infra: add haven-notify Deployment/Service/Ingress manifest

Moved from server-scripts/haven-notify/deploy. Haven Notify is an
internal Discord webhook notifier, catalogued under infra/ alongside
Beszel/WireGuard/Code Config per the repo README.

SETUP.md

@@ -63,7 +63,7 @@ Create the root certificate (valid for 10 years):
 ```bash
 openssl req -x509 -new -nodes -key ca.key -sha256 -days 3650 -out ca.crt -subj "/CN=Homelab CA"
 ```
-  
+
 Create secret and ClusterIssuer
 ```bash
 kubectl create secret tls internal-ca-secret --cert=ca.crt --key=ca.key -n cert-manager

alloy/README.md

@@ -1,3 +1,11 @@
+# Helm configuration for Alloy (OSS monitoring collector)
+
+This directory contains Helm configuration for deploying Grafana Alloy, an open-source observability data collector.
+
+## Quick Install
+
+```bash
 helm repo add grafana https://grafana.github.io/helm-charts
 helm repo update
 helm install alloy grafana/alloy --namespace alloy -f values.yaml
+```

dns/README.md

@@ -1,6 +0,0 @@
-## Setup AdGuard Sync credentials
-```bash
-kubectl create secret generic adguardhome-password \ 
-    --from-literal=password='your_adguardhome_password' \ 
-    --from-literal=username='your_adguardhome_username' -n dns
-```

infra/haven-notify.yaml

@@ -0,0 +1,71 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: haven-notify
+  labels:
+    app: haven-notify
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: haven-notify
+  template:
+    metadata:
+      labels:
+        app: haven-notify
+    spec:
+      containers:
+        - name: haven-notify
+          image: git.ivanch.me/ivanch/haven-notify:latest
+          imagePullPolicy: Always
+          ports:
+            - containerPort: 8080
+          env:
+          - name: WEBHOOK_URL
+            valueFrom:
+              secretKeyRef:
+                name: discord-webhook
+                key: HAVEN_WEBHOOK_URL
+          readinessProbe:
+            httpGet:
+              path: /ready
+              port: 8080
+            initialDelaySeconds: 5
+            periodSeconds: 10
+          livenessProbe:
+            httpGet:
+              path: /live
+              port: 8080
+            initialDelaySeconds: 5
+            periodSeconds: 10
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: haven-notify
+spec:
+  selector:
+    app: haven-notify
+  ports:
+    - protocol: TCP
+      port: 8080
+      targetPort: 8080
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: haven-notify
+  namespace: default
+spec:
+  ingressClassName: nginx
+  rules:
+    - host: notify.haven
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: haven-notify
+                port:
+                  number: 8080