Initial cursor-devbox: image, deploy manifests, and Flux SHA automation.

Owns Dockerfile/CI and node1 workload YAML; ImagePolicy elects run_number-sha tags and ImageUpdateAutomation commits them into deploy/.
2026-09-20 12:57:44 +00:00
commit 05ea40562c
8 changed files with 459 additions and 0 deletions
@@ -0,0 +1,33 @@
+# Traefik TCP SSH + TrinityIngress HTTP health.
+
+---
+# Traefik TCP :2222 → OpenSSH in the pod (plain SSH; HostSNI catch-all).
+apiVersion: traefik.io/v1alpha1
+kind: IngressRouteTCP
+metadata:
+  name: cursor-devbox-ssh
+  namespace: cursor-devbox
+spec:
+  entryPoints:
+    - ssh
+  routes:
+    - match: HostSNI(`*`)
+      services:
+        - name: cursor-devbox
+          port: 22
+
+---
+# DNS A record + HTTPS front for the tiny HTTP health page; SSH uses Traefik TCP :2222.
+apiVersion: ingress.trinitysan.by/v1
+kind: TrinityIngress
+metadata:
+  name: cursor-devbox
+  namespace: cursor-devbox
+spec:
+  hostname: devbox.trinitysan.by
+  targetTraefikIP: "91.210.106.53"
+  serviceRef:
+    namespace: cursor-devbox
+    name: cursor-devbox
+    port: 8080
+  certificateReclaimPolicy: Retain