Auto-update README with current k8s applications

Generated by CI/CD workflow on 2026-04-29 14:52:10

This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.

k8s/apps/matrix/matrix-stack-values.yaml

@@ -26,9 +26,9 @@ matrixRTC:
     host: livekit.matrix.hexor.cy
   sfu:
     enabled: true
-    manualIP: "78.24.180.234"
+    manualIP: "138.201.61.182"
     nodeSelector:
-      kubernetes.io/hostname: spb.tail2fe2d.ts.net
+      kubernetes.io/hostname: master.tail2fe2d.ts.net
     exposedServices:
       rtcTcp:
         enabled: true
@@ -45,14 +45,6 @@ matrixRTC:
 ## Synapse homeserver
 synapse:
   enabled: true
-  additional:
-    0-search-config:
-      config: |
-        user_directory:
-          enabled: true
-          search_all_users: true
-          prefer_local_users: true
-        enable_room_list_search: true
   ingress:
     host: synapse.matrix.hexor.cy
   postgres:
@@ -64,12 +56,12 @@ synapse:
     password:
       secret: matrix-postgres-creds
       secretKey: synapse_db_password
-  nodeSelector:
-    kubernetes.io/hostname: master.tail2fe2d.ts.net
   media:
     storage:
       size: 20Gi
     maxUploadSize: 100M
+    nodeSelector:
+      kubernetes.io/hostname: master.tail2fe2d.ts.net
 
 ## Matrix Authentication Service
 matrixAuthenticationService:
@@ -96,8 +88,8 @@ matrixAuthenticationService:
     1-oidc:
       configSecret: matrix-oidc-config
       configSecretKey: mas-oidc.yaml
-  nodeSelector:
+    nodeSelector:
-    kubernetes.io/hostname: master.tail2fe2d.ts.net
+      kubernetes.io/hostname: master.tail2fe2d.ts.net
 
 ## Element Web client
 elementWeb:

k8s/apps/web-petting/deployment.yaml

@@ -25,10 +25,6 @@ spec:
         image: ultradesu/web-petting:0.1.0
         imagePullPolicy: Always
         args:
-#         - "tail"
-#         - "-F"
-#         - "/1"
-          - "web-petting"
           - "-l"
           - "0.0.0.0:3000"
         ports:
@@ -47,3 +43,11 @@ spec:
           limits:
             memory: "128Mi"
             cpu: "150m"
+        securityContext:
+          runAsNonRoot: true
+          runAsUser: 1000
+          allowPrivilegeEscalation: false
+          readOnlyRootFilesystem: true
+          capabilities:
+            drop:
+            - ALL