Auto-update README with current k8s applications

Generated by CI/CD workflow on 2026-08-01 13:44:29

This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.

README.md

@@ -42,7 +42,10 @@ ArgoCD homelab project
 
 | Application | Status |
 | :--- | :---: |
+| **amnezia** | [![amnezia](https://ag.hexor.cy/api/badge?name=amnezia&revision=true)](https://ag.hexor.cy/applications/argocd/amnezia) |
 | **comfyui** | [![comfyui](https://ag.hexor.cy/api/badge?name=comfyui&revision=true)](https://ag.hexor.cy/applications/argocd/comfyui) |
+| **doka2-lobby-list** | [![doka2-lobby-list](https://ag.hexor.cy/api/badge?name=doka2-lobby-list&revision=true)](https://ag.hexor.cy/applications/argocd/doka2-lobby-list) |
+| **firefly-iii** | [![firefly-iii](https://ag.hexor.cy/api/badge?name=firefly-iii&revision=true)](https://ag.hexor.cy/applications/argocd/firefly-iii) |
 | **furumi** | [![furumi](https://ag.hexor.cy/api/badge?name=furumi&revision=true)](https://ag.hexor.cy/applications/argocd/furumi) |
 | **gitea** | [![gitea](https://ag.hexor.cy/api/badge?name=gitea&revision=true)](https://ag.hexor.cy/applications/argocd/gitea) |
 | **greece-notifier** | [![greece-notifier](https://ag.hexor.cy/api/badge?name=greece-notifier&revision=true)](https://ag.hexor.cy/applications/argocd/greece-notifier) |
@@ -53,6 +56,7 @@ ArgoCD homelab project
 | **k8s-secrets** | [![k8s-secrets](https://ag.hexor.cy/api/badge?name=k8s-secrets&revision=true)](https://ag.hexor.cy/applications/argocd/k8s-secrets) |
 | **khm** | [![khm](https://ag.hexor.cy/api/badge?name=khm&revision=true)](https://ag.hexor.cy/applications/argocd/khm) |
 | **lidarr** | [![lidarr](https://ag.hexor.cy/api/badge?name=lidarr&revision=true)](https://ag.hexor.cy/applications/argocd/lidarr) |
+| **llamacpp** | [![llamacpp](https://ag.hexor.cy/api/badge?name=llamacpp&revision=true)](https://ag.hexor.cy/applications/argocd/llamacpp) |
 | **matrix** | [![matrix](https://ag.hexor.cy/api/badge?name=matrix&revision=true)](https://ag.hexor.cy/applications/argocd/matrix) |
 | **mtproxy** | [![mtproxy](https://ag.hexor.cy/api/badge?name=mtproxy&revision=true)](https://ag.hexor.cy/applications/argocd/mtproxy) |
 | **n8n** | [![n8n](https://ag.hexor.cy/api/badge?name=n8n&revision=true)](https://ag.hexor.cy/applications/argocd/n8n) |

k8s/apps/firefly-iii/kustomization.yaml

@@ -10,6 +10,7 @@ resources:
   - postgres.yaml
   - storage.yaml
   - storage-prep.yaml
+  - traefik-ai.yaml
   - network-policy.yaml
 
 helmCharts:

k8s/apps/firefly-iii/traefik-ai.yaml

@@ -9,13 +9,11 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: traefik-ai
-  namespace: kube-system
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   name: traefik-ai
-  namespace: firefly-iii
 rules:
   - apiGroups:
       - ""
@@ -54,7 +52,6 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
   name: traefik-ai
-  namespace: firefly-iii
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
@@ -62,65 +59,11 @@ roleRef:
 subjects:
   - kind: ServiceAccount
     name: traefik-ai
-    namespace: kube-system
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  name: traefik-ai
-  namespace: lan-play
-rules:
-  - apiGroups:
-      - ""
-    resources:
-      - services
-      - secrets
-      - endpoints
-    verbs:
-      - get
-      - list
-      - watch
-  - apiGroups:
-      - discovery.k8s.io
-    resources:
-      - endpointslices
-    verbs:
-      - get
-      - list
-      - watch
-  - apiGroups:
-      - networking.k8s.io
-    resources:
-      - ingresses
-    verbs:
-      - get
-      - list
-      - watch
-  - apiGroups:
-      - networking.k8s.io
-    resources:
-      - ingresses/status
-    verbs:
-      - update
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  name: traefik-ai
-  namespace: lan-play
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: traefik-ai
-subjects:
-  - kind: ServiceAccount
-    name: traefik-ai
-    namespace: kube-system
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
-  name: traefik-ai
+  name: firefly-traefik-ai
 rules:
   - apiGroups:
       - ""
@@ -142,21 +85,20 @@ rules:
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
-  name: traefik-ai
+  name: firefly-traefik-ai
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
-  name: traefik-ai
+  name: firefly-traefik-ai
 subjects:
   - kind: ServiceAccount
     name: traefik-ai
-    namespace: kube-system
+    namespace: firefly-iii
 ---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: traefik-ai
-  namespace: kube-system
   labels:
     app.kubernetes.io/name: traefik-ai
 spec:
@@ -188,7 +130,7 @@ spec:
           args:
             - --entrypoints.web.address=192.168.1.117:80
             - --providers.kubernetesingress=true
-            - --providers.kubernetesingress.namespaces=firefly-iii,lan-play
+            - --providers.kubernetesingress.namespaces=firefly-iii
             - --providers.kubernetesingress.ingressclass=traefik-ai
             - --providers.kubernetesingress.labelselector=firefly.hexor.cy/private-ai=true
             - --providers.kubernetescrd=false

