receipts: Deploy Receipts management tool

This is a custom-built application for managing purchase receipts.  It
integrates with Firefly III to fill some of the gaps that `xactmon`
cannot handle, such as restaurant bills with tips, gas station
purchases, purchases with the HSA debit card, refunds, and deposits.

Photos of receipts can be taken directly within the application using
the User Media Web API, or uploaded as existing files.  Each photo is
associated with transaction data, including date, vendor, amount, and
general notes.  These data are also synchronized with Firefly whenever
possible.

receipts/kustomization.yaml

@@ -0,0 +1,66 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+transformers:
+- |
+  apiVersion: builtin
+  kind: NamespaceTransformer
+  metadata:
+    name: namespace-transformer
+    namespace: receipts
+  setRoleBindingSubjects: none
+  fieldSpecs:
+  - path: metadata/namespace
+    create: true
+
+labels:
+- pairs:
+    app.kubernetes.io/instance: receipts
+  includeSelectors: true
+- pairs:
+    app.kubernetes.io/part-of: receipts
+  includeTemplates: true
+
+resources:
+- namespace.yaml
+- secrets.yaml
+- receipts.yaml
+- postgres-cert.yaml
+- ../dch-root-ca
+- jenkins.yaml
+
+configMapGenerator:
+- name: receipts-config
+  files:
+  - config.toml
+  options:
+    labels:
+      app.kubernetes.io/name: receipts
+      app.kubernetes.io/component: receipts
+
+patches:
+- patch: |-
+    apiVersion: apps/v1
+    kind: Deployment
+    metadata:
+      name: receipts
+    spec:
+      template:
+        spec:
+          containers:
+          - name: receipts
+            volumeMounts:
+            - mountPath: /run/dch-ca
+              name: dch-root-ca
+              readOnly: true
+            - mountPath: /run/secrets/receipts/postgresql
+              name: postgresql-cert
+              readOnly: true
+          volumes:
+          - name: dch-root-ca
+            configMap:
+              name: dch-root-ca
+          - name: postgresql-cert
+            secret:
+              secretName: postgres-client-cert
+              defaultMode: 0640