Auto-update README with current k8s applications

Generated by CI/CD workflow on 2026-04-29 14:52:10 This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.
2026-04-29 14:52:10 +00:00
2 changed files with 14 additions and 18 deletions
@@ -26,9 +26,9 @@ matrixRTC:
    host: livekit.matrix.hexor.cy
  sfu:
    enabled: true
-    manualIP: "78.24.180.234"
+    manualIP: "138.201.61.182"
    nodeSelector:
-      kubernetes.io/hostname: spb.tail2fe2d.ts.net
+      kubernetes.io/hostname: master.tail2fe2d.ts.net
    exposedServices:
      rtcTcp:
        enabled: true
@@ -45,14 +45,6 @@ matrixRTC:
 ## Synapse homeserver
 synapse:
  enabled: true
-  additional:
-    0-search-config:
-      config: |
-        user_directory:
-          enabled: true
-          search_all_users: true
-          prefer_local_users: true
-        enable_room_list_search: true
  ingress:
    host: synapse.matrix.hexor.cy
  postgres:
@@ -64,12 +56,12 @@ synapse:
    password:
      secret: matrix-postgres-creds
      secretKey: synapse_db_password
-  nodeSelector:
-    kubernetes.io/hostname: master.tail2fe2d.ts.net
  media:
    storage:
      size: 20Gi
    maxUploadSize: 100M
+    nodeSelector:
+      kubernetes.io/hostname: master.tail2fe2d.ts.net

 ## Matrix Authentication Service
 matrixAuthenticationService:
@@ -96,8 +88,8 @@ matrixAuthenticationService:
    1-oidc:
      configSecret: matrix-oidc-config
      configSecretKey: mas-oidc.yaml
-  nodeSelector:
-    kubernetes.io/hostname: master.tail2fe2d.ts.net
+    nodeSelector:
+      kubernetes.io/hostname: master.tail2fe2d.ts.net

 ## Element Web client
 elementWeb:
@@ -25,10 +25,6 @@ spec:
        image: ultradesu/web-petting:0.1.0
        imagePullPolicy: Always
        args:
-#         - "tail"
-#         - "-F"
-#         - "/1"
-          - "web-petting"
          - "-l"
          - "0.0.0.0:3000"
        ports:
@@ -47,3 +43,11 @@ spec:
          limits:
            memory: "128Mi"
            cpu: "150m"
+        securityContext:
+          runAsNonRoot: true
+          runAsUser: 1000
+          allowPrivilegeEscalation: false
+          readOnlyRootFilesystem: true
+          capabilities:
+            drop:
+            - ALL