Auto-update README with current k8s applications

Generated by CI/CD workflow on 2026-04-20 08:43:00

This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.

k8s/apps/gitea/deployment.yaml

@@ -48,8 +48,6 @@ spec:
               value: "true"
             - name: GITEA__service__CAPTCHA_TYPE
               value: "hcaptcha"
-            - name: GITEA__webhook__ALLOWED_HOST_LIST
-              value: "*"
           envFrom:
           - secretRef:
               name: gitea-recapcha-creds

k8s/apps/matrix/matrix-stack-values.yaml

@@ -60,8 +60,8 @@ synapse:
     storage:
       size: 20Gi
     maxUploadSize: 100M
-    nodeSelector:
+  # nodeSelector:
-      kubernetes.io/hostname: master.tail2fe2d.ts.net
+  #   kubernetes.io/hostname: nas.homenet
 
 ## Matrix Authentication Service
 matrixAuthenticationService:
@@ -88,24 +88,24 @@ matrixAuthenticationService:
     1-oidc:
       configSecret: matrix-oidc-config
       configSecretKey: mas-oidc.yaml
-    nodeSelector:
+  # nodeSelector:
-      kubernetes.io/hostname: master.tail2fe2d.ts.net
+  #   kubernetes.io/hostname: nas.homenet
 
 ## Element Web client
 elementWeb:
   enabled: true
   ingress:
     host: chat.matrix.hexor.cy
-  nodeSelector:
+  # nodeSelector:
-    kubernetes.io/hostname: master.tail2fe2d.ts.net
+  #   kubernetes.io/hostname: nas.homenet
 
 ## Element Admin panel
 elementAdmin:
   enabled: true
   ingress:
     host: admin.matrix.hexor.cy
-  nodeSelector:
+  # nodeSelector:
-    kubernetes.io/hostname: master.tail2fe2d.ts.net
+  #   kubernetes.io/hostname: nas.homenet
 
 ## Well-known delegation on the base domain (host is derived from serverName)
 wellKnownDelegation:

k8s/apps/pasarguard/deployment.yaml

@@ -34,7 +34,7 @@ spec:
               mountPath: /templates/subscription
       containers:
         - name: pasarguard-web
-          image: 'pasarguard/panel:v3.0.1'
+          image: 'pasarguard/panel:dev'
           imagePullPolicy: Always
           envFrom:
             - secretRef:
@@ -75,9 +75,6 @@ apiVersion: v1
 kind: Service
 metadata:
   name: pasarguard
-  annotations:
-    traefik.ingress.kubernetes.io/service.serversscheme: https
-    traefik.ingress.kubernetes.io/service.serverstransport: pasarguard-pasarguard-transport@kubernetescrd
 spec:
   selector:
     app: pasarguard

k8s/apps/pasarguard/ingress.yaml

@@ -1,31 +0,0 @@
----
-apiVersion: traefik.io/v1alpha1
-kind: ServersTransport
-metadata:
-  name: pasarguard-transport
-spec:
-  insecureSkipVerify: true
----
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: pasarguard-ingress
-  annotations:
-    traefik.ingress.kubernetes.io/router.entrypoints: websecure
-spec:
-  ingressClassName: traefik
-  rules:
-    - host: ps.hexor.cy
-      http:
-        paths:
-          - path: /
-            pathType: Prefix
-            backend:
-              service:
-                name: pasarguard
-                port:
-                  number: 80
-  tls:
-    - secretName: pasarguard-tls
-      hosts:
-        - ps.hexor.cy

k8s/apps/pasarguard/kustomization.yaml

@@ -9,4 +9,3 @@ resources:
   - ./certificate.yaml
   - ./configmap-scripts.yaml
   - ./servicemonitor.yaml
-  - ./ingress.yaml

k8s/core/system-upgrade/plan.yaml

@@ -7,8 +7,6 @@ metadata:
 spec:
   concurrency: 1
   cordon: true
-  tolerations:
-  - operator: Exists
   nodeSelector:
     matchExpressions:
     - key: node-role.kubernetes.io/control-plane
@@ -18,7 +16,7 @@ spec:
   serviceAccountName: system-upgrade
   upgrade:
     image: rancher/k3s-upgrade
-  version: v1.35.4+k3s1
+  version: v1.35.2+k3s1
 ---
 # Agent plan
 apiVersion: upgrade.cattle.io/v1
@@ -29,8 +27,6 @@ metadata:
 spec:
   concurrency: 1
   cordon: true
-  tolerations:
-  - operator: Exists
   nodeSelector:
     matchExpressions:
     - key: node-role.kubernetes.io/control-plane
@@ -43,4 +39,4 @@ spec:
   serviceAccountName: system-upgrade
   upgrade:
     image: rancher/k3s-upgrade
-  version: v1.35.4+k3s1
+  version: v1.35.2+k3s1