added Caddyfile

.gitignore

@@ -1,3 +1,5 @@
+.expo-token
+.gitea-api-token
 docs/
 
 tofu/*.tfstate
@@ -6,3 +8,5 @@ tofu/.terraform/
 tofu/terraform.tfvars
 
 gitea/drone.env
+
+state/garage/rpc_secret

caddy/Caddyfile

@@ -0,0 +1,30 @@
+# Ein Auszug aus meiner caddy-config auf dem VPS. Beinhaltet nur die Konfigurationen,
+# die für diese Projekt von Bedeutung sind.
+
+https://home.gilmour109.de {
+        reverse_proxy localhost:3006
+}
+
+https://gitea.gilmour109.de {
+        reverse_proxy localhost:3000
+}
+
+https://calchat.gilmour109.de {
+        reverse_proxy localhost:3001
+}
+
+https://garage.gilmour109.de {
+        reverse_proxy localhost:3900
+}
+
+https://releases.gilmour109.de {
+        header Access-Control-Allow-Origin "https://home.gilmour109.de"
+        header Access-Control-Allow-Methods "GET, HEAD, OPTIONS"
+        reverse_proxy localhost:3902 {
+                header_up Host calchat-releases.web.garage
+        }
+}
+
+https://drone.gilmour109.de {
+        reverse_proxy localhost:2201
+}

gitea/Dockerfile.e2e-tools

@@ -0,0 +1,17 @@
+FROM alpine:3.21
+
+RUN apk add --no-cache \
+    bash \
+    curl \
+    jq \
+    gettext \
+    openssh-client \
+    sshpass
+
+RUN curl -fsSL https://get.opentofu.org/install-opentofu.sh | sh -s -- --install-method apk
+
+RUN mkdir -p /root/.ssh && \
+    echo "Host *" > /root/.ssh/config && \
+    echo "  StrictHostKeyChecking no" >> /root/.ssh/config && \
+    echo "  UserKnownHostsFile /dev/null" >> /root/.ssh/config && \
+    chmod 600 /root/.ssh/config

gitea/Dockerfile.eas-build

@@ -0,0 +1,4 @@
+FROM cimg/android:2026.02-node
+
+USER root
+RUN npm install -g eas-cli

kubernetes/manifest.yml

@@ -2,6 +2,8 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: mongo-${NAME}
+  labels:
+    deploy-name: "${NAME}"
 spec:
   replicas: 1
   selector:
@@ -11,6 +13,7 @@ spec:
     metadata:
       labels:
         app: mongo-${NAME}
+        deploy-name: "${NAME}"
     spec:
       containers:
         - name: mongo
@@ -29,6 +32,8 @@ apiVersion: v1
 kind: Service
 metadata:
   name: mongo-${NAME}
+  labels:
+    deploy-name: "${NAME}"
 spec:
   selector:
     app: mongo-${NAME}
@@ -41,6 +46,8 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: calchat-server-${NAME}
+  labels:
+    deploy-name: "${NAME}"
 spec:
   replicas: 1
   selector:
@@ -50,6 +57,7 @@ spec:
     metadata:
       labels:
         app: calchat-server-${NAME}
+        deploy-name: "${NAME}"
     spec:
       containers:
         - name: calchat-server
@@ -77,6 +85,8 @@ apiVersion: v1
 kind: Service
 metadata:
   name: calchat-server-${NAME}
+  labels:
+    deploy-name: "${NAME}"
 spec:
   selector:
     app: calchat-server-${NAME}
@@ -89,6 +99,8 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: calchat-server-${NAME}
+  labels:
+    deploy-name: "${NAME}"
 spec:
   rules:
   - host: "${NAME}.192.168.178.201.nip.io"

state/garage/docker-compose.yml

@@ -9,5 +9,6 @@ services:
       - "3903:3903"
     volumes:
       - ./garage.toml:/etc/garage.toml
+      - ./rpc_secret:/etc/garage/rpc_secret:ro
       - ./meta:/var/lib/garage/meta
       - ./data:/var/lib/garage/data

state/garage/garage.toml

@@ -5,7 +5,7 @@ metadata_dir = "/var/lib/garage/meta"
 data_dir = "/var/lib/garage/data"
 db_engine = "lmdb"
 
-rpc_secret = "09c4a7f218ef7a734a77bb9b4a7165b24ebe9f59b4e7d18e72f1ace5b8f0c7f3"
+rpc_secret_file = "/etc/garage/rpc_secret"
 rpc_bind_addr = "[::]:3901"
 
 [s3_api]

tofu/drone-runner.tf

@@ -46,16 +46,16 @@ resource "proxmox_virtual_environment_container" "drone_runner" {
 
   disk {
     datastore_id = "local-lvm"
-    size         = 16
+    size         = 64
   }
 
   cpu {
-    cores = 2
+    cores = 4
   }
 
   memory {
-    dedicated = 2048
-    swap      = 512
+    dedicated = 8192
+    swap      = 4096
   }
 
   startup {