Deploy various k8s services on mieshu

20 files changed, 636 insertions, 0 deletions

diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/cgit/configmap.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/cgit/configmap.yaml
new file mode 100644
index 0000000..bdbc8b2
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/cgit/configmap.yaml
@@ -0,0 +1,68 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: cgit
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: cgit
+    app.kubernetes.io/part-of: personal-services
+data:
+  cgitrc: |
+    root-desc=All public repos from tyil
+
+    source-filter=/usr/lib/cgit/filters/syntax-highlighting.sh
+    about-filter=/usr/lib/cgit/filters/about-formatting.sh
+
+    readme=:INSTALL
+    readme=:INSTALL.htm
+    readme=:INSTALL.html
+    readme=:INSTALL.md
+    readme=:INSTALL.mkd
+    readme=:INSTALL.rst
+    readme=:INSTALL.txt
+    readme=:README
+    readme=:README.htm
+    readme=:README.html
+    readme=:README.md
+    readme=:README.mkd
+    readme=:README.pod6
+    readme=:README.rakudoc
+    readme=:README.rst
+    readme=:README.txt
+    readme=:install
+    readme=:install.htm
+    readme=:install.html
+    readme=:install.md
+    readme=:install.mkd
+    readme=:install.rst
+    readme=:install.txt
+    readme=:readme
+    readme=:readme.htm
+    readme=:readme.html
+    readme=:readme.md
+    readme=:readme.mkd
+    readme=:readme.rst
+    readme=:readme.txt
+
+    css=/cgit-css/cgit.css
+    logo=/cgit-css/cgit.png
+
+    #cache-root=/var/cache/cgit
+    #cache-size=1000
+
+    clone-prefix=https://git.tyil.nl
+    enable-git-config=1
+    enable-index-links=1
+    enable-index-owner=0
+    enable-log-filecount=1
+    enable-log-linecount=1
+    remove-suffix=1
+    robots=index, follow
+    scan-path=/srv/git/
+    section-from-path=1
+    snapshots=tar.gz tar.bz2
+    virtual-root=/
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/cgit/deployment.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/cgit/deployment.yaml
new file mode 100644
index 0000000..ddb27ac
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/cgit/deployment.yaml
@@ -0,0 +1,50 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: cgit
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: cgit
+    app.kubernetes.io/part-of: personal-services
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/created-by: tyil
+      app.kubernetes.io/managed-by: manual
+      app.kubernetes.io/name: cgit
+      app.kubernetes.io/part-of: personal-services
+  strategy:
+    type: RollingUpdate
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/created-by: tyil
+        app.kubernetes.io/managed-by: manual
+        app.kubernetes.io/name: cgit
+        app.kubernetes.io/part-of: personal-services
+    spec:
+      containers:
+      - image: emarcs/nginx-cgit
+        name: cgit
+        ports:
+        - containerPort: 80
+        volumeMounts:
+        - mountPath: /srv/git
+          name: data
+        - mountPath: /etc/cgitrc
+          subPath: cgitrc
+          name: config
+      restartPolicy: Always
+      volumes:
+      - name: data
+        hostPath:
+          path: /mnt/pool/git
+          type: DirectoryOrCreate
+      - name: config
+        configMap:
+          name: cgit
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/cgit/ingress.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/cgit/ingress.yaml
new file mode 100644
index 0000000..4dcf92e
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/cgit/ingress.yaml
@@ -0,0 +1,31 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: cgit
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: cgit
+    app.kubernetes.io/part-of: personal-services
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-production"
+spec:
+  ingressClassName: traefik
+  tls:
+  - hosts:
+    - git.tyil.nl
+    secretName: tls-nl.tyil.git
+  rules:
+  - host: git.tyil.nl
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: cgit
+            port:
+              number: 80
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/cgit/service.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/cgit/service.yaml
new file mode 100644
index 0000000..ac2ab26
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/cgit/service.yaml
@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: cgit
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: cgit
+    app.kubernetes.io/part-of: personal-services
+spec:
+  selector:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: cgit
+    app.kubernetes.io/part-of: personal-services
+  ports:
+  - name: http
+    port: 80
+    targetPort: 80
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/deployment-kroki-blockdiag.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/deployment-kroki-blockdiag.yaml
new file mode 100644
index 0000000..6eb7fea
