Auto-update README with current k8s applications

Generated by CI/CD workflow on 2026-08-05 12:00:41

This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.

README.md

@@ -42,7 +42,10 @@ ArgoCD homelab project
 
 | Application | Status |
 | :--- | :---: |
+| **amnezia** | [![amnezia](https://ag.hexor.cy/api/badge?name=amnezia&revision=true)](https://ag.hexor.cy/applications/argocd/amnezia) |
 | **comfyui** | [![comfyui](https://ag.hexor.cy/api/badge?name=comfyui&revision=true)](https://ag.hexor.cy/applications/argocd/comfyui) |
+| **doka2-lobby-list** | [![doka2-lobby-list](https://ag.hexor.cy/api/badge?name=doka2-lobby-list&revision=true)](https://ag.hexor.cy/applications/argocd/doka2-lobby-list) |
+| **firefly-iii** | [![firefly-iii](https://ag.hexor.cy/api/badge?name=firefly-iii&revision=true)](https://ag.hexor.cy/applications/argocd/firefly-iii) |
 | **furumi** | [![furumi](https://ag.hexor.cy/api/badge?name=furumi&revision=true)](https://ag.hexor.cy/applications/argocd/furumi) |
 | **gitea** | [![gitea](https://ag.hexor.cy/api/badge?name=gitea&revision=true)](https://ag.hexor.cy/applications/argocd/gitea) |
 | **greece-notifier** | [![greece-notifier](https://ag.hexor.cy/api/badge?name=greece-notifier&revision=true)](https://ag.hexor.cy/applications/argocd/greece-notifier) |
@@ -52,7 +55,9 @@ ArgoCD homelab project
 | **jellyfin** | [![jellyfin](https://ag.hexor.cy/api/badge?name=jellyfin&revision=true)](https://ag.hexor.cy/applications/argocd/jellyfin) |
 | **k8s-secrets** | [![k8s-secrets](https://ag.hexor.cy/api/badge?name=k8s-secrets&revision=true)](https://ag.hexor.cy/applications/argocd/k8s-secrets) |
 | **khm** | [![khm](https://ag.hexor.cy/api/badge?name=khm&revision=true)](https://ag.hexor.cy/applications/argocd/khm) |
+| **lan-play** | [![lan-play](https://ag.hexor.cy/api/badge?name=lan-play&revision=true)](https://ag.hexor.cy/applications/argocd/lan-play) |
 | **lidarr** | [![lidarr](https://ag.hexor.cy/api/badge?name=lidarr&revision=true)](https://ag.hexor.cy/applications/argocd/lidarr) |
+| **llamacpp** | [![llamacpp](https://ag.hexor.cy/api/badge?name=llamacpp&revision=true)](https://ag.hexor.cy/applications/argocd/llamacpp) |
 | **matrix** | [![matrix](https://ag.hexor.cy/api/badge?name=matrix&revision=true)](https://ag.hexor.cy/applications/argocd/matrix) |
 | **mtproxy** | [![mtproxy](https://ag.hexor.cy/api/badge?name=mtproxy&revision=true)](https://ag.hexor.cy/applications/argocd/mtproxy) |
 | **n8n** | [![n8n](https://ag.hexor.cy/api/badge?name=n8n&revision=true)](https://ag.hexor.cy/applications/argocd/n8n) |

k8s/apps/firefly-iii/kustomization.yaml

@@ -10,6 +10,7 @@ resources:
   - postgres.yaml
   - storage.yaml
   - storage-prep.yaml
+  - traefik-ai.yaml
   - network-policy.yaml
 
 helmCharts:

k8s/apps/firefly-iii/traefik-ai.yaml

@@ -9,13 +9,11 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: traefik-ai
-  namespace: kube-system
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   name: traefik-ai
-  namespace: firefly-iii
 rules:
   - apiGroups:
       - ""
@@ -54,7 +52,6 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
   name: traefik-ai
-  namespace: firefly-iii
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
@@ -62,65 +59,11 @@ roleRef:
 subjects:
   - kind: ServiceAccount
     name: traefik-ai
-    namespace: kube-system
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  name: traefik-ai
-  namespace: lan-play
-rules:
-  - apiGroups:
-      - ""
-    resources:
-      - services
-      - secrets
-      - endpoints
-    verbs:
-      - get
-      - list
-      - watch
-  - apiGroups:
-      - discovery.k8s.io
-    resources:
-      - endpointslices
-    verbs:
-      - get
-      - list
-      - watch
-  - apiGroups:
-      - networking.k8s.io
-    resources:
-      - ingresses
-    verbs:
-      - get
-      - list
-      - watch
-  - apiGroups:
-      - networking.k8s.io
-    resources:
-      - ingresses/status
-    verbs:
-      - update
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  name: traefik-ai
-  namespace: lan-play
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: traefik-ai
-subjects:
-  - kind: ServiceAccount
-    name: traefik-ai
-    namespace: kube-system
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
-  name: traefik-ai
+  name: firefly-traefik-ai
 rules:
   - apiGroups:
       - ""
@@ -142,21 +85,20 @@ rules:
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
-  name: traefik-ai
+  name: firefly-traefik-ai
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
-  name: traefik-ai
+  name: firefly-traefik-ai
 subjects:
   - kind: ServiceAccount
     name: traefik-ai
-    namespace: kube-system
+    namespace: firefly-iii
 ---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: traefik-ai
-  namespace: kube-system
   labels:
     app.kubernetes.io/name: traefik-ai
 spec:
@@ -188,7 +130,7 @@ spec:
           args:
             - --entrypoints.web.address=192.168.1.117:80
             - --providers.kubernetesingress=true
-            - --providers.kubernetesingress.namespaces=firefly-iii,lan-play
+            - --providers.kubernetesingress.namespaces=firefly-iii
             - --providers.kubernetesingress.ingressclass=traefik-ai
             - --providers.kubernetesingress.labelselector=firefly.hexor.cy/private-ai=true
             - --providers.kubernetescrd=false

