Update docker.io/postgres Docker tag to v18

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| searxng/searxng | digest | `0124d32` -> `faa7118` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled because a matching PR was automerged previously.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi41LjAiLCJ1cGRhdGVkSW5WZXIiOiI0Mi41LjAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsImltYWdlIl19-->

Reviewed-on: #2171
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>

.gitea/workflows/lint-test-docker-pull.yaml

@@ -6,7 +6,6 @@ on:
       - main
     paths:
       - 'hosts/**'
-      - ! 'hosts/archive'
 
 jobs:
   docker-lint:

.gitea/workflows/lint-test-docker-push.yaml

@@ -6,7 +6,6 @@ on:
       - main
     paths:
       - 'hosts/**'
-      - ! 'hosts/archive'
 
 jobs:
   docker-lint:

.gitea/workflows/lint-test-helm-pull.yaml

@@ -6,7 +6,6 @@ on:
       - main
     paths:
       - 'clusters/**'
-      - ! 'clusters/*/archive'
 
 jobs:
   helm-lint:

.gitea/workflows/lint-test-helm-push.yaml

@@ -6,7 +6,6 @@ on:
       - main
     paths:
       - 'clusters/**'
-      - ! 'clusters/*/archive'
 
 jobs:
   helm-lint:

.gitea/workflows/render-manifests.yaml

@@ -5,78 +5,277 @@ on:
     branches:
       - main
     paths:
-      - "clusters/**"
-      - ! "clusters/*/archive"
+      - 'clusters/cl01tl/helm/**'
+
+  workflow_dispatch:
+
+env:
+  CLUSTERS: cl01tl
+  BASE_BRANCH: manifests
+  BRANCH_NAME: auto/update-manifests
+  ASSIGNEE: alexlebens
+  MAIN_DIR: /workspace/alexlebens/infrastructure/infrastructure
+  MANIFEST_DIR: /workspace/alexlebens/infrastructure/infrastructure-manifests
 
 jobs:
   render-manifests-helm:
     runs-on: ubuntu-js
-    permissions:
-      contents: write
-      pull-requests: write
     steps:
       - name: Checkout
         uses: actions/checkout@v6
         with:
-          fetch-depth: 0
+          path: infrastructure
+
+      - name: Checkout Manifests
+        uses: actions/checkout@v6
+        with:
+          ref: manifests
+          path: infrastructure-manifests
 
       - name: Set up Helm
         uses: azure/setup-helm@v4
         with:
           token: ${{ secrets.GITEA_TOKEN }}
-          version: latest
+          version: v3.17.2 # Pending https://github.com/helm/helm/pull/30743
+
+      - name: Prepare Manifest Branch
+        run: |
+          cd ${MANIFEST_DIR}
+
+          echo ">> Configure git to use gitea-bot as user ..."
+          git config user.name "gitea-bot"
+          git config user.email "gitea-bot@alexlebens.net"
+
+          echo ">> Checking if PR branch exists ..."
+          if [[ $(git ls-remote --heads origin "${BRANCH_NAME}" | wc -l) -gt 0 ]]; then
+            echo ">> Branch '${BRANCH_NAME}' exists, pulling changes ..."
+            git fetch origin "${BRANCH_NAME}"
+            git checkout "${BRANCH_NAME}"
+            git pull --rebase
+
+          else
+            echo ">> Branch '${BRANCH_NAME}' does not exist, creating ..."
+            git checkout -b $BRANCH_NAME
+          fi
+
+          echo ">> Remove manfiest files and rebuild from source ..."
+          cd ${MANIFEST_DIR}/clusters
+          rm -rf ./*
+
+      - name: Add Repositories
+        run: |
+          cd ${MAIN_DIR}
+
+          for cluster in ${CLUSTERS}; do
+            echo ">> Adding repositories for chart dependencies of cluster $cluster ..."
+            for chart_path in ${MAIN_DIR}/clusters/$cluster/helm/*; do
+              helm dependency list --max-col-width 120 $chart_path 2> /dev/null \
+                | tail +2 | head -n -1 \
+                | awk '{ print "helm repo add " $1 " " $3 }' \
+                | while read cmd; do echo "$cmd" | sh; done || true
+            done
+          done
 
       - name: Render Helm Manifests
-        env:
-          CLUSTERS: cl01tl
         run: |
-          for cluster in $CLUSTERS; do
-            mkdir clusters/$CLUSTER/manifests
+          cd ${MAIN_DIR}
 
-            for chart_path in clusters/$CLUSTER/helm/; do
-              chart_name=$(basename "$chart")
-
-              echo "--- Rendering chart: $chart_name ---"
+          for cluster in ${CLUSTERS}; do
+            for chart_path in ${MAIN_DIR}/clusters/$cluster/helm/*; do
+              chart_name=$(basename "$chart_path")
+              echo ">> Rendering chart: $chart_name"
 
               if [ -f "$chart_path/Chart.yaml" ]; then
-                  OUTPUT_FILE="clusters/$CLUSTER/manifests/$chart_name.yaml"
+                mkdir -p ${MANIFEST_DIR}/clusters/$cluster/manifests/$chart_name
+                OUTPUT_FILE="${MANIFEST_DIR}/clusters/$cluster/manifests/$chart_name/$chart_name.yaml"
 
-                  helm template "$chart_name" "$chart" --namespace "$chart_name" > "$OUTPUT_FILE"
+                cd $chart_path
 
-                  echo "Manifests for $chart_name rendered to $OUTPUT_FILE"
+                echo ""
+                echo ">> Building helm dependency ..."
+                helm dependency build
+
+                echo ""
+                echo ">> Linting helm ..."
+                helm lint --namespace "$chart_name" --with-subcharts
+
+                echo ""
+                echo ">> Rendering templates ..."
+                helm template "$chart_name" ./ --namespace "$chart_name" --include-crds > "$OUTPUT_FILE"
+
+                echo ""
+                echo ">> Manifests for $chart_name rendered to $OUTPUT_FILE"
+                echo ""
               else
-                  echo "Directory $chart_path does not contain a Chart.yaml. Skipping ..."
+                echo ""
+                echo ">> Directory $chart_path does not contain a Chart.yaml. Skipping ..."
+                echo ""
               fi
             done
           done
 
+      - name: Check for Changes
+        id: check-changes
+        run: |
+          cd ${MANIFEST_DIR}
+
+          if git status --porcelain | grep -q .; then
+            echo ">> Changes detected"
+            git status --porcelain
+            echo "changes-detected=true" >> $GITEA_OUTPUT
+          else
+            echo ">> No changes detected, skipping PR creation"
+            exit 0
+          fi
+
+      - name: Commit and Push Changes
+        id: commit-push
+        if: steps.check-changes.outputs.changes-detected == 'true'
+        run: |
+          cd ${MANIFEST_DIR}
+
+          echo ">> Commiting changes to ${BRANCH_NAME} ..."
+          git add .
+          git commit -m "chore: Update manifests after change"
+
+          echo ">> Pushing changes to $REPO_URL ..."
+          REPO_URL="${{ secrets.REPO_URL }}/${{ gitea.repository }}"
+          git push -u "https://oauth2:${{ secrets.BOT_TOKEN }}@$(echo $REPO_URL | sed -e 's|https://||')" ${BRANCH_NAME}
+
+          echo "HEAD_BRANCH=${BRANCH_NAME}" >> $GITEA_OUTPUT
+          echo "push=true" >> $GITEA_OUTPUT
+
+      - name: Check for Pull Request
+        id: check-for-pull-requst
+        if: steps.commit-push.outputs.push == 'true'
+        env:
+          GITEA_TOKEN: ${{ secrets.BOT_TOKEN }}
+          GITEA_URL: ${{ secrets.REPO_URL }}
+          HEAD_BRANCH: ${{ steps.commit-push.outputs.HEAD_BRANCH }}
+        run: |
+          cd ${MANIFEST_DIR}
+
+          API_ENDPOINT="${GITEA_URL}/api/v1/repos/${{ gitea.repository }}/pulls/${BASE_BRANCH}/${HEAD_BRANCH}"
+
+          echo ">> Checking if PR from branch ${HEAD_BRANCH} into ${BASE_BRANCH}"
+          echo ">> With Endpoint of:"
+          echo "$API_ENDPOINT"
+
+          HTTP_STATUS=$(
+            curl -X GET \
+              --silent \
+              --write-out '%{http_code}' \
+              --output response_body.json \
+              --dump-header response_headers.txt \
+              -H "Authorization: token ${GITEA_TOKEN}" \
+              -H "Content-Type: application/json" \
+              "$API_ENDPOINT" 2> response_errors.txt
+          )
+
+          echo ">> HTTP Status Code: $HTTP_STATUS"
+          echo ">> Response Output ..."
+          echo "----"
+          cat response_body.json
+          echo "----"
+          cat response_headers.txt
+          echo "----"
+          cat response_errors.txt
+          echo "----"
+
+          if [ "$HTTP_STATUS" == "200" ] && [$(cat response_body.json | jq -r .state) == "open"]; then
+            echo ">> Pull Request has been found open, will update"
+            PR_INDEX=$(cat response_body.json | jq -r .number)
+            echo "pull-request-exists=${PR_INDEX}" >> $GITEA_OUTPUT
+            echo "pull-request-index=true" >> $GITEA_OUTPUT
+
+          else
+            echo ">> Pull Request not found"
+            echo "pull-request-exists=false" >> $GITEA_OUTPUT
+          fi
+
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
-        with:
-          token: ${{ secrets.GITEA_TOKEN }}
-          commit-message: "chore: Update manifests after chart change"
-          branch: auto/update-manifests
-          base: manifests
-          title: "Manifest Update: App Changes"
-          body: |
-            This PR contains the newly rendered Kubernetes manifests.
+        id: create-pull-request
+        if: steps.commit-push.outputs.push == 'true' && steps.check-for-pull-requst.outputs.pull-request-exists == 'false'
+        env:
+          GITEA_TOKEN: ${{ secrets.BOT_TOKEN }}
+          GITEA_URL: ${{ secrets.REPO_URL }}
+          HEAD_BRANCH: ${{ steps.commit-push.outputs.HEAD_BRANCH }}
+        run: |
+          cd ${MANIFEST_DIR}
 
-            * Triggered by workflow run ${{ github.run_id }}
-            * Review the `files changed` tab for the full YAML diff.
-          add-paths: "clusters/*/rendered-manifests/"
+          API_ENDPOINT="${GITEA_URL}/api/v1/repos/${{ gitea.repository }}/pulls"
 
