From 618d64582b6c06a83637d54fa9914edea0948f7b Mon Sep 17 00:00:00 2001
From: gitea-bot <gitea-bot@alexlebens.net>
Date: Tue, 9 Dec 2025 04:42:18 +0000
Subject: [PATCH] Automated Manifest Update (#2327)

This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow.

Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/2327
Co-authored-by: gitea-bot <gitea-bot@alexlebens.net>
Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>
---
 ...alSecret-searxng-browser-metrics-auth.yaml | 29 +++++++++++++++++++
 .../ServiceMonitor-searxng-browser.yaml       | 27 +++++++++++++++++
 2 files changed, 56 insertions(+)
 create mode 100644 clusters/cl01tl/manifests/searxng/ExternalSecret-searxng-browser-metrics-auth.yaml
 create mode 100644 clusters/cl01tl/manifests/searxng/ServiceMonitor-searxng-browser.yaml

diff --git a/clusters/cl01tl/manifests/searxng/ExternalSecret-searxng-browser-metrics-auth.yaml b/clusters/cl01tl/manifests/searxng/ExternalSecret-searxng-browser-metrics-auth.yaml
new file mode 100644
index 000000000..62a70ae02
--- /dev/null
+++ b/clusters/cl01tl/manifests/searxng/ExternalSecret-searxng-browser-metrics-auth.yaml
@@ -0,0 +1,29 @@
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: searxng-browser-metrics-auth
+  namespace: searxng
+  labels:
+    app.kubernetes.io/name: searxng-browser-metrics-auth
+    app.kubernetes.io/instance: searxng
+    app.kubernetes.io/part-of: searxng
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: metrics-password
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: cl01tl/searxng/browser
+        metadataPolicy: None
+        property: metrics-password
+    - secretKey: metrics-username
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: cl01tl/searxng/browser
+        metadataPolicy: None
+        property: metrics-username
diff --git a/clusters/cl01tl/manifests/searxng/ServiceMonitor-searxng-browser.yaml b/clusters/cl01tl/manifests/searxng/ServiceMonitor-searxng-browser.yaml
new file mode 100644
index 000000000..e95bdad7b
--- /dev/null
+++ b/clusters/cl01tl/manifests/searxng/ServiceMonitor-searxng-browser.yaml
@@ -0,0 +1,27 @@
+---
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  name: searxng-browser
+  namespace: searxng
+  labels:
+    app.kubernetes.io/name: searxng-browser
+    app.kubernetes.io/instance: searxng
+    app.kubernetes.io/part-of: searxng
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: searxng-browser
+      app.kubernetes.io/instance: searxng
+  endpoints:
+    - port: mail
+      interval: 30s
+      scrapeTimeout: 15s
+      path: /metrics
+      basicAuth:
+        password:
+          name: searxng-browser-metrics-auth
+          key: metrics-password
+        username:
+          name: searxng-browser-metrics-auth
+          key: metrics-username