Add k8s-server configuration and deployment scripts

modules/gateway.nix

@@ -55,6 +55,7 @@
     80    # HTTP (Caddy)
     443   # HTTPS (Caddy)
     2222  # External SSH to Gitea
+    6443  # Kubernetes API to k8s-server
   ];
 
   networking.firewall.allowedUDPPorts = [
@@ -70,6 +71,7 @@
     # Hairpin NAT for LAN clients hitting gateway:2222 so replies go back via gateway
     extraCommands = ''
       iptables -t nat -A POSTROUTING -p tcp -d 10.202.82.6 --dport 2222 -j MASQUERADE
+      iptables -t nat -A POSTROUTING -p tcp -d 10.202.82.7 --dport 6443 -j MASQUERADE
     '';
     forwardPorts = [
       {
@@ -77,6 +79,11 @@
         sourcePort = 2222;
         destination = "10.202.82.6:2222";
       }
+      {
+        proto = "tcp";
+        sourcePort = 6443;
+        destination = "10.202.82.7:6443";
+      }
     ];
   };
 }