k8s/apps/furumi/kustomization.yaml

@@ -8,4 +8,3 @@ resources:
   - ingress.yaml
   - deployment.yaml
   - servicemonitor.yaml
-  - socks-proxy.yaml

k8s/apps/furumi/socks-proxy.yaml

@@ -1,106 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: furumi-socks-proxy
-  labels:
-    app: furumi-socks-proxy
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: furumi-socks-proxy
-  template:
-    metadata:
-      labels:
-        app: furumi-socks-proxy
-    spec:
-      nodeSelector:
-        kubernetes.io/hostname: ai.tail2fe2d.ts.net
-      tolerations:
-        - key: workload
-          operator: Equal
-          value: ai
-          effect: NoSchedule
-      containers:
-        - name: socks-proxy
-          image: serjs/go-socks5-proxy:v0.0.4
-          imagePullPolicy: IfNotPresent
-          env:
-            - name: REQUIRE_AUTH
-              value: "true"
-            - name: PROXY_USER
-              value: furumi
-            - name: PROXY_PASSWORD
-              value: furumi
-            - name: PROXY_PORT
-              value: "1080"
-          ports:
-            - name: socks5
-              containerPort: 1080
-              protocol: TCP
-          readinessProbe:
-            tcpSocket:
-              port: socks5
-            initialDelaySeconds: 2
-            periodSeconds: 10
-            timeoutSeconds: 2
-            failureThreshold: 3
-          livenessProbe:
-            tcpSocket:
-              port: socks5
-            initialDelaySeconds: 10
-            periodSeconds: 30
-            timeoutSeconds: 2
-            failureThreshold: 3
-          resources:
-            requests:
-              cpu: 10m
-              memory: 16Mi
-            limits:
-              cpu: 200m
-              memory: 64Mi
-          securityContext:
-            allowPrivilegeEscalation: false
-            capabilities:
-              drop:
-                - ALL
-            readOnlyRootFilesystem: true
-            runAsNonRoot: true
-      securityContext:
-        seccompProfile:
-          type: RuntimeDefault
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: furumi-socks-proxy
-  labels:
-    app: furumi-socks-proxy
-spec:
-  type: ClusterIP
-  selector:
-    app: furumi-socks-proxy
-  ports:
-    - name: socks5
-      protocol: TCP
-      port: 1080
-      targetPort: socks5
----
-apiVersion: networking.k8s.io/v1
-kind: NetworkPolicy
-metadata:
-  name: furumi-socks-proxy-ingress
-spec:
-  podSelector:
-    matchLabels:
-      app: furumi-socks-proxy
-  policyTypes:
-    - Ingress
-  ingress:
-    - from:
-        - podSelector:
-            matchLabels:
-              app: furumi-player
-      ports:
-        - protocol: TCP
-          port: 1080

k8s/apps/lan-play/app.yaml

@@ -1,20 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: lan-play
-  namespace: argocd
-spec:
-  project: apps
-  destination:
-    namespace: lan-play
-    server: https://kubernetes.default.svc
-  source:
-    repoURL: ssh://git@gt.hexor.cy:30022/ab/homelab.git
-    targetRevision: HEAD
-    path: k8s/apps/lan-play
-  syncPolicy:
-    automated:
-      selfHeal: true
-      prune: true
-    syncOptions:
-      - CreateNamespace=true

