🐍 Kube-Snake

Infrastructure & Deployment

Cluster: K3s on Hetzner Cloud (Ubuntu 22.04, 2 vCPU, 4GB RAM)
GitOps: ArgoCD (30-min polling) → Helm charts → Rolling deployments
CI/CD: GitHub Actions → Docker build → GHCR → Auto-update values.yaml → ArgoCD sync

Application Stack

Backend: .NET 9 Minimal API (2 replicas)
Frontend: HTMX (hypermedia-driven, zero JS framework)
Database: MongoDB StatefulSet (5Gi PVC)
Session: Redis (Bitnami Helm chart, distributed cache)
Proxy: Caddy (automatic TLS via Let's Encrypt)

Security

Secrets: Bitnami Sealed Secrets (asymmetric encryption, Git-safe)
Network: ClusterIP isolation, path-based Ingress routing
Auth: Cookie-based sessions (HttpOnly, Secure, SameSite=None)
Storage: DataProtection keys on PVC (consistent encryption)