From 406a4704892c14003ffcd0e4a2ab7aed2fd04995 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Beatrice=20Dellac=C3=A0?= <hello@beatrice.wtf>
Date: Fri, 21 Mar 2025 20:26:53 +0100
Subject: [PATCH] implement huly

---
 deploy/huly/QUICKSTART.md                     | 97 +++++++++++++++++++
 deploy/huly/README.md                         | 24 +++++
 deploy/huly/account/account-deployment.yaml   | 67 +++++++++++++
 deploy/huly/account/account-ingress.yaml      | 22 +++++
 deploy/huly/account/account-service.yaml      | 12 +++
 .../collaborator/collaborator-deployment.yaml | 42 ++++++++
 .../collaborator/collaborator-ingress.yaml    | 22 +++++
 .../collaborator/collaborator-service.yaml    | 12 +++
 deploy/huly/config/config.yaml                | 15 +++
 deploy/huly/config/secret.yaml                |  8 ++
 deploy/huly/elastic/elastic-deployment.yaml   | 67 +++++++++++++
 .../elastic-persistentvolumeclaim.yaml        | 13 +++
 deploy/huly/elastic/elastic-service.yaml      | 14 +++
 deploy/huly/front/front-deployment.yaml       | 76 +++++++++++++++
 deploy/huly/front/front-ingress.yaml          | 22 +++++
 deploy/huly/front/front-service.yaml          | 12 +++
 deploy/huly/fulltext/fulltext-deployment.yaml | 59 +++++++++++
 deploy/huly/fulltext/fulltext-service.yaml    | 12 +++
 .../minio/files-persistentvolumeclaim.yaml    | 13 +++
 deploy/huly/minio/minio-deployment.yaml       | 43 ++++++++
 deploy/huly/minio/minio-service.yaml          | 16 +++
 deploy/huly/mongodb/mongodb-deployment.yaml   | 37 +++++++
 .../mongodb/mongodb-persistentvolumeclaim.yml | 11 +++
 deploy/huly/mongodb/mongodb-service.yaml      | 13 +++
 deploy/huly/rekoni/rekoni-deployment.yaml     | 33 +++++++
 deploy/huly/rekoni/rekoni-ingress.yaml        | 22 +++++
 deploy/huly/rekoni/rekoni-service.yaml        | 12 +++
 deploy/huly/stats/stats-deployment.yaml       | 35 +++++++
 deploy/huly/stats/stats-ingress.yaml          | 22 +++++
 deploy/huly/stats/stats-service.yaml          | 12 +++
 .../transactor/transactor-deployment.yaml     | 60 ++++++++++++
 .../huly/transactor/transactor-ingress.yaml   | 22 +++++
 .../huly/transactor/transactor-service.yaml   | 13 +++
 .../huly/workspace/workspace-deployment.yaml  | 55 +++++++++++
 34 files changed, 1015 insertions(+)
 create mode 100644 deploy/huly/QUICKSTART.md
 create mode 100644 deploy/huly/README.md
 create mode 100644 deploy/huly/account/account-deployment.yaml
 create mode 100644 deploy/huly/account/account-ingress.yaml
 create mode 100644 deploy/huly/account/account-service.yaml
 create mode 100644 deploy/huly/collaborator/collaborator-deployment.yaml
 create mode 100644 deploy/huly/collaborator/collaborator-ingress.yaml
 create mode 100644 deploy/huly/collaborator/collaborator-service.yaml
 create mode 100644 deploy/huly/config/config.yaml
 create mode 100644 deploy/huly/config/secret.yaml
 create mode 100644 deploy/huly/elastic/elastic-deployment.yaml
 create mode 100644 deploy/huly/elastic/elastic-persistentvolumeclaim.yaml
 create mode 100644 deploy/huly/elastic/elastic-service.yaml
 create mode 100644 deploy/huly/front/front-deployment.yaml
 create mode 100644 deploy/huly/front/front-ingress.yaml
 create mode 100644 deploy/huly/front/front-service.yaml
 create mode 100644 deploy/huly/fulltext/fulltext-deployment.yaml
 create mode 100644 deploy/huly/fulltext/fulltext-service.yaml
 create mode 100644 deploy/huly/minio/files-persistentvolumeclaim.yaml
 create mode 100644 deploy/huly/minio/minio-deployment.yaml
 create mode 100644 deploy/huly/minio/minio-service.yaml
 create mode 100644 deploy/huly/mongodb/mongodb-deployment.yaml
 create mode 100644 deploy/huly/mongodb/mongodb-persistentvolumeclaim.yml
 create mode 100644 deploy/huly/mongodb/mongodb-service.yaml
 create mode 100644 deploy/huly/rekoni/rekoni-deployment.yaml
 create mode 100644 deploy/huly/rekoni/rekoni-ingress.yaml
 create mode 100644 deploy/huly/rekoni/rekoni-service.yaml
 create mode 100644 deploy/huly/stats/stats-deployment.yaml
 create mode 100644 deploy/huly/stats/stats-ingress.yaml
 create mode 100644 deploy/huly/stats/stats-service.yaml
 create mode 100644 deploy/huly/transactor/transactor-deployment.yaml
 create mode 100644 deploy/huly/transactor/transactor-ingress.yaml
 create mode 100644 deploy/huly/transactor/transactor-service.yaml
 create mode 100644 deploy/huly/workspace/workspace-deployment.yaml

diff --git a/deploy/huly/QUICKSTART.md b/deploy/huly/QUICKSTART.md
new file mode 100644
index 0000000..4a5c769
--- /dev/null
+++ b/deploy/huly/QUICKSTART.md
@@ -0,0 +1,97 @@
+# Quick Start with Kind
+> [!NOTE]
+> kind does not require kubectl, but you will not be able to perform some of the examples in our docs without it. To install kubectl see the upstream kubectl installation docs.