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/deployment-kroki-blockdiag.yaml
@@ -0,0 +1,34 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: kroki-blockdiag
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: kroki-blockdiag
+    app.kubernetes.io/part-of: personal-services
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/created-by: tyil
+      app.kubernetes.io/managed-by: manual
+      app.kubernetes.io/name: kroki-blockdiag
+      app.kubernetes.io/part-of: personal-services
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/created-by: tyil
+        app.kubernetes.io/managed-by: manual
+        app.kubernetes.io/name: kroki-blockdiag
+        app.kubernetes.io/part-of: personal-services
+    spec:
+      containers:
+      - image: yuzutech/kroki-blockdiag
+        name: blockdiag
+        ports:
+        - containerPort: 8001
+      restartPolicy: Always
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/deployment-kroki-bpmn.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/deployment-kroki-bpmn.yaml
new file mode 100644
index 0000000..26acd15
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/deployment-kroki-bpmn.yaml
@@ -0,0 +1,34 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: kroki-bpmn
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: kroki-bpmn
+    app.kubernetes.io/part-of: personal-services
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/created-by: tyil
+      app.kubernetes.io/managed-by: manual
+      app.kubernetes.io/name: kroki-bpmn
+      app.kubernetes.io/part-of: personal-services
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/created-by: tyil
+        app.kubernetes.io/managed-by: manual
+        app.kubernetes.io/name: kroki-bpmn
+        app.kubernetes.io/part-of: personal-services
+    spec:
+      containers:
+      - image: yuzutech/kroki-bpmn
+        name: bpmn
+        ports:
+        - containerPort: 8003
+      restartPolicy: Always
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/deployment-kroki-excalidraw.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/deployment-kroki-excalidraw.yaml
new file mode 100644
index 0000000..d1c6699
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/deployment-kroki-excalidraw.yaml
@@ -0,0 +1,34 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: kroki-excalidraw
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: kroki-excalidraw
+    app.kubernetes.io/part-of: personal-services
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/created-by: tyil
+      app.kubernetes.io/managed-by: manual
+      app.kubernetes.io/name: kroki-excalidraw
+      app.kubernetes.io/part-of: personal-services
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/created-by: tyil
+        app.kubernetes.io/managed-by: manual
+        app.kubernetes.io/name: kroki-excalidraw
+        app.kubernetes.io/part-of: personal-services
+    spec:
+      containers:
+      - image: yuzutech/kroki-excalidraw
+        name: excalidraw
+        ports:
+        - containerPort: 8004
+      restartPolicy: Always
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/deployment-kroki-mermaid.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/deployment-kroki-mermaid.yaml
new file mode 100644
index 0000000..ee6edaf
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/deployment-kroki-mermaid.yaml
@@ -0,0 +1,33 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: kroki-mermaid
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: kroki-mermaid
+    app.kubernetes.io/part-of: personal-services
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/created-by: tyil
+      app.kubernetes.io/managed-by: manual
+      app.kubernetes.io/name: kroki-mermaid
+      app.kubernetes.io/part-of: personal-services
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/created-by: tyil
+        app.kubernetes.io/managed-by: manual
+        app.kubernetes.io/name: kroki-mermaid
+        app.kubernetes.io/part-of: personal-services
+    spec:
+      containers:
+      - image: yuzutech/kroki-mermaid
+        name: mermaid
+        ports:
+        - containerPort: 8002
+      restartPolicy: Always
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/deployment-kroki.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/deployment-kroki.yaml
new file mode 100644
index 0000000..f192697
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/deployment-kroki.yaml
@@ -0,0 +1,53 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: kroki
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: kroki
+    app.kubernetes.io/part-of: personal-services
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/created-by: tyil
+      app.kubernetes.io/managed-by: manual
+      app.kubernetes.io/name: kroki
+      app.kubernetes.io/part-of: personal-services
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/created-by: tyil
