test: try nginx proxy manager

containers/nginx-proxy-manager/.gitignore

@@ -0,0 +1,2 @@
+/data/
+/letsencrypt/

containers/nginx-proxy-manager/Makefile

@@ -0,0 +1,21 @@
+#!/usr/bin/env make
+
+pre-flight:
+	@mkdir -pv 'data' 'letsencrypt'
+
+firewalld-open: override service_name ?= nginx-proxy-manager
+firewalld-open: override http_port ?= 80
+firewalld-open: override https_port ?= 443
+firewalld-open: override webui_port ?= 81
+firewalld-open: ${shell which 'firewall-cmd'}
+	@sudo firewall-cmd --permanent --new-service '${service_name}'
+	@sudo firewall-cmd --permanent --service '${service_name}' --set-description 'FIXME'
+	@sudo firewall-cmd --permanent --service '${service_name}' --set-short 'FIXME'
+	@sudo firewall-cmd --permanent --service '${service_name}' --add-port '${http_port}/tcp'
+	@sudo firewall-cmd --permanent --service '${service_name}' --add-port '${https_port}/tcp'
+	@sudo firewall-cmd --permanent --service '${service_name}' --add-port '${webui_port}/tcp'
+	@sudo firewall-cmd --permanent --add-service '${service_name}'
+	@sudo firewall-cmd --reload
+
+composition-go-brrr: ${shell which 'docker-compose'} pre-flight
+	@docker-compose up -d

containers/nginx-proxy-manager/docker-compose.yml

@@ -0,0 +1,13 @@
+---
+version: '3.8'
+services:
+  app:
+    image: 'jc21/nginx-proxy-manager:latest'
+    restart: unless-stopped
+    ports:
+      - '17080:80'
+      - '17081:81'
+      - '17443:443'
+    volumes:
+      - ./data:/data
+      - ./letsencrypt:/etc/letsencrypt

containers/photoprism/Makefile

@@ -13,5 +13,5 @@ firewalld-open: ${shell which 'firewall-cmd'}
 	@sudo firewall-cmd --permanent --add-service '${service_name}'
 	@sudo firewall-cmd --reload
 
-composition-go-brrr: ${shell which 'docker-compose'}
+composition-go-brrr: ${shell which 'docker-compose'} pre-flight
 	@docker-compose up -d

knowledge base/kubernetes/cert-manager.md

@@ -1,35 +1,37 @@
 # cert-manager
 
-FIXME
+TODO
 
-## Table of contents <!-- omit in toc -->
+X.509 certificate management for Kubernetes and OpenShift.
+
+Creates TLS certificates for workloads in Kubernetes or OpenShift clusters and renews them before they expire.
 
 1. [TL;DR](#tldr)
 1. [Further readings](#further-readings)
-1. [Sources](#sources)
+   1. [Sources](#sources)
 
 ## TL;DR
 
 ## Further readings
 
 - [Website]
-- [Github]
+- [Main repository]
 
-## Sources
+### Sources
 
-All the references in the [further readings] section, plus the following:
+- [Documentation]
 
 <!--
-  References
+  Reference
+  ═╬═Time══
   -->
 
-<!-- Upstream -->
-[github]: https://github.com/cert-manager/cert-manager
-[website]: https://cert-manager.io/
-
 <!-- In-article sections -->
-[further readings]: #further-readings
-
 <!-- Knowledge base -->
 <!-- Files -->
+<!-- Upstream -->
+[documentation]: https://cert-manager.io/docs/
+[main repository]: https://github.com/cert-manager/cert-manager
+[website]: https://cert-manager.io/
+
 <!-- Others -->

knowledge base/nginx proxy manager.md

@@ -2,14 +2,13 @@
 
 TODO
 
-<!-- Remove this line to uncomment if used
-## Table of contents <!-- omit in toc -->
-
 1. [TL;DR](#tldr)
 1. [Further readings](#further-readings)
 
 ## TL;DR
 
+Default credentials: `admin@example.com`:`changeme`.
+
 <!-- Uncomment if used
 <details>
   <summary>Installation and configuration</summary>