Auto-update README with current k8s applications

Generated by CI/CD workflow on 2025-11-18 21:58:29 This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.
2025-11-18 21:58:29 +00:00
45 changed files with 68 additions and 74 deletions
--- a/k8s/apps/gitea/deployment.yaml
+++ b/k8s/apps/gitea/deployment.yaml
@@ -36,7 +36,7 @@ spec:
              cpu: "200m"
            limits:
              memory: "2Gi"
-              cpu: "1500m"
+              cpu: "1000m"
          env:
            - name: GITEA__service__REGISTER_MANUAL_CONFIRM
              value: "true"
@@ -129,7 +129,7 @@ spec:
              memory: "256Mi"
              ephemeral-storage: "1Gi"   # reserve ephemeral storage
            limits:
-              cpu: "3000m"
+              cpu: "2000m"
              memory: "4Gi"
              ephemeral-storage: "28Gi"   # hard cap for /data usage
          volumeMounts:
--- a/k8s/apps/gitea/external-secrets.yaml
+++ b/k8s/apps/gitea/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1
+apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
  name: gitea-runner-token
@@ -24,7 +24,7 @@ spec:
        property: login.password
 ---
-apiVersion: external-secrets.io/v1
+apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
  name: gitea-recapcha-creds
--- a/k8s/apps/greece-notifier/deployment.yaml
+++ b/k8s/apps/greece-notifier/deployment.yaml
@@ -30,7 +30,7 @@ spec:
              cpu: "100m"
              memory: "256Mi"
            limits:
-              cpu: "3000m"
+              cpu: "2000m"
              memory: "1Gi"
          volumeMounts:
            - name: data
--- a/k8s/apps/greece-notifier/external-secrets.yaml
+++ b/k8s/apps/greece-notifier/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1
+apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
  name: greece-notifier-creds
--- a/k8s/apps/hexound/deployment.yaml
+++ b/k8s/apps/hexound/deployment.yaml
@@ -30,7 +30,7 @@ spec:
              cpu: "50m"
            limits:
              memory: "128Mi"
-              cpu: "300m"
+              cpu: "200m"
          command:
            - git
            - clone
@@ -49,7 +49,7 @@ spec:
              cpu: "50m"
            limits:
              memory: "256Mi"
-              cpu: "300m"
+              cpu: "200m"
          volumeMounts:
            - name: hexound-repo
              mountPath: /var/www/html
--- a/k8s/apps/immich/deployments.yaml
+++ b/k8s/apps/immich/deployments.yaml
@@ -23,7 +23,7 @@ spec:
            cpu: "500m"
          limits:
            memory: "4Gi"
-            cpu: "3000m"
+            cpu: "2000m"
        ports:
        - containerPort: 2283
        env:
@@ -160,7 +160,7 @@ spec:
            cpu: "1000m"
          limits:
            memory: "8Gi"
-            cpu: "6000m"
+            cpu: "4000m"
        env:
        - name: TZ
          value: Asia/Nicosia
@@ -201,7 +201,7 @@ spec:
              cpu: "100m"
            limits:
              memory: "512Mi"
-              cpu: "750m"
+              cpu: "500m"
          readinessProbe:
            exec:
              command: ["redis-cli", "ping"]
--- a/k8s/apps/iperf3/daemonset.yaml
+++ b/k8s/apps/iperf3/daemonset.yaml
@@ -84,7 +84,7 @@ spec:
            cpu: "100m"
          limits:
            memory: "256Mi"
-            cpu: "750m"
+            cpu: "500m"
      tolerations:
      - effect: NoSchedule
        operator: Exists
--- a/k8s/apps/iperf3/iperf3-exporter-daemonset.yaml
+++ b/k8s/apps/iperf3/iperf3-exporter-daemonset.yaml
@@ -79,7 +79,7 @@ spec:
            cpu: "50m"
          limits:
            memory: "128Mi"
