Auto-update README with current k8s applications

Generated by CI/CD workflow on 2026-06-17 23:08:39 This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.
2026-06-17 23:08:39 +00:00
3 changed files with 31 additions and 15 deletions
@@ -41,18 +41,18 @@ spec:
            - name: GITEA__service__REGISTER_MANUAL_CONFIRM
              value: "true"
            - name: GITEA__service__ENABLE_CAPTCHA
-              value: "true"
-            - name: GITEA__service__REQUIRE_CAPTCHA_FOR_LOGIN
              value: "false"
+            - name: GITEA__service__REQUIRE_CAPTCHA_FOR_LOGIN
+              value: "true"
            - name: GITEA__service__REQUIRE_EXTERNAL_REGISTRATION_CAPTCHA
              value: "true"
            - name: GITEA__service__CAPTCHA_TYPE
-              value: "cfturnstile"
+              value: "hcaptcha"
            - name: GITEA__webhook__ALLOWED_HOST_LIST
              value: "*"
          envFrom:
          - secretRef:
-              name: gitea-runner-act-runner-secrets
+              name: gitea-recapcha-creds
          ports:
            - name: http
              containerPort: 3000
@@ -13,10 +13,6 @@ spec:
      data:
        token: |-
          {{ .password }}
-        GITEA__service__CF_TURNSTILE_SITEKEY: |-
-          {{ .CF_TURNSTILE_SITEKEY }}
-        GITEA__service__CF_TURNSTILE_SECRET: |-
-          {{ .CF_TURNSTILE_SECRET }}
  data:
    - secretKey: password
      sourceRef:
@@ -26,19 +22,38 @@ spec:
      remoteRef:
        key: e475b5ab-ea3c-48a5-bb4c-a6bc552fc064
        property: login.password
-    - secretKey: CF_TURNSTILE_SITEKEY
+
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: gitea-recapcha-creds
+spec:
+  refreshInterval: 1m
+  target:
+    name: gitea-recapcha-creds
+    deletionPolicy: Delete
+    template:
+      type: Opaque
+      data:
+        GITEA__service__HCAPTCHA_SITEKEY: |-
+          {{ .HCAPTCHA_SITEKEY }}
+        GITEA__service__HCAPTCHA_SECRET: |-
+          {{ .HCAPTCHA_SECRET }}
+  data:
+    - secretKey: HCAPTCHA_SITEKEY
      sourceRef:
        storeRef:
          name: vaultwarden-login
          kind: ClusterSecretStore
      remoteRef:
-        key: e475b5ab-ea3c-48a5-bb4c-a6bc552fc064
-        property: fields[0].value
-    - secretKey: CF_TURNSTILE_SECRET
+        key: 89c8d8d2-6b53-42c5-805f-38a341ef163e
+        property: login.username
+    - secretKey: HCAPTCHA_SECRET
      sourceRef:
        storeRef:
          name: vaultwarden-login
          kind: ClusterSecretStore
      remoteRef:
-        key: e475b5ab-ea3c-48a5-bb4c-a6bc552fc064
-        property: fields[1].value
+        key: 89c8d8d2-6b53-42c5-805f-38a341ef163e
+        property: login.password
@@ -1,3 +1,4 @@
+
 alertmanager:
  config:
    global:
@@ -24,7 +25,7 @@ alertmanager:
              {{ end }}

  ingress:
-    enabled: false
+    enabled: true
    ingressClassName: traefik
    annotations:
      cert-manager.io/cluster-issuer: letsencrypt