🐍 Kube-Snake

Infrastructure & Deployment

Cluster: K3s on Hetzner Cloud (Ubuntu 22.04, 2 vCPU, 4GB RAM)
GitOps: ArgoCD (30-min polling) → Helm charts → Rolling deployments
CI/CD: GitHub Actions → Docker build → GHCR → Auto-update values.yaml → ArgoCD sync

Application Stack

Snake API: .NET 9 Minimal API (real-time game logic, 300ms tick rate)
Snake Frontend: HTMX + hypermedia (SSE polling, zero JS frameworks)
Guestbook API: .NET 9 + MongoDB (admin auth, CRUD operations)
Database: MongoDB StatefulSet (5Gi PVC, guestbook persistence)
Cache: Redis (Bitnami Helm, session state + distributed game state)
Proxy: Caddy (automatic TLS, path-based routing: /snake, /guestbook, /healthcheck)

Session & State Management

Sessions: ASP.NET Core sessions (cookie-based, HttpOnly, SameSite=Lax)
Game State: Redis-backed persistence (per-session isolation, 24h TTL)
Credentials: CORS-enabled cookie propagation across microservices
Privacy: GDPR-compliant (functional cookies only, no tracking)

Security

Secrets: Bitnami Sealed Secrets (asymmetric encryption, Git-safe)
Network: ClusterIP isolation, Ingress path-based routing
Auth: Cookie-based sessions (HttpOnly, Secure, SameSite)
Storage: DataProtection keys on PVC (consistent encryption across pods)