begin nginx/ssl w/o ingress

apps/nginx-certbot/base/deployment.yaml

@@ -0,0 +1,40 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: etherpadlite
+spec:
+  selector:
+    matchLabels:
+      app: etherpadsooooolite
+  replicas: 1
+  template:
+    metadata:
+      labels:
+        app: etherpadsooooolite
+    spec:
+      containers:
+        - name: etherpad
+          image: etherpad/etherpad:1.8.13
+          ports:
+            - containerPort: 9001
+          volumeMounts:
+            - name: etherpadconfig
+              mountPath: "/opt/etherpad-lite/settings.json"
+              subPath: settings.json
+      volumes:
+        - name: etherpadconfig
+          configMap:
+            name: etherpadliteconfig
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: etherpad
+  labels:
+    app: etherpadsooooolite
+spec:
+  type: ClusterIP
+  ports:
+   - port: 9001
+  selector:
+   app: etherpadsooooolite

apps/nginx-certbot/base/kustomization.yaml

@@ -0,0 +1,10 @@
+configMapGenerator:
+- name:
+  files:
+  - settings.json=settings.json
+
+commonLabels:
+  app: etherpadlite
+  customer: xyz
+resources:
+- deployment.yaml

apps/nginx-certbot/base/nginx.conf

@@ -0,0 +1,20 @@
+server {
+    listen *:443 ssl http2;
+    listen [::]:443 ssl http2;
+
+    server_name www.schottelius.org;
+
+    access_log /home/services/www/nico/www.schottelius.org/logs/access.log;
+
+    ssl_certificate /etc/letsencrypt/live/www.schottelius.org/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/www.schottelius.org/privkey.pem;
+
+    index index.html index.htm;
+
+
+
+    location / {
+        root /home/services/www/nico/www.schottelius.org/www;
+        autoindex on;
+    }
+}

apps/nginx-certbot/overlays/ungleich/kustomization.yaml

@@ -0,0 +1,6 @@
+commonLabels:
+  app: ungleichetherpad
+  customer: ungleich
+bases:
+- ../../base
+namePrefix: ungleich-