-      - name: ntfy Success
+          PAYLOAD=$( jq -n \
+            --arg head "${HEAD_BRANCH}" \
+            --arg base "${BASE_BRANCH}" \
+            --arg assignee "${ASSIGNEE}" \
+            --arg title "Automated Manifest Update" \
+            --arg body "This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow." \
+            '{head: $head, base: $base, assignee: $assignee, title: $title, body: $body'} )
+
+          echo ">> Creating PR from branch ${HEAD_BRANCH} into ${BASE_BRANCH}"
+          echo ">> With Endpoint of:"
+          echo "$API_ENDPOINT"
+          echo ">> With Payload of:"
+          echo "$PAYLOAD"
+
+          HTTP_STATUS=$(
+            curl -X POST \
+              --silent \
+              --write-out '%{http_code}' \
+              --output response_body.json \
+              --dump-header response_headers.txt \
+              --data "$PAYLOAD" \
+              -H "Authorization: token ${GITEA_TOKEN}" \
+              -H "Content-Type: application/json" \
+              "$API_ENDPOINT" 2> response_errors.txt
+          )
+
+          echo ">> HTTP Status Code: $HTTP_STATUS"
+          echo ">> Response Output ..."
+          echo "----"
+          cat response_body.json
+          echo "----"
+          cat response_headers.txt
+          echo "----"
+          cat response_errors.txt
+          echo "----"
+
+          if [ "$HTTP_STATUS" == "201" ]; then
+            echo ">> Pull Request created successfully!"
+            PR_URL=$(cat response_body.json | jq -r .html_url)
+            echo "pull-request-url=${PR_URL}" >> $GITEA_OUTPUT
+            echo "pull-request-operation=created" >> $GITEA_OUTPUT
+
+          elif [ "$HTTP_STATUS" == "422" ]; then
+            echo ">> Failed to create PR (HTTP 422: Unprocessable Entity), PR may already exist"
+
+          else
+            echo ">> Failed to create PR, HTTP status code: $HTTP_STATUS"
+            exit 1
+          fi
+
+      - name: Cleanup Branch
+        if: failure() && steps.create-pull-request.outcome == 'failure'
+        env:
+          HEAD_BRANCH: ${{ steps.commit-push.outputs.HEAD_BRANCH }}
+        run: |
+          echo ">> Removing branch: ${HEAD_BRANCH}"
+          git push origin --delete ${HEAD_BRANCH}
+
+      - name: ntfy Created
         uses: niniyas/ntfy-action@master
-        if: success()
+        if: steps.create-pull-request.outputs.pull-request-operation == 'created'
         with:
           url: "${{ secrets.NTFY_URL }}"
           topic: "${{ secrets.NTFY_TOPIC }}"
-          title: "Manifest Render Success - Infrastructure"
+          title: "Manifest Render PR Created - Infrastructure"
           priority: 3
           headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}'
           tags: action,successfully,completed
-          details: "Manifest rendering for Infrastructure has succeeded"
+          details: "Manifest rendering for Infrastructure has created a new Pull Request!"
           icon: "https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png"
+          actions: '[{"action": "view", "label": "Open Gitea", "url": "${{ steps.create-pull-request.outputs.pull-request-url }}", "clear": true}]'
 
       - name: ntfy Failed
         uses: niniyas/ntfy-action@master

.gitignore

@@ -0,0 +1,3 @@
+/**/archive/
+/**/charts/
+/**/manifests/

clusters/cl01tl/applications/actual/Chart.yaml

@@ -1,21 +0,0 @@
-apiVersion: v2
-name: actual
-version: 1.0.0
-description: Actual
-keywords:
-  - actual
-  - budget
-home: https://wiki.alexlebens.dev/s/86192f45-94b7-45de-872c-6ef3fec7df5e
-sources:
-  - https://github.com/actualbudget/actual
-  - https://github.com/actualbudget/actual/pkgs/container/actual
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: actual
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/actual-budget.png
-appVersion: v25.5.0

clusters/cl01tl/applications/actual/templates/external-secret.yaml

@@ -1,55 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: actual-data-backup-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: actual-data-backup-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  target:
-    template:
-      mergePolicy: Merge
-      engineVersion: v2
-      data:
-        RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/actual/actual-data"
-  data:
-    - secretKey: BUCKET_ENDPOINT
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/volsync/restic/config
-        metadataPolicy: None
-        property: S3_BUCKET_ENDPOINT
-    - secretKey: RESTIC_PASSWORD
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/volsync/restic/config
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
-    - secretKey: AWS_DEFAULT_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/volsync/restic/config
-        metadataPolicy: None
-        property: AWS_DEFAULT_REGION
-    - secretKey: AWS_ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
-        property: access_key
-    - secretKey: AWS_SECRET_ACCESS_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
-        property: secret_key

clusters/cl01tl/applications/actual/templates/http-route.yaml

@@ -1,28 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
-metadata:
-  name: http-route-actual
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: http-route-actual
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  parentRefs:
-    - group: gateway.networking.k8s.io
-      kind: Gateway
-      name: traefik-gateway
-      namespace: traefik
-  hostnames:
-    - actual.alexlebens.net
-  rules:
-    - matches:
-      - path:
-          type: PathPrefix
-          value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: actual
-          port: 80
-          weight: 100

clusters/cl01tl/applications/actual/templates/replication-source.yaml

@@ -1,25 +0,0 @@
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationSource
-metadata:
-  name: actual-data-backup-source
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: actual-data-backup-source
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  sourcePVC: actual-data
-  trigger:
-    schedule: 0 4 * * *
-  restic:
-    pruneIntervalDays: 7
-    repository: actual-data-backup-secret
-    retain:
-      hourly: 1
-      daily: 3
-      weekly: 2
-      monthly: 2
-      yearly: 4
-    copyMethod: Snapshot
-    storageClassName: ceph-block
-    volumeSnapshotClassName: ceph-blockpool-snapshot

clusters/cl01tl/applications/actual/values.yaml

@@ -1,56 +0,0 @@
-actual:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: ghcr.io/actualbudget/actual
-            tag: 25.11.0
-            pullPolicy: IfNotPresent
-          env:
-            - name: TZ
-              value: US/Central
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-          probes:
-            liveness:
-              enabled: true
-              custom: true
-              spec:
-                exec:
-                  command:
-                  - /usr/bin/env
-                  - bash
-                  - -c
-                  - node src/scripts/health-check.js
-                failureThreshold: 5
-                initialDelaySeconds: 60
-                periodSeconds: 10
-                successThreshold: 1
-                timeoutSeconds: 10
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 5006
-          protocol: HTTP
-  persistence:
-    data:
-      forceRename: actual-data
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 2Gi
-      retain: true
-      advancedMounts:
-        main:
-          main:
-            - path: /data
-              readOnly: false

clusters/cl01tl/applications/bazarr/Chart.yaml

@@ -1,23 +0,0 @@
-apiVersion: v2
-name: bazarr
-version: 1.0.0
-description: Bazarr
-keywords:
-  - bazarr
-  - servarr
-  - subtitles
-home: https://wiki.alexlebens.dev/s/92784d53-1d43-42fd-b509-f42c73454226
-sources:
-  - https://github.com/morpheus65535/bazarr
-  - https://github.com/linuxserver/docker-bazarr
-  - https://github.com/linuxserver/docker-bazarr/pkgs/container/bazarr
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: bazarr
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/bazarr.png
-appVersion: 1.5.2

clusters/cl01tl/applications/bazarr/templates/external-secret.yaml

@@ -1,55 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: bazarr-config-backup-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: bazarr-config-backup-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  target:
-    template:
-      mergePolicy: Merge
-      engineVersion: v2
-      data:
-        RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/bazarr/bazarr-config"
-  data:
-    - secretKey: BUCKET_ENDPOINT
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/volsync/restic/config
-        metadataPolicy: None
-        property: S3_BUCKET_ENDPOINT
-    - secretKey: RESTIC_PASSWORD
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/volsync/restic/config
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
-    - secretKey: AWS_DEFAULT_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/volsync/restic/config
-        metadataPolicy: None
-        property: AWS_DEFAULT_REGION
-    - secretKey: AWS_ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
-        property: access_key
-    - secretKey: AWS_SECRET_ACCESS_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
-        property: secret_key

clusters/cl01tl/applications/bazarr/templates/http-route.yaml

@@ -1,28 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
-metadata:
-  name: http-route-bazarr
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: http-route-bazarr
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  parentRefs:
-    - group: gateway.networking.k8s.io
-      kind: Gateway
-      name: traefik-gateway
-      namespace: traefik
-  hostnames:
-    - bazarr.alexlebens.net
-  rules:
-    - matches:
-      - path:
-          type: PathPrefix
-          value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: bazarr
-          port: 80
-          weight: 100

clusters/cl01tl/applications/bazarr/templates/persistent-volume-claim.yaml

@@ -1,17 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: bazarr-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: bazarr-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: bazarr-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi

clusters/cl01tl/applications/bazarr/templates/persistent-volume.yaml

@@ -1,23 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: bazarr-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: bazarr-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac

clusters/cl01tl/applications/bazarr/templates/replication-source.yaml

@@ -1,30 +0,0 @@
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationSource
-metadata:
-  name: bazarr-config-backup-source
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: bazarr-config-backup-source
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  sourcePVC: bazarr-config
-  trigger:
-    schedule: 0 4 * * *
-  restic:
-    pruneIntervalDays: 7
-    repository: bazarr-config-backup-secret
-    retain:
-      hourly: 1
-      daily: 3
-      weekly: 2
-      monthly: 2
-      yearly: 4
-    moverSecurityContext:
-      runAsUser: 1000
-      runAsGroup: 1000
-      fsGroup: 1000
-      fsGroupChangePolicy: OnRootMismatch
-    copyMethod: Snapshot
-    storageClassName: ceph-block
-    volumeSnapshotClassName: ceph-blockpool-snapshot

clusters/cl01tl/applications/bazarr/values.yaml

@@ -1,57 +0,0 @@
-bazarr:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      pod:
-        securityContext:
-          runAsUser: 1000
-          runAsGroup: 1000
-          fsGroup: 1000
-          fsGroupChangePolicy: OnRootMismatch
-      containers:
-        main:
-          image:
-            repository: ghcr.io/linuxserver/bazarr
-            tag: 1.5.3@sha256:2be164c02c0bb311b6c32e57d3d0ddc2813d524e89ab51a3408c1bf6fafecda5
-            pullPolicy: IfNotPresent
-          env:
-            - name: TZ
-              value: US/Central
-            - name: PUID
-              value: 1000
-            - name: PGID
-              value: 1000
-          resources:
-            requests:
-              cpu: 10m
-              memory: 256Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 6767
-          protocol: HTTP
-  persistence:
-    config:
-      forceRename: bazarr-config
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 5Gi
-      retain: true
-      advancedMounts:
-        main:
-          main:
-            - path: /config
-              readOnly: false
-    media:
-      existingClaim: bazarr-nfs-storage
-      advancedMounts:
-        main:
-          main:
-            - path: /mnt/store
-              readOnly: false

