Compare commits

..

1 Commits

Author SHA1 Message Date
Gitea Actions Bot
ece7af1932 Auto-update README with current k8s applications
All checks were successful
Terraform / Terraform (pull_request) Successful in 19s
Generated by CI/CD workflow on 2026-02-04 12:07:38

This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.
2026-02-04 12:07:38 +00:00
7 changed files with 26 additions and 145 deletions

View File

@@ -44,6 +44,7 @@ ArgoCD homelab project
| **jellyfin** | [![jellyfin](https://ag.hexor.cy/api/badge?name=jellyfin&revision=true)](https://ag.hexor.cy/applications/argocd/jellyfin) | | **jellyfin** | [![jellyfin](https://ag.hexor.cy/api/badge?name=jellyfin&revision=true)](https://ag.hexor.cy/applications/argocd/jellyfin) |
| **k8s-secrets** | [![k8s-secrets](https://ag.hexor.cy/api/badge?name=k8s-secrets&revision=true)](https://ag.hexor.cy/applications/argocd/k8s-secrets) | | **k8s-secrets** | [![k8s-secrets](https://ag.hexor.cy/api/badge?name=k8s-secrets&revision=true)](https://ag.hexor.cy/applications/argocd/k8s-secrets) |
| **khm** | [![khm](https://ag.hexor.cy/api/badge?name=khm&revision=true)](https://ag.hexor.cy/applications/argocd/khm) | | **khm** | [![khm](https://ag.hexor.cy/api/badge?name=khm&revision=true)](https://ag.hexor.cy/applications/argocd/khm) |
| **n8n** | [![n8n](https://ag.hexor.cy/api/badge?name=n8n&revision=true)](https://ag.hexor.cy/applications/argocd/n8n) |
| **ollama** | [![ollama](https://ag.hexor.cy/api/badge?name=ollama&revision=true)](https://ag.hexor.cy/applications/argocd/ollama) | | **ollama** | [![ollama](https://ag.hexor.cy/api/badge?name=ollama&revision=true)](https://ag.hexor.cy/applications/argocd/ollama) |
| **paperless** | [![paperless](https://ag.hexor.cy/api/badge?name=paperless&revision=true)](https://ag.hexor.cy/applications/argocd/paperless) | | **paperless** | [![paperless](https://ag.hexor.cy/api/badge?name=paperless&revision=true)](https://ag.hexor.cy/applications/argocd/paperless) |
| **pasarguard** | [![pasarguard](https://ag.hexor.cy/api/badge?name=pasarguard&revision=true)](https://ag.hexor.cy/applications/argocd/pasarguard) | | **pasarguard** | [![pasarguard](https://ag.hexor.cy/api/badge?name=pasarguard&revision=true)](https://ag.hexor.cy/applications/argocd/pasarguard) |

View File

@@ -1,11 +1,9 @@
apiVersion: kustomize.config.k8s.io/v1beta1 apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization kind: Kustomization
# Updated: Fixed n8n volume permissions issue
resources: resources:
- external-secrets.yaml - external-secrets.yaml
- storage.yaml - storage.yaml
- rbac.yaml
helmCharts: helmCharts:
- name: n8n - name: n8n
@@ -15,10 +13,10 @@ helmCharts:
namespace: n8n namespace: n8n
valuesFile: values-n8n.yaml valuesFile: values-n8n.yaml
includeCRDs: true includeCRDs: true
- name: yacy - name: searxng
repo: https://gt.hexor.cy/api/packages/ab/helm repo: https://unknowniq.github.io/helm-charts/
version: 0.1.2 version: 0.1.3
releaseName: yacy releaseName: searxng
namespace: n8n namespace: n8n
valuesFile: values-yacy.yaml valuesFile: values-searxng.yaml
includeCRDs: true includeCRDs: true