-            cpu: "300m"
+            cpu: "200m"
        env:
        - name: NODE_NAME
          valueFrom:
--- a/k8s/apps/iperf3/servicemonitor.yaml
+++ b/k8s/apps/iperf3/servicemonitor.yaml
@@ -23,7 +23,7 @@ spec:
        - sourceLabels: [__param_target]
          targetLabel: instance
        - targetLabel: __address__
-          replacement: iperf3-exporter-ch.iperf3.svc:9579
+          replacement: ch.tail2fe2d.ts.net
    - port: metrics
      path: /probe
      interval: 5m
@@ -36,7 +36,7 @@ spec:
        - sourceLabels: [__param_target]
          targetLabel: instance
        - targetLabel: __address__
-          replacement: iperf3-exporter-us.iperf3.svc:9579
+          replacement: us.tail2fe2d.ts.net
    - port: metrics
      path: /probe
      interval: 5m
@@ -49,7 +49,7 @@ spec:
        - sourceLabels: [__param_target]
          targetLabel: instance
        - targetLabel: __address__
-          replacement: iperf3-exporter-iris.iperf3.svc:9579
+          replacement: iris.khv
    - port: metrics
      path: /probe
      interval: 5m
@@ -62,7 +62,7 @@ spec:
        - sourceLabels: [__param_target]
          targetLabel: instance
        - targetLabel: __address__
-          replacement: iperf3-exporter-home.iperf3.svc:9579
+          replacement: home.homenet
    - port: metrics
      path: /probe
      interval: 5m
@@ -75,7 +75,7 @@ spec:
        - sourceLabels: [__param_target]
          targetLabel: instance
        - targetLabel: __address__
-          replacement: iperf3-exporter-master.iperf3.svc:9579
+          replacement: de.hexor.cy
    - port: metrics
      path: /probe
      interval: 5m
@@ -88,7 +88,7 @@ spec:
        - sourceLabels: [__param_target]
          targetLabel: instance
        - targetLabel: __address__
-          replacement: iperf3-exporter-it.iperf3.svc:9579
+          replacement: it.hexor.cy
    - port: metrics
      path: /probe
      interval: 5m
@@ -101,7 +101,7 @@ spec:
        - sourceLabels: [__param_target]
          targetLabel: instance
        - targetLabel: __address__
-          replacement: iperf3-exporter-nas.iperf3.svc:9579
+          replacement: nas.homenet
    - port: metrics
      path: /probe
      interval: 5m
@@ -114,7 +114,7 @@ spec:
        - sourceLabels: [__param_target]
          targetLabel: instance
        - targetLabel: __address__
-          replacement: iperf3-exporter-spb.iperf3.svc:9579
+          replacement: spb.tail2fe2d.ts.net
      metricRelabelings:
        - sourceLabels: [__name__]
          regex: iperf3_(.+)
--- a/k8s/apps/jellyfin/qbittorent.yaml
+++ b/k8s/apps/jellyfin/qbittorent.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1
+apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
  name: vpn-creds
@@ -76,14 +76,11 @@ spec:
                secretKeyRef:
                  name: vpn-creds
                  key: ss_link
-          command: ["/bin/bash", "-c", "rm /etc/shadowsocks-rust/config.json && sslocal --server-url $SS_LINK --local-addr 127.0.0.1:8081 -U --protocol http"]
+          command: ["/bin/bash", "-c", "rm /etc/shadowsocks-rust/config.json && sslocal  --online-config-url $SS_LINK --local-addr 127.0.0.1:8081 -U --protocol http"]
          resources:
            requests:
              memory: "64Mi"
-              cpu: "300m"
+              cpu: "200m"
            limits:
              memory: "128Mi"
              cpu: "300m"
 ---
 apiVersion: v1
 kind: Service
--- a/k8s/apps/jellyfin/values.yaml
+++ b/k8s/apps/jellyfin/values.yaml
@@ -6,7 +6,7 @@ resources:
    cpu: "1000m"
  limits:
    memory: "8Gi"
-    cpu: "6000m"
