Auto-update README with current k8s applications

Generated by CI/CD workflow on 2026-03-16 15:41:03

This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.

k8s/apps/furumi-server/deployment.yaml

@@ -24,32 +24,10 @@ spec:
             - name: FURUMI_TOKEN
               valueFrom:
                 secretKeyRef:
-                  name: furumi-ng-creds
+                  name: furumi-ng-token
                   key: TOKEN
-            - name: FURUMI_OIDC_CLIENT_ID
-              valueFrom:
-                secretKeyRef:
-                  name: furumi-ng-creds
-                  key: OIDC_CLIENT_ID
-            - name: FURUMI_OIDC_CLIENT_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: furumi-ng-creds
-                  key: OIDC_CLIENT_SECRET
-            - name: FURUMI_OIDC_ISSUER_URL
-              valueFrom:
-                secretKeyRef:
-                  name: furumi-ng-creds
-                  key: OIDC_ISSUER_URL
-            - name: FURUMI_OIDC_REDIRECT_URL
-              valueFrom:
-                secretKeyRef:
-                  name: furumi-ng-creds
-                  key: OIDC_REDIRECT_URL
             - name: FURUMI_ROOT
               value: "/media"
-            - name: RUST_LOG
-              value: "debug"
           ports:
             - name: grpc
               containerPort: 50051
@@ -57,9 +35,6 @@ spec:
             - name: metrics
               containerPort: 9090
               protocol: TCP
-            - name: web-ui
-              containerPort: 8080
-              protocol: TCP
           volumeMounts:
             - name: music
               mountPath: /media

k8s/apps/furumi-server/external-secrets.yaml

@@ -2,22 +2,16 @@
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: furumi-ng-creds
+  name: furumi-ng-token
 spec:
   target:
-    name: furumi-ng-creds
+    name: furumi-ng-token
     deletionPolicy: Delete
     template:
       type: Opaque
       data:
         TOKEN: |-
           {{ .token }}
-        OIDC_CLIENT_ID: |-
-          {{ .client_id }}
-        OIDC_CLIENT_SECRET: |-
-          {{ .client_secret }}
-        OIDC_ISSUER_URL: https://idm.hexor.cy/application/o/furumi-ng-web/
-        OIDC_REDIRECT_URL: https://music.hexor.cy/auth/callback
   data:
     - secretKey: token
       sourceRef:
@@ -27,19 +21,3 @@ spec:
       remoteRef:
         key: b8b8c3a2-c3fe-42d3-9402-0ae305e1455f
         property: fields[0].value
-    - secretKey: client_id
-      sourceRef:
-        storeRef:
-          name: vaultwarden-login
-          kind: ClusterSecretStore
-      remoteRef:
-        key: b8b8c3a2-c3fe-42d3-9402-0ae305e1455f
-        property: fields[1].value
-    - secretKey: client_secret
-      sourceRef:
-        storeRef:
-          name: vaultwarden-login
-          kind: ClusterSecretStore
-      remoteRef:
-        key: b8b8c3a2-c3fe-42d3-9402-0ae305e1455f
-        property: fields[2].value

k8s/apps/furumi-server/ingress.yaml

@@ -1,28 +0,0 @@
----
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: furumi-tls-ingress
-  annotations:
-    ingressClassName: traefik
-    cert-manager.io/cluster-issuer: letsencrypt
-    traefik.ingress.kubernetes.io/router.middlewares: kube-system-https-redirect@kubernetescrd
-    acme.cert-manager.io/http01-edit-in-place: "true"
-spec:
-  rules:
-    - host: music.hexor.cy
-      http:
-        paths:
-          - path: /
-            pathType: Prefix
-            backend:
-              service:
-                name: furumi-server-web
-                port:
-                  number: 8080
-  tls:
-    - secretName: furumi-tls
-      hosts:
-        - '*.hexor.cy'
-
-

k8s/apps/furumi-server/kustomization.yaml

@@ -7,4 +7,3 @@ resources:
   - service.yaml
   - servicemonitor.yaml
   - external-secrets.yaml
-  - ingress.yaml

k8s/apps/furumi-server/service.yaml

@@ -28,19 +28,3 @@ spec:
       protocol: TCP
       port: 9090
       targetPort: 9090
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: furumi-server-web
-  labels:
-    app: furumi-server
-spec:
-  type: ClusterIP
-  selector:
-    app: furumi-server
-  ports:
-    - name: web-ui
-      protocol: TCP
-      port: 8080
-      targetPort: 8080

k8s/apps/matrix/matrix-stack-values.yaml

@@ -16,32 +16,11 @@ postgres:
   enabled: false
 
 ## Disable components we don't need yet
+matrixRTC:
+  enabled: false
 hookshot:
   enabled: false
 
-## MatrixRTC - voice/video calls via LiveKit SFU
-matrixRTC:
-  enabled: true
-  ingress:
-    host: livekit.matrix.hexor.cy
-  sfu:
-    enabled: true
-    manualIP: "138.201.61.182"
-    nodeSelector:
-      kubernetes.io/hostname: master.tail2fe2d.ts.net
-    exposedServices:
-      rtcTcp:
-        enabled: true
-        port: 30881
-      rtcMuxedUdp:
-        enabled: true
-        port: 30882
-      turnTLS:
-        enabled: true
-        port: 31443
-        domain: turn.matrix.hexor.cy
-        tlsTerminationOnPod: true
-
 ## Synapse homeserver
 synapse:
   enabled: true

k8s/apps/ollama/kustomization.yaml

@@ -16,7 +16,7 @@ helmCharts:
     includeCRDs: true
   - name: open-webui
     repo: https://helm.openwebui.com/
-    version: 12.10.0
+    version: 12.8.1
     releaseName: openweb-ui
     namespace: ollama
     valuesFile: openweb-ui-values.yaml

terraform/authentik/oauth2-apps.auto.tfvars

@@ -208,25 +208,5 @@ oauth_applications = {
     create_group               = false
     signing_key                = "1b1b5bec-034a-4d96-871a-133f11322360"
   }
-  "furumi-ng-web" = {
-    name             = "Furumi Web Player"
-    slug             = "furumi-ng-web"
-    group            = "Tools"
-    meta_description = "Furumi Web Player"
-    meta_icon        = "https://img.icons8.com/pulsar-color/48/music.png"
-    redirect_uris = [
-      "https://music.hexor.cy/auth/callback",
-    ]
-    meta_launch_url            = "https://music.hexor.cy"
-    client_type                = "confidential"
-    include_claims_in_id_token = true
-    access_code_validity       = "minutes=1"
-    access_token_validity      = "minutes=5"
-    refresh_token_validity     = "days=30"
-    scope_mappings             = ["openid", "profile", "email"]
-    access_groups              = []
-    create_group               = false
-    signing_key                = "1b1b5bec-034a-4d96-871a-133f11322360"
-  }
 }