feat: refactor apps (#5167)

Reviewed-on: #5167

clusters/cl01tl/helm/directus/Chart.yaml

@@ -4,16 +4,14 @@ version: 1.0.0
 description: Directus
 keywords:
   - directus
-  - cms
+  - content-management-system
-home: https://wiki.alexlebens.dev/s/c2d242de-dcaa-4801-86a2-c4761dc8bf9b
+home: https://docs.alexlebens.dev/applications/descheduler/
 sources:
   - https://github.com/directus/directus
-  - https://github.com/cloudflare/cloudflared
+  - https://github.com/directus/directus/pkgs/container/directus
-  - https://github.com/cloudnative-pg/cloudnative-pg
-  - https://hub.docker.com/r/directus/directus
   - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/cloudflared
   - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
+  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/valkey
 maintainers:
   - name: alexlebens
 dependencies:

clusters/cl01tl/helm/directus/templates/external-secret.yaml

@@ -14,31 +14,19 @@ spec:
   data:
     - secretKey: admin-email
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/directus/config
-        metadataPolicy: None
         property: admin-email
     - secretKey: admin-password
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/directus/config
-        metadataPolicy: None
         property: admin-password
     - secretKey: secret
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/directus/config
-        metadataPolicy: None
         property: secret
     - secretKey: key
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/directus/config
-        metadataPolicy: None
         property: key
 
 ---
@@ -58,17 +46,11 @@ spec:
   data:
     - secretKey: OIDC_CLIENT_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /authentik/oidc/directus
-        metadataPolicy: None
         property: client
     - secretKey: OIDC_CLIENT_SECRET
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /authentik/oidc/directus
-        metadataPolicy: None
         property: secret
 
 ---
@@ -88,10 +70,7 @@ spec:
   data:
     - secretKey: metric-token
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/directus/metrics
-        metadataPolicy: None
         property: metric-token
 
 ---
@@ -111,24 +90,15 @@ spec:
   data:
     - secretKey: ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/directus-assets
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: ACCESS_SECRET_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/directus-assets
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY
     - secretKey: ACCESS_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/directus-assets
-        metadataPolicy: None
         property: ACCESS_REGION
 
 ---
@@ -148,22 +118,13 @@ spec:
   data:
     - secretKey: default
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/directus/valkey
-        metadataPolicy: None
         property: password
     - secretKey: user
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/directus/valkey
-        metadataPolicy: None
         property: user
     - secretKey: password
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/directus/valkey
-        metadataPolicy: None
         property: password

clusters/cl01tl/helm/directus/values.yaml

@@ -4,12 +4,11 @@ directus:
       type: deployment
       replicas: 1
       strategy: Recreate
-      revisionHistoryLimit: 3
       containers:
         main:
           image:
-            repository: directus/directus
+            repository: ghcr.io/directus/directus
-            tag: 11.17.0
+            tag: 11.17.0@sha256:076269ccbe7d4a0c44ce5f5b7f11e2ea5f7b3e4c4f704c0f88a52805e069c1c6
             pullPolicy: IfNotPresent
           env:
             - name: PUBLIC_URL
@@ -144,7 +143,7 @@ directus:
           resources:
             requests:
               cpu: 10m
-              memory: 256Mi
+              memory: 1Gi
   service:
     main:
       controller: main
@@ -180,11 +179,8 @@ directus:
         - directus.alexlebens.net
       rules:
         - backendRefs:
-            - group: ''
+            - name: directus
-              kind: Service
-              name: directus
               port: 80
-              weight: 100
           matches:
             - path:
                 type: PathPrefix
@@ -202,35 +198,12 @@ postgres-18-cluster:
         destinationBucket: postgres-backups
         externalSecretCredentialPath: /garage/home-infra/postgres-backups
         isWALArchiver: true
-      # - name: garage-remote
-      #   index: 1
-      #   destinationBucket: postgres-backups
-      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
-      #   retentionPolicy: "90d"
-      #   data:
-      #     compression: bzip2
-      # - name: external
-      #   index: 1
-      #   endpointURL: https://nyc3.digitaloceanspaces.com
-      #   destinationBucket: postgres-backups-ce540ddf106d186bbddca68a
-      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
-      #   isWALArchiver: false
     scheduledBackups:
       - name: live-backup
         suspend: false
         immediate: true
         schedule: "0 15 14 * * *"
         backupName: garage-local
-      # - name: weekly-backup
-      #   suspend: true
-      #   immediate: true
-      #   schedule: "0 0 4 * * SAT"
-      #   backupName: garage-remote
-      # - name: daily-backup
-      #   suspend: true
-      #   immediate: true
-      #   schedule: "0 0 0 * * *"
-      #   backupName: external
 valkey:
   valkey:
     auth:
@@ -239,5 +212,3 @@ valkey:
       aclUsers:
         default:
           permissions: "~* &* +@all"
-    metrics:
-      enabled: false

clusters/cl01tl/helm/elastic-operator/Chart.yaml

@@ -6,8 +6,7 @@ keywords:
   - elastic-operator
   - operator
   - elastic-search
-  - kubernetes
+home: https://docs.alexlebens.dev/applications/elastic-operator/
-home: https://wiki.alexlebens.dev/s/
 sources:
   - https://github.com/elastic/cloud-on-k8s
   - https://github.com/elastic/cloud-on-k8s/tree/main/deploy/eck-operator
@@ -17,6 +16,6 @@ dependencies:
   - name: eck-operator
     version: 3.3.1
     repository: https://helm.elastic.co
-icon: https://helm.elastic.co/icons/eck.png
+icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/elastic.png
 # renovate: datasource=github-releases depName=elastic/cloud-on-k8s
 appVersion: v3.3.1

clusters/cl01tl/helm/elastic-operator/values.yaml

@@ -4,6 +4,13 @@ eck-operator:
     - stalwart
   installCRDs: true
   replicaCount: 2
+  resources:
+    limits:
+      cpu: null
+      memory: null
+    requests:
+      cpu: 2m
+      memory: 50Mi
   telemetry:
     disabled: true
   config:

clusters/cl01tl/helm/element-web/Chart.yaml

@@ -4,13 +4,11 @@ version: 1.0.0
 description: Element Web
 keywords:
   - element-web
-  - chat
+  - matrix-chat
-  - matrix
+home: https://docs.alexlebens.dev/applications/element-web/
-home: https://wiki.alexlebens.dev/s/e3b03481-1a1d-4b56-8cd9-e75a8dcc0f6c
 sources:
   - https://github.com/element-hq/element-web
-  - https://github.com/cloudflare/cloudflared
+  - https://github.com/element-hq/element-web/pkgs/container/element-web
-  - https://hub.docker.com/r/vectorim/element-web
   - https://gitlab.com/ananace/charts/-/tree/master/charts/element-web
   - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/cloudflared
 maintainers:

clusters/cl01tl/helm/element-web/values.yaml

@@ -1,9 +1,8 @@
 element-web:
   replicaCount: 1
   image:
-    repository: vectorim/element-web
+    repository: ghcr.io/element-hq/element-web
-    tag: v1.12.13
+    tag: v1.12.13@sha256:5107e63026c13ed014f743e485821b7d4b56d275a41e76303859bb14f5f94eb6
-    pullPolicy: IfNotPresent
   defaultServer:
     url: https://matrix.alexlebens.dev
     name: alexlebens.dev
@@ -18,9 +17,7 @@ element-web:
       immediate: true
     default_theme: dark
     default_country_code: US
-  ingress:
-    enabled: false
   resources:
     requests:
-      cpu: 10m
+      cpu: 1m
-      memory: 128Mi
+      memory: 10Mi