+
+## Install 
+
+**macOS:**
+```bash
+# For Intel Macs
+[ $(uname -m) = x86_64 ] && curl -Lo ./kind https://kind.sigs.k8s.io/dl/v0.26.0/kind-darwin-amd64
+# For M1 / ARM Macs
+[ $(uname -m) = arm64 ] && curl -Lo ./kind https://kind.sigs.k8s.io/dl/v0.26.0/kind-darwin-arm64
+chmod +x ./kind
+mv ./kind /some-dir-in-your-PATH/kind
+```
+
+**Linux:**
+```bash
+# For AMD64 / x86_64
+[ $(uname -m) = x86_64 ] && curl -Lo ./kind https://kind.sigs.k8s.io/dl/v0.26.0/kind-linux-amd64
+# For ARM64
+[ $(uname -m) = aarch64 ] && curl -Lo ./kind https://kind.sigs.k8s.io/dl/v0.26.0/kind-linux-arm64
+chmod +x ./kind
+sudo mv ./kind /usr/local/bin/kind
+```
+
+## Setup cluster with port forwarding 
+
+> [!NOTE]
+> On the host computer, `localhost:80` should be accessible.
+
+```bash
+cat <<EOF | kind create cluster --config=-
+kind: Cluster
+apiVersion: kind.x-k8s.io/v1alpha4
+nodes:
+- role: control-plane
+  extraPortMappings:
+  - containerPort: 80
+    hostPort: 80
+    protocol: TCP
+  - containerPort: 443
+    hostPort: 443
+    protocol: TCP
+EOF
+```
+
+Deploy the ingress nginx controller:
+```bash
+kubectl apply -f https://kind.sigs.k8s.io/examples/ingress/deploy-ingress-nginx.yaml
+```
+
+Wait the nginx controller to be ready:
+```bash
+kubectl wait --namespace ingress-nginx \
+  --for=condition=ready pod \
+  --selector=app.kubernetes.io/component=controller \
+  --timeout=90s
+```
+
+Add host entries to be able to work with ingresses from the host machine:
+```bash
+sudo cp -p /etc/hosts /tmp/hosts
+echo "127.0.0.1       huly.example" | sudo tee -a /etc/hosts
+echo "127.0.0.1       account.huly.example" | sudo tee -a /etc/hosts
+```
+
+Deploy Huly with `kubectl`:
+
+```bash
+kubectl apply -R -f .
+```
+
+Wait until the front app is coming up:
+```bash
+kubectl wait --for=condition=Avaiable deployment/front --timeout 3m
+```
+
+Now, launch your web and and (enjoy Huly!)[http://huly.example]!
+
+
+## Cleanup
+
+Restore hosts file:
+```bash
+sudo mv /tmp/hosts /etc/hosts
+```
+
+Cleanup Huly:
+```bash
+kubectl delete -R -f .
+```
+
+Delete kind cluster:
+```bash
+kind delete cluster
+```
\ No newline at end of file
diff --git a/deploy/huly/README.md b/deploy/huly/README.md
new file mode 100644
index 0000000..364ac02
--- /dev/null
+++ b/deploy/huly/README.md
@@ -0,0 +1,24 @@
+# Huly Kubernetes Deployment
+
+This folder contains a sample configuration for Huly Kubernetes deployment.
+
+## Requires
+
+Requires a working kubernetes cluster with min one node. Each node should have min 2 vCPUs and 4GB of RAM.