k8s/apps/furumi/kustomization.yaml

@@ -8,4 +8,3 @@ resources:
   - ingress.yaml
   - deployment.yaml
   - servicemonitor.yaml
-  - socks-proxy.yaml

k8s/apps/furumi/socks-proxy.yaml

@@ -1,106 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: furumi-socks-proxy
-  labels:
-    app: furumi-socks-proxy
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: furumi-socks-proxy
-  template:
-    metadata:
-      labels:
-        app: furumi-socks-proxy
-    spec:
-      nodeSelector:
-        kubernetes.io/hostname: ai.tail2fe2d.ts.net
-      tolerations:
-        - key: workload
-          operator: Equal
-          value: ai
-          effect: NoSchedule
-      containers:
-        - name: socks-proxy
-          image: serjs/go-socks5-proxy:v0.0.4
-          imagePullPolicy: IfNotPresent
-          env:
-            - name: REQUIRE_AUTH
-              value: "true"
-            - name: PROXY_USER
-              value: furumi
-            - name: PROXY_PASSWORD
-              value: furumi
-            - name: PROXY_PORT
-              value: "1080"
-          ports:
-            - name: socks5
-              containerPort: 1080
-              protocol: TCP
-          readinessProbe:
-            tcpSocket:
-              port: socks5
-            initialDelaySeconds: 2
-            periodSeconds: 10
-            timeoutSeconds: 2
-            failureThreshold: 3
-          livenessProbe:
-            tcpSocket:
-              port: socks5
-            initialDelaySeconds: 10
-            periodSeconds: 30
-            timeoutSeconds: 2
-            failureThreshold: 3
-          resources:
-            requests:
-              cpu: 10m
-              memory: 16Mi
-            limits:
-              cpu: 200m
-              memory: 64Mi
-          securityContext:
-            allowPrivilegeEscalation: false
-            capabilities:
-              drop:
-                - ALL
-            readOnlyRootFilesystem: true
-            runAsNonRoot: true
-      securityContext:
-        seccompProfile:
-          type: RuntimeDefault
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: furumi-socks-proxy
-  labels:
-    app: furumi-socks-proxy
-spec:
-  type: ClusterIP
-  selector:
-    app: furumi-socks-proxy
-  ports:
-    - name: socks5
-      protocol: TCP
-      port: 1080
-      targetPort: socks5
----
-apiVersion: networking.k8s.io/v1
-kind: NetworkPolicy
-metadata:
-  name: furumi-socks-proxy-ingress
-spec:
-  podSelector:
-    matchLabels:
-      app: furumi-socks-proxy
-  policyTypes:
-    - Ingress
-  ingress:
-    - from:
-        - podSelector:
-            matchLabels:
-              app: furumi-player
-      ports:
-        - protocol: TCP
-          port: 1080

k8s/apps/gitea/deployment.yaml

@@ -48,7 +48,7 @@ spec:
               value: "true"
             - name: GITEA__service__CAPTCHA_TYPE
               value: "cfturnstile"
-            - name: GITEA__security__ALLOWED_HOST_LIST
+            - name: GITEA__webhook__ALLOWED_HOST_LIST
               value: "*"
           envFrom:
           - secretRef:

k8s/apps/lan-play/ingress.yaml

@@ -45,11 +45,8 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: lan-play-local
-  labels:
-    firefly.hexor.cy/private-ai: "true"
-  annotations:
-    kubernetes.io/ingress.class: traefik-ai
 spec:
+  ingressClassName: traefik
   rules:
     - host: video.lan
       http:

k8s/apps/matrix/external-secrets.yaml

@@ -70,7 +70,6 @@ spec:
                     action: suggest
                     template: "{{ `{{ user.email }}` }}"
                     set_email_verification: always
-                    on_conflict: replace
   data:
     - secretKey: oauth_client_id
       sourceRef:
@@ -94,3 +93,4 @@ spec:
         metadataPolicy: None
         key: ca76867f-49f3-4a30-9ef3-b05af35ee49a
         property: fields[1].value
+                    on_conflict: replace

