Auto-update README with current k8s applications

Generated by CI/CD workflow on 2025-11-24 16:34:28

This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.

k8s/apps/remnawave/kustomization.yaml

@@ -8,5 +8,3 @@ resources:
   - ./subscription-page-configmap.yaml
   - ./subscription-page-deployment.yaml
   - ./servicemonitor.yaml
-  - ./user-ui-ingress.yaml
-  - ./panel-ingress.yaml

k8s/apps/remnawave/panel-ingress.yaml

@@ -1,37 +0,0 @@
----
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: panel-ui
-  annotations:
-    ingressClassName: traefik
-    cert-manager.io/cluster-issuer: letsencrypt
-    traefik.ingress.kubernetes.io/router.middlewares: kube-system-https-redirect@kubernetescrd
-    acme.cert-manager.io/http01-edit-in-place: "true"
-spec:
-  rules:
-    - host: rw.hexor.cy
-      http:
-        paths:
-          - path: /
-            pathType: Prefix
-            backend:
-              service:
-                name: remnawave
-                port:
-                  number: 3000
-    - host: rw.hexor.ru
-      http:
-        paths:
-          - path: /
-            pathType: Prefix
-            backend:
-              service:
-                name: remnawave
-                port:
-                  number: 3000
-  tls:
-    - secretName: remnawave-panel-tls
-      hosts:
-        - rw.hexor.cy
-        - rw.hexor.ru

k8s/apps/remnawave/subscription-page-configmap.yaml

@@ -7,7 +7,7 @@ metadata:
     app: remnawave-subscription-page
 data:
   APP_PORT: "3010"
-  REMNAWAVE_PANEL_URL: "https://rw.hexor.cy"
+  REMNAWAVE_PANEL_URL: "http://remnawave.remnawave.svc:3000"
   META_TITLE: "RemnaWave Subscription"
   META_DESCRIPTION: "Your VPN subscription portal"
   META_KEYWORDS: "vpn,subscription,remnawave"

k8s/apps/remnawave/subscription-page-deployment.yaml

@@ -28,6 +28,22 @@ spec:
             - name: http
               containerPort: 3010
               protocol: TCP
+          livenessProbe:
+            httpGet:
+              path: /
+              port: 3010
+            initialDelaySeconds: 30
+            periodSeconds: 30
+            timeoutSeconds: 5
+            failureThreshold: 3
+          readinessProbe:
+            httpGet:
+              path: /
+              port: 3010
+            initialDelaySeconds: 10
+            periodSeconds: 10
+            timeoutSeconds: 3
+            failureThreshold: 3
           resources:
             requests:
               memory: "64Mi"

k8s/apps/remnawave/user-ui-ingress.yaml

@@ -1,37 +0,0 @@
----
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: user-ui
-  annotations:
-    ingressClassName: traefik
-    cert-manager.io/cluster-issuer: letsencrypt
-    traefik.ingress.kubernetes.io/router.middlewares: kube-system-https-redirect@kubernetescrd
-    acme.cert-manager.io/http01-edit-in-place: "true"
-spec:
-  rules:
-    - host: sub.hexor.cy
-      http:
-        paths:
-          - path: /
-            pathType: Prefix
-            backend:
-              service:
-                name: remnawave-subscription-page
-                port:
-                  number: 3010
-    - host: sub.hexor.ru
-      http:
-        paths:
-          - path: /
-            pathType: Prefix
-            backend:
-              service:
-                name: remnawave-subscription-page
-                port:
-                  number: 3010
-  tls:
-    - secretName: remnawave-user-ui-tls
-      hosts:
-        - sub.hexor.cy
-        - sub.hexor.ru

k8s/core/authentik/values.yaml

@@ -47,7 +47,7 @@ server:
         - minecraft.hexor.cy # Minecraft UI and server
         - pass.hexor.cy      # k8s-secret for openai
         - ps.hexor.cy        # pasarguard UI
-#       - rw.hexor.cy        # RemnaWave UI
+        - rw.hexor.cy        # RemnaWave UI
       tls:
         - secretName: idm-tls
           hosts:

k8s/core/postgresql/external-secrets.yaml

@@ -121,8 +121,6 @@ spec:
           {{ .pasarguard }}
         USER_remnawave: |-
           {{ .remnawave }}
-        USER_umami: |-
-          {{ .umami }}
   data:
     - secretKey: authentik
       sourceRef:
@@ -234,14 +232,3 @@ spec:
         metadataPolicy: None
         key: 2a9deb39-ef22-433e-a1be-df1555625e22
         property: fields[10].value
-    - secretKey: umami
-      sourceRef:
-        storeRef:
-          name: vaultwarden-login
-          kind: ClusterSecretStore
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        metadataPolicy: None
-        key: 2a9deb39-ef22-433e-a1be-df1555625e22
-        property: fields[11].value

terraform/authentik/proxy-apps.tfvars

@@ -206,5 +206,22 @@ EOT
     create_group                 = true
     access_groups                = ["admins"]
   }
+  "remnawave" = {
+    name                         = "RemnaWave"
+    slug                         = "remnawave"
+    group                        = "Tools"
+    external_host                = "https://rw.hexor.cy"
+    internal_host                = "http://remnawave.remnawave.svc:3000"
+    internal_host_ssl_validation = false
+    meta_description             = ""
+    skip_path_regex              = <<-EOT
+/api/sub/
+EOT
+    meta_icon                    = "https://camo.githubusercontent.com/0fbcff9dfaebb0363774139d00ef58d7f128eed3ddabaaf2bf7d18b68fd296a1/68747470733a2f2f63646e2e72656d6e612e73742f6c6f676f732f6c6f676f2e737667"
+    mode                         = "proxy"
+    outpost                      = "kubernetes-outpost"
+    create_group                 = true
+    access_groups                = ["admins"]
+  }
 }