clusters/cl01tl/applications/code-server/Chart.yaml

@@ -1,28 +0,0 @@
-apiVersion: v2
-name: code-server
-version: 1.0.0
-description: Code Server
-keywords:
-  - code-server
-  - code
-  - ide
-home: https://wiki.alexlebens.dev/s/233f96bb-db70-47e4-8b22-a8efcbb0f93d
-sources:
-  - https://github.com/coder/code-server
-  - https://github.com/cloudflare/cloudflared
-  - https://hub.docker.com/r/linuxserver/code-server
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/cloudflared
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: code-server
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
-  - name: cloudflared
-    alias: cloudflared
-    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.23.0
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/visual-studio-code.png
-appVersion: 4.100.2

clusters/cl01tl/applications/code-server/templates/external-secret.yaml

@@ -1,51 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: codeserver-password-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: codeserver-password-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: PASSWORD
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/code-server/auth
-        metadataPolicy: None
-        property: PASSWORD
-    - secretKey: SUDO_PASSWORD
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/code-server/auth
-        metadataPolicy: None
-        property: SUDO_PASSWORD
-
----
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: code-server-cloudflared-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: code-server-cloudflared-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: cf-tunnel-token
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cloudflare/tunnels/codeserver
-        metadataPolicy: None
-        property: token

clusters/cl01tl/applications/code-server/templates/http-route.yaml

@@ -1,28 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
-metadata:
-  name: http-route-code-server
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: http-route-code-server
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  parentRefs:
-    - group: gateway.networking.k8s.io
-      kind: Gateway
-      name: traefik-gateway
-      namespace: traefik
-  hostnames:
-    - code-server.alexlebens.net
-  rules:
-    - matches:
-      - path:
-          type: PathPrefix
-          value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: code-server
-          port: 8443
-          weight: 100

clusters/cl01tl/applications/code-server/templates/persistent-volume-claim.yaml

@@ -1,17 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: code-server-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: code-server-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeMode: Filesystem
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 1Gi

clusters/cl01tl/applications/code-server/values.yaml

@@ -1,47 +0,0 @@
-code-server:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: ghcr.io/linuxserver/code-server
-            tag: 4.106.2@sha256:a98afdbcb59559f11e5e8df284062e55da1076b2e470e13db4aae133ea82bad0
-            pullPolicy: IfNotPresent
-          env:
-            - name: TZ
-              value: US/Central
-            - name: PUID
-              value: 1000
-            - name: PGID
-              value: 1000
-            - name: DEFAULT_WORKSPACE
-              value: /config
-          envFrom:
-            - secretRef:
-                name: codeserver-password-secret
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 8443
-          targetPort: 8443
-          protocol: HTTP
-  persistence:
-    config:
-      existingClaim: code-server-nfs-storage
-      advancedMounts:
-        main:
-          main:
-            - path: /config
-              readOnly: false
-cloudflared:
-  existingSecretName: code-server-cloudflared-secret

clusters/cl01tl/applications/element-web/Chart.yaml

@@ -1,27 +0,0 @@
-apiVersion: v2
-name: element-web
-version: 1.0.0
-description: Element Web
-keywords:
-  - element-web
-  - chat
-  - matrix
-home: https://wiki.alexlebens.dev/s/e3b03481-1a1d-4b56-8cd9-e75a8dcc0f6c
-sources:
-  - https://github.com/element-hq/element-web
-  - https://github.com/cloudflare/cloudflared
-  - https://hub.docker.com/r/vectorim/element-web
-  - https://gitlab.com/ananace/charts/-/tree/master/charts/element-web
-  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/cloudflared
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: element-web
-    version: 1.4.24
-    repository: https://ananace.gitlab.io/charts
-  - name: cloudflared
-    alias: cloudflared
-    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.23.0
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
-appVersion: v1.11.100

clusters/cl01tl/applications/element-web/templates/external-secret.yaml

@@ -1,21 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: element-web-cloudflared-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: element-web-cloudflared-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: cf-tunnel-token
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cloudflare/tunnels/element
-        metadataPolicy: None
-        property: token

clusters/cl01tl/applications/element-web/values.yaml

@@ -1,28 +0,0 @@
-element-web:
-  replicaCount: 1
-  image:
-    repository: vectorim/element-web
-    tag: v1.12.4
-    pullPolicy: IfNotPresent
-  defaultServer:
-    url: https://matrix.alexlebens.dev
-    name: alexlebens.dev
-    identity_url: https://alexlebens.dev
-  config:
-    disable_3pid_login: true
-    brand: "Alex Lebens"
-    branding:
-      welcome_background_url: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/background.jpg
-      auth_header_logo_url: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.png
-    sso_redirect_options:
-      immediate: true
-    default_theme: dark
-    default_country_code: US
-  ingress:
-    enabled: false
-  resources:
-    requests:
-      cpu: 10m
-      memory: 128Mi
-cloudflared:
-  existingSecretName: element-web-cloudflared-secret

clusters/cl01tl/applications/ephemera/Chart.yaml

@@ -1,23 +0,0 @@
-apiVersion: v2
-name: ephemera
-version: 1.0.0
-description: ephemera
-keywords:
-  - ephemera
-  - books
-home: https://wiki.alexlebens.dev/
-sources:
-  - https://github.com/OrwellianEpilogue/ephemera
-  - https://github.com/FlareSolverr/FlareSolverr
-  - https://github.com/orwellianepilogue/ephemera/pkgs/container/ephemera
-  - https://github.com/flaresolverr/FlareSolverr/pkgs/container/flaresolverr
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: ephemera
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ephemera.png
-appVersion: 1.3.1

clusters/cl01tl/applications/ephemera/templates/external-secret.yaml

@@ -1,101 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: ephemera-key-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: ephemera-key-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: key
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/ephemera/config
-        metadataPolicy: None
-        property: key
-
----
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: ephemera-apprise-config
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: ephemera-apprise-config
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: ntfy-url
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/ephemera/config
-        metadataPolicy: None
-        property: ntfy-url
-
----
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: ephemera-config-backup-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: ephemera-config-backup-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  target:
-    template:
-      mergePolicy: Merge
-      engineVersion: v2
-      data:
-        RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/ephemera/ephemera-config"
-  data:
-    - secretKey: BUCKET_ENDPOINT
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/volsync/restic/config
-        metadataPolicy: None
-        property: S3_BUCKET_ENDPOINT
-    - secretKey: RESTIC_PASSWORD
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/volsync/restic/config
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
-    - secretKey: AWS_DEFAULT_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/volsync/restic/config
-        metadataPolicy: None
-        property: AWS_DEFAULT_REGION
-    - secretKey: AWS_ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
-        property: access_key
-    - secretKey: AWS_SECRET_ACCESS_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
-        property: secret_key

clusters/cl01tl/applications/ephemera/templates/http-route.yaml

@@ -1,28 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
-metadata:
-  name: http-route-ephemera
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: http-route-ephemera
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  parentRefs:
-    - group: gateway.networking.k8s.io
-      kind: Gateway
-      name: traefik-gateway
-      namespace: traefik
-  hostnames:
-    - ephemera.alexlebens.net
-  rules:
-    - matches:
-      - path:
-          type: PathPrefix
-          value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: ephemera
-          port: 80
-          weight: 100

clusters/cl01tl/applications/ephemera/templates/persistent-volume-claim.yaml

@@ -1,17 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: ephemera-import-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: ephemera-import-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: ephemera-import-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi

clusters/cl01tl/applications/ephemera/templates/persistent-volume.yaml

@@ -1,23 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: ephemera-import-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: ephemera-import-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Books Import
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac

clusters/cl01tl/applications/ephemera/templates/replication-source.yaml

@@ -1,26 +0,0 @@
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationSource
-metadata:
-  name: ephemera-config-backup-source
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: ephemera-config-backup-source
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  sourcePVC: ephemera-config
-  trigger:
-    schedule: 0 4 * * *
-  restic:
-    pruneIntervalDays: 7
-    repository: ephemera-config-backup-secret
-    retain:
-      hourly: 1
-      daily: 3
-      weekly: 2
-      monthly: 2
-      yearly: 4
-    copyMethod: Snapshot
-    storageClassName: ceph-block
-    volumeSnapshotClassName: ceph-blockpool-snapshot
-    cacheCapacity: 10Gi

clusters/cl01tl/applications/ephemera/values.yaml

@@ -1,107 +0,0 @@
-ephemera:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: ghcr.io/orwellianepilogue/ephemera
-            tag: 1.3.1
-            pullPolicy: IfNotPresent
-          env:
-            - name: AA_BASE_URL
-              value: https://annas-archive.org
-            # - name: AA_API_KEY
-            #   valueFrom:
-            #     secretKeyRef:
-            #       name: ephemera-key-secret
-            #       key: key
-            - name: FLARESOLVERR_URL
-              value: http://127.0.0.1:8191
-            - name: LG_BASE_URL
-              value: https://gen.com
-            - name: PUID
-              value: 0
-            - name: PGID
-              value: 0
-          resources:
-            requests:
-              cpu: 50m
-              memory: 128Mi
-        flaresolverr:
-          image:
-            repository: ghcr.io/flaresolverr/flaresolverr
-            tag: v3.4.5
-            pullPolicy: IfNotPresent
-          env:
-            - name: LOG_LEVEL
-              value: info
-            - name: LOG_HTML
-              value: false
-            - name: CAPTCHA_SOLVER
-              value: none
-            - name: TZ
-              value: America/Chicago
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-        apprise-api:
-          image:
-            repository: caronc/apprise
-            tag: 1.2.6
-            pullPolicy: IfNotPresent
-          env:
-            - name: TZ
-              value: US/Central
-            - name: APPRISE_STORAGE_MODE
-              value: memory
-            - name: APPRISE_STATEFUL_MODE
-              value: disabled
-            - name: APPRISE_WORKER_COUNT
-              value: 1
-            - name: APPRISE_STATELESS_URLS
-              valueFrom:
-                secretKeyRef:
-                  name: ephemera-apprise-config
-                  key: ntfy-url
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 8286
-          protocol: HTTP
-  persistence:
-    config:
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 5Gi
-      retain: true
-      advancedMounts:
-        main:
-          main:
-            - path: /app/data
-              readOnly: false
-    cache:
-      type: emptyDir
-      advancedMounts:
-        main:
-          main:
-            - path: /app/downloads
-              readOnly: false
-    ingest:
-      existingClaim: ephemera-import-nfs-storage
-      advancedMounts:
-        main:
-          main:
-            - path: /app/ingest
-              readOnly: false

