Refactor Gitea and SSH configurations, update backup scripts, and enhance Nginx settings

- Updated SSH configuration for Gitea to disable banner and TTY, and modified the AuthorizedKeysCommand.
- Simplified gitea-shell script to directly call the k8s_gitea_shell command with required parameters.
- Removed unused gitea-auth script from playbook_gitea.yml.
- Updated systools_version in playbook_systools.yml to 0.4.5.
- Enhanced ssh_locker_helper to copy redirect URL to clipboard based on OS.
- Added a new script test_imaps for IMAP testing.
- Updated Terraform configurations for various applications, including:
  - Added a backup script for MariaDB with retention policy.
  - Changed Gitea version to 1.24-rootless and adjusted SSH settings.
  - Updated Nginx configurations to log errors and access to stderr/stdout.
  - Refactored services to use ClusterIP type and adjusted security contexts for deployments.
  - Added temporary storage for applications using empty_dir.
  - Enhanced backup.sh scripts for better error handling and logging.

terraform/modules/apps/mail/stunnel.tf

@@ -1,3 +1,6 @@
+# This file defines the configuration for stunnel in the mail module.
+
+# Creates a Kubernetes ConfigMap for stunnel configuration for Dovecot.
 resource "kubernetes_config_map" "stunnel_dovecot" {
   metadata {
     name      = "stunnel-dovecot"
@@ -8,6 +11,7 @@ resource "kubernetes_config_map" "stunnel_dovecot" {
   }
 }
 
+# Creates a Kubernetes ConfigMap for stunnel configuration for Postfix.
 resource "kubernetes_config_map" "stunnel_postfix" {
   metadata {
     name      = "stunnel-postfix"
@@ -18,6 +22,7 @@ resource "kubernetes_config_map" "stunnel_postfix" {
   }
 }
 
+# Creates a Kubernetes manifest for the stunnel certificate using cert-manager.
 resource "kubernetes_manifest" "stunnel_cert" {
   manifest = {
     apiVersion = "cert-manager.io/v1"
@@ -38,6 +43,7 @@ resource "kubernetes_manifest" "stunnel_cert" {
   }
 }
 
+# Creates a Kubernetes ConfigMap for the CA certificate.
 resource "kubernetes_config_map" "ca_pem" {
   metadata {
     name      = "ca-pem"
@@ -47,3 +53,4 @@ resource "kubernetes_config_map" "ca_pem" {
     "ca.pem" = var.ca_pem
   }
 }
+