View File

@@ -1,71 +0,0 @@
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: n8n-readonly
rules:
- apiGroups: [""]
resources:
- pods
- services
- endpoints
- persistentvolumeclaims
- persistentvolumes
- configmaps
- secrets
- nodes
- namespaces
- events
verbs: ["get", "list", "watch"]
- apiGroups: ["apps"]
resources:
- deployments
- replicasets
- statefulsets
- daemonsets
verbs: ["get", "list", "watch"]
- apiGroups: ["networking.k8s.io"]
resources:
- ingresses
- networkpolicies
verbs: ["get", "list", "watch"]
- apiGroups: ["extensions"]
resources:
- ingresses
verbs: ["get", "list", "watch"]
- apiGroups: ["autoscaling"]
resources:
- horizontalpodautoscalers
verbs: ["get", "list", "watch"]
- apiGroups: ["batch"]
resources:
- jobs
- cronjobs
verbs: ["get", "list", "watch"]
- apiGroups: ["metrics.k8s.io"]
resources:
- pods
- nodes
verbs: ["get", "list"]
- apiGroups: ["storage.k8s.io"]
resources:
- storageclasses
verbs: ["get", "list", "watch"]
- apiGroups: ["policy"]
resources:
- poddisruptionbudgets
verbs: ["get", "list", "watch"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: n8n-readonly
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: n8n-readonly
subjects:
- kind: ServiceAccount
name: n8n-readonly
namespace: n8n

View File

@@ -1,13 +1,10 @@
nodeSelector: nodeSelector:
kubernetes.io/hostname: master.tail2fe2d.ts.net kubernetes.io/hostname: master.tail2fe2d.ts.net
db: db:
type: postgresdb type: postgresdb
main: main:
extraEnvVars:
NODES_EXCLUDE: "[]"
resources: resources:
requests: requests:
cpu: 100m cpu: 100m
@@ -20,32 +17,6 @@ main:
existingClaim: n8n-home existingClaim: n8n-home
mountPath: /home/node/.n8n mountPath: /home/node/.n8n
podSecurityContext:
runAsUser: 1000
runAsGroup: 1000
runAsNonRoot: true
# Configure health probes for slow startup
main:
livenessProbe:
httpGet:
path: /healthz
port: http
initialDelaySeconds: 120
periodSeconds: 30
timeoutSeconds: 10
failureThreshold: 6
readinessProbe:
httpGet:
path: /healthz/readiness
port: http
initialDelaySeconds: 60
periodSeconds: 10
timeoutSeconds: 5
failureThreshold: 10
worker: worker:
mode: regular mode: regular
@@ -57,12 +28,6 @@ redis:
existingEncryptionKeySecret: credentials existingEncryptionKeySecret: credentials
serviceAccount:
create: true
automount: true
annotations: {}
name: "n8n-readonly"
externalPostgresql: externalPostgresql:
existingSecret: credentials existingSecret: credentials
host: "psql.psql.svc" host: "psql.psql.svc"

View File

@@ -0,0 +1,18 @@
config:
general:
instance_name: "HexorSearXNG"
server:
limiter: false
public_instance: false
method: "POST, GET"
general:
debug: true
search:
formats:
- html
- json
safe_search: 0
valkey:
enabled: true
nodeSelector:
kubernetes.io/hostname: master.tail2fe2d.ts.net

View File

@@ -1,24 +0,0 @@
nodeSelector:
kubernetes.io/hostname: master.tail2fe2d.ts.net
resources:
limits:
memory: 2Gi
requests:
memory: 1Gi
persistence:
enabled: true
size: 10Gi
yacy:
network:
mode: "intranet"
config:
network.unit.bootstrap.seedlist: ""
network.unit.remotecrawl: "false"
network.unit.dhtredundancy.junior: "1"
network.unit.dhtredundancy.senior: "1"
index.receive.allow: "false"
index.distribute.allow: "false"
crawl.response.timeout: "10000"

View File

@@ -10,11 +10,5 @@ parameters:
reclaimPolicy: Retain reclaimPolicy: Retain
volumeBindingMode: Immediate volumeBindingMode: Immediate
mountOptions: mountOptions:
- nfsvers=4.1 - vers=4
- rsize=1048576 - hard
- wsize=1048576
- timeo=14
- intr
- bg
- soft
- noatime