+    cpu: "4000m"
 nodeSelector:
  kubernetes.io/hostname: master.tail2fe2d.ts.net
 persistence:
--- a/k8s/apps/k8s-secrets/deployment.yaml
+++ b/k8s/apps/k8s-secrets/deployment.yaml
@@ -40,7 +40,7 @@ spec:
            cpu: "50m"
          limits:
            memory: "128Mi"
-            cpu: "150m"
+            cpu: "100m"
        livenessProbe:
          httpGet:
            path: /health
--- a/k8s/apps/k8s-secrets/external-secret.yaml
+++ b/k8s/apps/k8s-secrets/external-secret.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1
+apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
  name: openai-creds
--- a/k8s/apps/khm/deployment.yaml
+++ b/k8s/apps/khm/deployment.yaml
@@ -29,7 +29,7 @@ spec:
              cpu: "100m"
            limits:
              memory: "1Gi"
-              cpu: "750m"
+              cpu: "500m"
          command:
            - /bin/sh
            - -c
--- a/k8s/apps/khm/external-secrets.yaml
+++ b/k8s/apps/khm/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1
+apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
  name: khm-pg-creds
--- a/k8s/apps/ollama/external-secrets.yaml
+++ b/k8s/apps/ollama/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1
+apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
  name: oidc-secret
--- a/k8s/apps/paperless/external-secrets.yaml
+++ b/k8s/apps/paperless/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1
+apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
  name: postgres-and-oauth-creds
--- a/k8s/apps/paperless/gotenberg-values.yaml
+++ b/k8s/apps/paperless/gotenberg-values.yaml
@@ -13,7 +13,7 @@ resources:
    cpu: "200m"
  limits:
    memory: "2Gi"
-    cpu: "1500m"
+    cpu: "1000m"
 service:
  type: ClusterIP
--- a/k8s/apps/paperless/paperless-values.yaml
+++ b/k8s/apps/paperless/paperless-values.yaml
@@ -6,7 +6,7 @@ resources:
    cpu: "500m"
  limits:
    memory: "4Gi"
-    cpu: "3000m"
+    cpu: "2000m"
 initContainers:
  install-tesseract-langs:
    image: ghcr.io/paperless-ngx/paperless-ngx:2.18.2
@@ -16,7 +16,7 @@ initContainers:
        cpu: "100m"
      limits:
        memory: "1Gi"
-        cpu: "750m"
+        cpu: "500m"
    command: ["/bin/sh", "-c"]
    args:
      - apt-get update && apt-get install -y --reinstall tesseract-ocr-rus tesseract-ocr-jpn tesseract-ocr-chi-sim tesseract-ocr-eng tesseract-ocr-ell && cp -v -r /usr/share/tesseract-ocr/5/tessdata/* /custom-tessdata/
--- a/k8s/apps/paperless/tika-values.yaml
+++ b/k8s/apps/paperless/tika-values.yaml
@@ -13,7 +13,7 @@ resources:
    cpu: "100m"
  limits:
    memory: "1Gi"
-    cpu: "750m"
+    cpu: "500m"
 service:
  type: ClusterIP
--- a/k8s/apps/pasarguard/daemonset.yaml
+++ b/k8s/apps/pasarguard/daemonset.yaml
@@ -144,7 +144,7 @@ spec:
              cpu: "50m"
            limits:
              memory: "128Mi"
-              cpu: "150m"
+              cpu: "100m"
          volumeMounts:
            - name: shared-data
              mountPath: /shared
@@ -204,7 +204,7 @@ spec:
              cpu: "100m"
            limits:
              memory: "512Mi"
-              cpu: "750m"
+              cpu: "500m"
          volumeMounts:
            - name: shared-data
              mountPath: /shared
--- a/k8s/apps/pasarguard/external-secrets.yaml
+++ b/k8s/apps/pasarguard/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1
+apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
  name: pasarguard-secrets
--- a/k8s/apps/rustdesk/deployment.yaml
+++ b/k8s/apps/rustdesk/deployment.yaml
@@ -27,7 +27,7 @@ spec:
            cpu: "100m"
          limits:
            memory: "512Mi"
-            cpu: "750m"
+            cpu: "500m"
        command: ["hbbs"]
        args:
          - "--relay-servers"
@@ -98,7 +98,7 @@ spec:
            cpu: "100m"
          limits:
            memory: "512Mi"
-            cpu: "750m"
+            cpu: "500m"
        command: ["hbbr"]
        args:
          - "--port"
--- a/k8s/apps/rustdesk/external-secrets.yaml
+++ b/k8s/apps/rustdesk/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1
+apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
  name: rustdesk-keys
--- a/k8s/apps/sonarr-stack/bazarr-values.yaml
+++ b/k8s/apps/sonarr-stack/bazarr-values.yaml
@@ -4,7 +4,7 @@ resources:
    cpu: "100m"
  limits:
    memory: "1Gi"
-    cpu: "750m"
+    cpu: "500m"
 nodeSelector:
  kubernetes.io/hostname: master.tail2fe2d.ts.net
--- a/k8s/apps/sonarr-stack/prowlarr-values.yaml
+++ b/k8s/apps/sonarr-stack/prowlarr-values.yaml
@@ -6,7 +6,7 @@ resources:
    cpu: "100m"
  limits:
    memory: "1Gi"
-    cpu: "750m"
+    cpu: "500m"
 nodeSelector:
  kubernetes.io/hostname: master.tail2fe2d.ts.net
--- a/k8s/apps/sonarr-stack/sonarr-values.yaml
+++ b/k8s/apps/sonarr-stack/sonarr-values.yaml
@@ -6,7 +6,7 @@ resources:
    cpu: "200m"
  limits:
    memory: "2Gi"
-    cpu: "1500m"
+    cpu: "1000m"
 nodeSelector:
  kubernetes.io/hostname: master.tail2fe2d.ts.net
--- a/k8s/apps/stirling-pdf/values.yaml
+++ b/k8s/apps/stirling-pdf/values.yaml
@@ -33,7 +33,7 @@ resources:
    cpu: "200m"
  limits:
    memory: "2Gi"
-    cpu: "1500m"
+    cpu: "1000m"
 probes:
  liveness:
--- a/k8s/apps/tg-bots/external-secrets.yaml
+++ b/k8s/apps/tg-bots/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1
+apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
  name: get-id-bot
@@ -24,7 +24,7 @@ spec:
        property: fields[0].value
 ---
-apiVersion: external-secrets.io/v1
+apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
  name: desubot
--- a/k8s/apps/vaultwarden/deployment.yaml
+++ b/k8s/apps/vaultwarden/deployment.yaml
@@ -37,7 +37,7 @@ spec:
              cpu: "100m"
            limits:
              memory: "1Gi"
-              cpu: "750m"
+              cpu: "500m"
          env:
            - name: DOMAIN
              value: https://vw.hexor.cy
--- a/k8s/apps/vaultwarden/external-secrets.yaml
+++ b/k8s/apps/vaultwarden/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1
+apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
  name: admin-token
--- a/k8s/apps/vpn/external-secrets.yaml
+++ b/k8s/apps/vpn/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1
+apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
  name: outfleet-secrets
@@ -51,7 +51,7 @@ spec:
        property: fields[1].value
 ---
-apiVersion: external-secrets.io/v1
+apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
  name: outline-config
--- a/k8s/apps/vpn/xray.yaml
+++ b/k8s/apps/vpn/xray.yaml
@@ -174,7 +174,7 @@ spec:
        resources:
          limits:
            memory: "512Mi"
-            cpu: "750m"
+            cpu: "500m"
          requests:
            memory: "256Mi"
            cpu: "250m"
--- a/k8s/core/argocd/external-secrets.yaml
+++ b/k8s/core/argocd/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1
+apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
  name: oidc-creds
--- a/k8s/core/argocd/kustomization.yaml
+++ b/k8s/core/argocd/kustomization.yaml
@@ -10,7 +10,7 @@ resources:
 helmCharts:
  - name: argo-cd
    repo: https://argoproj.github.io/argo-helm
-    version: 9.1.4
+    version: 8.1.3
    releaseName: argocd
    namespace: argocd
    valuesFile: values.yaml
