add code-server

kustomize/bases/code-server/code-server-deployment.yaml

@@ -0,0 +1,73 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: server
+spec:
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app.kubernetes.io/component: server
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/component: server
+    spec:
+      initContainers:
+        - name: init-ownership
+          image: bash:5
+          command: ['chown', '-R', '1000:1000', '/home/coder']
+          volumeMounts:
+            - name: code-server-pv
+              mountPath: /home/coder
+      containers:
+        - name: server
+          image: codercom/code-server:latest
+          args: ["--auth", "none", "--disable-workspace-trust"]
+          env:
+            - name: DOCKER_USER
+              value: coder
+          resources:
+            requests:
+              memory: 1Gi
+              cpu: 2000m
+            limits:
+              memory: 1Gi
+          ports:
+            - name: http
+              containerPort: 8080
+          volumeMounts:
+            - name: code-server-pv
+              mountPath: /home/coder
+      volumes:
+        - name: code-server-pv
+          persistentVolumeClaim:
+            claimName: code-server-home-pvc
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: code-server-home-pvc
+  labels:
+    app.kubernetes.io/name: server
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 1Gi
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: server
+  labels:
+    app.kubernetes.io/component: server
+spec:
+  selector:
+    app.kubernetes.io/component: server
+  ports:
+    - name: http
+      port: 8080
+      targetPort: http

kustomize/bases/code-server/code-server-ingress.yaml

@@ -0,0 +1,18 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: server
+  labels:
+    probe: blackbox-http
+spec:
+  rules:
+  - host: ${CODE_SERVER_EXTERNAL_HOST}
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: server
+            port:
+              name: http

kustomize/bases/code-server/kustomization.yaml

@@ -0,0 +1,23 @@
+resources:
+  - code-server-deployment.yaml
+  - code-server-ingress.yaml
+
+namePrefix: code-
+
+configMapGenerator:
+  - name: kustomize-generated-config
+    literals:
+      - CODE_SERVER_EXTERNAL_HOST=coder.badjware.dev
+      - CODE_SERVER_EXTERNAL_URL=https://coder.badjware.dev
+
+replacements:
+  - source:
+      kind: ConfigMap
+      name: kustomize-generated-config
+      fieldPath: data.CODE_SERVER_EXTERNAL_HOST
+    targets:
+      - select:
+          kind: Ingress
+          name: server
+        fieldPaths:
+          - spec.rules.0.host

kustomize/bases/llama-swap/configurations/config.yaml

@@ -6,13 +6,12 @@ models:
     checkEndpoint: /v1/audio/speech
     unlisted: true
 
-  gemma-3-12b-it-qat:
+  Gemma-3-12B:
     cmd: >
       /app/llama-server
       -hf unsloth/gemma-3-12b-it-qat-GGUF
       -hff gemma-3-12b-it-qat-UD-Q4_K_XL.gguf
       --port ${PORT}
-      --no-mmap
       --flash-attn
       --cache-type-k q8_0
       --cache-type-v q8_0

kustomize/bases/traefik/traefik-helmchartconfig.yaml

@@ -5,8 +5,6 @@ metadata:
 spec:
   valuesContent: |-
     additionalArguments:
-      - '--entryPoints.web.forwardedHeaders.insecure'
-      - '--entryPoints.websecure.forwardedHeaders.insecure'
       - '--serversTransport.insecureSkipVerify=true'
       - '--api.dashboard=true'
       - '--api.insecure=true'
@@ -15,8 +13,13 @@ spec:
       traefik:
         expose:
           default: true
+      web:
+        forwardedHeaders:
+          insecure: true
       websecure:
         hostPort: 8443
-    # ports:
-    #   web:
-    #     redirectTo: websecure
+        forwardedHeaders:
+          insecure: true
+    service:
+      spec:
+        externalTrafficPolicy: Local

kustomize/env/prod/kustomization.yaml

@@ -8,6 +8,7 @@ resources:
   - ../../overlays/deluge
   - ../../overlays/actual
   - ../../overlays/llm
+  - ../../overlays/code-server
 
   - resources/prometheus/scrapeconfig.yaml
 
@@ -24,7 +25,7 @@ images:
   - name: prom/blackbox-exporter
     newTag: v0.26.0
   - name: nextcloud
-    newTag: 30.0.10
+    newTag: 30.0.11
   - name: collabora/code
     newTag: 25.04.1.1.1
   - name: nextcloud/aio-imaginary
@@ -42,15 +43,15 @@ images:
     newTag: "8.1"
   - name: bitnami/kubectl
     newTag: "1.31"
-  - name: ollama/ollama
-    newTag: 0.6.6
+  # - name: ollama/ollama
+  #   newTag: 0.6.6
   # - name: ghcr.io/mostlygeek/llama-swap
   #   newTag: v110-vulkan-b5343
     # newTag: 0.3.6-rocm
   # - name: ghcr.io/berriai/litellm
   #   newTag: main-v1.43.1
   - name: ghcr.io/open-webui/open-webui
-    newTag: v0.6.9
+    newTag: v0.6.13
   - name: ghcr.io/sillytavern/sillytavern
     newTag: 1.12.13
 

kustomize/overlays/code-server/kustomization.yaml

@@ -0,0 +1,5 @@
+resources:
+  - namespace.yaml
+  - ../../bases/code-server
+
+namespace: code-server

kustomize/overlays/code-server/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: code-server