nixos-servers/flake-parts/kubenix/cyberchef.nix

{
  kubernetes.resources = {
    deployments.cyberchef.spec = {
      replicas = 3;
      selector.matchLabels.app = "cyberchef";

      template = {
        metadata.labels.app = "cyberchef";

        spec = {
          containers.cyberchef = {
            image = "mpepping/cyberchef";

            ports = [{
              containerPort = 8000;
              protocol = "TCP";
            }];
          };
        };
      };
    };

    services.cyberchef.spec = {
      selector.app = "cyberchef";

      ports = [{
        protocol = "TCP";
        port = 80;
        targetPort = 8000;
      }];
    };

    ingresses.cyberchef = {
      metadata.annotations."cert-manager.io/cluster-issuer" = "letsencrypt";

      spec = {
        ingressClassName = "traefik";

        rules = [{
          host = "cyberchef.kun.is";

          http.paths = [{
            path = "/";
            pathType = "Prefix";

            backend.service = {
              name = "cyberchef";
              port.number = 80;
            };
          }];
        }];

        tls = [{
          secretName = "cyberchef-tls";
          hosts = [ "cyberchef.kun.is" ];
        }];
      };
    };
  };
}