feat: refactor apps

2026-04-06 17:48:10 -05:00
parent f1ce1b9f63
commit f58edfc9f9
11 changed files with 52 additions and 176 deletions
--- a/clusters/cl01tl/helm/roundcube/Chart.lock
+++ b/clusters/cl01tl/helm/roundcube/Chart.lock
@@ -4,9 +4,9 @@ dependencies:
  version: 4.6.2
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.10.0
+  version: 7.11.2
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
-digest: sha256:755aa4db5c7142d46af4a80c9fce49c3c558cc81042c9a00a0bdcd607276e856
-generated: "2026-03-15T20:09:18.053504671Z"
+digest: sha256:3385cf67283187e62972293322a24c0bd3cf979cd870a3f157728e50b601e4f6
+generated: "2026-04-06T17:40:21.003745-05:00"
--- a/clusters/cl01tl/helm/roundcube/Chart.yaml
+++ b/clusters/cl01tl/helm/roundcube/Chart.yaml
@@ -4,12 +4,12 @@ version: 1.0.0
 description: Roundcube
 keywords:
  - roundcube
-  - email
-home: https://wiki.alexlebens.dev/s/68896660-74d8-4166-82bd-f7c282cdb08e
+  - email-client
+home: https://docs.alexlebens.dev/applications/rclone/
 sources:
  - https://github.com/roundcube/roundcubemail
-  - https://github.com/cloudnative-pg/cloudnative-pg
  - https://hub.docker.com/r/roundcube/roundcubemail
+  - https://hub.docker.com/_/nginx
  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
 maintainers:
@@ -21,7 +21,7 @@ dependencies:
    version: 4.6.2
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.10.0
+    version: 7.11.2
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
--- a/clusters/cl01tl/helm/roundcube/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/roundcube/templates/external-secret.yaml
@@ -14,8 +14,5 @@ spec:
  data:
    - secretKey: DES_KEY
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/roundcube/key
-        metadataPolicy: None
        property: DES_KEY
--- a/clusters/cl01tl/helm/roundcube/values.yaml
+++ b/clusters/cl01tl/helm/roundcube/values.yaml
@@ -4,13 +4,11 @@ roundcube:
      type: deployment
      replicas: 1
      strategy: Recreate
-      revisionHistoryLimit: 3
      containers:
        main:
          image:
            repository: roundcube/roundcubemail
-            tag: 1.6.15-fpm-alpine
-            pullPolicy: IfNotPresent
+            tag: 1.6.15-fpm-alpine@sha256:0e07c1c66d5a1392f0c47cc79e85e0c60095108f715037d7d0aa3fd8cbe2e780
          env:
            - name: ROUNDCUBEMAIL_DB_TYPE
              value: pgsql
@@ -53,40 +51,32 @@ roundcube:
              value: archive,zipdownload,newmail_notifier
          resources:
            requests:
-              cpu: 10m
-              memory: 256Mi
+              cpu: 1m
+              memory: 40Mi
        nginx:
          image:
            repository: nginx
-            tag: 1.29.7-alpine-slim
-            pullPolicy: IfNotPresent
+            tag: 1.29.7-alpine-slim@sha256:0848ca84c476868cbeb6a5c2c009a98821b8540f96c44b1ba06820db50262e35
          env:
            - name: NGINX_HOST
              value: mail.alexlebens.net
            - name: NGINX_PHP_CGI
              value: roundcube.roundcube:9000
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
    cleandb:
      type: cronjob
      cronjob:
        suspend: false
-        concurrencyPolicy: Forbid
-        timeZone: US/Central
+        timeZone: America/Chicago
        schedule: 30 4 * * *
-        startingDeadlineSeconds: 90
-        successfulJobsHistory: 1
-        failedJobsHistory: 1
        backoffLimit: 3
        parallelism: 1
      containers:
        backup:
          image:
            repository: roundcube/roundcubemail
-            tag: 1.6.15-fpm-alpine
-            pullPolicy: IfNotPresent
+            tag: 1.6.15-fpm-alpine@sha256:0e07c1c66d5a1392f0c47cc79e85e0c60095108f715037d7d0aa3fd8cbe2e780
+          args:
+            - bin/cleandb.sh
          env:
            - name: ROUNDCUBEMAIL_DB_TYPE
              value: pgsql
@@ -123,12 +113,6 @@ roundcube:
              value: elastic
            - name: ROUNDCUBEMAIL_PLUGINS
              value: archive,zipdownload,newmail_notifier
-          args:
-            - bin/cleandb.sh
-          resources:
-            requests:
-              cpu: 100m
-              memory: 128Mi
  configMaps:
    config:
      enabled: true
@@ -167,11 +151,9 @@ roundcube:
        mail:
          port: 9000
          targetPort: 9000
-          protocol: HTTP
        web:
          port: 80
          targetPort: 80
-          protocol: HTTP
  route:
    main:
      kind: HTTPRoute
@@ -184,11 +166,8 @@ roundcube:
        - mail.alexlebens.net
      rules:
        - backendRefs:
-            - group: ''
-              kind: Service
-              name: roundcube
+            - name: roundcube
              port: 80
-              weight: 100
          matches:
            - path:
                type: PathPrefix
@@ -210,7 +189,6 @@ roundcube:
      storageClass: ceph-block
      accessMode: ReadWriteOnce
      size: 5Gi
-      retain: true
      advancedMounts:
        main:
          main:
@@ -239,35 +217,12 @@ postgres-18-cluster:
        destinationBucket: postgres-backups
        externalSecretCredentialPath: /garage/home-infra/postgres-backups
        isWALArchiver: true
-      # - name: garage-remote
-      #   index: 1
-      #   destinationBucket: postgres-backups
-      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
-      #   retentionPolicy: "90d"
-      #   data:
-      #     compression: bzip2
-      # - name: external
-      #   index: 1
-      #   endpointURL: https://nyc3.digitaloceanspaces.com
-      #   destinationBucket: postgres-backups-ce540ddf106d186bbddca68a
-      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
-      #   isWALArchiver: false
    scheduledBackups:
      - name: live-backup
        suspend: false
        immediate: true
        schedule: "0 40 15 * * *"
        backupName: garage-local
-      # - name: weekly-backup
-      #   suspend: true
-      #   immediate: true
-      #   schedule: "0 0 4 * * SAT"
-      #   backupName: garage-remote
-      # - name: daily-backup
-      #   suspend: true
-      #   immediate: true
-      #   schedule: "0 0 0 * * *"
-      #   backupName: external
 volsync-target-data:
  pvcTarget: roundcube-data
  local: