Auto-update README with current k8s applications

Generated by CI/CD workflow on 2025-11-26 16:18:45

This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.

k8s/apps/remnawave/kustomization.yaml

@@ -8,3 +8,5 @@ resources:
   - ./subscription-page-configmap.yaml
   - ./subscription-page-deployment.yaml
   - ./servicemonitor.yaml
+  - ./user-ui-ingress.yaml
+  - ./panel-ingress.yaml

k8s/apps/remnawave/panel-ingress.yaml

@@ -0,0 +1,37 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: panel-ui
+  annotations:
+    ingressClassName: traefik
+    cert-manager.io/cluster-issuer: letsencrypt
+    traefik.ingress.kubernetes.io/router.middlewares: kube-system-https-redirect@kubernetescrd
+    acme.cert-manager.io/http01-edit-in-place: "true"
+spec:
+  rules:
+    - host: rw.hexor.cy
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: remnawave
+                port:
+                  number: 3000
+    - host: rw.hexor.ru
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: remnawave
+                port:
+                  number: 3000
+  tls:
+    - secretName: remnawave-panel-tls
+      hosts:
+        - rw.hexor.cy
+        - rw.hexor.ru

k8s/apps/remnawave/subscription-page-configmap.yaml

@@ -7,7 +7,7 @@ metadata:
     app: remnawave-subscription-page
 data:
   APP_PORT: "3010"
-  REMNAWAVE_PANEL_URL: "http://remnawave.remnawave.svc:3000"
+  REMNAWAVE_PANEL_URL: "https://rw.hexor.cy"
   META_TITLE: "RemnaWave Subscription"
   META_DESCRIPTION: "Your VPN subscription portal"
   META_KEYWORDS: "vpn,subscription,remnawave"

k8s/apps/remnawave/subscription-page-deployment.yaml

@@ -28,22 +28,6 @@ spec:
             - name: http
               containerPort: 3010
               protocol: TCP
-          livenessProbe:
-            httpGet:
-              path: /
-              port: 3010
-            initialDelaySeconds: 30
-            periodSeconds: 30
-            timeoutSeconds: 5
-            failureThreshold: 3
-          readinessProbe:
-            httpGet:
-              path: /
-              port: 3010
-            initialDelaySeconds: 10
-            periodSeconds: 10
-            timeoutSeconds: 3
-            failureThreshold: 3
           resources:
             requests:
               memory: "64Mi"

k8s/apps/remnawave/user-ui-ingress.yaml

@@ -0,0 +1,37 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: user-ui
+  annotations:
+    ingressClassName: traefik
+    cert-manager.io/cluster-issuer: letsencrypt
+    traefik.ingress.kubernetes.io/router.middlewares: kube-system-https-redirect@kubernetescrd
+    acme.cert-manager.io/http01-edit-in-place: "true"
+spec:
+  rules:
+    - host: sub.hexor.cy
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: remnawave-subscription-page
+                port:
+                  number: 3010
+    - host: sub.hexor.ru
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: remnawave-subscription-page
+                port:
+                  number: 3010
+  tls:
+    - secretName: remnawave-user-ui-tls
+      hosts:
+        - sub.hexor.cy
+        - sub.hexor.ru

k8s/core/authentik/values.yaml

@@ -47,7 +47,7 @@ server:
         - minecraft.hexor.cy # Minecraft UI and server
         - pass.hexor.cy      # k8s-secret for openai
         - ps.hexor.cy        # pasarguard UI
-        - rw.hexor.cy        # RemnaWave UI
+#       - rw.hexor.cy        # RemnaWave UI
       tls:
         - secretName: idm-tls
           hosts:

k8s/core/postgresql/external-secrets.yaml

@@ -121,6 +121,8 @@ spec:
           {{ .pasarguard }}
         USER_remnawave: |-
           {{ .remnawave }}
+        USER_umami: |-
+          {{ .umami }}
   data:
     - secretKey: authentik
       sourceRef:
@@ -232,3 +234,14 @@ spec:
         metadataPolicy: None
         key: 2a9deb39-ef22-433e-a1be-df1555625e22
         property: fields[10].value
+    - secretKey: umami
+      sourceRef:
+        storeRef:
+          name: vaultwarden-login
+          kind: ClusterSecretStore
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        metadataPolicy: None
+        key: 2a9deb39-ef22-433e-a1be-df1555625e22
+        property: fields[11].value

terraform/authentik/proxy-apps.tfvars

@@ -206,22 +206,5 @@ EOT
     create_group                 = true
     access_groups                = ["admins"]
   }
-  "remnawave" = {
-    name                         = "RemnaWave"
-    slug                         = "remnawave"
-    group                        = "Tools"
-    external_host                = "https://rw.hexor.cy"
-    internal_host                = "http://remnawave.remnawave.svc:3000"
-    internal_host_ssl_validation = false
-    meta_description             = ""
-    skip_path_regex              = <<-EOT
-/api/sub/
-EOT
-    meta_icon                    = "https://camo.githubusercontent.com/0fbcff9dfaebb0363774139d00ef58d7f128eed3ddabaaf2bf7d18b68fd296a1/68747470733a2f2f63646e2e72656d6e612e73742f6c6f676f732f6c6f676f2e737667"
-    mode                         = "proxy"
-    outpost                      = "kubernetes-outpost"
-    create_group                 = true
-    access_groups                = ["admins"]
-  }
 }