Auto-update README with current k8s applications

Generated by CI/CD workflow on 2025-12-28 12:46:18

This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.

k8s/desktop/jellyfin/app.yaml

@@ -1,21 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: jellyfin-uk
-  namespace: argocd
-spec:
-  project: apps
-  destination:
-    namespace: jellyfin-uk
-    server: https://kubernetes.default.svc
-  source:
-    repoURL: ssh://git@gt.hexor.cy:30022/ab/homelab.git
-    targetRevision: HEAD
-    path: k8s/desktop/jellyfin
-  syncPolicy:
-    automated:
-      selfHeal: true
-      prune: true
-    syncOptions:
-      - CreateNamespace=true
-

k8s/desktop/jellyfin/kustomization.yaml

@@ -1,16 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-
-resources:
-  - app.yaml
-  - qbittorent.yaml
-
-helmCharts:
-  - name: jellyfin
-    repo: https://utkuozdemir.org/helm-charts
-    version: 2.0.0
-    releaseName: jellyfin
-    namespace: jellyfin
-    valuesFile: values.yaml
-    includeCRDs: true
-

k8s/desktop/jellyfin/qbittorent.yaml

@@ -1,104 +0,0 @@
----
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: vpn-creds
-spec:
-  target:
-    name: vpn-creds
-    deletionPolicy: Delete
-    template:
-      type: Opaque
-      data:
-        ss_link: |-
-          {{ .ss_link }}
-  data:
-    - secretKey: ss_link
-      sourceRef:
-        storeRef:
-          name: vaultwarden-login
-          kind: ClusterSecretStore
-      remoteRef:
-        key: cfee6f62-fb06-4a4c-b6d8-92da4908c65a
-        property: fields[0].value
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: qbittorrent
-  labels:
-    app: qbittorrent
-  annotations:
-    reloader.stakater.com/auto: "true"
-spec:
-  selector:
-    matchLabels:
-      app: qbittorrent
-  replicas: 1
-  strategy:
-    type: RollingUpdate
-    rollingUpdate:
-      maxSurge: 1
-      maxUnavailable: 0
-  template:
-    metadata:
-      labels:
-        app: qbittorrent
-    spec:
-      nodeSelector:
-        kubernetes.io/hostname: uk-desktop.tail2fe2d.ts.net
-      tolerations:
-        - key: workload
-          operator: Equal
-          value: desktop
-          effect: NoSchedule
-      volumes:
-        - name: config
-          hostPath:
-            path: /k8s/qbt-config
-            type: DirectoryOrCreate
-        - name: media
-          hostPath:
-            path: /k8s/media/downloads
-            type: DirectoryOrCreate
-      containers:
-        - name: qbittorrent
-          image: 'linuxserver/qbittorrent:latest'
-          ports:
-            - name: http
-              containerPort: 8080
-              protocol: TCP
-          volumeMounts:
-            - name: config
-              mountPath: /config
-            - name: media
-              mountPath: /downloads
-        - name: shadowsocks-proxy
-          image: teddysun/shadowsocks-rust:latest
-          env:
-            - name: SS_LINK
-              valueFrom:
-                secretKeyRef:
-                  name: vpn-creds
-                  key: ss_link
-          command: ["/bin/bash", "-c", "rm /etc/shadowsocks-rust/config.json && sslocal --server-url $SS_LINK --local-addr 127.0.0.1:8081 -U --protocol http"]
-          resources:
-            requests:
-              memory: "64Mi"
-              cpu: "300m"
-            limits:
-              memory: "128Mi"
-              cpu: "300m"
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: qbittorrent
-spec:
-  selector:
-    app: qbittorrent
-  ports:
-    - protocol: TCP
-      port: 80
-      targetPort: 8080
-

