feat: portfolio redesign with i18n, RBC project showcase, CI/CD

- Add i18n support (EN/ZH) with language toggle
- Redesign header with education dropdown, contact copy buttons
- Add RBC project showcase with bullet points, skills highlighting
- Create terraform-drift placeholder page
- Add ProjectShowcase component with media toggle (image/video)
- Update experience timeline with action-driven descriptions
- Add Docker + Forgejo CI workflow for image builds
- Update K8s manifests for riotpiao.com ingress
- Add DESIGN.md documenting design system patterns

infra/argocd-apps.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   project: default
   source:
-    repoURL: https://forgejo.riotpiao.homelab.com/rock/riotpiao.git
+    repoURL: https://forgejo.riotpiao.com/rock/riotpiao.git
     targetRevision: main
     path: infra/portfolio/base
   destination:
@@ -27,7 +27,7 @@ metadata:
 spec:
   project: default
   source:
-    repoURL: https://forgejo.riotpiao.homelab.com/rock/riotpiao.git
+    repoURL: https://forgejo.riotpiao.com/rock/riotpiao.git
     targetRevision: main
     path: infra/homarr/base
   destination:
@@ -48,7 +48,7 @@ metadata:
 spec:
   project: default
   source:
-    repoURL: https://forgejo.riotpiao.homelab.com/rock/riotpiao.git
+    repoURL: https://forgejo.riotpiao.com/rock/riotpiao.git
     targetRevision: main
     path: infra/auth-infra/base
   destination:

infra/auth-infra/base/ingress-protected.yaml

@@ -5,17 +5,17 @@ metadata:
   namespace: longhorn-system
   annotations:
     nginx.ingress.kubernetes.io/auth-url: http://authentik-server.iam.svc.cluster.local/outpost.goauthentik.io/auth/nginx
-    nginx.ingress.kubernetes.io/auth-signin: https://authentik.riotpiao.homelab.com/outpost.goauthentik.io/start?rd=$scheme://$http_host$escaped_request_uri
+    nginx.ingress.kubernetes.io/auth-signin: https://authentik.riotpiao.com/outpost.goauthentik.io/start?rd=$scheme://$http_host$escaped_request_uri
     nginx.ingress.kubernetes.io/auth-response-headers: Set-Cookie,X-authentik-username,X-authentik-groups,X-authentik-email,X-authentik-name,X-authentik-uid
     cert-manager.io/cluster-issuer: letsencrypt-prod
 spec:
   ingressClassName: nginx
   tls:
   - hosts:
-    - longhorn.riotpiao.homelab.com
+    - longhorn.riotpiao.com
     secretName: longhorn-tls
   rules:
-  - host: longhorn.riotpiao.homelab.com
+  - host: longhorn.riotpiao.com
     http:
       paths:
       - path: /
@@ -33,17 +33,17 @@ metadata:
   namespace: dashboard
   annotations:
     nginx.ingress.kubernetes.io/auth-url: http://authentik-server.iam.svc.cluster.local/outpost.goauthentik.io/auth/nginx
-    nginx.ingress.kubernetes.io/auth-signin: https://authentik.riotpiao.homelab.com/outpost.goauthentik.io/start?rd=$scheme://$http_host$escaped_request_uri
+    nginx.ingress.kubernetes.io/auth-signin: https://authentik.riotpiao.com/outpost.goauthentik.io/start?rd=$scheme://$http_host$escaped_request_uri
     nginx.ingress.kubernetes.io/auth-response-headers: Set-Cookie,X-authentik-username,X-authentik-groups,X-authentik-email,X-authentik-name,X-authentik-uid
     cert-manager.io/cluster-issuer: letsencrypt-prod
 spec:
   ingressClassName: nginx
   tls:
   - hosts:
-    - portainer.riotpiao.homelab.com
+    - portainer.riotpiao.com
     secretName: portainer-tls
   rules:
-  - host: portainer.riotpiao.homelab.com
+  - host: portainer.riotpiao.com
     http:
       paths:
       - path: /
@@ -61,17 +61,17 @@ metadata:
   namespace: monitoring
   annotations:
     nginx.ingress.kubernetes.io/auth-url: http://authentik-server.iam.svc.cluster.local/outpost.goauthentik.io/auth/nginx
-    nginx.ingress.kubernetes.io/auth-signin: https://authentik.riotpiao.homelab.com/outpost.goauthentik.io/start?rd=$scheme://$http_host$escaped_request_uri
+    nginx.ingress.kubernetes.io/auth-signin: https://authentik.riotpiao.com/outpost.goauthentik.io/start?rd=$scheme://$http_host$escaped_request_uri
     nginx.ingress.kubernetes.io/auth-response-headers: Set-Cookie,X-authentik-username,X-authentik-groups,X-authentik-email,X-authentik-name,X-authentik-uid
     cert-manager.io/cluster-issuer: letsencrypt-prod
 spec:
   ingressClassName: nginx
   tls:
   - hosts:
-    - prometheus.riotpiao.homelab.com
+    - prometheus.riotpiao.com
     secretName: prometheus-tls
   rules:
-  - host: prometheus.riotpiao.homelab.com
+  - host: prometheus.riotpiao.com
     http:
       paths:
       - path: /

infra/homarr/base/helmrelease.yaml

@@ -12,8 +12,8 @@ spec:
     env:
       AUTH_PROVIDERS: "oidc"
       AUTH_OIDC_CLIENT_ID: "homarr"
-      AUTH_OIDC_ISSUER: "https://authentik.riotpiao.homelab.com/application/o/homarr/"
-      AUTH_OIDC_URI: "https://authentik.riotpiao.homelab.com/application/o/homarr/.well-known/openid-configuration"
+      AUTH_OIDC_ISSUER: "https://authentik.riotpiao.com/application/o/homarr/"
+      AUTH_OIDC_URI: "https://authentik.riotpiao.com/application/o/homarr/.well-known/openid-configuration"
       AUTH_OIDC_GROUPS_ATTRIBUTE: "groups"
     envFrom:
     - secretRef:

infra/homarr/base/ingress.yaml

@@ -9,10 +9,10 @@ spec:
   ingressClassName: nginx
   tls:
   - hosts:
-    - homarr.riotpiao.homelab.com
+    - homarr.riotpiao.com
     secretName: homarr-tls
   rules:
-  - host: homarr.riotpiao.homelab.com
+  - host: homarr.riotpiao.com
     http:
       paths:
       - path: /

infra/portfolio/base/deployment.yaml

@@ -18,7 +18,7 @@ spec:
     spec:
       containers:
       - name: portfolio
-        image: forgejo.riotpiao.homelab.com/rock/portfolio:latest
+        image: forgejo.riotpiao.com/rock/portfolio:latest
         imagePullPolicy: IfNotPresent
         ports:
         - name: http

infra/portfolio/base/ingress.yaml

@@ -3,16 +3,13 @@ kind: Ingress
 metadata:
   name: portfolio
   namespace: portfolio
-  annotations:
-    cert-manager.io/cluster-issuer: letsencrypt-prod
 spec:
-  ingressClassName: nginx
   tls:
   - hosts:
-    - portfolio.riotpiao.homelab.com
+    - riotpiao.com
     secretName: portfolio-tls
   rules:
-  - host: portfolio.riotpiao.homelab.com
+  - host: riotpiao.com
     http:
       paths:
       - path: /