+
+If you don't have any k8s cluster, consider using the [kind setup](QUICKSTART.md).
+
+## Check and update configuration
+
+Huly deployment configuration is located in [config.yaml](config/config.yaml) and [secret.yaml](config/secret.yaml) files.
+The sample configuration assume that Huly is available on huly.example hostname with dedicated hostname per service.
+
+## Deploy Huly to Kubernetes
+
+Deploy Huly with `kubectl`.
+
+```bash
+kubectl apply -R -f .
+```
+
+Now, launch your web browser and enjoy Huly!
diff --git a/deploy/huly/account/account-deployment.yaml b/deploy/huly/account/account-deployment.yaml
new file mode 100644
index 0000000..62f8833
--- /dev/null
+++ b/deploy/huly/account/account-deployment.yaml
@@ -0,0 +1,67 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app: account
+  name: account
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: account
+  template:
+    metadata:
+      labels:
+        app: account
+    spec:
+      containers:
+        - env:
+            - name: ACCOUNTS_URL
+              valueFrom:
+                configMapKeyRef:
+                  name: huly-config
+                  key: ACCOUNTS_URL
+            - name: ACCOUNT_PORT
+              value: '3000'
+            - name: FRONT_URL
+              valueFrom:
+                configMapKeyRef:
+                  name: huly-config
+                  key: FRONT_URL
+            - name: STATS_URL
+              value: http://stats
+            - name: STORAGE_CONFIG
+              valueFrom:
+                secretKeyRef:
+                  name: huly-secret
+                  key: STORAGE_CONFIG
+            - name: MODEL_ENABLED
+              value: '*'
+            - name: DB_URL
+              valueFrom:
+                configMapKeyRef:
+                  name: huly-config
+                  key: MONGO_URL
+            - name: MONGO_URL
+              valueFrom:
+                configMapKeyRef:
+                  name: huly-config
+                  key: MONGO_URL
+            - name: SERVER_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: huly-secret
+                  key: SERVER_SECRET
+            - name: TRANSACTOR_URL
+              valueFrom:
+                configMapKeyRef:
+                  name: huly-config
+                  key: TRANSACTOR_URL
+          image: hardcoreeng/account:v0.6.471
+          name: account
+          ports:
+            - containerPort: 3000
+          resources:
+            limits:
+              memory: "512M"
+      restartPolicy: Always
diff --git a/deploy/huly/account/account-ingress.yaml b/deploy/huly/account/account-ingress.yaml
new file mode 100644
index 0000000..fb7dd06
--- /dev/null
+++ b/deploy/huly/account/account-ingress.yaml
@@ -0,0 +1,22 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  annotations:
+    kubernetes.io/ingress.class: nginx
+    cert-manager.io/cluster-issuer: "letsencrypt-prod"
+  labels:
+    app: account
+  name: account
+spec:
+  ingressClassName: nginx
+  rules:
+    - host: account.huly.panic.haus
+      http:
+        paths:
+          - backend:
+              service:
+                name: account
+                port:
+                  number: 80
+            path: /
+            pathType: Prefix
diff --git a/deploy/huly/account/account-service.yaml b/deploy/huly/account/account-service.yaml
new file mode 100644
index 0000000..031cca7
--- /dev/null
+++ b/deploy/huly/account/account-service.yaml
@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app: account
+  name: account
+spec:
+  ports:
+    - port: 80
+      targetPort: 3000
+  selector:
+    app: account
diff --git a/deploy/huly/collaborator/collaborator-deployment.yaml b/deploy/huly/collaborator/collaborator-deployment.yaml
new file mode 100644
index 0000000..c878cd1
--- /dev/null
+++ b/deploy/huly/collaborator/collaborator-deployment.yaml
@@ -0,0 +1,42 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app: collaborator
+  name: collaborator
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: collaborator
+  template:
+    metadata:
+      labels:
+        app: collaborator
+    spec:
+      containers:
+        - env:
+            - name: ACCOUNTS_URL
+              value: http://account
+            - name: STATS_URL
+              value: http://stats
+            - name: COLLABORATOR_PORT
+              value: "3078"
+            - name: STORAGE_CONFIG
+              valueFrom:
+                secretKeyRef:
+                  name: huly-secret
+                  key: STORAGE_CONFIG
+            - name: SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: huly-secret
+                  key: SERVER_SECRET
+          image: hardcoreeng/collaborator:v0.6.471
