{
  kubernetes.resources = {
    deployments.cyberchef.spec = {
      replicas = 3;
      selector.matchLabels.app = "cyberchef";

      template = {
        metadata.labels.app = "cyberchef";

        spec = {
          containers.cyberchef = {
            image = "mpepping/cyberchef";

            ports = [{
              containerPort = 8000;
              protocol = "TCP";
            }];
          };
        };
      };
    };

    services.cyberchef.spec = {
      selector.app = "cyberchef";

      ports = [{
        protocol = "TCP";
        port = 80;
        targetPort = 8000;
      }];
    };

    ingresses.cyberchef.spec = {
      ingressClassName = "traefik";

      rules = [{
        host = "cyberchef.kun.is";

        http.paths = [{
          path = "/";
          pathType = "Prefix";

          backend.service = {
            name = "cyberchef";
            port.number = 80;
          };
        }];
      }];
    };
  };
}