add precommit hooks

.github/renovate-update-notification/Dockerfile

@@ -1,2 +1,2 @@
 # This file is processed by Renovate bot so that it creates a PR on new major Renovate versions
-FROM renovate/renovate:39
+FROM renovate/renovate:39

.pre-commit-config.yaml

@@ -0,0 +1,11 @@
+repos:
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v2.3.0
+    hooks:
+      - id: end-of-file-fixer
+      - id: trailing-whitespace
+      - id: check-added-large-files
+      - id: check-yaml
+        exclude: '^.*\/templates\/.*$'
+        args:
+          - --multi

clusters/cl01tl/applications/calibre-web-automated/templates/replication-source.yaml

@@ -24,7 +24,7 @@ spec:
       yearly: 4
     moverSecurityContext:
       runAsUser: 1000
-      runAsGroup: 100      
+      runAsGroup: 100
     copyMethod: Snapshot
     storageClassName: ceph-block-delete
     volumeSnapshotClassName: ceph-blockpool-snapshot

clusters/cl01tl/applications/code-server/values.yaml

@@ -9,7 +9,7 @@ code-server:
         main:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.96.2@sha256:c181b7a2ae59940f276c89fd86cd4f220cdb87886d771b5becf3d4156b3c0bc1 
+            tag: 4.96.2@sha256:c181b7a2ae59940f276c89fd86cd4f220cdb87886d771b5becf3d4156b3c0bc1
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/freshrss/templates/replication-source.yaml

@@ -31,7 +31,7 @@ spec:
         - 44
         - 100
         - 109
-        - 65539      
+        - 65539
     copyMethod: Snapshot
     storageClassName: ceph-block-delete
     volumeSnapshotClassName: ceph-blockpool-snapshot

clusters/cl01tl/applications/immich/templates/external-secrets.yaml

@@ -52,4 +52,4 @@ spec:
         decodingStrategy: None
         key: /digital-ocean/home-infra/postgres-backups
         metadataPolicy: None
-        property: secret
+        property: secret

clusters/cl01tl/applications/jellyfin/Chart.yaml

@@ -17,7 +17,7 @@ sources:
   - https://github.com/jellyfin/jellyfin-vue/pkgs/container/jellyfin-vue
   - https://github.com/bjw-s/helm-charts/tree/main/charts/other/app-template
 maintainers:
-  - name: alexlebens  
+  - name: alexlebens
 dependencies:
   - name: app-template
     alias: jellyfin

clusters/cl01tl/applications/jellyfin/values.yaml

@@ -26,7 +26,7 @@ jellyfin:
             requests:
               gpu.intel.com/i915: 1
               cpu: 100m
-              memory: 1Gi      
+              memory: 1Gi
     vue:
       type: deployment
       replicas: 1

clusters/cl01tl/applications/libation/templates/persistent-volume.yaml

@@ -18,7 +18,7 @@ spec:
     - ReadWriteMany
   nfs:
     path: /volume2/Storage/Audiobooks/
-    server: synologybond.alexlebens.net    
+    server: synologybond.alexlebens.net
   mountOptions:
     - vers=4
     - minorversion=1

clusters/cl01tl/applications/sonarr4-4k/Chart.yaml

@@ -27,6 +27,6 @@ dependencies:
   - name: postgres-cluster
     alias: postgres-17-cluster
     version: 4.0.0
-    repository: http://alexlebens.github.io/helm-charts    
+    repository: http://alexlebens.github.io/helm-charts
 icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/sonarr.png
 appVersion: 4.0.11

clusters/cl01tl/deployment/stack/values.yaml

@@ -58,13 +58,13 @@ applicationSet:
         jsonPointers:
         - /spec/claimRef/resourceVersion
         - /spec/claimRef/uid
-        - /status/lastPhaseTransitionTime          
+        - /status/lastPhaseTransitionTime
     syncPolicy:
       automated:
         prune: true
       syncOptions:
         serverSideApply: true
-        RespectIgnoreDifferences: true        
+        RespectIgnoreDifferences: true
   - name: services
     ignoreDifferences:
       - group: ""
@@ -94,10 +94,10 @@ applicationSet:
         jsonPointers:
         - /spec/claimRef/resourceVersion
         - /spec/claimRef/uid
-        - /status/lastPhaseTransitionTime          
+        - /status/lastPhaseTransitionTime
     syncPolicy:
       automated:
         prune: true
       syncOptions:
         serverSideApply: true
-        RespectIgnoreDifferences: true        
+        RespectIgnoreDifferences: true

clusters/cl01tl/platform/authentik/templates/config-map.yaml

@@ -57,4 +57,4 @@ data:
     /* Change link color to white */
     .a {
       color: white;
-    }
+    }

clusters/cl01tl/platform/gitea/templates/role.yaml

@@ -13,7 +13,7 @@ rules:
   - apiGroups:
       - ""
     resources:
-      - pods    
+      - pods
       - pods/exec
     verbs:
       - create