+          name: collaborator
+          ports:
+            - containerPort: 3078
+          resources:
+            limits:
+              memory: '512M'
+      restartPolicy: Always
diff --git a/deploy/huly/collaborator/collaborator-ingress.yaml b/deploy/huly/collaborator/collaborator-ingress.yaml
new file mode 100644
index 0000000..70952be
--- /dev/null
+++ b/deploy/huly/collaborator/collaborator-ingress.yaml
@@ -0,0 +1,22 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  annotations:
+    kubernetes.io/ingress.class: nginx
+    cert-manager.io/cluster-issuer: "letsencrypt-prod"
+  labels:
+    app: collaborator
+  name: collaborator
+spec:
+  ingressClassName: nginx
+  rules:
+    - host: collaborator.huly.panic.haus
+      http:
+        paths:
+          - backend:
+              service:
+                name: collaborator
+                port:
+                  number: 80
+            path: /
+            pathType: Prefix
diff --git a/deploy/huly/collaborator/collaborator-service.yaml b/deploy/huly/collaborator/collaborator-service.yaml
new file mode 100644
index 0000000..cb5db83
--- /dev/null
+++ b/deploy/huly/collaborator/collaborator-service.yaml
@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app: collaborator
+  name: collaborator
+spec:
+  ports:
+    - port: 80
+      targetPort: 3078
+  selector:
+    app: collaborator
diff --git a/deploy/huly/config/config.yaml b/deploy/huly/config/config.yaml
new file mode 100644
index 0000000..d3fc6d5
--- /dev/null
+++ b/deploy/huly/config/config.yaml
@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: huly-config
+data:
+  ACCOUNTS_URL: 'http://account.huly.panic.haus/'
+  COLLABORATOR_URL: 'ws://collaborator.huly.panic.haus/'
+  FRONT_URL: 'http://track.panic.haus'
+  REKONI_URL: 'http://rekoni.huly.panic.haus/'
+  STATS_URL: 'http://stats.huly.panic.haus/'
+  TRANSACTOR_URL: 'ws://transactor;ws://transactor.huly.panic.haus/'
+  MINIO_ENDPOINT: 'minio'
+  MONGO_URL: 'mongodb://mongodb:27017'
+  ELASTIC_URL: 'http://elastic:9200'
+  ELASTIC_INDEX_NAME: 'huly_storage_index'
diff --git a/deploy/huly/config/secret.yaml b/deploy/huly/config/secret.yaml
new file mode 100644
index 0000000..86c86e5
--- /dev/null
+++ b/deploy/huly/config/secret.yaml
@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: huly-secret
+type: Opaque
+stringData:
+  SERVER_SECRET: jm83948hg9irfi4f03igjg203id1ahc9z
+  STORAGE_CONFIG: minio|minio?accessKey=minioadmin&secretKey=f40igje0i2j30kdg02ldz2fk3091mzp
diff --git a/deploy/huly/elastic/elastic-deployment.yaml b/deploy/huly/elastic/elastic-deployment.yaml
new file mode 100644
index 0000000..16dd526
--- /dev/null
+++ b/deploy/huly/elastic/elastic-deployment.yaml
@@ -0,0 +1,67 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app: elastic
+  name: elastic
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: elastic
+  strategy:
+    type: Recreate
+  template:
+    metadata:
+      labels:
+        app: elastic
+    spec:
+      securityContext:
+        runAsUser: 1000
+        runAsGroup: 1000
+        fsGroup: 1000
+      containers:
+        - args:
+            - /bin/sh
+            - -c
+            - |-
+              chown -R 1000:1000 /usr/share/elasticsearch/data;
+              apt-get update && apt-get install -y curl;
+              ./bin/elasticsearch-plugin list | grep -q ingest-attachment || yes | ./bin/elasticsearch-plugin install --silent ingest-attachment;
+              /usr/local/bin/docker-entrypoint.sh eswrapper
+          env:
+            - name: BITNAMI_DEBUG
+              value: "true"
+            - name: ELASTICSEARCH_PORT_NUMBER
+              value: "9200"
+            - name: ES_JAVA_OPTS
+              value: -Xms1024m -Xmx1024m
+            - name: discovery.type
+              value: single-node
+            - name: http.cors.allow-origin
+              value: http://localhost:8082
+            - name: http.cors.enabled
+              value: "true"
+          image: elasticsearch:7.14.2
+          livenessProbe:
+            exec:
+              command:
+                - /bin/sh
+                - -c
+                - curl -s http://localhost:9200/_cluster/health | grep -vq '"status":"red"'
+            initialDelaySeconds: 60
+            periodSeconds: 20
+            failureThreshold: 10
+          name: elastic
+          ports:
+            - containerPort: 9200
+              hostPort: 9200
+              protocol: TCP
+          volumeMounts:
+            - mountPath: /usr/share/elasticsearch/data
+              name: elastic
+      restartPolicy: Always
+      volumes:
+        - name: elastic
+          persistentVolumeClaim:
+            claimName: elastic
\ No newline at end of file
