Refactor Gitea and SSH configurations, update backup scripts, and enhance Nginx settings

- Updated SSH configuration for Gitea to disable banner and TTY, and modified the AuthorizedKeysCommand.
- Simplified gitea-shell script to directly call the k8s_gitea_shell command with required parameters.
- Removed unused gitea-auth script from playbook_gitea.yml.
- Updated systools_version in playbook_systools.yml to 0.4.5.
- Enhanced ssh_locker_helper to copy redirect URL to clipboard based on OS.
- Added a new script test_imaps for IMAP testing.
- Updated Terraform configurations for various applications, including:
  - Added a backup script for MariaDB with retention policy.
  - Changed Gitea version to 1.24-rootless and adjusted SSH settings.
  - Updated Nginx configurations to log errors and access to stderr/stdout.
  - Refactored services to use ClusterIP type and adjusted security contexts for deployments.
  - Added temporary storage for applications using empty_dir.
  - Enhanced backup.sh scripts for better error handling and logging.

terraform/modules/apps/m3uproxy/main.tf

@@ -142,6 +142,7 @@ resource "kubernetes_deployment" "m3uproxy" {
             allow_privilege_escalation = false
             run_as_user                = 1000
             run_as_group               = 1000
+            read_only_root_filesystem  = true
           }
 
           volume_mount {
@@ -232,7 +233,8 @@ resource "kubernetes_service" "m3uproxy" {
       port        = 8080
       target_port = "http"
     }
-    cluster_ip = "None"
+    type = "ClusterIP"
+    # cluster_ip = "None"
   }
 }
 

terraform/modules/apps/m3uproxy/vpn.tf

@@ -213,6 +213,7 @@ resource "kubernetes_service" "proxy_pt" {
     port {
       port = 3128
     }
-    cluster_ip = "None"
+    type = "ClusterIP"
+    # cluster_ip = "None"
   }
 }