+        app.kubernetes.io/managed-by: manual
+        app.kubernetes.io/name: kroki
+        app.kubernetes.io/part-of: personal-services
+    spec:
+      containers:
+      - image: yuzutech/kroki
+        name: kroki
+        env:
+        - name: KROKI_BLOCKDIAG_HOST
+          value: kroki-blockdiag
+        - name: KROKI_BLOCKDIAG_PORT
+          value: "80"
+        - name: KROKI_BPMN_HOST
+          value: kroki-bpmn
+        - name: KROKI_BPMN_PORT
+          value: "80"
+        - name: KROKI_EXCALIDRAW_HOST
+          value: kroki-excalidraw
+        - name: KROKI_EXCALIDRAW_PORT
+          value: "80"
+        - name: KROKI_MERMAID_HOST
+          value: kroki-mermaid
+        - name: KROKI_MERMAID_PORT
+          value: "80"
+        - name: KROKI_MAX_URI_LENGTH
+          value: "4096"
+        ports:
+        - containerPort: 8000
+      restartPolicy: Always
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/ingress-kroki.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/ingress-kroki.yaml
new file mode 100644
index 0000000..bffcfd3
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/ingress-kroki.yaml
@@ -0,0 +1,30 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: kroki
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: kroki
+    app.kubernetes.io/part-of: personal-services
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-production"
+spec:
+  tls:
+  - hosts:
+    - kroki.tyil.nl
+    secretName: tls-nl.tyil.kroki
+  rules:
+  - host: kroki.tyil.nl
+    http:
+      paths:
+      - pathType: Prefix
+        path: "/"
+        backend:
+          service:
+            name: kroki-http
+            port:
+              number: 80
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/service-kroki-blockdiag.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/service-kroki-blockdiag.yaml
new file mode 100644
index 0000000..7ac6c4e
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/service-kroki-blockdiag.yaml
@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: kroki-blockdiag
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: kroki-blockdiag
+    app.kubernetes.io/part-of: personal-services
+spec:
+  selector:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: kroki-blockdiag
+    app.kubernetes.io/part-of: personal-services
+  ports:
+  - name: http
+    port: 80
+    targetPort: 8001
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/service-kroki-bpmn.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/service-kroki-bpmn.yaml
new file mode 100644
index 0000000..73e2c58
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/service-kroki-bpmn.yaml
@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: kroki-bpmn
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: kroki-bpmn
+    app.kubernetes.io/part-of: personal-services
+spec:
+  selector:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: kroki-bpmn
+    app.kubernetes.io/part-of: personal-services
+  ports:
+  - name: http
+    port: 80
+    targetPort: 8003
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/service-kroki-excalidraw.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/service-kroki-excalidraw.yaml
new file mode 100644
index 0000000..a011428
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/service-kroki-excalidraw.yaml
@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: kroki-excalidraw
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: kroki-excalidraw
+    app.kubernetes.io/part-of: personal-services
+spec:
+  selector:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: kroki-excalidraw
+    app.kubernetes.io/part-of: personal-services
+  ports:
+  - name: http
+    port: 80
+    targetPort: 8004
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/service-kroki-mermaid.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/service-kroki-mermaid.yaml
new file mode 100644
index 0000000..872433c
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/service-kroki-mermaid.yaml
@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: kroki-mermaid
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: kroki-mermaid
+    app.kubernetes.io/part-of: personal-services
+spec:
+  selector:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: kroki-mermaid
+    app.kubernetes.io/part-of: personal-services
+  ports:
+  - name: http
+    port: 80
+    targetPort: 8002
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/service-kroki.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/service-kroki.yaml
new file mode 100644
index 0000000..0c98dc8
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/kroki/service-kroki.yaml
@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: kroki
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: kroki
+    app.kubernetes.io/part-of: personal-services
+spec:
+  selector:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: kroki
+    app.kubernetes.io/part-of: personal-services
+  ports:
+  - name: http
+    port: 80
+    targetPort: 8000
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/lldap/ingress.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/lldap/ingress.yaml
index 35180f9..4982b4b 100644
--- a/data.d/k3s-master/manifests.d/mieshu/personal-services/lldap/ingress.yaml
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/lldap/ingress.yaml
@@ -9,8 +9,15 @@ metadata:
     app.kubernetes.io/managed-by: manual
     app.kubernetes.io/name: lldap
     app.kubernetes.io/part-of: personal-services
+  annotations:
+    traefik.ingress.kubernetes.io/router.middlewares: kube-system-redirect-https@kubernetescrd
+    cert-manager.io/cluster-issuer: "letsencrypt-production"
 spec:
   ingressClassName: traefik
+  tls:
+  - hosts:
+    - ldap.tyil.nl
+    secretName: tls-nl.tyil.ldap
   rules:
   - host: ldap.tyil.nl
     http:
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/nextcloud/cron.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/nextcloud/cron.yaml
new file mode 100644
index 0000000..d362c05
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/nextcloud/cron.yaml
@@ -0,0 +1,33 @@
+---
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: nextcloud
+  namespace: personal-services
+spec:
+  schedule: "*/5 * * * *"
+  jobTemplate:
+    spec:
+      template:
+        spec:
+          securityContext:
+            runAsUser: 33
+            runAsGroup: 33
+          containers:
+          - name: nextcloud
+            image: nextcloud:27
+            command:
+            - php
+            args:
+            - -f
+            - /var/www/html/cron.php
+            volumeMounts:
+            - mountPath: /var/www/html
+              name: data
+          restartPolicy: OnFailure
+          volumes:
+          - name: data
+            hostPath:
+              path: /mnt/pool/nextcloud
+              type: Directory
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/nextcloud/deployment.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/nextcloud/deployment.yaml
new file mode 100644
index 0000000..2713a14
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/nextcloud/deployment.yaml
@@ -0,0 +1,44 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: nextcloud
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: nextcloud
+    app.kubernetes.io/part-of: personal-services
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/created-by: tyil
+      app.kubernetes.io/managed-by: manual
+      app.kubernetes.io/name: nextcloud
+      app.kubernetes.io/part-of: personal-services
+  strategy:
+    type: RollingUpdate
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/created-by: tyil
+        app.kubernetes.io/managed-by: manual
+        app.kubernetes.io/name: nextcloud
+        app.kubernetes.io/part-of: personal-services
+    spec:
+      containers:
+      - image: nextcloud:27
+        name: nextcloud
+        ports:
+        - containerPort: 80
+        volumeMounts:
+        - mountPath: /var/www/html
+          name: data
+      restartPolicy: Always
+      volumes:
+      - name: data
+        hostPath:
+          path: /mnt/pool/nextcloud
+          type: Directory
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/nextcloud/ingress.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/nextcloud/ingress.yaml
new file mode 100644
index 0000000..106926f
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/nextcloud/ingress.yaml
@@ -0,0 +1,31 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: nextcloud
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: nextcloud
+    app.kubernetes.io/part-of: personal-services
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-production"
+spec:
+  ingressClassName: traefik
+  tls:
+  - hosts:
+    - cloud.tyil.nl
+    secretName: tls-nl.tyil.cloud
+  rules:
+  - host: cloud.tyil.nl
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: nextcloud
+            port:
+              number: 80
+...
diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/nextcloud/service.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/nextcloud/service.yaml
new file mode 100644
index 0000000..fd9a7d6
--- /dev/null
+++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/nextcloud/service.yaml
@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: nextcloud
+  namespace: personal-services
+  labels:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: nextcloud
+    app.kubernetes.io/part-of: personal-services
+spec:
+  selector:
+    app.kubernetes.io/created-by: tyil
+    app.kubernetes.io/managed-by: manual
+    app.kubernetes.io/name: nextcloud
+    app.kubernetes.io/part-of: personal-services
+  ports:
+  - name: http
+    port: 80
+    targetPort: 80
+...