diff --git a/deploy/huly/elastic/elastic-persistentvolumeclaim.yaml b/deploy/huly/elastic/elastic-persistentvolumeclaim.yaml
new file mode 100644
index 0000000..bf30c14
--- /dev/null
+++ b/deploy/huly/elastic/elastic-persistentvolumeclaim.yaml
@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  labels:
+    app: elastic
+  name: elastic
+spec:
+  storageClassName: longhorn
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 10Gi
\ No newline at end of file
diff --git a/deploy/huly/elastic/elastic-service.yaml b/deploy/huly/elastic/elastic-service.yaml
new file mode 100644
index 0000000..656d7be
--- /dev/null
+++ b/deploy/huly/elastic/elastic-service.yaml
@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: Service
+metadata:
+  annotations:
+  labels:
+    app: elastic
+  name: elastic
+spec:
+  ports:
+    - name: "9200"
+      port: 9200
+      targetPort: 9200
+  selector:
+    app: elastic
diff --git a/deploy/huly/front/front-deployment.yaml b/deploy/huly/front/front-deployment.yaml
new file mode 100644
index 0000000..4a5e3a3
--- /dev/null
+++ b/deploy/huly/front/front-deployment.yaml
@@ -0,0 +1,76 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app: front
+  name: front
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: front
+  template:
+    metadata:
+      labels:
+        app: front
+    spec:
+      containers:
+        - env:
+            - name: ACCOUNTS_URL
+              valueFrom:
+                configMapKeyRef:
+                  name: huly-config
+                  key: ACCOUNTS_URL
+            - name: CALENDAR_URL
+              value: http://calendar
+            - name: COLLABORATOR_URL
+              valueFrom:
+                configMapKeyRef:
+                  name: huly-config
+                  key: COLLABORATOR_URL
+            - name: DEFAULT_LANGUAGE
+              value: en
+            - name: ELASTIC_URL
+              valueFrom:
+                configMapKeyRef:
+                  name: huly-config
+                  key: ELASTIC_URL
+            - name: GMAIL_URL
+              value: http://gmail:8088
+            - name: STORAGE_CONFIG
+              valueFrom:
+                secretKeyRef:
+                  name: huly-secret
+                  key: STORAGE_CONFIG
+            - name: MONGO_URL
+              valueFrom:
+                configMapKeyRef:
+                  name: huly-config
+                  key: MONGO_URL
+            - name: REKONI_URL
+              valueFrom:
+                configMapKeyRef:
+                  name: huly-config
+                  key: REKONI_URL
+            - name: SERVER_PORT
+              value: "8080"
+            - name: SERVER_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: huly-secret
+                  key: SERVER_SECRET
+            - name: TELEGRAM_URL
+              value: http://telegram:8086
+            - name: TITLE
+              value: Huly Self Hosted
+            - name: UPLOAD_URL
+              value: /files
+            - name: STATS_URL
+              value: http://stats
+            - name: DESKTOP_UPDATES_CHANNEL
+              value: selfhost
+          image: hardcoreeng/front:v0.6.471
+          name: front
+          ports:
+            - containerPort: 8080
+      restartPolicy: Always
diff --git a/deploy/huly/front/front-ingress.yaml b/deploy/huly/front/front-ingress.yaml
new file mode 100644
index 0000000..d6f38b4
--- /dev/null
+++ b/deploy/huly/front/front-ingress.yaml
@@ -0,0 +1,22 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  annotations:
+    kubernetes.io/ingress.class: nginx
+    cert-manager.io/cluster-issuer: "letsencrypt-prod"
+  labels:
+    app: front
+  name: front
+spec:
+  ingressClassName: nginx
+  rules:
+    - host: track.panic.haus
+      http:
+        paths:
+          - backend:
+              service:
+                name: front
+                port:
+                  number: 80
+            path: /
+            pathType: Prefix
diff --git a/deploy/huly/front/front-service.yaml b/deploy/huly/front/front-service.yaml
new file mode 100644
index 0000000..e9a6a0c
--- /dev/null
+++ b/deploy/huly/front/front-service.yaml
@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app: front
+  name: front
+spec:
+  ports:
+    - port: 80
+      targetPort: 8080
+  selector:
+    app: front
diff --git a/deploy/huly/fulltext/fulltext-deployment.yaml b/deploy/huly/fulltext/fulltext-deployment.yaml
new file mode 100644
index 0000000..73f91f1
--- /dev/null
+++ b/deploy/huly/fulltext/fulltext-deployment.yaml
@@ -0,0 +1,59 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app: fulltext
+  name: fulltext
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: fulltext
+  template:
+    metadata:
+      labels:
+        app: fulltext
+    spec:
+      containers:
+        - env:
+            - name: SERVER_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: huly-secret
+                  key: SERVER_SECRET
+            - name: DB_URL
+              valueFrom:
+                configMapKeyRef:
+                  name: huly-config
+                  key: MONGO_URL
+            - name: FULLTEXT_DB_URL
+              valueFrom:
+                configMapKeyRef:
+                  name: huly-config
+                  key: ELASTIC_URL
+            - name: ELASTIC_INDEX_NAME
+              valueFrom:
+                configMapKeyRef:
+                  name: huly-config
+                  key: ELASTIC_INDEX_NAME
+            - name: STORAGE_CONFIG
+              valueFrom:
+                secretKeyRef:
+                  name: huly-secret
+                  key: STORAGE_CONFIG
+            - name: REKONI_URL
+              value: http://rekoni
+            - name: ACCOUNTS_URL
+              value: http://account
+            - name: STATS_URL
+              value: http://stats
+          image: hardcoreeng/fulltext:v0.6.471
+          name: fulltext
+          ports:
+            - containerPort: 4700
+              hostPort: 4700
+              protocol: TCP
+          resources:
+            limits:
+              memory: "512M"
+      restartPolicy: Always
diff --git a/deploy/huly/fulltext/fulltext-service.yaml b/deploy/huly/fulltext/fulltext-service.yaml
new file mode 100644
index 0000000..c05a877
--- /dev/null
+++ b/deploy/huly/fulltext/fulltext-service.yaml
@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app: fulltext
+  name: fulltext
+spec:
+  ports:
+    - port: 80
+      targetPort: 4700
+  selector:
+    app: fulltext
diff --git a/deploy/huly/minio/files-persistentvolumeclaim.yaml b/deploy/huly/minio/files-persistentvolumeclaim.yaml
new file mode 100644
index 0000000..712bdf9
--- /dev/null
+++ b/deploy/huly/minio/files-persistentvolumeclaim.yaml
@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  labels:
+    app: files
+  name: files
+spec:
+  storageClassName: longhorn
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 50Gi
diff --git a/deploy/huly/minio/minio-deployment.yaml b/deploy/huly/minio/minio-deployment.yaml
new file mode 100644
index 0000000..604dcbd
--- /dev/null
+++ b/deploy/huly/minio/minio-deployment.yaml
@@ -0,0 +1,43 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app: minio
+  name: minio
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: minio
+  strategy:
+    type: Recreate
+  template:
+    metadata:
+      labels:
+        app: minio
+    spec:
+      containers:
+        - args:
+            - server
+            - /data
+            - --address
+            - :9000
+            - --console-address
+            - :9001
+          image: minio/minio
+          name: minio
+          ports:
+            - containerPort: 9000
+              hostPort: 9000
+              protocol: TCP
+            - containerPort: 9001
+              hostPort: 9001
+              protocol: TCP
+          volumeMounts:
+            - mountPath: /data
+              name: files
+      restartPolicy: Always
+      volumes:
+        - name: files
+          persistentVolumeClaim:
+            claimName: files
diff --git a/deploy/huly/minio/minio-service.yaml b/deploy/huly/minio/minio-service.yaml
new file mode 100644
index 0000000..bbbc269
--- /dev/null
+++ b/deploy/huly/minio/minio-service.yaml
@@ -0,0 +1,16 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app: minio
+  name: minio
+spec:
+  ports:
+    - name: "9000"
+      port: 9000
+      targetPort: 9000
+    - name: "9001"
+      port: 9001
+      targetPort: 9001
+  selector:
+    app: minio
diff --git a/deploy/huly/mongodb/mongodb-deployment.yaml b/deploy/huly/mongodb/mongodb-deployment.yaml
new file mode 100644
index 0000000..b019034
--- /dev/null
+++ b/deploy/huly/mongodb/mongodb-deployment.yaml
@@ -0,0 +1,37 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app: mongodb
+  name: mongodb
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: mongodb
+  strategy:
+    type: Recreate
+  template:
+    metadata:
+      labels:
+        app: mongodb
+    spec:
+      containers:
+        - env:
+            - name: PGID
+              value: "1000"
+            - name: PUID
+              value: "1000"
+          image: mongo:7-jammy
+          name: mongodb
+          ports:
+            - containerPort: 27017
+              protocol: TCP
+          volumeMounts:
+            - mountPath: /data/db
+              name: db
+      restartPolicy: Always
+      volumes:
+        - name: db
+          persistentVolumeClaim:
+            claimName: db
