Auto-update README with current k8s applications

Generated by CI/CD workflow on 2026-07-30 13:37:55 This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.
Added firefly-iii
2026-07-30 13:37:55 +00:00 · 2026-07-30 14:37:20 +01:00 · 2026-07-30 14:35:50 +01:00 · 2026-07-30 13:57:55 +01:00 · 2026-07-30 12:25:17 +01:00
5 changed files with 32 additions and 15 deletions
@@ -42,7 +42,10 @@ ArgoCD homelab project

 | Application | Status |
 | :--- | :---: |
+| **amnezia** | [![amnezia](https://ag.hexor.cy/api/badge?name=amnezia&revision=true)](https://ag.hexor.cy/applications/argocd/amnezia) |
 | **comfyui** | [![comfyui](https://ag.hexor.cy/api/badge?name=comfyui&revision=true)](https://ag.hexor.cy/applications/argocd/comfyui) |
+| **doka2-lobby-list** | [![doka2-lobby-list](https://ag.hexor.cy/api/badge?name=doka2-lobby-list&revision=true)](https://ag.hexor.cy/applications/argocd/doka2-lobby-list) |
+| **firefly-iii** | [![firefly-iii](https://ag.hexor.cy/api/badge?name=firefly-iii&revision=true)](https://ag.hexor.cy/applications/argocd/firefly-iii) |
 | **furumi** | [![furumi](https://ag.hexor.cy/api/badge?name=furumi&revision=true)](https://ag.hexor.cy/applications/argocd/furumi) |
 | **gitea** | [![gitea](https://ag.hexor.cy/api/badge?name=gitea&revision=true)](https://ag.hexor.cy/applications/argocd/gitea) |
 | **greece-notifier** | [![greece-notifier](https://ag.hexor.cy/api/badge?name=greece-notifier&revision=true)](https://ag.hexor.cy/applications/argocd/greece-notifier) |
@@ -53,6 +56,7 @@ ArgoCD homelab project
 | **k8s-secrets** | [![k8s-secrets](https://ag.hexor.cy/api/badge?name=k8s-secrets&revision=true)](https://ag.hexor.cy/applications/argocd/k8s-secrets) |
 | **khm** | [![khm](https://ag.hexor.cy/api/badge?name=khm&revision=true)](https://ag.hexor.cy/applications/argocd/khm) |
 | **lidarr** | [![lidarr](https://ag.hexor.cy/api/badge?name=lidarr&revision=true)](https://ag.hexor.cy/applications/argocd/lidarr) |
+| **llamacpp** | [![llamacpp](https://ag.hexor.cy/api/badge?name=llamacpp&revision=true)](https://ag.hexor.cy/applications/argocd/llamacpp) |
 | **matrix** | [![matrix](https://ag.hexor.cy/api/badge?name=matrix&revision=true)](https://ag.hexor.cy/applications/argocd/matrix) |
 | **mtproxy** | [![mtproxy](https://ag.hexor.cy/api/badge?name=mtproxy&revision=true)](https://ag.hexor.cy/applications/argocd/mtproxy) |
 | **n8n** | [![n8n](https://ag.hexor.cy/api/badge?name=n8n&revision=true)](https://ag.hexor.cy/applications/argocd/n8n) |
@@ -21,7 +21,7 @@ helmCharts:

