# helpme.tips — static site deployment. Reuses the shared static-nginx-conf ConfigMap
# (defined in bdj/k8s/static-sites.yaml) and the cluster pattern:
# Traefik edge + cert-manager Let's Encrypt.
# NOTE: Ingress/Certificate stay pending until helpme.tips is added to Cloudflare
# and the cert-manager token scope covers the zone.
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: static-hts
  labels:
    site: helpme.tips
spec:
  replicas: 1
  selector:
    matchLabels:
      site: helpme.tips
  template:
    metadata:
      labels:
        site: helpme.tips
    spec:
      nodeSelector:
        kubernetes.io/hostname: djg-oracle-sl
      tolerations:
        - key: node-role.kubernetes.io/master
          operator: Exists
          effect: NoSchedule
        - key: node-role.kubernetes.io/control-plane
          operator: Exists
          effect: NoSchedule
      containers:
        - name: nginx
          image: nginx:alpine
          volumeMounts:
            - name: conf
              mountPath: /etc/nginx/nginx.conf
              subPath: nginx.conf
              readOnly: true
            - name: html
              mountPath: /usr/share/nginx/html
              readOnly: true
          resources:
            requests:
              cpu: 20m
              memory: 32Mi
            limits:
              memory: 128Mi
          readinessProbe:
            httpGet: {path: /, port: 80}
            initialDelaySeconds: 2
            periodSeconds: 20
      volumes:
        - name: conf
          configMap:
            name: static-nginx-conf
        - name: html
          hostPath:
            path: /home/opc/zai-home-base/sites/helpme-tips
            type: Directory
---
apiVersion: v1
kind: Service
metadata:
  name: static-hts
spec:
  selector:
    site: helpme.tips
  ports:
    - port: 80
      targetPort: 80
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: helpme-tips
spec:
  rules:
    - host: helpme.tips
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: static-hts
                port:
                  number: 80
    - host: www.helpme.tips
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: static-hts
                port:
                  number: 80
  tls:
    - hosts:
        - helpme.tips
        - www.helpme.tips
      secretName: helpme-tips-tls
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: helpme-tips
spec:
  secretName: helpme-tips-tls
  issuerRef:
    name: letsencrypt-prod
    kind: ClusterIssuer
  dnsNames:
    - helpme.tips
    - www.helpme.tips