Deployment plan

The site is intentionally split into small phases so each one can be deployed, checked, and documented before the next change lands.

Phase outline

Prepare the server, swap, firewall, and DNS.
Bootstrap k3s and confirm the single-node cluster is ready.
Install cert-manager and keep the TLS secret on the ingress.
Mount OCI-backed HTML for the demo and the docs site.
Add the GitHub Actions build-and-deploy path.
Document the next items before moving the public home page to www.rghf.nl.

Why this shape

The server is small, so the deployment stays plain: nginx, Kubernetes Services, Traefik ingress, and static content pulled from OCI images.

Example command sequence

ssh root@server2.example.com
curl -fsSL https://get.k3s.io | sh -
kubectl apply -k manifests/infra
kubectl apply -k manifests/app
kubectl -n k8s-oci rollout status deployment/webpages

Practical checks

Confirm DNS points at the public host before issuing certificates.
Check that the cluster has enough swap for the workload mix.
Verify the public route over HTTPS before publishing a change note.