Refactor Gitea and SSH configurations, update backup scripts, and enhance Nginx settings

- Updated SSH configuration for Gitea to disable banner and TTY, and modified the AuthorizedKeysCommand.
- Simplified gitea-shell script to directly call the k8s_gitea_shell command with required parameters.
- Removed unused gitea-auth script from playbook_gitea.yml.
- Updated systools_version in playbook_systools.yml to 0.4.5.
- Enhanced ssh_locker_helper to copy redirect URL to clipboard based on OS.
- Added a new script test_imaps for IMAP testing.
- Updated Terraform configurations for various applications, including:
  - Added a backup script for MariaDB with retention policy.
  - Changed Gitea version to 1.24-rootless and adjusted SSH settings.
  - Updated Nginx configurations to log errors and access to stderr/stdout.
  - Refactored services to use ClusterIP type and adjusted security contexts for deployments.
  - Added temporary storage for applications using empty_dir.
  - Enhanced backup.sh scripts for better error handling and logging.

terraform/modules/apps/rustdesk/main.tf

@@ -57,7 +57,7 @@ resource "kubernetes_deployment" "rustdesk_deploy" {
     }
 
     strategy {
-      type = "Recreate"
+      type = "RollingUpdate"
     }
 
     template {
@@ -72,8 +72,9 @@ resource "kubernetes_deployment" "rustdesk_deploy" {
         automount_service_account_token = false
 
         container {
-          name  = "rustdesk-container"
-          image = "rustdesk/rustdesk-server-s6:${local.rustdesk_version}"
+          name              = "rustdesk-container"
+          image             = "rustdesk/rustdesk-server-s6:${local.rustdesk_version}"
+          image_pull_policy = "Always"
 
           env_from {
             config_map_ref {
@@ -83,33 +84,30 @@ resource "kubernetes_deployment" "rustdesk_deploy" {
 
           security_context {
             allow_privilege_escalation = false
+            read_only_root_filesystem  = true
           }
 
           port {
             name           = "tcp-port-1"
             container_port = 21115
-            host_port      = 21115
             protocol       = "TCP"
           }
 
           port {
             name           = "tcp-port-2"
             container_port = 21116
-            host_port      = 21116
             protocol       = "TCP"
           }
 
           port {
             name           = "udp-port-1"
             container_port = 21116
-            host_port      = 21116
             protocol       = "UDP"
           }
 
           port {
             name           = "tcp-port-3"
             container_port = 21117
-            host_port      = 21117
             protocol       = "TCP"
           }
 
@@ -131,6 +129,11 @@ resource "kubernetes_deployment" "rustdesk_deploy" {
             sub_path   = "id_ed25519.pub"
             read_only  = true
           }
+
+          volume_mount {
+            name       = "rust-run"
+            mount_path = "/run"
+          }
         }
 
         volume {
@@ -146,6 +149,13 @@ resource "kubernetes_deployment" "rustdesk_deploy" {
             secret_name = kubernetes_secret.rustdesk_keys.metadata[0].name
           }
         }
+
+        volume {
+          name = "rust-run"
+          empty_dir {
+            medium = "Memory"
+          }
+        }
       }
     }
   }
@@ -153,7 +163,7 @@ resource "kubernetes_deployment" "rustdesk_deploy" {
 
 resource "kubernetes_service" "rustdesk_tcp_ports" {
   metadata {
-    name      = "rustdesk-tcp-ports"
+    name      = "tcp"
     namespace = kubernetes_namespace.rustdesk.metadata[0].name
   }
 
@@ -180,7 +190,7 @@ resource "kubernetes_service" "rustdesk_tcp_ports" {
       target_port = 21117
     }
 
-    type = "LoadBalancer"
+    type = "ClusterIP"
   }
 
   lifecycle {
@@ -193,7 +203,7 @@ resource "kubernetes_service" "rustdesk_tcp_ports" {
 
 resource "kubernetes_service" "rustdesk_udp_ports" {
   metadata {
-    name      = "rustdesk-udp-ports"
+    name      = "udp"
     namespace = kubernetes_namespace.rustdesk.metadata[0].name
   }
 
@@ -209,7 +219,7 @@ resource "kubernetes_service" "rustdesk_udp_ports" {
       protocol    = "UDP"
     }
 
-    type = "LoadBalancer"
+    type = "ClusterIP"
   }
 
   lifecycle {