34553f3bec
Mirrors the prod deploy-k3s/ setup but runs all services in-cluster on a single node: PostgreSQL (replaces Neon), MinIO S3-compatible storage (replaces B2), Redis, API, worker, and admin. Includes fully automated setup scripts (00-init through 04-verify), server hardening (SSH, fail2ban, ufw), Let's Encrypt TLS via Traefik, network policies, RBAC, and security contexts matching prod. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
21 lines
298 B
Plaintext
21 lines
298 B
Plaintext
# Single config file (contains tokens and credentials)
|
|
config.yaml
|
|
|
|
# Generated files
|
|
kubeconfig
|
|
cluster-config.yaml
|
|
prod.env
|
|
|
|
# Secret files
|
|
secrets/*.txt
|
|
secrets/*.p8
|
|
secrets/*.pem
|
|
secrets/*.key
|
|
secrets/*.crt
|
|
!secrets/README.md
|
|
|
|
# Terraform / Hetzner state
|
|
*.tfstate
|
|
*.tfstate.backup
|
|
.terraform/
|