 patches:
  # Chart 0.1.2 requires postgres.enabled=true. Remove its StatefulSet and
-  # redirect the generated database Service to the CloudNativePG primary.
+  # make the generated database Service select the CloudNativePG instance.
  - target:
      group: apps
      version: v1
@@ -38,14 +38,10 @@ patches:
      kind: Service
      name: firefly-iii-postgres
    patch: |-
-      - op: remove
-        path: /spec/selector
      - op: replace
-        path: /spec/type
-        value: ExternalName
-      - op: add
-        path: /spec/externalName
-        value: firefly-postgres-rw.firefly-iii.svc.cluster.local
+        path: /spec/selector
+        value:
+          cnpg.io/cluster: firefly-postgres
  # The upstream chart does not expose scheduling settings for its CronJob.
  - target:
      group: batch
@@ -74,3 +70,11 @@ patches:
      - op: add
        path: /metadata/labels/firefly.hexor.cy~1private-ai
        value: "true"
+      # The shared Traefik has the same controller identifier and can discover
+      # IngressClass objects. The explicit annotation partitions this Ingress
+      # so only the instance configured with ingressclass=traefik-ai accepts it.
+      - op: add
+        path: /metadata/annotations/kubernetes.io~1ingress.class
+        value: traefik-ai
+      - op: remove
+        path: /spec/ingressClassName
@@ -19,6 +19,11 @@ spec:
            matchLabels:
              app.kubernetes.io/instance: firefly-iii
              app.kubernetes.io/name: firefly-iii
+        # hostNetwork traffic is seen as node traffic rather than Pod traffic.
+        - ipBlock:
+            cidr: 192.168.1.117/32
+        - ipBlock:
+            cidr: 100.77.155.120/32
      ports:
        - protocol: TCP
          port: 8080
@@ -56,4 +61,3 @@ spec:
      ports:
        - protocol: TCP
          port: 8000
-
@@ -114,6 +114,8 @@ spec:
        app.kubernetes.io/name: traefik-ai
    spec:
      serviceAccountName: traefik-ai
+      hostNetwork: true
+      dnsPolicy: ClusterFirstWithHostNet
      nodeSelector:
        kubernetes.io/hostname: ai.tail2fe2d.ts.net
      tolerations:
@@ -126,7 +128,7 @@ spec:
          image: rancher/mirrored-library-traefik:3.6.13
          imagePullPolicy: IfNotPresent
          args:
-            - --entrypoints.web.address=:8000
+            - --entrypoints.web.address=192.168.1.117:80
            - --providers.kubernetesingress=true
            - --providers.kubernetesingress.namespaces=firefly-iii
            - --providers.kubernetesingress.ingressclass=traefik-ai
@@ -136,8 +138,9 @@ spec:
            - --log.level=INFO
          ports:
            - name: web
-              containerPort: 8000
+              containerPort: 80
              hostPort: 80
+              hostIP: 192.168.1.117
              protocol: TCP
          readinessProbe:
            tcpSocket:
@@ -159,9 +162,12 @@ spec:
            capabilities:
              drop:
                - ALL
+              add:
+                - NET_BIND_SERVICE
            readOnlyRootFilesystem: true
-            runAsNonRoot: true
-            runAsUser: 65532
+            runAsNonRoot: false
+            runAsUser: 0
+            runAsGroup: 0
      securityContext:
        seccompProfile:
          type: RuntimeDefault
@@ -25,7 +25,7 @@ persistence:
    existingClaim: firefly-uploads

 # Must remain true because chart 0.1.2 validates it. Kustomize removes the
-# generated StatefulSet and redirects this Service to CloudNativePG.
+# generated StatefulSet and makes this Service select the CloudNativePG Pod.
 postgres:
  enabled: true
  auth:
@@ -66,4 +66,3 @@ firefly:
    limits:
      cpu: "2"
      memory: 1Gi
-
Author	SHA1	Message	Date
Gitea Actions Bot	99b809b624	Auto-update README with current k8s applications Keycloak Terraform / Terraform (pull_request) Failing after 18s Details Generated by CI/CD workflow on 2026-07-30 13:37:55 This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.	2026-07-30 13:37:55 +00:00
Ultradesu	c4a3623e55	Added firefly-iii Check with kubeconform / lint (push) Successful in 6s Details Auto-update README / Generate README and Create MR (push) Successful in 9s Details Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 5s Details	2026-07-30 14:37:20 +01:00
Ultradesu	dd3693095f	Added firefly-iii Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 7s Details Check with kubeconform / lint (push) Successful in 6s Details Auto-update README / Generate README and Create MR (push) Successful in 11s Details	2026-07-30 14:35:50 +01:00
Ultradesu	4273e62d68	Added firefly-iii Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 6s Details Check with kubeconform / lint (push) Successful in 6s Details Auto-update README / Generate README and Create MR (push) Successful in 8s Details	2026-07-30 13:57:55 +01:00
Ultradesu	5d8a582e1e	Added firefly-iii Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 8s Details Check with kubeconform / lint (push) Successful in 5s Details Auto-update README / Generate README and Create MR (push) Successful in 5s Details	2026-07-30 12:25:17 +01:00