$ cat manifest.yaml
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: dumbpad-data
spec:
  accessModes:
    - ReadWriteOnce
  storageClassName: local-path
  resources:
    requests:
      storage: 1Gi
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: dumbpad
spec:
  replicas: 1
  selector:
    matchLabels:
      app: dumbpad
  template:
    metadata:
      labels:
        app: dumbpad
    spec:
      containers:
        - name: dumbpad
          image: dumbwareio/dumbpad:latest
          ports:
            - containerPort: 3000
          env:
            - name: DUMBPAD_PIN
              value: "1234"
            - name: SITE_TITLE
              value: "Happy Fun Zone"
          volumeMounts:
            - name: data
              mountPath: /app/data
      volumes:
        - name: data
          persistentVolumeClaim:
            claimName: dumbpad-data
---
apiVersion: v1
kind: Service
metadata:
  name: dumbpad
spec:
  type: ClusterIP
  selector:
    app: dumbpad
  ports:
    - protocol: TCP
      port: 80
      targetPort: 3000

$ kubectl apply -f ./manifest.yaml
persistentvolumeclaim/dumbpad-data created
deployment.apps/dumbpad created
service/dumbpad created

services:
  dumbterm:
    image: dumbwareio/dumbterm:latest
    container_name: dumbterm
    restart: unless-stopped
    ports:
      - ${DUMBTERM_PORT:-3000}:3000
    volumes:
      - ${DUMBTERM_CONFIG:-./config}:/root/.config
      - ${DUMBTERM_DATA_DIR:-./data}:/root/data
    environment:
      # Container timezone
      TZ: ${DUMBTERM_TZ:-America/Los_Angeles}
      # The title shown in the web interface
      SITE_TITLE: ${DUMBTERM_SITE_TITLE:-DumbTerm}
      # Recommended PIN protection (leave empty to disable)
      DUMBTERM_PIN: ${DUMBTERM_PIN:-1234}
      # The base URL for the application
      BASE_URL: ${DUMBTERM_BASE_URL:-http://localhost:3000}
      ENABLE_STARSHIP: ${ENABLE_STARSHIP:-true}
      LOCKOUT_TIME: ${DUMBTERM_LOCKOUT_TIME:-15} # Minutes
      # Session duration in hours before requiring re-authentication
      MAX_SESSION_AGE: ${DUMBTERM_MAX_SESSION_AGE:-24} # Hours
      # (OPTIONAL) - List of allowed origins for CORS
      # ALLOWED_ORIGINS: ${DUMBTERM_ALLOWED_ORIGINS:-http://localhost:3000}

$ cat term.yaml
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: dumbterm-config
spec:
  accessModes:
    - ReadWriteOnce
  storageClassName: local-path
  resources:
    requests:
      storage: 1Gi
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: dumbterm-data
spec:
  accessModes:
    - ReadWriteOnce
  storageClassName: local-path
  resources:
    requests:
      storage: 1Gi
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: dumbterm
spec:
  replicas: 1
  selector:
    matchLabels:
      app: dumbterm
  template:
    metadata:
      labels:
        app: dumbterm
    spec:
      containers:
        - name: dumbterm
          image: dumbwareio/dumbterm:latest
          ports:
            - containerPort: 3000
          env:
            - name: TZ
              value: "America/Chicago"
            - name: SITE_TITLE
              value: "DumbTerm"
            - name: DUMBTERM_PIN
              value: "1234"
            - name: BASE_URL
              value: "dumbterm.tpk.pw"
            - name: ENABLE_STARSHIP
              value: "true"
            - name: LOCKOUT_TIME
              value: "15"
            - name: MAX_SESSION_AGE
              value: "24"
          volumeMounts:
            - name: config
              mountPath: /root/.config
            - name: data
              mountPath: /root/data
      volumes:
        - name: config
          persistentVolumeClaim:
            claimName: dumbterm-config
        - name: data
          persistentVolumeClaim:
            claimName: dumbterm-data
---
apiVersion: v1
kind: Service
metadata:
  name: dumbterm
spec:
  type: ClusterIP
  selector:
    app: dumbterm
  ports:
    - protocol: TCP
      port: 3000
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  annotations:
    cert-manager.io/cluster-issuer: azuredns-tpkpw
    ingress.kubernetes.io/ssl-redirect: "true"
    kubernetes.io/ingress.class: nginx
    kubernetes.io/tls-acme: "true"
    nginx.ingress.kubernetes.io/proxy-body-size: "0"
    nginx.ingress.kubernetes.io/proxy-read-timeout: "3600"
    nginx.ingress.kubernetes.io/proxy-send-timeout: "3600"
    nginx.ingress.kubernetes.io/ssl-redirect: "true"
    nginx.org/client-max-body-size: "0"
    nginx.org/proxy-connect-timeout: "3600"
    nginx.org/proxy-read-timeout: "3600"
    nginx.org/websocket-services: dumbterm
  name: dumbterm-ingress
spec:
  rules:
  - host: dumbterm.tpk.pw
    http:
      paths:
      - backend:
          service:
            name: dumbterm
            port:
              number: 80
        path: /
        pathType: Prefix
  tls:
  - hosts:
    - dumbterm.tpk.pw
    secretName: dumbterm-tls

apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: iso-config
spec:
  accessModes:
    - ReadWriteOnce
  storageClassName: local-path
  resources:
    requests:
      storage: 1Gi
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: iso
spec:
  replicas: 1
  selector:
    matchLabels:
      app: iso
  template:
    metadata:
      labels:
        app: iso
    spec:
      containers:
        - name: iso
          image: coyann/iso:latest
          ports:
            - containerPort: 3000
          env:
            - name: AUTH_SECRET
              value: "changeme"
            - name: AUTH_PASSWORD
              value: "changeme"
          volumeMounts:
            - name: config
              mountPath: /config
      volumes:
        - name: config
          persistentVolumeClaim:
            claimName: iso-config
---
apiVersion: v1
kind: Service
metadata:
  name: iso
spec:
  type: ClusterIP
  selector:
    app: iso
  ports:
    - protocol: TCP
      port: 80
      targetPort: