Auto-update README with current k8s applications

Generated by CI/CD workflow on 2025-12-28 13:02:44

This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.

README.md

@@ -56,6 +56,7 @@ ArgoCD homelab project
 | **tg-bots** | [![tg-bots](https://ag.hexor.cy/api/badge?name=tg-bots&revision=true)](https://ag.hexor.cy/applications/argocd/tg-bots) |
 | **vaultwarden** | [![vaultwarden](https://ag.hexor.cy/api/badge?name=vaultwarden&revision=true)](https://ag.hexor.cy/applications/argocd/vaultwarden) |
 | **vpn** | [![vpn](https://ag.hexor.cy/api/badge?name=vpn&revision=true)](https://ag.hexor.cy/applications/argocd/vpn) |
+| **xandikos** | [![xandikos](https://ag.hexor.cy/api/badge?name=xandikos&revision=true)](https://ag.hexor.cy/applications/argocd/xandikos) |
 
 </td>
 </tr>

k8s/desktop/khm/app.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   project: desktop
   destination:
-    namespace: default
+    namespace: khm
     server: https://kubernetes.default.svc
   source:
     repoURL: ssh://git@gt.hexor.cy:30022/ab/homelab.git

k8s/desktop/khm/external-secrets.yaml

@@ -0,0 +1,33 @@
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: khm-client-creds
+spec:
+  target:
+    name: khm-client-creds
+    deletionPolicy: Delete
+    template:
+      type: Opaque
+      data:
+        USERNAME: |-
+          {{ .username }}
+        PASSWORD: |-
+          {{ .password }}
+  data:
+    - secretKey: username
+      sourceRef:
+        storeRef:
+          name: vaultwarden-login
+          kind: ClusterSecretStore
+      remoteRef:
+        key: 19c06480-0814-4d1f-aa80-710105989188
+        property: login.username
+    - secretKey: password
+      sourceRef:
+        storeRef:
+          name: vaultwarden-login
+          kind: ClusterSecretStore
+      remoteRef:
+        key: 19c06480-0814-4d1f-aa80-710105989188
+        property: login.password

k8s/desktop/khm/khm-client-cronjob.yaml

@@ -25,7 +25,6 @@ spec:
               operator: Equal
               value: desktop
               effect: NoSchedule
-          hostNetwork: false
           containers:
             - name: khm-client
               image: 'ultradesu/khm:latest'
@@ -40,14 +39,31 @@ spec:
                   memory: "256Mi"
                   cpu: "200m"
               command:
-                - /usr/local/bin/khm
+                - /bin/sh
-                - --known-hosts
+                - -c
-                - /host-ssh/known_hosts
+                - |
-                - --host
+                  hostname "$NODE_NAME"
-                - https://khm.hexor.cy
+                  /usr/local/bin/khm \
-                - --flow=work
+                    --known-hosts /host-ssh/known_hosts \
-                - --basic-auth=ultradesu:JiMkWGaA0UZRkzzqtdPvvE0D5vIMCrH7LZGvK2Ux6eGSWECrPlh7UH1khdEm
+                    --host https://khm.hexor.cy \
-                - --in-place
+                    --flow=private \
+                    --basic-auth="${USERNAME}:${PASSWORD}" \
+                    --in-place
+              env:
+                - name: NODE_NAME
+                  valueFrom:
+                    fieldRef:
+                      fieldPath: spec.nodeName
+                - name: USERNAME
+                  valueFrom:
+                    secretKeyRef:
+                      name: khm-client-creds
+                      key: USERNAME
+                - name: PASSWORD
+                  valueFrom:
+                    secretKeyRef:
+                      name: khm-client-creds
+                      key: PASSWORD
               volumeMounts:
                 - name: known-hosts
                   mountPath: /host-ssh/known_hosts

k8s/desktop/khm/kustomization.yaml

@@ -2,5 +2,5 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
 resources:
-  - app.yaml
+  - external-secrets.yaml
   - khm-client-cronjob.yaml