Auto-update README with current k8s applications

Generated by CI/CD workflow on 2026-04-09 09:33:53

This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.

README.md

@@ -62,11 +62,9 @@ ArgoCD homelab project
 | **sonarr-stack** | [![sonarr-stack](https://ag.hexor.cy/api/badge?name=sonarr-stack&revision=true)](https://ag.hexor.cy/applications/argocd/sonarr-stack) |
 | **stirling-pdf** | [![stirling-pdf](https://ag.hexor.cy/api/badge?name=stirling-pdf&revision=true)](https://ag.hexor.cy/applications/argocd/stirling-pdf) |
 | **syncthing** | [![syncthing](https://ag.hexor.cy/api/badge?name=syncthing&revision=true)](https://ag.hexor.cy/applications/argocd/syncthing) |
-| **teamspeak** | [![teamspeak](https://ag.hexor.cy/api/badge?name=teamspeak&revision=true)](https://ag.hexor.cy/applications/argocd/teamspeak) |
 | **tg-bots** | [![tg-bots](https://ag.hexor.cy/api/badge?name=tg-bots&revision=true)](https://ag.hexor.cy/applications/argocd/tg-bots) |
 | **vaultwarden** | [![vaultwarden](https://ag.hexor.cy/api/badge?name=vaultwarden&revision=true)](https://ag.hexor.cy/applications/argocd/vaultwarden) |
 | **vpn** | [![vpn](https://ag.hexor.cy/api/badge?name=vpn&revision=true)](https://ag.hexor.cy/applications/argocd/vpn) |
-| **wedding** | [![wedding](https://ag.hexor.cy/api/badge?name=wedding&revision=true)](https://ag.hexor.cy/applications/argocd/wedding) |
 | **xandikos** | [![xandikos](https://ag.hexor.cy/api/badge?name=xandikos&revision=true)](https://ag.hexor.cy/applications/argocd/xandikos) |
 
 </td>

k8s/apps/gitea/deployment.yaml

@@ -48,8 +48,6 @@ spec:
               value: "true"
             - name: GITEA__service__CAPTCHA_TYPE
               value: "hcaptcha"
-            - name: GITEA__webhook__ALLOWED_HOST_LIST
-              value: "*"
           envFrom:
           - secretRef:
               name: gitea-recapcha-creds

k8s/apps/pasarguard/daemonset.yaml

@@ -113,7 +113,7 @@ spec:
               mountPath: /scripts
       containers:
         - name: pasarguard-node
-          image: 'pasarguard/node:v0.3.0'
+          image: 'pasarguard/node:v0.2.1'
           imagePullPolicy: Always
           command:
             - /bin/sh

k8s/apps/pasarguard/deployment.yaml

@@ -34,7 +34,7 @@ spec:
               mountPath: /templates/subscription
       containers:
         - name: pasarguard-web
-          image: 'pasarguard/panel:dev'
+          image: 'pasarguard/panel:latest'
           imagePullPolicy: Always
           envFrom:
             - secretRef:

k8s/apps/teamspeak/app.yaml

@@ -1,20 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: teamspeak
-  namespace: argocd
-spec:
-  project: apps
-  destination:
-    namespace: teamspeak
-    server: https://kubernetes.default.svc
-  source:
-    repoURL: ssh://git@gt.hexor.cy:30022/ab/homelab.git
-    targetRevision: HEAD
-    path: k8s/apps/teamspeak
-  syncPolicy:
-    automated:
-      selfHeal: true
-      prune: true
-    syncOptions:
-      - CreateNamespace=true

k8s/apps/teamspeak/deployment.yaml

@@ -1,49 +0,0 @@
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: teamspeak
-  labels:
-    app: teamspeak
-spec:
-  selector:
-    matchLabels:
-      app: teamspeak
-  replicas: 1
-  strategy:
-    type: Recreate
-  template:
-    metadata:
-      labels:
-        app: teamspeak
-    spec:
-      volumes:
-        - name: data
-          persistentVolumeClaim:
-            claimName: teamspeak-data
-      containers:
-        - name: teamspeak
-          image: 'teamspeak:latest'
-          env:
-            - name: TS3SERVER_LICENSE
-              value: "accept"
-          resources:
-            requests:
-              memory: "256Mi"
-              cpu: "100m"
-            limits:
-              memory: "512Mi"
-              cpu: "1000m"
-          ports:
-            - name: voice
-              containerPort: 9987
-              protocol: UDP
-            - name: filetransfer
-              containerPort: 30033
-              protocol: TCP
-            - name: serverquery
-              containerPort: 10011
-              protocol: TCP
-          volumeMounts:
-            - name: data
-              mountPath: /var/ts3server

