Auto-update README with current k8s applications

Generated by CI/CD workflow on 2026-06-16 01:27:57

This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.

k8s/apps/amnezia/configmap-scripts.yaml

@@ -9,7 +9,7 @@ data:
     set -euo pipefail
 
     PORT="${1:-5847}"
-    VPN_CIDR="${2:-10.8.0.0/16}"
+    VPN_CIDR="${2:-10.8.1.0/24}"
 
     external_interface() {
       ip route get 1.1.1.1 | awk '{for (i=1;i<=NF;i++) if ($i=="dev") {print $(i+1); exit}}'
@@ -68,7 +68,7 @@ data:
     set -euo pipefail
 
     PORT="${1:-5847}"
-    VPN_CIDR="${2:-10.8.0.0/16}"
+    VPN_CIDR="${2:-10.8.1.0/24}"
 
     external_interface() {
       ip route get 1.1.1.1 | awk '{for (i=1;i<=NF;i++) if ($i=="dev") {print $(i+1); exit}}'

k8s/apps/amnezia/external-secrets.yaml

@@ -15,7 +15,7 @@ spec:
         awg0.conf: |-
           [Interface]
           PrivateKey = {{ .server_private_key }}
-          Address = 10.8.0.1/16
+          Address = 10.8.1.1/24
           ListenPort = 5847
           MTU = 1376
           Jc = 4
@@ -29,8 +29,8 @@ spec:
           H2 = 3288052141
           H3 = 1766607858
           H4 = 2528465083
-          PostUp = /scripts/firewall-up.sh 5847 10.8.0.0/16
+          PostUp = /scripts/firewall-up.sh 5847 10.8.1.0/24
-          PostDown = /scripts/firewall-down.sh 5847 10.8.0.0/16
+          PostDown = /scripts/firewall-down.sh 5847 10.8.1.0/24
   data:
     - secretKey: server_private_key
       sourceRef:

k8s/apps/pasarguard/deployment.yaml

@@ -11,7 +11,7 @@ spec:
   selector:
     matchLabels:
       app: pasarguard
-  replicas: 2
+  replicas: 1
   strategy:
     type: RollingUpdate
   template:
@@ -34,7 +34,7 @@ spec:
               mountPath: /templates/subscription
       containers:
         - name: pasarguard-web
-          image: pasarguard/panel:v5.0.3
+          image: pasarguard/panel:v5.0.1
           imagePullPolicy: Always
           envFrom:
             - secretRef:
@@ -50,10 +50,6 @@ spec:
               value: "/app/tls/tls.crt"
             - name: UVICORN_SSL_KEYFILE
               value: "/app/tls/tls.key"
-            - name: UVICORN_PROXY_HEADERS
-              value: "true"
-            - name: FORWARDED_ALLOW_IPS
-              value: "*"
             - name: CUSTOM_TEMPLATES_DIRECTORY
               value: "/code/app/templates/"
             - name: SUBSCRIPTION_PAGE_TEMPLATE

k8s/core/keycloak/values.yaml

@@ -66,11 +66,11 @@ ingress:
 
 resources:
   requests:
-    cpu: 500m
+    cpu: 200m
-    memory: 1Gi
+    memory: 512Mi
   limits:
-    cpu: "3"
+    cpu: "1"
-    memory: 2Gi
+    memory: 1Gi
 
 nodeSelector:
   kubernetes.io/hostname: master.tail2fe2d.ts.net