WoozyMasta

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: view
rules:
- apiGroups:
  - ""
  resources:
  - configmaps
  - endpoints

WoozyMasta

#!/bin/bash

# Logging level
: "${LOG_LEVEL:=INFO}"

# Associative arrays for logging
declare -A log_c log_l
# Color codes
log_c[0]='\033[0m'            # Reset colors
log_c[error]='\033[1;31m'     # Red

WoozyMasta

#!/usr/bin/env bash
#
#  Script for rebuild indexes and invalidate cache in NPM proxy repositories.
#  Configuration can load from hide file with same name as script
#     Example: this-srcipt.sh load config from ./.this-srcipt
#
#  Copyright 2020 WoozyMasta <[email protected]>
#
#  This program is free software; you can redistribute it and/or modify
#  it under the terms of the GNU General Public License as published by

WoozyMasta

#!/bin/bash
set -eu

# Listen address for all docker.io/registry instances
listen_address=0.0.0.0
# Listen port for the first container
# all subsequent ports for containers will be incremented by one
listen_port_first=5000
insecure=true

WoozyMasta

# https://github.com/opencontainers/image-spec/blob/main/annotations.md

image="$REGISTRY_DOMAIN/$CI_PROJECT_ROOT_NAMESPACE/$CI_PROJECT_NAME:$CI_COMMIT_REF_NAME"

docker build \
  --file ./Dockerfile --tag "$image" \
  --label org.opencontainers.image.url="$image" \
  --label org.opencontainers.image.vendor="$CI_PROJECT_ROOT_NAMESPACE@$CI_SERVER_HOST" \
  --label org.opencontainers.image.version="$CI_COMMIT_REF_SLUG" \
  --label org.opencontainers.image.description="$CI_PROJECT_TITLE" \

WoozyMasta

#!/usr/bin/env bash
# wg-post %i UP/DOWN

set -euo pipefail

: "${WG_IFACE:=${1:-wg0}}"
: "${WG_ACTION:=${2:-down}}"
: "${WG_CONF:=/etc/wireguard/$WG_IFACE.conf}"

[ -f "$WG_CONF" ] || { >&2 echo "File $WG_CONF not accessible"; exit 1; }

WoozyMasta

#!/usr/bin/env bash
#
#  Script for rebuild indexes and invalidate cache in NPM proxy repositories.
#  Configuration can load from hide file with same name as script
#     Example: this-srcipt.sh load config from ./.this-srcipt
#
#  Copyright 2020 WoozyMasta <[email protected]>
#
#  This program is free software; you can redistribute it and/or modify
#  it under the terms of the GNU General Public License as published by

WoozyMasta

FROM docker.io/python:3.9-bullseye AS build
WORKDIR "/app"

# Install dependecies
# hadolint ignore=DL3008,DL3013
RUN set -eux && \
    apt-get update; \
    apt-get install --no-install-recommends -y \
        python3-dev build-essential patchelf upx; \
    apt-get clean; \

WoozyMasta

stream {
  upstream ssh {
    server 127.0.0.1:22;
  }

  upstream web {
    server 127.0.0.1:443;
  }

  map $ssl_preread_protocol $upstream {

WoozyMasta

apiVersion: v1
kind: ConfigMap
metadata:
  name: registry-config
  namespace: kube-system
data:
  unqualified-search-registries.conf: |
    unqualified-search-registries = [
      "docker.io",
      "quay.io",