clusters/cl01tl/applications/home-assistant/Chart.yaml

@@ -1,23 +0,0 @@
-apiVersion: v2
-name: home-assistant
-version: 1.0.0
-description: Home Assistant
-keywords:
-  - home-assistant
-  - home
-  - automation
-home: https://wiki.alexlebens.dev/s/5462c17e-cd39-4082-ad01-94545a2fa3ca
-sources:
-  - https://www.home-assistant.io/
-  - https://github.com/home-assistant/core
-  - https://github.com/home-assistant/core/pkgs/container/home-assistant
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: home-assistant
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
-appVersion: 2025.5.2

clusters/cl01tl/applications/home-assistant/templates/external-secret.yaml

@@ -1,51 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: home-assistant-code-server-password-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: home-assistant-code-server-password-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: PASSWORD
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/home-assistant/code-server/auth
-        metadataPolicy: None
-        property: PASSWORD
-    - secretKey: SUDO_PASSWORD
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/home-assistant/code-server/auth
-        metadataPolicy: None
-        property: SUDO_PASSWORD
-
----
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: home-assistant-token-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: home-assistant-token-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: bearer-token
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/home-assistant/auth
-        metadataPolicy: None
-        property: bearer-token

clusters/cl01tl/applications/home-assistant/templates/http-route.yaml

@@ -1,58 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
-metadata:
-  name: http-route-home-assistant
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: http-route-home-assistant
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  parentRefs:
-    - group: gateway.networking.k8s.io
-      kind: Gateway
-      name: traefik-gateway
-      namespace: traefik
-  hostnames:
-    - home-assistant.alexlebens.net
-  rules:
-    - matches:
-      - path:
-          type: PathPrefix
-          value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: home-assistant-main
-          port: 80
-          weight: 100
-
----
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
-metadata:
-  name: http-route-home-assistant-code-server
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: http-route-home-assistant-code-server
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  parentRefs:
-    - group: gateway.networking.k8s.io
-      kind: Gateway
-      name: traefik-gateway
-      namespace: traefik
-  hostnames:
-    - home-assistant-code-server.alexlebens.net
-  rules:
-    - matches:
-      - path:
-          type: PathPrefix
-          value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: home-assistant-code-server
-          port: 8443
-          weight: 100

clusters/cl01tl/applications/home-assistant/templates/service-monitor.yaml

@@ -1,23 +0,0 @@
-apiVersion: monitoring.coreos.com/v1
-kind: ServiceMonitor
-metadata:
-  name: home-assistant
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: home-assistant
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: home-assistant
-      app.kubernetes.io/service: home-assistant-main
-      app.kubernetes.io/instance: {{ .Release.Name }}
-  endpoints:
-    - port: http
-      interval: 3m
-      scrapeTimeout: 1m
-      path: /api/prometheus
-      bearerTokenSecret:
-        name: home-assistant-token-secret
-        key: bearer-token

clusters/cl01tl/applications/home-assistant/values.yaml

@@ -1,70 +0,0 @@
-home-assistant:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: ghcr.io/home-assistant/home-assistant
-            tag: 2025.11.3
-            pullPolicy: IfNotPresent
-          env:
-            - name: TZ
-              value: US/Central
-          resources:
-            requests:
-              cpu: 50m
-              memory: 512Mi
-        code-server:
-          image:
-            repository: ghcr.io/linuxserver/code-server
-            tag: 4.106.2@sha256:a98afdbcb59559f11e5e8df284062e55da1076b2e470e13db4aae133ea82bad0
-            pullPolicy: IfNotPresent
-          env:
-            - name: TZ
-              value: US/Central
-            - name: PUID
-              value: 1000
-            - name: PGID
-              value: 1000
-            - name: DEFAULT_WORKSPACE
-              value: /config
-          envFrom:
-            - secretRef:
-                name: home-assistant-code-server-password-secret
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 8123
-          protocol: TCP
-    code-server:
-      controller: main
-      ports:
-        http:
-          port: 8443
-          targetPort: 8443
-          protocol: HTTP
-  persistence:
-    config:
-      forceRename: home-assistant-config
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 5Gi
-      advancedMounts:
-        main:
-          main:
-            - path: /config
-              readOnly: false
-          code-server:
-            - path: /config/home-assistant
-              readOnly: false

clusters/cl01tl/applications/homepage-dev/Chart.yaml

@@ -1,27 +0,0 @@
-apiVersion: v2
-name: homepage
-version: 1.0.0
-description: Homepage
-keywords:
-  - homepage
-  - dashboard
-home: https://wiki.alexlebens.dev/s/a5fabd91-3d89-4e2b-9417-06111aedaeaa
-sources:
-  - https://github.com/gethomepage/homepage
-  - https://github.com/cloudflare/cloudflared
-  - https://github.com/gethomepage/homepage/pkgs/container/homepage
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/cloudflared
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: homepage
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
-  - name: cloudflared
-    alias: cloudflared
-    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.23.0
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
-appVersion: v1.2.0

clusters/cl01tl/applications/homepage-dev/templates/external-secret.yaml

@@ -1,21 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: homepage-dev-cloudflared-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: homepage-dev-cloudflared-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: cf-tunnel-token
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cloudflare/tunnels/homepage-dev
-        metadataPolicy: None
-        property: token

clusters/cl01tl/applications/homepage-dev/values.yaml

@@ -1,167 +0,0 @@
-homepage:
-  global:
-    nameOverride: homepage
-  controllers:
-    main:
-      type: deployment
-      annotations:
-        reloader.stakater.com/auto: "true"
-      strategy: Recreate
-      containers:
-        main:
-          image:
-            repository: ghcr.io/gethomepage/homepage
-            tag: v1.7.0
-            pullPolicy: IfNotPresent
-          env:
-            - name: HOMEPAGE_ALLOWED_HOSTS
-              value: home.alexlebens.dev
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-  configMaps:
-    config:
-      enabled: true
-      data:
-        docker.yaml: ""
-        kubernetes.yaml: ""
-        settings.yaml: |
-          favicon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.svg
-          headerStyle: clean
-          hideVersion: true
-          color: zinc
-          background:
-            image: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/background.jpg
-            brightness: 50
-          theme: dark
-          disableCollapse: true
-        widgets.yaml: |
-          - logo:
-              icon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.png
-          - datetime:
-              text_size: xl
-              format:
-                dateStyle: long
-                timeStyle: short
-                hour12: false
-          - openmeteo:
-              label: St. Paul
-              latitude: 44.954445
-              longitude: -93.091301
-              timezone: America/Chicago
-              units: metric
-              cache: 5
-              format:
-                maximumFractionDigits: 0
-        services.yaml: |
-          - Applications:
-              - Auth:
-                  icon: sh-authentik.webp
-                  description: Authentik
-                  href: https://auth.alexlebens.dev
-                  siteMonitor: https://auth.alexlebens.dev
-                  statusStyle: dot
-              - Gitea:
-                  icon: sh-gitea.webp
-                  description: Gitea
-                  href: https://gitea.alexlebens.dev
-                  siteMonitor: https://gitea.alexlebens.dev
-                  statusStyle: dot
-              - Code:
-                  icon: sh-visual-studio-code.webp
-                  description: VS Code
-                  href: https://codeserver.alexlebens.dev
-                  siteMonitor: https://codeserver.alexlebens.dev
-                  statusStyle: dot
-              - Site:
-                  icon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.png
-                  description: Profile Website
-                  href: https://www.alexlebens.dev
-                  siteMonitor: https://www.alexlebens.dev
-                  statusStyle: dot
-              - Content Management:
-                  icon: directus.png
-                  description: Directus
-                  href: https://directus.alexlebens.dev
-                  siteMonitor: https://directus.alexlebens.dev
-                  statusStyle: dot
-              - Social Media Management:
-                  icon: sh-postiz.webp
-                  description: Postiz
-                  href: https://postiz.alexlebens.dev
-                  siteMonitor: https://postiz.alexlebens.dev
-                  statusStyle: dot
-              - Chat:
-                  icon: sh-element.webp
-                  description: Matrix
-                  href: https://chat.alexlebens.dev
-                  siteMonitor: https://chat.alexlebens.dev
-                  statusStyle: dot
-              - Wiki:
-                  icon: sh-outline.webp
-                  description: Outline
-                  href: https://wiki.alexlebens.dev
-                  siteMonitor: https://wiki.alexlebens.dev
-                  statusStyle: dot
-              - Passwords:
-                  icon: sh-vaultwarden-light.webp
-                  description: Vaultwarden
-                  href: https://passwords.alexlebens.dev
-                  siteMonitor: https://passwords.alexlebens.dev
-                  statusStyle: dot
-              - Bookmarks:
-                  icon: sh-karakeep-light.webp
-                  description: Karakeep
-                  href: https://karakeep.alexlebens.dev
-                  siteMonitor: https://karakeep.alexlebens.dev
-                  statusStyle: dot
-              - RSS:
-                  icon: sh-freshrss.webp
-                  description: FreshRSS
-                  href: https://rss.alexlebens.dev
-                  siteMonitor: https://rss.alexlebens.dev
-                  statusStyle: dot
-        bookmarks.yaml: ""
-  service:
-    http:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 3000
-          protocol: HTTP
-  persistence:
-    config:
-      enabled: true
-      type: configMap
-      name: homepage-dev
-      advancedMounts:
-        main:
-          main:
-            - path: /app/config/bookmarks.yaml
-              readOnly: true
-              mountPropagation: None
-              subPath: bookmarks.yaml
-            - path: /app/config/docker.yaml
-              readOnly: true
-              mountPropagation: None
-              subPath: docker.yaml
-            - path: /app/config/kubernetes.yaml
-              readOnly: true
-              mountPropagation: None
-              subPath: kubernetes.yaml
-            - path: /app/config/services.yaml
-              readOnly: true
-              mountPropagation: None
-              subPath: services.yaml
-            - path: /app/config/settings.yaml
-              readOnly: true
-              mountPropagation: None
-              subPath: settings.yaml
-            - path: /app/config/widgets.yaml
-              readOnly: true
-              mountPropagation: None
-              subPath: widgets.yaml
-cloudflared:
-  existingSecretName: homepage-dev-cloudflared-secret

clusters/cl01tl/applications/homepage/Chart.yaml

@@ -1,21 +0,0 @@
-apiVersion: v2
-name: homepage
-version: 1.0.0
-description: Homepage
-keywords:
-  - homepage
-  - dashboard
-home: https://wiki.alexlebens.dev/s/a5fabd91-3d89-4e2b-9417-06111aedaeaa
-sources:
-  - https://github.com/gethomepage/homepage
-  - https://github.com/gethomepage/homepage/pkgs/container/homepage
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: homepage
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
-appVersion: v1.2.0

clusters/cl01tl/applications/homepage/templates/cluster-role-binding.yaml

@@ -1,17 +0,0 @@
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: homepage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: homepage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: homepage
-subjects:
-  - kind: ServiceAccount
-    name: homepage
-    namespace: {{ .Release.Namespace }}

