feat: Add ghost

k8s/apps/common/bitnami-repository.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: bitnami
+  namespace: flux-system
+spec:
+  interval: 10m0s
+  url: https://charts.bitnami.com/bitnami
+

k8s/apps/ghost/kustomization.yaml

@@ -0,0 +1,8 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - namespace.yaml
+  - repository.yaml
+  - release.yaml
+

k8s/apps/ghost/namespace.yaml

@@ -0,0 +1,6 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: ghost
+

k8s/apps/ghost/release.yaml

@@ -0,0 +1,52 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: ghost
+  namespace: ghost
+spec:
+  interval: 10m0s
+  chart:
+    spec:
+      chart: ghost
+      reconcileStrategy: ChartVersion
+      sourceRef:
+        kind: HelmRepository
+        name: bitnami
+        namespace: flux-system
+  valuesFrom:
+    - kind: Secret
+      name: ghost-creds
+      valuesKey: ghost-password
+      targetPath: ghostPassword
+  values:
+    global:
+      defaultStorageClass: longhorn
+
+    ingress:
+      enabled: true
+      annotations:
+        cert-manager.io/cluster-issuer: le-cf-issuer
+        kubernetes.io/ingress.class: traefik
+      ingressClassName: traefik
+      hostname: blog.mnke.org
+      tls: true
+
+    allowEmptyPassword: false
+    ghostEmail: tonydu121@hotmail.com
+    ghostHost: blog.mnke.org
+    # ghostPassword: ""
+
+    mysql:
+      enabled: false
+
+    externalDatabase:
+      host: db.home.mnke.org
+      port: 3306
+      user: ghost
+      database: ghost
+      existingSecret: ghost-db-creds
+
+    service:
+      type: LoadBalancer
+

k8s/apps/ghost/secret.yaml

@@ -0,0 +1,37 @@
+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: ghost-db-creds
+  namespace: ghost
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: infisical
+
+  target:
+    name: ghost-db-creds
+
+  data:
+    - secretKey: mysql-password
+      remoteRef:
+        key: ghost-mysql-password
+
+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: ghost-creds
+  namespace: ghost
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: infisical
+
+  target:
+    name: ghost-creds
+
+  data:
+    - secretKey: ghost-password
+      remoteRef:
+        key: ghost-password

k8s/apps/kustomization.yaml

@@ -1,6 +1,8 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
+  - common
   - kube-prometheus-stack
   - uptime-kuma
   - rancher
+  - ghost