k8s/apps/web-petting/deployment.yaml

@@ -18,7 +18,7 @@ spec:
     spec:
       nodeSelector:
         kubernetes.io/os: linux
-#       kubernetes.io/hostname: master.tail2fe2d.ts.net
+        kubernetes.io/hostname: master.tail2fe2d.ts.net
       volumes:
         - name: data
           persistentVolumeClaim:

k8s/core/argocd/kustomization.yaml

@@ -10,7 +10,7 @@ resources:
 helmCharts:
   - name: argo-cd
     repo: https://argoproj.github.io/argo-helm
-    version: 10.6.0
+    version: 10.2.1
     releaseName: argocd
     namespace: argocd
     valuesFile: values.yaml

k8s/core/cert-manager/kustomization.yaml

@@ -10,7 +10,7 @@ resources:
 helmCharts:
   - name: cert-manager
     repo: https://charts.jetstack.io
-    version: 1.21.1
+    version: 1.20.0
     releaseName: cert-manager
     namespace: cert-manager
     valuesFile: values.yaml

k8s/core/external-secrets/kustomization.yaml

@@ -7,7 +7,7 @@ resources:
 helmCharts:
   - name: external-secrets
     repo: https://charts.external-secrets.io
-    version: 2.10.0
+    version: 1.1.0
     releaseName: external-secrets
     namespace: external-secrets
     valuesFile: values.yaml

k8s/core/keycloak/kustomization.yaml

@@ -9,7 +9,7 @@ resources:
 helmCharts:
   - name: keycloakx
     repo: https://codecentric.github.io/helm-charts
-    version: 7.3.1
+    version: 7.1.11
     releaseName: keycloak
     namespace: keycloak
     valuesFile: values.yaml

k8s/core/kube-system-custom/kustomization.yaml

@@ -7,7 +7,6 @@ resources:
   - coredns-internal-resolve.yaml
   - https-middleware.yaml
   - node-external-ip-labeler.yaml
-  - traefik-ai.yaml
 
 helmCharts:
   - name: csi-driver-nfs

k8s/core/longhorn/kustomization.yaml

@@ -7,7 +7,7 @@ kind: Kustomization
 helmCharts:
   - name: longhorn
     repo: https://charts.longhorn.io
-    version: 1.12.1
+    version: 1.12.0
     releaseName: longhorn
     namespace: longhorn-system
     valuesFile: values.yaml

k8s/core/prom-stack/kustomization.yaml

@@ -14,15 +14,15 @@ resources:
 helmCharts:
   - name: kube-prometheus-stack
     repo: https://prometheus-community.github.io/helm-charts
-    version: 88.6.2
+    version: 84.3.0
     releaseName: prometheus
     namespace: prometheus
     valuesFile: prom-values.yaml
     includeCRDs: true
 
   - name: loki
-    repo: https://grafana-community.github.io/helm-charts
-    version: 18.11.7
+    repo: https://grafana.github.io/helm-charts
+    version: 6.29.0
     releaseName: loki
     namespace: prometheus
     valuesFile: loki-values.yaml
@@ -30,7 +30,7 @@ helmCharts:
 
   - name: promtail
     repo: https://grafana.github.io/helm-charts
-    version: 6.17.1
+    version: 6.16.6
     releaseName: promtail
     namespace: prometheus
     valuesFile: promtail-values.yaml

k8s/core/prom-stack/prom-values.yaml

@@ -75,10 +75,6 @@ prometheus:
         static_configs:
           - targets: ['prom-a2s-exporter.counter-strike.svc:9841']
             labels: {instance: master}
-      - job_name: macos_prom_exporter
-        static_configs:
-          - targets: ['macbook-pro.tail2fe2d.ts.net:9100']
-            labels: {instance: ultrabook-pro}
 
     retention: "380d"
     retentionSize: "0"
@@ -96,11 +92,6 @@ prometheus:
 grafana:
   enabled: true
   
-  sidecar:
-    datasources:
-      alertmanager:
-        uid: ff9iga3xqregwc
-  
   serviceAccount:
     create: true
     name: "prom-grafana-sa"

k8s/core/system-upgrade/plan.yaml

@@ -18,7 +18,7 @@ spec:
   serviceAccountName: system-upgrade
   upgrade:
     image: rancher/k3s-upgrade
-  version: v1.36.4+k3s1
+  version: v1.36.1+k3s1
 ---
 # Agent plan
 apiVersion: upgrade.cattle.io/v1
@@ -43,4 +43,4 @@ spec:
   serviceAccountName: system-upgrade
   upgrade:
     image: rancher/k3s-upgrade
-  version: v1.36.4+k3s1
+  version: v1.36.1+k3s1