k8s/apps/teamspeak/kustomization.yaml

@@ -1,8 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-
-resources:
-  - app.yaml
-  - storage.yaml
-  - deployment.yaml
-  - service.yaml

k8s/apps/teamspeak/service.yaml

@@ -1,22 +0,0 @@
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: teamspeak
-spec:
-  type: LoadBalancer
-  selector:
-    app: teamspeak
-  ports:
-    - name: voice
-      protocol: UDP
-      port: 9987
-      targetPort: 9987
-    - name: filetransfer
-      protocol: TCP
-      port: 30033
-      targetPort: 30033
-    - name: serverquery
-      protocol: TCP
-      port: 10011
-      targetPort: 10011

k8s/apps/teamspeak/storage.yaml

@@ -1,12 +0,0 @@
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: teamspeak-data
-spec:
-  accessModes:
-    - ReadWriteOnce
-  storageClassName: longhorn
-  resources:
-    requests:
-      storage: 5Gi

k8s/apps/wedding/app.yaml

@@ -1,20 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: wedding
-  namespace: argocd
-spec:
-  project: apps
-  destination:
-    namespace: wedding
-    server: https://kubernetes.default.svc
-  source:
-    repoURL: ssh://git@gt.hexor.cy:30022/ab/homelab.git
-    targetRevision: HEAD
-    path: k8s/apps/wedding
-  syncPolicy:
-    automated:
-      selfHeal: true
-      prune: true
-    syncOptions:
-      - CreateNamespace=true

k8s/apps/wedding/deployment.yaml

@@ -1,69 +0,0 @@
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: wedding
-  labels:
-    app: wedding
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: wedding
-  template:
-    metadata:
-      labels:
-        app: wedding
-    spec:
-      nodeSelector:
-        kubernetes.io/hostname: spb.tail2fe2d.ts.net
-      initContainers:
-        - name: git-clone
-          image: alpine/git:latest
-          command:
-            - sh
-            - -c
-            - git clone --depth 1 https://gt.hexor.cy/ab/wedding.git /src
-          volumeMounts:
-            - name: source
-              mountPath: /src
-        - name: zola-build
-          image: ghcr.io/getzola/zola:v0.22.1
-          command:
-            - /bin/zola
-          args:
-            - --root
-            - /src
-            - build
-            - --base-url
-            - https://wedding.hexor.cy/
-            - --output-dir
-            - /public/html
-          volumeMounts:
-            - name: source
-              mountPath: /src
-            - name: public
-              mountPath: /public
-      containers:
-        - name: nginx
-          image: nginx:alpine
-          ports:
-            - containerPort: 80
-              protocol: TCP
-          volumeMounts:
-            - name: public
-              mountPath: /usr/share/nginx/html
-              subPath: html
-              readOnly: true
-          resources:
-            requests:
-              memory: 32Mi
-              cpu: 10m
-            limits:
-              memory: 64Mi
-              cpu: 100m
-      volumes:
-        - name: source
-          emptyDir: {}
-        - name: public
-          emptyDir: {}

k8s/apps/wedding/ingress.yaml

@@ -1,26 +0,0 @@
----
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: wedding-tls-ingress
-  annotations:
-    ingressClassName: traefik
-    cert-manager.io/cluster-issuer: letsencrypt
-    traefik.ingress.kubernetes.io/router.middlewares: kube-system-https-redirect@kubernetescrd
-    acme.cert-manager.io/http01-edit-in-place: "true"
-spec:
-  rules:
-    - host: wedding.hexor.cy
-      http:
-        paths:
-          - path: /
-            pathType: Prefix
-            backend:
-              service:
-                name: wedding
-                port:
-                  number: 80
-  tls:
-    - secretName: wedding-tls
-      hosts:
-        - wedding.hexor.cy

k8s/apps/wedding/kustomization.yaml

@@ -1,10 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-
-resources:
-  - app.yaml
-  - rbac.yaml
-  - deployment.yaml
-  - service.yaml
-  - ingress.yaml
-  - webhook.yaml