clusters/cl01tl/applications/homepage/templates/cluster-role.yaml

@@ -1,50 +0,0 @@
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: homepage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: homepage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-rules:
-  - apiGroups:
-      - ""
-    resources:
-      - namespaces
-      - pods
-      - nodes
-    verbs:
-      - get
-      - list
-  - apiGroups:
-      - extensions
-      - networking.k8s.io
-    resources:
-      - ingresses
-    verbs:
-      - get
-      - list
-  - apiGroups:
-      - traefik.io
-    resources:
-      - ingressroutes
-    verbs:
-      - get
-      - list
-  - apiGroups:
-      - gateway.networking.k8s.io
-    resources:
-      - httproutes
-      - gateways
-    verbs:
-      - get
-      - list
-  - apiGroups:
-      - metrics.k8s.io
-    resources:
-      - nodes
-      - pods
-    verbs:
-      - get
-      - list

clusters/cl01tl/applications/homepage/templates/external-secret.yaml

@@ -1,105 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: homepage-keys-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: homepage-keys-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: HOMEPAGE_VAR_SYNOLOGY_USER
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /synology/auth/cl01tl
-        metadataPolicy: None
-        property: user
-    - secretKey: HOMEPAGE_VAR_SYNOLOGY_PASSWORD
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /synology/auth/cl01tl
-        metadataPolicy: None
-        property: password
-    - secretKey: HOMEPAGE_VAR_UNIFI_USER
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /unifi/auth/cl01tl
-        metadataPolicy: None
-        property: user
-    - secretKey: HOMEPAGE_VAR_UNIFI_PASSWORD
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /unifi/auth/cl01tl
-        metadataPolicy: None
-        property: password
-    - secretKey: HOMEPAGE_VAR_SONARR_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/sonarr4/key
-        metadataPolicy: None
-        property: key
-    - secretKey: HOMEPAGE_VAR_SONARR4K_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/sonarr4-4k/key
-        metadataPolicy: None
-        property: key
-    - secretKey: HOMEPAGE_VAR_SONARRANIME_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/sonarr4-anime/key
-        metadataPolicy: None
-        property: key
-    - secretKey: HOMEPAGE_VAR_RADARR_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/radarr5/key
-        metadataPolicy: None
-        property: key
-    - secretKey: HOMEPAGE_VAR_RADARR4K_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/radarr5-4k/key
-        metadataPolicy: None
-        property: key
-    - secretKey: HOMEPAGE_VAR_RADARRANIME_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/radarr5-anime/key
-        metadataPolicy: None
-        property: key
-    - secretKey: HOMEPAGE_VAR_RADARRSTANDUP_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/radarr5-standup/key
-        metadataPolicy: None
-        property: key
-    - secretKey: HOMEPAGE_VAR_LIDARR_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/lidarr2/key
-        metadataPolicy: None
-        property: key
-    - secretKey: HOMEPAGE_VAR_PROWLARR_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/prowlarr/key
-        metadataPolicy: None
-        property: key

clusters/cl01tl/applications/homepage/templates/http-route.yaml

@@ -1,28 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
-metadata:
-  name: http-route-homepage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: http-route-homepage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  parentRefs:
-    - group: gateway.networking.k8s.io
-      kind: Gateway
-      name: traefik-gateway
-      namespace: traefik
-  hostnames:
-    - home.alexlebens.net
-  rules:
-    - matches:
-      - path:
-          type: PathPrefix
-          value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: homepage
-          port: 80
-          weight: 100

clusters/cl01tl/applications/homepage/templates/service.yaml

@@ -1,46 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: gitea-ps10rp
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: gitea-ps10rp
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-  annotations:
-    tailscale.com/tailnet-fqdn: gitea-ps10rp.boreal-beaufort.ts.net
-spec:
-  externalName: placeholder
-  type: ExternalName
-
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: home-ps10rp
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: home-ps10rp
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-  annotations:
-    tailscale.com/tailnet-fqdn: home-ps10rp.boreal-beaufort.ts.net
-spec:
-  externalName: placeholder
-  type: ExternalName
-
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: garage-ui-ps10rp
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: garage-ps10rp
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-  annotations:
-    tailscale.com/tailnet-fqdn: garage-ui-ps10rp.boreal-beaufort.ts.net
-spec:
-  externalName: placeholder
-  type: ExternalName

