Automated Manifest Update (#3861)

This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow.

Reviewed-on: #3861
Co-authored-by: gitea-bot <gitea-bot@alexlebens.net>
Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>

clusters/cl01tl/manifests/blocky/ConfigMap-blocky.yaml

@@ -99,6 +99,7 @@ data:
         booklore                        IN      CNAME   traefik-cl01tl
         ceph                            IN      CNAME   traefik-cl01tl
         code-server                     IN      CNAME   traefik-cl01tl
+        directus                        IN      CNAME   traefik-cl01tl
         excalidraw                      IN      CNAME   traefik-cl01tl
         feishin                         IN      CNAME   traefik-cl01tl
         garage-s3                       IN      CNAME   traefik-cl01tl

clusters/cl01tl/manifests/blocky/Deployment-blocky.yaml

@@ -22,7 +22,7 @@ spec:
   template:
     metadata:
       annotations:
-        checksum/configMaps: 9634c9de81f40f8eeb0acee096a8802b02255efe8d18f8692322b0bbe6480644
+        checksum/configMaps: 419a353131ea9dd2c39350dc993b858c3a37a8ec80f597c3eee39c6f72843ab6
       labels:
         app.kubernetes.io/controller: main
         app.kubernetes.io/instance: blocky

clusters/cl01tl/manifests/directus/Deployment-directus-cloudflared.yaml

@@ -1,58 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: directus-cloudflared
-  labels:
-    app.kubernetes.io/controller: main
-    app.kubernetes.io/instance: directus
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: cloudflared
-    app.kubernetes.io/version: 2026.2.0
-    helm.sh/chart: cloudflared-2.3.0
-  namespace: directus
-spec:
-  revisionHistoryLimit: 3
-  replicas: 1
-  strategy:
-    type: Recreate
-  selector:
-    matchLabels:
-      app.kubernetes.io/controller: main
-      app.kubernetes.io/name: cloudflared
-      app.kubernetes.io/instance: directus
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/controller: main
-        app.kubernetes.io/instance: directus
-        app.kubernetes.io/name: cloudflared
-    spec:
-      enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
-      hostIPC: false
-      hostNetwork: false
-      hostPID: false
-      dnsPolicy: ClusterFirst
-      containers:
-        - args:
-            - tunnel
-            - --protocol
-            - http2
-            - --no-autoupdate
-            - run
-            - --token
-            - $(CF_MANAGED_TUNNEL_TOKEN)
-          env:
-            - name: CF_MANAGED_TUNNEL_TOKEN
-              valueFrom:
-                secretKeyRef:
-                  key: cf-tunnel-token
-                  name: directus-cloudflared-secret
-          image: cloudflare/cloudflared:2026.2.0
-          imagePullPolicy: IfNotPresent
-          name: main
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi

clusters/cl01tl/manifests/directus/Deployment-directus.yaml

@@ -36,7 +36,7 @@ spec:
       containers:
         - env:
             - name: PUBLIC_URL
-              value: https://directus.alexlebens.dev
+              value: https://directus.alexlebens.net
             - name: WEBSOCKETS_ENABLED
               value: "true"
             - name: ADMIN_EMAIL
@@ -148,7 +148,7 @@ spec:
             - name: AUTH_AUTHENTIK_SCOPE
               value: openid profile email
             - name: AUTH_AUTHENTIK_ISSUER_URL
-              value: https://auth.alexlebens.dev/application/o/directus/.well-known/openid-configuration
+              value: https://authentik.alexlebens.net/application/o/directus/.well-known/openid-configuration
             - name: AUTH_AUTHENTIK_IDENTIFIER_KEY
               value: email
             - name: AUTH_AUTHENTIK_ALLOW_PUBLIC_REGISTRATION

clusters/cl01tl/manifests/directus/ExternalSecret-directus-cloudflared-secret.yaml

@@ -1,24 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: directus-cloudflared-secret
-  namespace: directus
-  labels:
-    helm.sh/chart: cloudflared-2.3.0
-    app.kubernetes.io/instance: directus
-    app.kubernetes.io/part-of: directus
-    app.kubernetes.io/version: "2.3.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: directus-cloudflared-secret
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: cf-tunnel-token
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cloudflare/tunnels/directus
-        metadataPolicy: None
-        property: token

clusters/cl01tl/manifests/directus/HTTPRoute-directus.yaml

@@ -0,0 +1,30 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: directus
+  labels:
+    app.kubernetes.io/instance: directus
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: directus
+    helm.sh/chart: directus-4.6.2
+  namespace: directus
+spec:
+  parentRefs:
+    - group: gateway.networking.k8s.io
+      kind: Gateway
+      name: traefik-gateway
+      namespace: traefik
+  hostnames:
+    - "directus.alexlebens.net"
+  rules:
+    - backendRefs:
+        - group: ""
+          kind: Service
+          name: directus
+          namespace: directus
+          port: 80
+          weight: 100
+      matches:
+        - path:
+            type: PathPrefix
+            value: /

clusters/cl01tl/manifests/gatus/ConfigMap-gatus.yaml

@@ -625,7 +625,7 @@ data:
       group: external
       interval: 30s
       name: directus
-      url: https://directus.alexlebens.dev
+      url: https://directus.alexlebens.net
     - alerts:
       - type: ntfy
       conditions:

clusters/cl01tl/manifests/gatus/Deployment-gatus.yaml

@@ -26,7 +26,7 @@ spec:
         app.kubernetes.io/name: gatus
         app.kubernetes.io/instance: gatus
       annotations:
-        checksum/config: 06548718af8398213459def21a33ac7651e4d65617b6348e0318a10456e74996
+        checksum/config: c5532ddc87e9cdd5d2e221ebee4236beab521e173e9bc38aed7a6ea19716492a
     spec:
       serviceAccountName: default
       automountServiceAccountToken: false

clusters/cl01tl/manifests/homepage/ConfigMap-homepage.yaml

@@ -138,8 +138,8 @@ data:
         - Content Management:
             icon: directus.png
             description: Directus
-            href: https://directus.alexlebens.dev
+            href: https://directus.alexlebens.net
-            siteMonitor: https://directus.alexlebens.dev
+            siteMonitor: http://directus.directus:80
             statusStyle: dot
         - Social Media Management:
             icon: sh-postiz.webp

clusters/cl01tl/manifests/homepage/Deployment-homepage.yaml

@@ -13,7 +13,7 @@ metadata:
   namespace: homepage
 spec:
   revisionHistoryLimit: 3
-  replicas: 3
+  replicas: 1
   strategy:
     type: RollingUpdate
   selector:
@@ -24,7 +24,7 @@ spec:
   template:
     metadata:
       annotations:
-        checksum/configMaps: 5e45b049591fa8d09565f856b95c59e688e661a62cf2918d234d7f49d6083ebd
+        checksum/configMaps: c6196f73e276b9f461c09f2621e3435652242ba643d9342632d78d0c0a846909
         checksum/secrets: d3ba83f111cd32f92c909268c55ad8bbd4f9e299b74b35b33c1a011180d8b378
       labels:
         app.kubernetes.io/controller: main