clusters/cl01tl/platform/matrix-synapse/templates/external-secret.yaml

@@ -447,4 +447,3 @@ spec:
         key: /digital-ocean/home-infra/postgres-backups
         metadataPolicy: None
         property: secret
-

clusters/cl01tl/platform/qbittorrent/templates/service-monitor.yaml

@@ -18,4 +18,4 @@ spec:
   selector:
     matchLabels:
       app.kubernetes.io/name: qbittorrent
-      app.kubernetes.io/instance: {{ .Release.Name }}      
+      app.kubernetes.io/instance: {{ .Release.Name }}

clusters/cl01tl/standalone/cilium/values.yaml

@@ -59,7 +59,7 @@ cilium:
     enabled: true
   ipv6:
     enabled: false
-  kubeProxyReplacement: "true"    
+  kubeProxyReplacement: "true"
   k8sServiceHost: "localhost"
   k8sServicePort: "7445"
   l2announcements:
@@ -76,7 +76,7 @@ cilium:
       enabled: true
   operator:
     enabled: true
-    rollOutPods: true    
+    rollOutPods: true
     prometheus:
       enabled: true
       port: 9963

clusters/cl01tl/standalone/coredns/values.yaml

@@ -70,7 +70,7 @@ coredns:
     - zones:
         - zone: ts.net
           use_tcp: true
-      port: 53          
+      port: 53
       plugins:
         - name: errors
         - name: cache

hosts/ps10rp/cloudflare-ddns/.env

@@ -1,3 +1,3 @@
 API_KEY=""
 ZONE=lebens-home.net
-PROXIED=false
+PROXIED=false

hosts/ps10rp/gitea/.env

@@ -5,4 +5,4 @@ GITEA__database__HOST=gitea-postgres:5432
 GITEA__database__NAME=gitea
 GITEA__database__USER=gitea
 GITEA__database__PASSWD=""
-GITEA__webhook__ALLOWED_HOST_LIST="*.lebens-home.net, 192.168.*.*, 172.27.*.*"
+GITEA__webhook__ALLOWED_HOST_LIST="*.lebens-home.net, 192.168.*.*, 172.27.*.*"

hosts/ps10rp/gitea/.postgresql.env

@@ -1,3 +1,3 @@
 POSTGRES_USER=gitea
 POSTGRES_PASSWORD=""
-POSTGRES_DB=gitea
+POSTGRES_DB=gitea

hosts/ps10rp/homepage/Files/homepage_config/docker.yaml

@@ -1,3 +1,3 @@
 ps10rp-docker:
   host: homepage-dockerproxy
-  port: 2375
+  port: 2375

hosts/ps10rp/homepage/Files/homepage_config/services.yaml

@@ -57,4 +57,4 @@
         description: Unifi
         href: https://unifi.lebens-home.net
         siteMonitor: https://unifi.lebens-home.net
-        statusStyle: dot
+        statusStyle: dot

hosts/ps10rp/homepage/Files/homepage_config/widgets.yaml

@@ -9,4 +9,4 @@
     latitude: 45.398
     longitude: -92.9874
     units: imperial
-    cache: 5
+    cache: 5

hosts/ps10rp/pihole/.env

@@ -2,4 +2,4 @@ TZ=US/Central
 WEBPASSWORD=""
 RATE_LIMIT=0/0
 FTLCONF_MAXDBDAYS=14
-WEB_PORT=8080
+WEB_PORT=8080

hosts/ps10rp/pihole/.exporter.env

@@ -3,4 +3,4 @@ PIHOLE_API_TOKEN=""
 PIHOLE_PROTOCOL=http
 PIHOLE_PORT=8080
 INTERVAL=90s
-PORT=9617
+PORT=9617

hosts/ps10rp/tailscale/.env

@@ -2,4 +2,4 @@ TS_AUTHKEY=""
 TS_HOSTNAME=ps10rp
 TS_ROUTES=192.168.5.0/24
 TS_STATE_DIR=/var/lib/tailscale
-TS_EXTRA_ARGS=--stateful-filtering=false --snat-subnet-routes=false
+TS_EXTRA_ARGS=--stateful-filtering=false --snat-subnet-routes=false

hosts/ps10rp/traefik/.env

@@ -1,3 +1,3 @@
 CF_API_EMAIL=alexanderlebens@gmail.com
 CF_API_KEY=""
-PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

hosts/ps10rp/watchtower/.env

@@ -2,4 +2,4 @@ TZ=US/Central
 WATCHTOWER_HTTP_API_METRICS=true
 WATCHTOWER_HTTP_API_TOKEN=token
 WATCHTOWER_CLEANUP=true
-WATCHTOWER_POLL_INTERVAL=3600
+WATCHTOWER_POLL_INTERVAL=3600