clusters/cl01tl/applications/homepage/values.yaml

@@ -1,795 +0,0 @@
-homepage:
-  global:
-    nameOverride: homepage
-  controllers:
-    main:
-      type: deployment
-      annotations:
-        reloader.stakater.com/auto: "true"
-      strategy: Recreate
-      serviceAccount:
-        name: homepage
-      pod:
-        automountServiceAccountToken: true
-      containers:
-        main:
-          image:
-            repository: ghcr.io/gethomepage/homepage
-            tag: v1.7.0
-            pullPolicy: IfNotPresent
-          env:
-            - name: HOMEPAGE_ALLOWED_HOSTS
-              value: home.alexlebens.net
-          envFrom:
-            - secretRef:
-                name: homepage-keys-secret
-          resources:
-            requests:
-              cpu: 10m
-              memory: 256Mi
-  serviceAccount:
-    homepage:
-      enabled: true
-      staticToken: true
-  configMaps:
-    config:
-      enabled: true
-      data:
-        docker.yaml: ""
-        kubernetes.yaml: |
-          mode: cluster
-        settings.yaml: |
-          favicon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.svg
-          headerStyle: clean
-          hideVersion: true
-          color: zinc
-          background:
-            image: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/background.jpg
-            brightness: 50
-          theme: dark
-          disableCollapse: true
-          layout:
-            - Media:
-                tab: Applications
-                icon: mdi-multimedia-#ffffff
-            - Public:
-                tab: Applications
-                icon: mdi-earth-#ffffff
-            - Internal:
-                tab: Applications
-                icon: mdi-security-network-#ffffff
-            - Code:
-                tab: Tools
-                icon: mdi-code-block-braces-#ffffff
-            - Automation:
-                tab: Tools
-                icon: mdi-wrench-#ffffff
-            - Monitoring:
-                tab: Tools
-                icon: mdi-chart-line-#ffffff
-            - Services:
-                tab: Services
-                icon: mdi-toolbox-outline-#ffffff
-            - Hardware:
-                tab: Services
-                icon: mdi-server-network-#ffffff
-            - Storage:
-                tab: Services
-                icon: mdi-database-#ffffff
-            - Content:
-                tab: Services
-                icon: mdi-multimedia-#ffffff
-            - TV Shows:
-                tab: Content
-                icon: mdi-television-#ffffff
-            - Movies:
-                tab: Content
-                icon: mdi-filmstrip-#ffffff
-            - Music:
-                tab: Content
-                icon: mdi-music-box-multiple-#ffffff
-            - Books:
-                tab: Content
-                icon: mdi-book-open-variant-#ffffff
-            - External Services:
-                tab: Bookmarks
-                icon: mdi-cloud-#ffffff
-            - Other Homes:
-                tab: Bookmarks
-                icon: mdi-cloud-#ffffff
-            - Trackers:
-                tab: Bookmarks
-                icon: mdi-cloud-#ffffff
-        widgets.yaml: |
-          - logo:
-              icon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.png
-          - kubernetes:
-              cluster:
-                show: true
-                cpu: true
-                memory: true
-                showLabel: false
-                label: "Cluster"
-              nodes:
-                show: false
-          - datetime:
-              text_size: xl
-              format:
-                dateStyle: long
-                timeStyle: short
-                hour12: false
-          - openmeteo:
-              label: St. Paul
-              latitude: 44.954445
-              longitude: -93.091301
-              timezone: America/Chicago
-              units: metric
-              cache: 5
-              format:
-                maximumFractionDigits: 0
-        services.yaml: |
-          - Media:
-              - Plex:
-                  icon: sh-plex.webp
-                  description: Media server
-                  href: https://plex.alexlebens.net
-                  siteMonitor: http://plex.plex:32400
-                  statusStyle: dot
-              - Jellyfin:
-                  icon: sh-jellyfin.webp
-                  description: Media server
-                  href: https://jellyfin.alexlebens.net
-                  siteMonitor: http://jellyfin.jellyfin:80
-                  statusStyle: dot
-              - Media Requests:
-                  icon: sh-overseerr.webp
-                  description: Overseer
-                  href: https://overseerr.alexlebens.net
-                  siteMonitor: http://overseerr.overseerr:80
-                  statusStyle: dot
-              - Media Tracking:
-                  icon: sh-yamtrack.webp
-                  description: Yamtrack
-                  href: https://yamtrack.alexlebens.net
-                  siteMonitor: http://yamtrack.yamtrack:80
-                  statusStyle: dot
-              - Youtube Archive:
-                  icon: sh-tube-archivist-light.webp
-                  description: TubeAchivist
-                  href: https://tubearchivist.alexlebens.net/login
-                  siteMonitor: http://tubearchivist.tubearchivist:80
-                  statusStyle: dot
-              - Photos:
-                  icon: sh-immich.webp
-                  description: Immich
-                  href: https://immich.alexlebens.net
-                  siteMonitor: http://immich-main.immich:2283
-                  statusStyle: dot
-              - Pictures:
-                  icon: sh-photoview.webp
-                  description: Photoview
-                  href: https://photoview.alexlebens.net
-                  siteMonitor: http://photoview.photoview:80
-                  statusStyle: dot
-              - Podcasts and Audiobooks:
-                  icon: sh-audiobookshelf.webp
-                  description: Audiobookshelf
-                  href: https://audiobookshelf.alexlebens.net
-                  siteMonitor: http://audiobookshelf.audiobookshelf:80
-                  statusStyle: dot
-              - Books:
-                  icon: sh-booklore.webp
-                  description: Booklore
-                  href: https://booklore.alexlebens.net
-                  siteMonitor: http://booklore.booklore:80
-                  statusStyle: dot
-          - Public:
-              - Site:
-                  icon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.png
-                  description: Profile Website
-                  href: https://www.alexlebens.dev
-                  siteMonitor: https://www.alexlebens.dev
-                  statusStyle: dot
-              - Content Management:
-                  icon: directus.png
-                  description: Directus
-                  href: https://directus.alexlebens.dev
-                  siteMonitor: https://directus.alexlebens.dev
-                  statusStyle: dot
-              - Social Media Management:
-                  icon: sh-postiz.webp
-                  description: Postiz
-                  href: https://postiz.alexlebens.dev
-                  siteMonitor: https://postiz.alexlebens.dev
-                  statusStyle: dot
-              - Chat:
-                  icon: sh-element.webp
-                  description: Matrix
-                  href: https://chat.alexlebens.dev
-                  siteMonitor: https://chat.alexlebens.dev
-                  statusStyle: dot
-              - Wiki:
-                  icon: sh-outline.webp
-                  description: Outline
-                  href: https://wiki.alexlebens.dev
-                  siteMonitor: https://wiki.alexlebens.dev
-                  statusStyle: dot
-              - Passwords:
-                  icon: sh-vaultwarden-light.webp
-                  description: Vaultwarden
-                  href: https://passwords.alexlebens.dev
-                  siteMonitor: https://passwords.alexlebens.dev
-                  statusStyle: dot
-              - Bookmarks:
-                  icon: sh-karakeep-light.webp
-                  description: Karakeep
-                  href: https://karakeep.alexlebens.dev
-                  siteMonitor: https://karakeep.alexlebens.dev
-                  statusStyle: dot
-              - RSS:
-                  icon: sh-freshrss.webp
-                  description: FreshRSS
-                  href: https://rss.alexlebens.dev
-                  siteMonitor: https://rss.alexlebens.dev
-                  statusStyle: dot
-          - Internal:
-              - Home Automation:
-                  icon: sh-home-assistant.webp
-                  description: Home Assistant
-                  href: https://home-assistant.alexlebens.net
-                  siteMonitor: http://home-assistant-main.home-assistant:80
-                  statusStyle: dot
-              - Budgeting:
-                  icon: sh-actual-budget.webp
-                  description: Actual
-                  href: https://actual.alexlebens.net
-                  siteMonitor: http://actual.actual:80
-                  statusStyle: dot
-              - AI:
-                  icon: sh-ollama.webp
-                  description: Ollama
-                  href: https://ollama.alexlebens.net
-                  siteMonitor: http://ollama-web.ollama:80
-                  statusStyle: dot
-              - AI Image:
-                  icon: https://user-images.githubusercontent.com/36368048/196280761-1535f413-a91e-4b6a-af6a-b890f8ae204c.png
-                  description: Stable Diffusion
-                  href: https://stable-diffusion-pd05wd.boreal-beaufort.ts.net
-                  siteMonitor: https://stable-diffusion-pd05wd.boreal-beaufort.ts.net
-                  statusStyle: dot
-              - Search:
-                  icon: sh-searxng.webp
-                  description: Searxng
-                  href: https://searxng.alexlebens.net/
-                  siteMonitor: http://searxng-browser.searxng:80
-                  statusStyle: dot
-              - Email:
-                  icon: sh-roundcube.webp
-                  description: Roundcube
-                  href: https://mail.alexlebens.net
-                  siteMonitor: http://roundcube.roundcube:80
-                  statusStyle: dot
-              - Wiki:
-                  icon: sh-kiwix-light.webp
-                  description: Kiwix
-                  href: https://kiwix.alexlebens.net
-                  siteMonitor: http://kiwix.kiwix:80
-                  statusStyle: dot
-          - Code:
-              - Code (Public):
-                  icon: sh-gitea.webp
-                  description: Gitea
-                  href: https://gitea.alexlebens.dev
-                  siteMonitor: https://gitea.alexlebens.dev
-                  statusStyle: dot
-              - Code (Local):
-                  icon: sh-gitea.webp
-                  description: Gitea
-                  href: https://gitea.alexlebens.net
-                  siteMonitor: https://gitea.alexlebens.net
-                  statusStyle: dot
-              - Code (ps10rp):
-                  icon: sh-gitea.webp
-                  description: Gitea
-                  href: https://gitea-ps10rp.boreal-beaufort.ts.net
-                  siteMonitor: https://gitea-ps10rp.boreal-beaufort.ts.net
-                  statusStyle: dot
-              - IDE (Public):
-                  icon: sh-visual-studio-code.webp
-                  description: VS Code
-                  href: https://codeserver.alexlebens.dev
-                  siteMonitor: https://codeserver.alexlebens.dev
-                  statusStyle: dot
-              - IDE (Home Assistant):
-                  icon: sh-visual-studio-code.webp
-                  description: Edit config for Home Assistant
-                  href: https://home-assistant-code-server.alexlebens.net
-                  siteMonitor: http://home-assistant-code-server.home-assistant:8443
-                  statusStyle: dot
-              - Continuous Deployment:
-                  icon: sh-argo-cd.webp
-                  description: ArgoCD
-                  href: https://argocd.alexlebens.net
-                  siteMonitor: http://argocd-server.argocd:80
-                  statusStyle: dot
-              - Docker Deployment:
-                  icon: sh-komodo-light.webp
-                  description: Komodo
-                  href: https://komodo.alexlebens.net
-                  siteMonitor: http://komodo-main.komodo:80
-                  statusStyle: dot
-          - Automation:
-              - Deployment Workflows:
-                  icon: sh-argo-cd.webp
-                  description: Argo Workflows
-                  href: https://argo-workflows.alexlebens.net
-                  siteMonitor: http://argo-workflows-server.argo-workflows:2746
-                  statusStyle: dot
-              - API Workflows:
-                  icon: sh-n8n.webp
-                  description: n8n
-                  href: https://n8n.alexlebens.net
-                  siteMonitor: http://n8n-main.n8n:80
-                  statusStyle: dot
-              - Jobs:
-                  icon: https://raw.githubusercontent.com/mshade/kronic/main/static/android-chrome-192x192.png
-                  description: Kronic
-                  href: https://kronic.alexlebens.net
-                  siteMonitor: http://kronic.kronic:80
-                  statusStyle: dot
-              - Uptime:
-                  icon: sh-gatus.webp
-                  description: Gatus
-                  href: https://gatus.alexlebens.net
-                  siteMonitor: http://gatus.gatus:80
-                  statusStyle: dot
-              - Tools:
-                  icon: sh-omnitools.webp
-                  description: OmniTools
-                  href: https://omni-tools.alexlebens.net
-                  siteMonitor: http://omni-tools.omni-tools:80
-                  statusStyle: dot
-          - Monitoring:
-              - Kubernetes:
-                  icon: sh-headlamp.webp
-                  description: Headlamp
-                  href: https://headlamp.alexlebens.net
-                  siteMonitor: http://headlamp.headlamp:80
-                  statusStyle: dot
-              - Network Monitoring:
-                  icon: sh-cilium.webp
-                  description: Hubble for Cilium
-                  href: https://hubble.alexlebens.net
-                  siteMonitor: http://hubble-ui.kube-system:80
-                  statusStyle: dot
-              - Dashboard:
-                  icon: sh-grafana.webp
-                  description: Grafana
-                  href: https://grafana.alexlebens.net
-                  siteMonitor: http://grafana-main-service.grafana-operator:3000/api/health
-                  statusStyle: dot
-              - Metrics:
-                  icon: sh-prometheus.webp
-                  description: Prometheus
-                  href: https://prometheus.alexlebens.net
-                  siteMonitor: http://kube-prometheus-stack-prometheus.kube-prometheus-stack:9090
-                  statusStyle: dot
-                  widget:
-                    type: prometheus
-                    url: http://kube-prometheus-stack-prometheus.kube-prometheus-stack:9090
-              - Alerting:
-                  icon: sh-prometheus-light.webp
-                  description: Alertmanager
-                  href: https://alertmanager.alexlebens.net
-                  siteMonitor: http://kube-prometheus-stack-alertmanager.kube-prometheus-stack:9093
-                  statusStyle: dot
-                  widget:
-                    type: prometheusmetric
-                    url: http://kube-prometheus-stack-prometheus.kube-prometheus-stack:9090
-                    refreshInterval: 120s
-                    metrics:
-                      - label: Alerts Active
-                        query: alertmanager_alerts{state="active"}
-                      - label: Metric Database Size
-                        query: prometheus_tsdb_storage_blocks_bytes
-                        format:
-                          type: bytes
-              - Tautulli:
-                  icon: sh-tautulli.webp
-                  description: Plex Monitoring
-                  href: https://tautulli.alexlebens.net
-                  siteMonitor: http://tautulli.tautulli:80
-                  statusStyle: dot
-              - Jellystat:
-                  icon: sh-jellystat.webp