diff --git a/deploy/huly/mongodb/mongodb-persistentvolumeclaim.yml b/deploy/huly/mongodb/mongodb-persistentvolumeclaim.yml
new file mode 100644
index 0000000..59a04ec
--- /dev/null
+++ b/deploy/huly/mongodb/mongodb-persistentvolumeclaim.yml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: db
+spec:
+  storageClassName: longhorn
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 10Gi
\ No newline at end of file
diff --git a/deploy/huly/mongodb/mongodb-service.yaml b/deploy/huly/mongodb/mongodb-service.yaml
new file mode 100644
index 0000000..17b090e
--- /dev/null
+++ b/deploy/huly/mongodb/mongodb-service.yaml
@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app: mongodb
+  name: mongodb
+spec:
+  ports:
+    - port: 27017
+      targetPort: 27017
+      protocol: TCP
+  selector:
+    app: mongodb
diff --git a/deploy/huly/rekoni/rekoni-deployment.yaml b/deploy/huly/rekoni/rekoni-deployment.yaml
new file mode 100644
index 0000000..c2812e6
--- /dev/null
+++ b/deploy/huly/rekoni/rekoni-deployment.yaml
@@ -0,0 +1,33 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app: rekoni
+  name: rekoni
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: rekoni
+  template:
+    metadata:
+      labels:
+        app: rekoni
+    spec:
+      containers:
+        - image: hardcoreeng/rekoni-service:v0.6.471
+          name: rekoni
+          env:
+            - name: SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: huly-secret
+                  key: SERVER_SECRET
+          ports:
+            - containerPort: 4004
+              hostPort: 4004
+              protocol: TCP
+          resources:
+            limits:
+              memory: "500M"
+      restartPolicy: Always
diff --git a/deploy/huly/rekoni/rekoni-ingress.yaml b/deploy/huly/rekoni/rekoni-ingress.yaml
new file mode 100644
index 0000000..ff64a39
--- /dev/null
+++ b/deploy/huly/rekoni/rekoni-ingress.yaml
@@ -0,0 +1,22 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  annotations:
+    kubernetes.io/ingress.class: nginx
+    cert-manager.io/cluster-issuer: "letsencrypt-prod"
+  labels:
+    app: rekoni
+  name: rekoni
+spec:
+  ingressClassName: nginx
+  rules:
+    - host: rekoni.huly.panic.haus
+      http:
+        paths:
+          - backend:
+              service:
+                name: rekoni
+                port:
+                  number: 80
+            path: /
+            pathType: Prefix
diff --git a/deploy/huly/rekoni/rekoni-service.yaml b/deploy/huly/rekoni/rekoni-service.yaml
new file mode 100644
index 0000000..0995308
--- /dev/null
+++ b/deploy/huly/rekoni/rekoni-service.yaml
@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app: rekoni
+  name: rekoni
+spec:
+  ports:
+    - port: 80
+      targetPort: 4004
+  selector:
+    app: rekoni
diff --git a/deploy/huly/stats/stats-deployment.yaml b/deploy/huly/stats/stats-deployment.yaml
new file mode 100644
index 0000000..49a367e
--- /dev/null
+++ b/deploy/huly/stats/stats-deployment.yaml
@@ -0,0 +1,35 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app: stats
+  name: stats
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: stats
+  template:
+    metadata:
+      labels:
+        app: stats
+    spec:
+      containers:
+        - image: hardcoreeng/stats:v0.6.471
+          name: stats
+          env:
+            - name: PORT
+              value: "4900"
+            - name: SERVER_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: huly-secret
+                  key: SERVER_SECRET
+          ports:
+            - containerPort: 4900
+              hostPort: 4900
+              protocol: TCP
+          resources:
+            limits:
+              memory: "500M"
+      restartPolicy: Always
diff --git a/deploy/huly/stats/stats-ingress.yaml b/deploy/huly/stats/stats-ingress.yaml
new file mode 100644
index 0000000..7a0f7cc
--- /dev/null
+++ b/deploy/huly/stats/stats-ingress.yaml
@@ -0,0 +1,22 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  annotations:
+    kubernetes.io/ingress.class: nginx
+    cert-manager.io/cluster-issuer: "letsencrypt-prod"
+  labels:
+    app: stats
+  name: stats
+spec:
+  ingressClassName: nginx
+  rules:
+    - host: stats.huly.panic.haus
+      http:
+        paths:
+          - backend:
+              service:
+                name: stats
+                port:
+                  number: 80
+            path: /
+            pathType: Prefix
diff --git a/deploy/huly/stats/stats-service.yaml b/deploy/huly/stats/stats-service.yaml
new file mode 100644
index 0000000..28b321b
--- /dev/null
+++ b/deploy/huly/stats/stats-service.yaml
@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app: stats
+  name: stats
+spec:
+  ports:
+    - port: 80
+      targetPort: 4900