k8s/apps/wedding/rbac.yaml

@@ -1,42 +0,0 @@
----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: wedding-deployer
-  namespace: wedding
-
----
-apiVersion: v1
-kind: Secret
-metadata:
-  name: wedding-deployer-token
-  namespace: wedding
-  annotations:
-    kubernetes.io/service-account.name: wedding-deployer
-type: kubernetes.io/service-account-token
-
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  name: wedding-restart
-  namespace: wedding
-rules:
-  - apiGroups: ["apps"]
-    resources: ["deployments"]
-    verbs: ["get", "patch"]
-
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  name: wedding-deployer-restart
-  namespace: wedding
-subjects:
-  - kind: ServiceAccount
-    name: wedding-deployer
-    namespace: wedding
-roleRef:
-  kind: Role
-  name: wedding-restart
-  apiGroup: rbac.authorization.k8s.io

k8s/apps/wedding/service.yaml

@@ -1,12 +0,0 @@
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: wedding
-spec:
-  selector:
-    app: wedding
-  ports:
-    - port: 80
-      targetPort: 80
-      protocol: TCP

k8s/apps/wedding/webhook.yaml

@@ -1,71 +0,0 @@
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: webhook-script
-data:
-  serve.sh: |
-    #!/bin/sh
-    echo "Webhook server listening on :8080"
-    while true; do
-      echo -e "HTTP/1.1 200 OK\r\nContent-Length: 2\r\nConnection: close\r\n\r\nok" \
-        | nc -l -p 8080 > /dev/null
-      echo "Received webhook, restarting deployment..."
-      kubectl rollout restart deployment/wedding
-    done
-
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: wedding-webhook
-  labels:
-    app: wedding-webhook
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: wedding-webhook
-  template:
-    metadata:
-      labels:
-        app: wedding-webhook
-    spec:
-      nodeSelector:
-        kubernetes.io/hostname: spb.tail2fe2d.ts.net
-      serviceAccountName: wedding-deployer
-      containers:
-        - name: webhook
-          image: alpine/k8s:1.32.3
-          command: ["sh", "/scripts/serve.sh"]
-          ports:
-            - containerPort: 8080
-              protocol: TCP
-          volumeMounts:
-            - name: script
-              mountPath: /scripts
-              readOnly: true
-          resources:
-            requests:
-              memory: 16Mi
-              cpu: 5m
-            limits:
-              memory: 32Mi
-              cpu: 50m
-      volumes:
-        - name: script
-          configMap:
-            name: webhook-script
-
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: wedding-webhook
-spec:
-  selector:
-    app: wedding-webhook
-  ports:
-    - port: 8080
-      targetPort: 8080
-      protocol: TCP

k8s/core/cert-manager/issuer.yaml

@@ -18,9 +18,11 @@ spec:
               key: apiKey
         selector:
           dnsZones:
+            - "*.hexor.cy"
             - "*.hexor.ru"
             - "*.btwiusearch.net"
             - "hexor.ru"
+            - "hexor.cy"
             - "btwiusearch.net"
       - dns01:
           route53:
@@ -33,6 +35,7 @@ spec:
               key: secretKey
         selector:
           dnsZones:
-            - "*.hexor.cy"
+            - "ps.hexor.cy"
-            - "hexor.cy"
+            - "of.hexor.cy"
+            - "matrix.hexor.cy"
 

k8s/core/prom-stack/loki-values.yaml

@@ -20,12 +20,8 @@ loki:
     filesystem:
       chunks_directory: /var/loki/chunks
       rules_directory: /var/loki/rules
-  compactor:
-    retention_enabled: true
-    delete_request_store: filesystem
   limits_config:
     reject_old_samples: false
-    retention_period: 1440h
     ingestion_rate_mb: 16
     ingestion_burst_size_mb: 32
     max_query_parallelism: 32

k8s/core/prom-stack/prom-values.yaml

@@ -78,7 +78,7 @@ prometheus:
           - targets: ['prom-a2s-exporter.counter-strike.svc:9841']
             labels: {instance: master}
 
-    retention: "380d"
+    retention: "99999d"
     retentionSize: "0"
     nodeSelector:
       kubernetes.io/hostname: master.tail2fe2d.ts.net

k8s/games/minecraft/deployments.yaml

@@ -35,7 +35,7 @@ spec:
       terminationGracePeriodSeconds: 10
       containers:
         - name: minecraft
-          image: 'eclipse-temurin:8-jdk-ubi10-minimal'
+          image: 'openjdk:8-jdk-alpine'
           command: ["java"]
           args:
             - -Xms4G