-                  description: Jellyfin Monitoring
-                  href: https://jellystat.alexlebens.net
-                  siteMonitor: http://jellystat.jellystat:80
-                  statusStyle: dot
-          - Services:
-              - Auth (Public):
-                  icon: sh-authentik.webp
-                  description: Authentik
-                  href: https://auth.alexlebens.dev
-                  siteMonitor: https://auth.alexlebens.dev
-                  statusStyle: dot
-              - Auth (Local):
-                  icon: sh-authentik.webp
-                  description: Authentik
-                  href: https://authentik.alexlebens.net
-                  siteMonitor: http://authentik-server.authentik:80
-                  statusStyle: dot
-              - Email:
-                  icon: sh-stalwart.webp
-                  description: Stalwart
-                  href: https://stalwart.alexlebens.net
-                  siteMonitor: http://stalwart.stalwart:80
-                  statusStyle: dot
-              - Notifications:
-                  icon: sh-ntfy.webp
-                  description: ntfy
-                  href: https://ntfy.alexlebens.net
-                  siteMonitor: http://ntfy.ntfy:80
-                  statusStyle: dot
-              - Reverse Proxy:
-                  icon: sh-traefik.webp
-                  description: Traefik
-                  href: https://traefik-cl01tl.alexlebens.net/dashboard/#/
-                  siteMonitor: https://traefik-cl01tl.alexlebens.net/dashboard/#/
-                  statusStyle: dot
-                  widget:
-                    type: traefik
-                    url: https://traefik-cl01tl.alexlebens.net
-              - Image Cache:
-                  icon: sh-harbor.webp
-                  description: Harbor
-                  href: https://harbor.alexlebens.net
-                  siteMonitor: http://harbor-portal.harbor:80
-                  statusStyle: dot
-          - Hardware:
-              - Network Management (alexlebens.net):
-                  icon: sh-ubiquiti-unifi.webp
-                  description: Unifi
-                  href: https://unifi.alexlebens.net
-                  siteMonitor: https://unifi.alexlebens.net
-                  statusStyle: dot
-              - Network Attached Storage:
-                  icon: sh-synology-light.webp
-                  description: Synology
-                  href: https://synology.alexlebens.net
-                  siteMonitor: https://synology.alexlebens.net
-                  statusStyle: dot
-                  widget:
-                    type: diskstation
-                    url: https://synology.alexlebens.net
-                    username: {{ "{{HOMEPAGE_VAR_SYNOLOGY_USER}}" }}
-                    password: {{ "{{HOMEPAGE_VAR_SYNOLOGY_PASSWORD}}" }}
-                    volume: volume_2
-              - TV Tuner:
-                  icon: sh-hdhomerun.webp
-                  description: HD Homerun
-                  href: http://hdhr.alexlebens.net
-                  siteMonitor: http://hdhr.alexlebens.net
-                  statusStyle: dot
-                  widget:
-                    type: hdhomerun
-                    url: http://hdhr.alexlebens.net
-                    tuner: 0
-                    fields: ["channels", "hd"]
-              - KVM:
-                  icon: sh-pikvm-light.webp
-                  description: Pi KVM
-                  href: https://pikvm.alexlebens.net
-                  siteMonitor: https://pikvm.alexlebens.net
-                  statusStyle: dot
-              - Server Plug:
-                  icon: sh-shelly.webp
-                  description: Shelly
-                  href: http://it05sp.alexlebens.net
-                  siteMonitor: http://it05sp.alexlebens.net
-                  statusStyle: dot
-          - Storage:
-              - Cluster Storage:
-                  icon: sh-ceph.webp
-                  description: Ceph
-                  href: https://ceph.alexlebens.net
-                  siteMonitor: http://rook-ceph-mgr-dashboard.rook-ceph:7000
-                  statusStyle: dot
-              - Object Storage (NAS):
-                  icon: sh-garage.webp
-                  description: Garage
-                  href: https://garage-webui.alexlebens.net
-                  siteMonitor: http://garage-webui.garage:3909
-                  statusStyle: dot
-              - Object Storage (ps10rp):
-                  icon: sh-garage.webp
-                  description: Garage
-                  href: https://garage-ui-ps10rp.boreal-beaufort.ts.net
-                  siteMonitor: https://garage-ui-ps10rp.boreal-beaufort.ts.net
-                  statusStyle: dot
-              - Database:
-                  icon: sh-pgadmin-light.webp
-                  description: PGAdmin
-                  href: https://pgadmin.alexlebens.net
-                  siteMonitor: http://pgadmin.pgadmin:80
-                  statusStyle: dot
-              - Database:
-                  icon: sh-whodb.webp
-                  description: WhoDB
-                  href: https://whodb.alexlebens.net
-                  siteMonitor: http://whodb.whodb:80
-                  statusStyle: dot
-              - Secrets:
-                  icon: sh-hashicorp-vault.webp
-                  description: Vault
-                  href: https://vault.alexlebens.net
-                  siteMonitor: http://vault.vault:8200
-                  statusStyle: dot
-              - Backups:
-                  icon: sh-backrest-light.webp
-                  description: Backrest
-                  href: https://backrest.alexlebens.net
-                  siteMonitor: http://backrest.backrest:80
-                  statusStyle: dot
-          - Content:
-              - qUI:
-                  icon: https://raw.githubusercontent.com/autobrr/qui/8487c818886df9abb2b1456f43b54e0ba180a2bd/web/public/icons.svg
-                  description: qbitorrent
-                  href: https://qui.alexlebens.net
-                  siteMonitor: http://qbittorrent-qui.qbittorrent:80
-                  statusStyle: dot
-                  widget:
-                    type: qbittorrent
-                    url: http://qbittorrent.qbittorrent:8080
-                    enableLeechProgress: true
-              - Prowlarr:
-                  icon: sh-prowlarr.webp
-                  description: Indexers
-                  href: https://prowlarr.alexlebens.net
-                  siteMonitor: http://prowlarr.prowlarr:80
-                  statusStyle: dot
-              - Huntarr:
-                  icon: https://raw.githubusercontent.com/plexguide/Huntarr.io/main/frontend/static/logo/128.png
-                  description: Content upgrader
-                  href: https://huntarr.alexlebens.net
-                  siteMonitor: http://huntarr.huntarr:80
-                  statusStyle: dot
-              - Bazarr:
-                  icon: sh-bazarr.webp
-                  description: Subtitles
-                  href: https://bazarr.alexlebens.net
-                  siteMonitor: http://bazarr.bazarr:80
-                  statusStyle: dot
-              - Tdarr:
-                  icon: sh-tdarr.webp
-                  description: Media transcoding and health checks
-                  href: https://tdarr.alexlebens.net
-                  siteMonitor: http://tdarr-web.tdarr:8265
-                  statusStyle: dot
-                  widget:
-                    type: tdarr
-                    url: http://tdarr-web.tdarr:8265
-          - TV Shows:
-              - Sonarr:
-                  icon: sh-sonarr.webp
-                  description: TV Shows
-                  href: https://sonarr.alexlebens.net
-                  siteMonitor: http://sonarr.sonarr:80
-                  statusStyle: dot
-                  widget:
-                    type: sonarr
-                    url: http://sonarr.sonarr:80
-                    key: {{ "{{HOMEPAGE_VAR_SONARR_KEY}}" }}
-                    fields: ["wanted", "queued", "series"]
-                    enableQueue: false
-              - Sonarr 4K:
-                  icon: sh-sonarr.webp
-                  description: TV Shows 4K
-                  href: https://sonarr-4k.alexlebens.net
-                  siteMonitor: http://sonarr-4k.sonarr-4k:80
-                  statusStyle: dot
-                  widget:
-                    type: sonarr
-                    url: http://sonarr-4k.sonarr-4k:80
-                    key: {{ "{{HOMEPAGE_VAR_SONARR4K_KEY}}" }}
-                    fields: ["wanted", "queued", "series"]
-                    enableQueue: false
-              - Sonarr Anime:
-                  icon: sh-sonarr.webp
-                  description: Anime Shows
-                  href: https://sonarr-anime.alexlebens.net
-                  siteMonitor: http://sonarr-anime.sonarr-anime:80
-                  statusStyle: dot
-                  widget:
-                    type: sonarr
-                    url: http://sonarr-anime.sonarr-anime:80
-                    key: {{ "{{HOMEPAGE_VAR_SONARRANIME_KEY}}" }}
-                    fields: ["wanted", "queued", "series"]
-                    enableQueue: false
-          - Movies:
-              - Radarr:
-                  icon: sh-radarr.webp
-                  description: Movies
-                  href: https://radarr.alexlebens.net
-                  siteMonitor: http://radarr.radarr:80
-                  statusStyle: dot
-                  widget:
-                    type: radarr
-                    url: http://radarr.radarr:80
-                    key: {{ "{{HOMEPAGE_VAR_RADARR_KEY}}" }}
-                    fields: ["wanted", "queued", "movies"]
-                    enableQueue: false
-              - Radarr 4K:
-                  icon: sh-radarr-4k.webp
-                  description: Movies 4K
-                  href: https://radarr-4k.alexlebens.net
-                  siteMonitor: http://radarr-4k.radarr-4k:80
-                  statusStyle: dot
-                  widget:
-                    type: radarr
-                    url: http://radarr-4k.radarr-4k:80
-                    key: {{ "{{HOMEPAGE_VAR_RADARR4K_KEY}}" }}
-                    fields: ["wanted", "queued", "movies"]
-                    enableQueue: false
-              - Radarr Anime:
-                  icon: sh-radarr-anime.webp
-                  description: Anime Movies
-                  href: https://radarr-anime.alexlebens.net
-                  siteMonitor: http://radarr-anime.radarr-anime:80
-                  statusStyle: dot
-                  widget:
-                    type: radarr
-                    url: http://radarr-anime.radarr-anime:80
-                    key: {{ "{{HOMEPAGE_VAR_RADARRANIME_KEY}}" }}
-                    fields: ["wanted", "queued", "movies"]
-                    enableQueue: false
-              - Radarr Stand Up:
-                  icon: sh-radarr-light-hybrid.webp
-                  description: Stand Up
-                  href: https://radarr-standup.alexlebens.net
-                  siteMonitor: http://radarr-standup.radarr-standup:80
-                  statusStyle: dot
-                  widget:
-                    type: radarr
-                    url: http://radarr-standup.radarr-standup:80
-                    key: {{ "{{HOMEPAGE_VAR_RADARRSTANDUP_KEY}}" }}
-                    fields: ["wanted", "queued", "movies"]
-                    enableQueue: false
-          - Music:
-              - Lidarr:
-                  icon: sh-lidarr.webp
-                  description: Music
-                  href: https://lidarr.alexlebens.net
-                  siteMonitor: http://lidarr.lidarr:80
-                  statusStyle: dot
-                  widget:
-                    type: lidarr
-                    url: http://lidarr.lidarr:80
-                    key: {{ "{{HOMEPAGE_VAR_LIDARR_KEY}}" }}
-                    fields: ["wanted", "queued", "artists"]
-              - LidaTube:
-                  icon: sh-lidatube.webp
-                  description: Searches for Music
-                  href: https://lidatube.alexlebens.net
-                  siteMonitor: http://lidatube.lidatube:80
-                  statusStyle: dot
-              - Soulseek:
-                  icon: sh-slskd.webp
-                  description: slskd
-                  href: https://slskd.alexlebens.net
-                  siteMonitor: http://slskd.slskd:5030
-                  statusStyle: dot
-          - Books:
-              - Ephemera:
-                  icon: sh-ephemera.webp
-                  description: Books
-                  href: https://ephemera.alexlebens.net
-                  siteMonitor: http://ephemera.ephemera:80
-                  statusStyle: dot
-              - Listenarr:
-                  icon: sh-audiobookrequest.webp
-                  description: Audiobooks
-                  href: https://listenarr.alexlebens.net
-                  siteMonitor: http://listenarr.listenarr:80
-                  statusStyle: dot
-          - Other Homes:
-              - Dev:
-                  icon: sh-homepage.webp
-                  description: Public Homepage
-                  href: https://home.alexlebens.dev
-                  siteMonitor: https://home.alexlebens.dev
-                  statusStyle: dot
-              - Lebens Home:
-                  icon: sh-homepage.webp
-                  description: Lebens Homepage
-                  href: https://home-ps10rp.boreal-beaufort.ts.net
-                  siteMonitor: https://home-ps10rp.boreal-beaufort.ts.net
-                  statusStyle: dot
-        bookmarks.yaml: |
-          - External Services:
-              - Github:
-                  - abbr: GH
-                    href: https://github.com/alexlebens
-              - Digital Ocean:
-                  - abbr: DO
-                    href: https://www.digitalocean.com/
-              - AWS:
-                  - abbr: AW
-                    href: https://aws.amazon.com/console/
-              - Cloudflare:
-                  - abbr: CF
-                    href: https://dash.cloudflare.com/b76e303258b84076ee01fd0f515c0768
-              - Tailscale:
-                  - abbr: TS
-                    href: https://login.tailscale.com/admin/machines
-              - ProtonVPN:
-                  - abbr: PV
-                    href: https://account.protonvpn.com/
-              - Unifi:
-                  - abbr: UF
-                    href: https://unifi.ui.com/
-              - Pushover:
-                  - abbr: PO
-                    href: https://pushover.net
-              - ReCaptcha:
-                  - abbr: RC
-                    href: https://www.google.com/recaptcha/admin/site/698983587
-          - Trackers:
-              - Torrentleech:
-                  - abbr: TL
-                    href: https://www.torrentleech.org
-              - Avistaz:
-                  - abbr: AV
-                    href: https://avistaz.to
-              - Cinemaz:
-                  - abbr: CM
-                    href: https://cinemaz.to
-              - Cathode Ray Tube:
-                  - abbr: CRT
-                    href: https://www.cathode-ray.tube
-              - Alpha Ratio:
-                  - abbr: AL
-                    href: https://alpharatio.cc/
-              - MV Group:
-                  - abbr: MV
-                    href: https://forums.mvgroup.org
-  service:
-    http:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 3000
-          protocol: HTTP
-  persistence:
-    config:
-      enabled: true
-      type: configMap
-      name: homepage
-      advancedMounts:
-        main:
-          main:
-            - path: /app/config/bookmarks.yaml
-              readOnly: true
-              mountPropagation: None
-              subPath: bookmarks.yaml
-            - path: /app/config/docker.yaml
-              readOnly: true
-              mountPropagation: None
-              subPath: docker.yaml
-            - path: /app/config/kubernetes.yaml
-              readOnly: true
-              mountPropagation: None
-              subPath: kubernetes.yaml
-            - path: /app/config/services.yaml
-              readOnly: true
-              mountPropagation: None
-              subPath: services.yaml
-            - path: /app/config/settings.yaml
-              readOnly: true
-              mountPropagation: None
-              subPath: settings.yaml
-            - path: /app/config/widgets.yaml
-              readOnly: true
-              mountPropagation: None
-              subPath: widgets.yaml