k8s/apps/lan-play/deployment.yaml

@@ -1,63 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: lan-play
-  labels:
-    app.kubernetes.io/name: lan-play
-spec:
-  replicas: 1
-  strategy:
-    type: Recreate
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: lan-play
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/name: lan-play
-    spec:
-      nodeSelector:
-        kubernetes.io/hostname: ai.tail2fe2d.ts.net
-      tolerations:
-        - key: workload
-          operator: Equal
-          value: ai
-          effect: NoSchedule
-      containers:
-        - name: lan-play
-          image: ultradesu/lan-play:latest
-          imagePullPolicy: Always
-          ports:
-            - name: http
-              containerPort: 8080
-              protocol: TCP
-          volumeMounts:
-            - name: media
-              mountPath: /media
-          readinessProbe:
-            tcpSocket:
-              port: http
-            initialDelaySeconds: 5
-            periodSeconds: 10
-          livenessProbe:
-            tcpSocket:
-              port: http
-            initialDelaySeconds: 20
-            periodSeconds: 30
-          resources:
-            requests:
-              cpu: "2"
-              memory: 2Gi
-          securityContext:
-            allowPrivilegeEscalation: false
-            capabilities:
-              drop:
-                - ALL
-      volumes:
-        - name: media
-          hostPath:
-            path: /k8s/lan-play
-            type: DirectoryOrCreate
-      securityContext:
-        seccompProfile:
-          type: RuntimeDefault

k8s/apps/lan-play/ingress.yaml

@@ -1,63 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
-  name: lan-play-auth
-spec:
-  forwardAuth:
-    address: http://auth-proxy.auth-proxy.svc:80/auth
-    trustForwardHeader: true
-    authResponseHeaders:
-      - X-Auth-Request-User
-      - X-Auth-Request-Email
-      - X-Auth-Request-Groups
----
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
-  name: lan-play-public
-spec:
-  entryPoints:
-    - websecure
-  routes:
-    - match: Host(`lp.hexor.cy`)
-      kind: Rule
-      middlewares:
-        - name: lan-play-auth
-      services:
-        - name: lan-play
-          port: 80
-  tls:
-    secretName: lan-play-tls
----
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
-  name: lan-play-tls
-spec:
-  secretName: lan-play-tls
-  issuerRef:
-    name: letsencrypt
-    kind: ClusterIssuer
-  dnsNames:
-    - lp.hexor.cy
----
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: lan-play-local
-  labels:
-    firefly.hexor.cy/private-ai: "true"
-  annotations:
-    kubernetes.io/ingress.class: traefik-ai
-spec:
-  rules:
-    - host: video.lan
-      http:
-        paths:
-          - path: /
-            pathType: Prefix
-            backend:
-              service:
-                name: lan-play
-                port:
-                  number: 80

k8s/apps/lan-play/kustomization.yaml

@@ -1,8 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-
-resources:
-  - app.yaml
-  - deployment.yaml
-  - service.yaml
-  - ingress.yaml

k8s/apps/lan-play/service.yaml

@@ -1,15 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: lan-play
-  labels:
-    app.kubernetes.io/name: lan-play
-spec:
-  type: ClusterIP
-  selector:
-    app.kubernetes.io/name: lan-play
-  ports:
-    - name: http
-      port: 80
-      targetPort: http
-      protocol: TCP

k8s/apps/matrix/external-secrets.yaml

@@ -70,7 +70,6 @@ spec:
                     action: suggest
                     template: "{{ `{{ user.email }}` }}"
                     set_email_verification: always
-                    on_conflict: replace
   data:
     - secretKey: oauth_client_id
       sourceRef:
@@ -94,3 +93,4 @@ spec:
         metadataPolicy: None
         key: ca76867f-49f3-4a30-9ef3-b05af35ee49a
         property: fields[1].value
+                    on_conflict: replace

k8s/apps/web-petting/deployment.yaml

@@ -18,7 +18,7 @@ spec:
     spec:
       nodeSelector:
         kubernetes.io/os: linux
-#       kubernetes.io/hostname: master.tail2fe2d.ts.net
+        kubernetes.io/hostname: master.tail2fe2d.ts.net
       volumes:
         - name: data
           persistentVolumeClaim:

k8s/core/kube-system-custom/kustomization.yaml

@@ -7,7 +7,6 @@ resources:
   - coredns-internal-resolve.yaml
   - https-middleware.yaml
   - node-external-ip-labeler.yaml
-  - traefik-ai.yaml
 
 helmCharts:
   - name: csi-driver-nfs

k8s/core/prom-stack/prom-values.yaml

@@ -75,10 +75,6 @@ prometheus:
         static_configs:
           - targets: ['prom-a2s-exporter.counter-strike.svc:9841']
             labels: {instance: master}
-      - job_name: macos_prom_exporter
-        static_configs:
-          - targets: ['macbook-pro.tail2fe2d.ts.net:9100']
-            labels: {instance: ultrabook-pro}
 
     retention: "380d"
     retentionSize: "0"

terraform/keycloak/terraform.tfvars

@@ -24,10 +24,6 @@ proxy_applications = {
     domain         = "import.hexor.cy"
     allowed_groups = ["hexor-admin"]
   }
-  LanPlay = {
-    domain         = "lp.hexor.cy"
-    allowed_groups = ["hexor-admin"]
-  }
 }
 
 oauth2_applications = {