add privoxy and tor

manifests/deployments/privoxy.yaml

@@ -0,0 +1,77 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: privoxy
+  namespace: darkdork-dev
+spec:
+  ports:
+    - port: 8118
+      targetPort: 8118
+      protocol: TCP
+  selector:
+    app: privoxy
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: privoxy
+  namespace: darkdork-dev
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: privoxy
+  template:
+    metadata:
+      labels:
+        app: privoxy
+    spec:
+      imagePullSecrets:
+        - name: registry-credentials
+      containers:
+        - name: privoxy
+          image: cr.forge.lan/darkdork-dev/privoxy
+          imagePullPolicy: Always
+          ports:
+            - containerPort: 8118
+          volumeMounts:
+          - name: privoxy-config
+            mountPath: /etc/privoxy/config
+            subPath: config
+      volumes:
+      - name: privoxy-config
+        configMap:
+          name: privoxy-config
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: privoxy-config
+  namespace: darkdork-dev
+data:
+  config: |
+    confdir /etc/privoxy
+    logdir /var/log/privoxy
+    logfile privoxy.log
+    listen-address  0.0.0.0:8118
+    toggle  0
+    enable-remote-toggle  0
+    enable-remote-http-toggle  0
+    enable-edit-actions 0
+    enforce-blocks 0
+    buffer-limit 4096
+    enable-proxy-authentication-forwarding 0
+    forwarded-connect-retries  0
+    accept-intercepted-requests 0
+    allow-cgi-request-crunching 0
+    split-large-forms 0
+    keep-alive-timeout 5
+    tolerate-pipelining 1
+    socket-timeout 300
+
+    # debug 13313
+    forward-socks5 / 10.8.0.1:1080 .
+    forward-socks5t .onion tor:9050 .
+    forward minio/ .
+

manifests/deployments/tor.yaml

@@ -0,0 +1,54 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: tor
+  namespace: darkdork-dev
+spec:
+  ports:
+    - port: 9050
+      targetPort: 9050
+      protocol: TCP
+  selector:
+    app: tor
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: tor
+  namespace: darkdork-dev
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: tor
+  template:
+    metadata:
+      labels:
+        app: tor
+    spec:
+      imagePullSecrets:
+        - name: registry-credentials
+      containers:
+        - name: tor
+          image: cr.forge.lan/darkdork-dev/tor
+          imagePullPolicy: Always
+          ports:
+            - containerPort: 8118
+          volumeMounts:
+          - name: tor-config
+            mountPath: /etc/tor/torrc
+            subPath: torrc
+      volumes:
+      - name: tor-config
+        configMap:
+          name: tor-config
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: tor-config
+  namespace: darkdork-dev
+data:
+  torrc: |
+    SocksPort 0.0.0.0:9050