--- a/k8s/core/authentik/external-secrets.yaml
+++ b/k8s/core/authentik/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1
+apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
  name: authentik-creds
--- a/k8s/core/cert-manager/external-secrets.yaml
+++ b/k8s/core/cert-manager/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1
+apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
  name: cloudflare-creds
@@ -22,7 +22,7 @@ spec:
        key: 8ae1dcb1-1182-48a1-8733-ca1144ea754b
        property: fields[0].value
 ---
-apiVersion: external-secrets.io/v1
+apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
  name: aws-creds
--- a/k8s/core/cert-manager/kustomization.yaml
+++ b/k8s/core/cert-manager/kustomization.yaml
@@ -10,7 +10,7 @@ resources:
 helmCharts:
  - name: cert-manager
    repo: https://charts.jetstack.io
-    version: 1.19.1
+    version: 1.17.1
    releaseName: cert-manager
    namespace: cert-manager
    valuesFile: values.yaml
--- a/k8s/core/cert-manager/values.yaml
+++ b/k8s/core/cert-manager/values.yaml
@@ -1,6 +1,2 @@
 crds:
  enabled: true
 prometheus:
  enabled: true
  servicemonitor:
    enabled: true
--- a/k8s/core/external-secrets/app.yaml
+++ b/k8s/core/external-secrets/app.yaml
@@ -18,4 +18,4 @@ spec:
      prune: true
    syncOptions:
      - CreateNamespace=true
-      - ServerSideApply=true
+
--- a/k8s/core/external-secrets/bitwarden-store.yaml
+++ b/k8s/core/external-secrets/bitwarden-store.yaml
@@ -128,7 +128,7 @@ spec:
              app.kubernetes.io/name: external-secrets
 ---
-apiVersion: external-secrets.io/v1
+apiVersion: external-secrets.io/v1beta1
 kind: ClusterSecretStore
 metadata:
  name: vaultwarden-login
@@ -141,7 +141,7 @@ spec:
      result:
        jsonPath: "$.data.{{ .remoteRef.property }}"
 ---
-apiVersion: external-secrets.io/v1
+apiVersion: external-secrets.io/v1beta1
 kind: ClusterSecretStore
 metadata:
  name: vaultwarden-fields
--- a/k8s/core/external-secrets/kustomization.yaml
+++ b/k8s/core/external-secrets/kustomization.yaml
@@ -2,12 +2,13 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
  - app.yaml
  - bitwarden-store.yaml
 helmCharts:
  - name: external-secrets
    repo: https://charts.external-secrets.io
-    version: 1.1.0
+    version: 0.16.2
    releaseName: external-secrets
    namespace: external-secrets
    valuesFile: values.yaml
--- a/k8s/core/postgresql/external-secrets.yaml
+++ b/k8s/core/postgresql/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1
+apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
  name: postgres-creds
@@ -90,7 +90,7 @@ spec:
        key: 832042b9-7edb-4f4c-9254-3c8884ba9733
        property: fields[2].value
 ---
-apiVersion: external-secrets.io/v1
+apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
  name: postgres-users
--- a/k8s/core/prom-stack/external-secrets.yaml
+++ b/k8s/core/prom-stack/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1
+apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
  name: grafana-admin
--- a/k8s/core/prom-stack/kustomization.yaml
+++ b/k8s/core/prom-stack/kustomization.yaml
@@ -9,7 +9,7 @@ resources:
 helmCharts:
  - name: kube-prometheus-stack
    repo: https://prometheus-community.github.io/helm-charts
-    version: 79.7.1
+    version: 70.4.2
    releaseName: prometheus
    namespace: prometheus
    valuesFile: prom-values.yaml
@@ -17,7 +17,7 @@ helmCharts:
  - name: grafana
    repo: https://grafana.github.io/helm-charts
-    version: 10.2.0
+    version: 8.11.4
    releaseName: grafana
    namespace: prometheus
    valuesFile: grafana-values.yaml