Initial template: Vue 3 + FastAPI + SQLite full-stack with K8s deployment

Extracted from oil project — business logic removed, auth/db/deploy infrastructure
generalized with APP_NAME placeholders.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

deploy/backup-cronjob.yaml

@@ -0,0 +1,38 @@
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: hourly-backup
+  namespace: APP_NAME
+spec:
+  schedule: "0 * * * *"
+  successfulJobsHistoryLimit: 3
+  failedJobsHistoryLimit: 2
+  jobTemplate:
+    spec:
+      template:
+        spec:
+          containers:
+            - name: backup
+              image: registry.oci.euphon.net/APP_NAME:latest
+              command:
+                - sh
+                - -c
+                - |
+                  BACKUP_DIR=/data/backups
+                  mkdir -p $BACKUP_DIR
+                  DATE=$(date +%Y%m%d_%H%M%S)
+                  sqlite3 /data/app.db ".backup '$BACKUP_DIR/app_${DATE}.db'"
+                  echo "Backup done: $BACKUP_DIR/app_${DATE}.db"
+                  # Keep last 48 backups (2 days of hourly)
+                  ls -t $BACKUP_DIR/app_*.db | tail -n +49 | xargs rm -f 2>/dev/null
+                  echo "Backups retained: $(ls $BACKUP_DIR/app_*.db | wc -l)"
+              volumeMounts:
+                - name: data
+                  mountPath: /data
+          volumes:
+            - name: data
+              persistentVolumeClaim:
+                claimName: APP_NAME-data
+          restartPolicy: OnFailure
+          imagePullSecrets:
+            - name: regcred

deploy/deployment.yaml

@@ -0,0 +1,47 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: APP_NAME
+  namespace: APP_NAME
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: APP_NAME
+  template:
+    metadata:
+      labels:
+        app: APP_NAME
+    spec:
+      imagePullSecrets:
+        - name: regcred
+      containers:
+        - name: APP_NAME
+          image: registry.oci.euphon.net/APP_NAME:latest
+          imagePullPolicy: Always
+          ports:
+            - containerPort: 8000
+          env:
+            - name: DB_PATH
+              value: /data/app.db
+            - name: FRONTEND_DIR
+              value: /app/frontend
+            - name: ADMIN_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: APP_NAME-secrets
+                  key: admin-token
+          volumeMounts:
+            - name: data
+              mountPath: /data
+          resources:
+            requests:
+              memory: "64Mi"
+              cpu: "50m"
+            limits:
+              memory: "256Mi"
+              cpu: "500m"
+      volumes:
+        - name: data
+          persistentVolumeClaim:
+            claimName: APP_NAME-data

deploy/ingress.yaml

@@ -0,0 +1,23 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: APP_NAME
+  namespace: APP_NAME
+  annotations:
+    traefik.ingress.kubernetes.io/router.tls.certresolver: le
+spec:
+  ingressClassName: traefik
+  rules:
+    - host: APP_NAME.oci.euphon.net
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: APP_NAME
+                port:
+                  number: 80
+  tls:
+    - hosts:
+        - APP_NAME.oci.euphon.net

deploy/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: APP_NAME

deploy/pvc.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: APP_NAME-data
+  namespace: APP_NAME
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 1Gi

deploy/service.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: APP_NAME
+  namespace: APP_NAME
+spec:
+  selector:
+    app: APP_NAME
+  ports:
+    - port: 80
+      targetPort: 8000