k8s/desktop/jellyfin/values.yaml

@@ -1,39 +0,0 @@
-image:
-  tag: 10.11.4
-resources:
-  requests:
-    memory: "2Gi"
-    cpu: "1000m"
-  limits:
-    memory: "8Gi"
-    cpu: "6000m"
-nodeSelector:
-  kubernetes.io/hostname: uk-desktop.tail2fe2d.ts.net
-persistence:
-  config:
-    enabled: true
-    isPvc: false
-    customVolume:
-      hostPath:
-        path: /k8s/jellyfin
-        type: DirectoryOrCreate
-  data:
-    enabled: true
-    isPvc: false
-    customVolume:
-      hostPath:
-        path: /k8s/media/downloads
-        type: DirectoryOrCreate
-
-ingress:
-    enabled: true
-    className: traefik
-    annotations:
-      cert-manager.io/cluster-issuer: letsencrypt
-      traefik.ingress.kubernetes.io/router.middlewares: kube-system-https-redirect@kubernetescrd
-    hosts:
-      - host: uk-desktop.uk
-        paths:
-          - path: /
-            pathType: Prefix
-

k8s/desktop/khm/app.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   project: desktop
   destination:
-    namespace: khm
+    namespace: default
     server: https://kubernetes.default.svc
   source:
     repoURL: ssh://git@gt.hexor.cy:30022/ab/homelab.git

k8s/desktop/khm/external-secrets.yaml

@@ -1,33 +0,0 @@
----
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: khm-client-creds
-spec:
-  target:
-    name: khm-client-creds
-    deletionPolicy: Delete
-    template:
-      type: Opaque
-      data:
-        USERNAME: |-
-          {{ .username }}
-        PASSWORD: |-
-          {{ .password }}
-  data:
-    - secretKey: username
-      sourceRef:
-        storeRef:
-          name: vaultwarden-login
-          kind: ClusterSecretStore
-      remoteRef:
-        key: 19c06480-0814-4d1f-aa80-710105989188
-        property: login.username
-    - secretKey: password
-      sourceRef:
-        storeRef:
-          name: vaultwarden-login
-          kind: ClusterSecretStore
-      remoteRef:
-        key: 19c06480-0814-4d1f-aa80-710105989188
-        property: login.password

k8s/desktop/khm/khm-client-cronjob.yaml

@@ -6,7 +6,7 @@ metadata:
   labels:
     app: khm-client
 spec:
-  schedule: "15 * * * *"
+  schedule: "* * * * *"
   concurrencyPolicy: Forbid
   successfulJobsHistoryLimit: 3
   failedJobsHistoryLimit: 3
@@ -18,7 +18,6 @@ spec:
             app: khm-client
         spec:
           restartPolicy: OnFailure
-          hostNetwork: true
           nodeSelector:
             node-role.kubernetes.io/desktop: ""
           tolerations:
@@ -26,6 +25,7 @@ spec:
               operator: Equal
               value: desktop
               effect: NoSchedule
+          hostNetwork: false
           containers:
             - name: khm-client
               image: 'ultradesu/khm:latest'
@@ -40,26 +40,14 @@ spec:
                   memory: "256Mi"
                   cpu: "200m"
               command:
-                - /bin/sh
+                - /usr/local/bin/khm
-                - -c
+                - --known-hosts
-                - |
+                - /host-ssh/known_hosts
-                  /usr/local/bin/khm \
+                - --host
-                    --known-hosts /host-ssh/known_hosts \
+                - https://khm.hexor.cy
-                    --host https://khm.hexor.cy \
+                - --flow=work
-                    --flow=private \
+                - --basic-auth=ultradesu:JiMkWGaA0UZRkzzqtdPvvE0D5vIMCrH7LZGvK2Ux6eGSWECrPlh7UH1khdEm
-                    --basic-auth="${USERNAME}:${PASSWORD}" \
+                - --in-place
-                    --in-place
-              env:
-                - name: USERNAME
-                  valueFrom:
-                    secretKeyRef:
-                      name: khm-client-creds
-                      key: USERNAME
-                - name: PASSWORD
-                  valueFrom:
-                    secretKeyRef:
-                      name: khm-client-creds
-                      key: PASSWORD
               volumeMounts:
                 - name: known-hosts
                   mountPath: /host-ssh/known_hosts

k8s/desktop/khm/kustomization.yaml

@@ -2,5 +2,5 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
 resources:
-  - external-secrets.yaml
+  - app.yaml
   - khm-client-cronjob.yaml

terraform/authentik/proxy-apps.tfvars

@@ -196,7 +196,6 @@ EOT
     internal_host_ssl_validation = false
     meta_description             = ""
     skip_path_regex              = <<-EOT
-/
 /sub/
 /dashboard/
 /api/