Major changes

ansible/host_vars/dev-01.alexpires.dev.yml

@@ -32,8 +32,7 @@ sshd_max_auth_tries: 10
 ufw_enable: true
 fw_allowed_ports:
   - { rule: "allow", port: "22", proto: "tcp" }
-  - { rule: "allow", port: "8000", proto: "tcp" }
-  - { rule: "allow", port: "8080", proto: "tcp" }
+  - { rule: "allow", port: "443", proto: "tcp" }
 
 ufw_outgoing_traffic:
   - 22 # SSH
@@ -42,8 +41,13 @@ ufw_outgoing_traffic:
   - 123 # NTP
   - 443 # HTTPS
   - 853 # DNS over TLS
-  - 11434 # Ollama
+  - 10250 # Kubelet
   - 8880 # Kokoro-FastAPI
+  - 11434 # Ollama
+  - 16443 # Kubernetes API
+  - 4443
+  - 9443
+  - 995 # POP3S
 
 ufw_default_forward_policy: "ACCEPT"
 
@@ -77,6 +81,18 @@ unattended_reboot_time: "04:30"
 duo_users: ["*", "!provision"]
 duo_api_hostname: api-7cda1654.duosecurity.com
 
+# Kubernetes specific settings
+microk8s_allowed_hosts:
+  - 10.19.4.0/24
+  - 10.5.5.5
+microk8s_alt_names: "{{ hostname }}"
+
+# Let's encrypt issuer
+microk8s_lets_encrypt_issuer: false
+microk8s_encryption_secret: "{{ lookup('env', 'MICROK8S_ENCRYPTION_SECRET') }}"
+microk8s_users:
+  - username: operator
+    enabled: true
+
 # podman services settings
-open_webui_home: "/srv/open-webui"
-mcp_home: "/srv/mcp"
+persistent_data: "/srv"