+  selector:
+    app: stats
diff --git a/deploy/huly/transactor/transactor-deployment.yaml b/deploy/huly/transactor/transactor-deployment.yaml
new file mode 100644
index 0000000..1b50d17
--- /dev/null
+++ b/deploy/huly/transactor/transactor-deployment.yaml
@@ -0,0 +1,60 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app: transactor
+  name: transactor
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: transactor
+  template:
+    metadata:
+      labels:
+        app: transactor
+    spec:
+      containers:
+        - env:
+            - name: ACCOUNTS_URL
+              value: http://account
+            - name: FULLTEXT_URL
+              value: http://fulltext
+            - name: FRONT_URL
+              valueFrom:
+                configMapKeyRef:
+                  name: huly-config
+                  key: FRONT_URL
+            - name: STATS_URL
+              value: http://stats
+            - name: STORAGE_CONFIG
+              valueFrom:
+                secretKeyRef:
+                  name: huly-secret
+                  key: STORAGE_CONFIG
+            - name: MONGO_URL
+              valueFrom:
+                configMapKeyRef:
+                  name: huly-config
+                  key: MONGO_URL
+            - name: DB_URL
+              valueFrom:
+                configMapKeyRef:
+                  name: huly-config
+                  key: MONGO_URL
+            - name: SERVER_CURSOR_MAXTIMEMS
+              value: "30000"
+            - name: SERVER_PORT
+              value: "3333"
+            - name: SERVER_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: huly-secret
+                  key: SERVER_SECRET
+          image: hardcoreeng/transactor:v0.6.471
+          name: transactor
+          ports:
+            - containerPort: 3333
+              hostPort: 3333
+              protocol: TCP
+      restartPolicy: Always
diff --git a/deploy/huly/transactor/transactor-ingress.yaml b/deploy/huly/transactor/transactor-ingress.yaml
new file mode 100644
index 0000000..aa2815e
--- /dev/null
+++ b/deploy/huly/transactor/transactor-ingress.yaml
@@ -0,0 +1,22 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  annotations:
+    kubernetes.io/ingress.class: nginx
+    cert-manager.io/cluster-issuer: "letsencrypt-prod"
+  labels:
+    app: transactor
+  name: transactor
+spec:
+  ingressClassName: nginx
+  rules:
+    - host: transactor.huly.panic.haus
+      http:
+        paths:
+          - backend:
+              service:
+                name: transactor
+                port:
+                  number: 80
+            path: /
+            pathType: Prefix
diff --git a/deploy/huly/transactor/transactor-service.yaml b/deploy/huly/transactor/transactor-service.yaml
new file mode 100644
index 0000000..bb14e3b
--- /dev/null
+++ b/deploy/huly/transactor/transactor-service.yaml
@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app: transactor
+  name: transactor
+spec:
+  ports:
+    - port: 80
+      protocol: TCP
+      targetPort: 3333
+  selector:
+    app: transactor
diff --git a/deploy/huly/workspace/workspace-deployment.yaml b/deploy/huly/workspace/workspace-deployment.yaml
new file mode 100644
index 0000000..1899270
--- /dev/null
+++ b/deploy/huly/workspace/workspace-deployment.yaml
@@ -0,0 +1,55 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app: workspace
+  name: workspace
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: workspace
+  template:
+    metadata:
+      labels:
+        app: workspace
+    spec:
+      containers:
+        - env:
+            - name: ACCOUNTS_URL
+              value: http://account
+            - name: STATS_URL
+              value: http://stats
+            - name: TRANSACTOR_URL
+              valueFrom:
+                configMapKeyRef:
+                  name: huly-config
+                  key: TRANSACTOR_URL
+            - name: STORAGE_CONFIG
+              valueFrom:
+                secretKeyRef:
+                  name: huly-secret
+                  key: STORAGE_CONFIG
+            - name: MODEL_ENABLED
+              value: '*'
+            - name: DB_URL
+              valueFrom:
+                configMapKeyRef:
+                  name: huly-config
+                  key: MONGO_URL
+            - name: MONGO_URL
+              valueFrom:
+                configMapKeyRef:
+                  name: huly-config
+                  key: MONGO_URL
+            - name: SERVER_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: huly-secret
+                  key: SERVER_SECRET
+          image: hardcoreeng/workspace:v0.6.471
+          name: workspace
+          resources:
+            limits:
+              memory: "512M"
+      restartPolicy: Always