From 4d2736933226c508e01e0b4b4947256897b80b54 Mon Sep 17 00:00:00 2001
From: gitea-bot <gitea-bot@alexlebens.net>
Date: Mon, 5 Jan 2026 03:30:25 +0000
Subject: [PATCH] chore: Update manifests after change

---
 .../searxng/Deployment-searxng-browser.yaml   | 59 -------------------
 ...ExternalSecret-searxng-wireguard-conf.yaml | 35 -----------
 2 files changed, 94 deletions(-)
 delete mode 100644 clusters/cl01tl/manifests/searxng/ExternalSecret-searxng-wireguard-conf.yaml

diff --git a/clusters/cl01tl/manifests/searxng/Deployment-searxng-browser.yaml b/clusters/cl01tl/manifests/searxng/Deployment-searxng-browser.yaml
index f8c6abb96..c71d03d99 100644
--- a/clusters/cl01tl/manifests/searxng/Deployment-searxng-browser.yaml
+++ b/clusters/cl01tl/manifests/searxng/Deployment-searxng-browser.yaml
@@ -34,65 +34,6 @@ spec:
       hostPID: false
       dnsPolicy: ClusterFirst
       containers:
-        - env:
-            - name: VPN_SERVICE_PROVIDER
-              value: protonvpn
-            - name: VPN_TYPE
-              value: wireguard
-            - name: WIREGUARD_PRIVATE_KEY
-              valueFrom:
-                secretKeyRef:
-                  key: private-key
-                  name: searxng-wireguard-conf
-            - name: UPDATER_PROTONVPN_EMAIL
-              valueFrom:
-                secretKeyRef:
-                  key: proton-email
-                  name: searxng-wireguard-conf
-            - name: UPDATER_PROTONVPN_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  key: proton-password
-                  name: searxng-wireguard-conf
-            - name: FIREWALL_OUTBOUND_SUBNETS
-              value: 192.168.1.0/24,10.244.0.0/16
-            - name: FIREWALL_INPUT_PORTS
-              value: "8080"
-            - name: DNS_UPSTREAM_RESOLVER_TYPE
-              value: dot
-          image: ghcr.io/qdm12/gluetun:v3.41.0@sha256:6b54856716d0de56e5bb00a77029b0adea57284cf5a466f23aad5979257d3045
-          imagePullPolicy: IfNotPresent
-          lifecycle:
-            postStart:
-              exec:
-                command:
-                  - /bin/sh
-                  - -c
-                  - (ip rule del table 51820; ip -6 rule del table 51820) || true
-          livenessProbe:
-            exec:
-              command:
-                - /gluetun-entrypoint
-                - healthcheck
-            failureThreshold: 5
-            initialDelaySeconds: 30
-            periodSeconds: 30
-            successThreshold: 1
-            timeoutSeconds: 15
-          name: gluetun
-          resources:
-            limits:
-              devic.es/tun: "1"
-            requests:
-              cpu: 10m
-              devic.es/tun: "1"
-              memory: 64Mi
-          securityContext:
-            capabilities:
-              add:
-                - NET_ADMIN
-                - SYS_MODULE
-            privileged: true
         - env:
             - name: SEARXNG_BASE_URL
               value: https://searxng.alexlebens.net/
diff --git a/clusters/cl01tl/manifests/searxng/ExternalSecret-searxng-wireguard-conf.yaml b/clusters/cl01tl/manifests/searxng/ExternalSecret-searxng-wireguard-conf.yaml
deleted file mode 100644
index 018babd85..000000000
--- a/clusters/cl01tl/manifests/searxng/ExternalSecret-searxng-wireguard-conf.yaml
+++ /dev/null
@@ -1,35 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: searxng-wireguard-conf
-  namespace: searxng
-  labels:
-    app.kubernetes.io/name: searxng-wireguard-conf
-    app.kubernetes.io/instance: searxng
-    app.kubernetes.io/part-of: searxng
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: private-key
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /protonvpn/conf/cl01tl
-        metadataPolicy: None
-        property: private-key
-    - secretKey: proton-email
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /protonvpn/conf/cl01tl
-        metadataPolicy: None
-        property: email
-    - secretKey: proton-password
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /protonvpn/conf/cl01tl
-        metadataPolicy: None
-        property: password