value: "002"
+        - name: GUID
+          value: "169"
+        - name: PUID
+          value: "169"
+        volumeMounts:
+        - mountPath: /mnt/pool/media/anime-movies
+          name: anime-movies
+        - mountPath: /mnt/pool/media/anime-series
+          name: anime-series
+        - mountPath: /mnt/pool/media/books
+          name: books
+        - mountPath: /mnt/pool/media/movies
+          name: movies
+        - mountPath: /mnt/pool/media/music
+          name: music
+        - mountPath: /mnt/pool/media/series
+          name: series
+        - mountPath: /config
+          name: config
+      restartPolicy: Always
+      volumes:
+      - name: anime-series
+        hostPath:
+          path: /mnt/pool/media/anime-series
+          type: Directory
+      - name: anime-movies
+        hostPath:
+          path: /mnt/pool/media/anime-movies
+          type: Directory
+      - name: books
+        hostPath:
+          path: /mnt/pool/media/books
+          type: Directory
+      - name: movies
+        hostPath:
+          path: /mnt/pool/media/movies
+          type: Directory
+      - name: music
+        hostPath:
+          path: /mnt/pool/media/music
+          type: Directory
+      - name: series
+        hostPath:
+          path: /mnt/pool/media/series
+          type: Directory
+      - name: config
+        hostPath:
+          path: /etc/servarr/unpackerr
+          type: Directory
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/servarr/whisparr/deployment.yaml b/data.d/k3s-master/manifests.d/mieshu/servarr/whisparr/deployment.yaml
new file mode 100644
index 0000000..f2fac19
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/servarr/whisparr/deployment.yaml
@@ -0,0 +1,59 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: whisparr
+  namespace: servarr
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: whisparr
+    app.kubernetes.io/part-of: servarr
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/created-by: tyil
+      app.kubernetes.io/managed-by: manual
+      app.kubernetes.io/name: whisparr
+      app.kubernetes.io/part-of: servarr
+  strategy:
+    type: Recreate
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/created-by: tyil
+        app.kubernetes.io/managed-by: manual
+        app.kubernetes.io/name: whisparr
+        app.kubernetes.io/part-of: servarr
+    spec:
+      containers:
+      - image: cr.hotio.dev/hotio/whisparr:nightly
+        name: whisparr
+        env:
+        - name: TZ
+          value: "Europe/Amsterdam"
+        - name: UMASK
+          value: "002"
+        - name: GUID
+          value: "169"
+        - name: PUID
+          value: "169"
+        ports:
+        - containerPort: 6969
+        volumeMounts:
+        - mountPath: /mnt/pool/media/porn
+          name: porn
+        - mountPath: /config
+          name: config
+      restartPolicy: Always
+      volumes:
+      - name: porn
+        hostPath:
+          path: /mnt/pool/media/porn
+          type: Directory
+      - name: config
+        hostPath:
+          path: /etc/servarr/whisparr
+          type: Directory
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/servarr/whisparr/ingress.yaml b/data.d/k3s-master/manifests.d/mieshu/servarr/whisparr/ingress.yaml
new file mode 100644
index 0000000..d99d265
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/servarr/whisparr/ingress.yaml
@@ -0,0 +1,31 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: whisparr
+  namespace: servarr
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: whisparr
+    app.kubernetes.io/part-of: servarr
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-production"
+spec:
+  ingressClassName: traefik
+  tls:
+  - hosts:
+    - whisparr.arr.tyil.nl
+    secretName: tls-nl.tyil.arr.whisparr
+  rules:
+  - host: whisparr.arr.tyil.nl
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: whisparr
+            port:
+              number: 80
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/servarr/whisparr/service.yaml b/data.d/k3s-master/manifests.d/mieshu/servarr/whisparr/service.yaml
new file mode 100644
index 0000000..abafcaf
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/servarr/whisparr/service.yaml
@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: whisparr
+  namespace: servarr
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: whisparr
+    app.kubernetes.io/part-of: servarr
+spec:
+  selector:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: whisparr
+    app.kubernetes.io/part-of: servarr
+  ports:
+  - name: http
+    port: 80
+    targetPort: 6969
+...