clusters/cl01tl/applications/huntarr/Chart.yaml

@@ -1,21 +0,0 @@
-apiVersion: v2
-name: huntarr
-version: 1.0.0
-description: Huntarr
-keywords:
-  - huntarr
-  - servarr
-home: https://wiki.alexlebens.dev/s/831ca16e-d308-4d7b-9213-f841834c1181
-sources:
-  - https://github.com/plexguide/Huntarr.io
-  - https://hub.docker.com/r/huntarr/huntarr
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: huntarr
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/huntarr.png
-appVersion: 7.0.0

clusters/cl01tl/applications/huntarr/templates/http-route.yaml

@@ -1,28 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
-metadata:
-  name: http-route-huntarr
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: http-route-huntarr
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  parentRefs:
-    - group: gateway.networking.k8s.io
-      kind: Gateway
-      name: traefik-gateway
-      namespace: traefik
-  hostnames:
-    - huntarr.alexlebens.net
-  rules:
-    - matches:
-      - path:
-          type: PathPrefix
-          value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: huntarr
-          port: 80
-          weight: 100

clusters/cl01tl/applications/huntarr/values.yaml

@@ -1,39 +0,0 @@
-huntarr:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: ghcr.io/plexguide/huntarr
-            tag: 8.2.10
-            pullPolicy: IfNotPresent
-          env:
-            - name: TZ
-              value: US/Central
-          resources:
-            requests:
-              cpu: 100m
-              memory: 256Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 9705
-          protocol: HTTP
-  persistence:
-    config:
-      forceRename: huntarr-config
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 5Gi
-      advancedMounts:
-        main:
-          main:
-            - path: /config
-              readOnly: false

clusters/cl01tl/applications/jellystat/Chart.yaml

@@ -1,27 +0,0 @@
-apiVersion: v2
-name: jellystat
-version: 1.0.0
-description: Jellystat
-keywords:
-  - jellystat
-  - jellyfin
-home: https://wiki.alexlebens.dev/s/d3fd2bf1-d2ab-4e94-a127-ee35f2d90142
-sources:
-  - https://github.com/CyferShepard/Jellystat
-  - https://github.com/cloudnative-pg/cloudnative-pg
-  - https://hub.docker.com/r/cyfershepard/jellystat
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: jellystat
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
-  - name: postgres-cluster
-    alias: postgres-17-cluster
-    version: 6.16.0
-    repository: oci://harbor.alexlebens.net/helm-charts
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellystat.png
-appVersion: 1.1.6

clusters/cl01tl/applications/jellystat/templates/external-secret.yaml

@@ -1,159 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: jellystat-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: jellystat-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: secret-key
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/jellystat/auth
-        metadataPolicy: None
-        property: secret-key
-    - secretKey: user
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/jellystat/auth
-        metadataPolicy: None
-        property: user
-    - secretKey: password
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/jellystat/auth
-        metadataPolicy: None
-        property: password
-
----
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: jellystat-data-backup-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: jellystat-data-backup-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  target:
-    template:
-      mergePolicy: Merge
-      engineVersion: v2
-      data:
-        RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/jellystat/jellystat-data"
-  data:
-    - secretKey: BUCKET_ENDPOINT
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/volsync/restic/config
-        metadataPolicy: None
-        property: S3_BUCKET_ENDPOINT
-    - secretKey: RESTIC_PASSWORD
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/volsync/restic/config
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
-    - secretKey: AWS_DEFAULT_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/volsync/restic/config
-        metadataPolicy: None
-        property: AWS_DEFAULT_REGION
-    - secretKey: AWS_ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
-        property: access_key
-    - secretKey: AWS_SECRET_ACCESS_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
-        property: secret_key
-
----
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: jellystat-postgresql-17-cluster-backup-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: jellystat-postgresql-17-cluster-backup-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/postgres-backups
-        metadataPolicy: None
-        property: access
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/postgres-backups
-        metadataPolicy: None
-        property: secret
-
----
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: jellystat-postgresql-17-cluster-backup-secret-garage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: jellystat-postgresql-17-cluster-backup-secret-garage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
-        property: ACCESS_KEY_ID
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
-        property: ACCESS_SECRET_KEY
-    - secretKey: ACCESS_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
-        property: ACCESS_REGION

clusters/cl01tl/applications/jellystat/templates/http-route.yaml

@@ -1,28 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
-metadata:
-  name: http-route-jellystat
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: http-route-jellystat
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  parentRefs:
-    - group: gateway.networking.k8s.io
-      kind: Gateway
-      name: traefik-gateway
-      namespace: traefik
-  hostnames:
-    - jellystat.alexlebens.net
-  rules:
-    - matches:
-      - path:
-          type: PathPrefix
-          value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: jellystat
-          port: 80
-          weight: 100

clusters/cl01tl/applications/jellystat/templates/replication-source.yaml

@@ -1,25 +0,0 @@
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationSource
-metadata:
-  name: jellystat-data-backup-source
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: jellystat-data-backup-source
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  sourcePVC: jellystat-data
-  trigger:
-    schedule: 0 4 * * *
-  restic:
-    pruneIntervalDays: 7
-    repository: jellystat-data-backup-secret
-    retain:
-      hourly: 1
-      daily: 3
-      weekly: 2
-      monthly: 2
-      yearly: 4
-    copyMethod: Snapshot
-    storageClassName: ceph-block
-    volumeSnapshotClassName: ceph-blockpool-snapshot

clusters/cl01tl/applications/jellystat/values.yaml

@@ -1,136 +0,0 @@
-jellystat:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: cyfershepard/jellystat
-            tag: 1.1.6
-            pullPolicy: IfNotPresent
-          env:
-            - name: TZ
-              value: US/Central
-            - name: JWT_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: jellystat-secret
-                  key: secret-key
-            - name: JS_USER
-              valueFrom:
-                secretKeyRef:
-                  name: jellystat-secret
-                  key: user
-            - name: JS_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: jellystat-secret
-                  key: password
-            - name: POSTGRES_USER
-              valueFrom:
-                secretKeyRef:
-                  name: jellystat-postgresql-17-cluster-app
-                  key: username
-            - name: POSTGRES_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: jellystat-postgresql-17-cluster-app
-                  key: password
-            - name: POSTGRES_DB
-              valueFrom:
-                secretKeyRef:
-                  name: jellystat-postgresql-17-cluster-app
-                  key: dbname
-            - name: POSTGRES_IP
-              valueFrom:
-                secretKeyRef:
-                  name: jellystat-postgresql-17-cluster-app
-                  key: host
-            - name: POSTGRES_PORT
-              valueFrom:
-                secretKeyRef:
-                  name: jellystat-postgresql-17-cluster-app
-                  key: port
-          resources:
-            requests:
-              cpu: 10m
-              memory: 256Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 3000
-          protocol: HTTP
-  persistence:
-    data:
-      forceRename: jellystat-data
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 5Gi
-      retain: true
-      advancedMounts:
-        main:
-          main:
-            - path: /app/backend/backup-data
-              readOnly: false
-postgres-17-cluster:
-  mode: recovery
-  cluster:
-    storage:
-      storageClass: local-path
-    walStorage:
-      storageClass: local-path
-    monitoring:
-      enabled: true
-      prometheusRule:
-        enabled: true
-  recovery:
-    method: objectStore
-    objectStore:
-      destinationPath: s3://postgres-backups/cl01tl/jellystat/jellystat-postgresql-17-cluster
-      endpointURL: http://garage-main.garage:3900
-      index: 1
-      endpointCredentials: jellystat-postgresql-17-cluster-backup-secret-garage
-  backup:
-    objectStore:
-      - name: external
-        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/jellystat/jellystat-postgresql-17-cluster
-        index: 1
-        retentionPolicy: "30d"
-        isWALArchiver: false
-      - name: garage-local
-        destinationPath: s3://postgres-backups/cl01tl/jellystat/jellystat-postgresql-17-cluster
-        index: 1
-        endpointURL: http://garage-main.garage:3900
-        endpointCredentials: jellystat-postgresql-17-cluster-backup-secret-garage
-        endpointCredentialsIncludeRegion: true
-        retentionPolicy: "3d"
-        isWALArchiver: true
-      # - name: garage-remote
-      #   destinationPath: s3://postgres-backups/cl01tl/jellystat/jellystat-postgresql-17-cluster
-      #   index: 1
-      #   endpointURL: https://garage-ps10rp.boreal-beaufort.ts.net:3900
-      #   endpointCredentials: jellystat-postgresql-17-cluster-backup-secret-garage
-      #   retentionPolicy: "30d"
-      #   data:
-      #     compression: bzip2
-      #     jobs: 2
-    scheduledBackups:
-      - name: daily-backup
-        suspend: false
-        schedule: "0 0 0 * * *"
-        backupName: external
-      - name: live-backup
-        suspend: false
-        immediate: true
-        schedule: "0 0 0 * * *"
-        backupName: garage-local
-      # - name: weekly-backup
-      #   suspend: false
-      #   schedule: "0 6 4 * * SAT"
-      #   backupName: garage-remote

clusters/cl01tl/applications/kiwix/Chart.yaml

@@ -1,21 +0,0 @@
-apiVersion: v2
-name: kiwix
-version: 1.0.0
-description: Kiwix
-keywords:
-  - kiwix
-  - wikipedia
-home: https://wiki.alexlebens.dev/s/16eaaf92-3607-421f-bc66-cb3c39eeaea0
-sources:
-  - https://github.com/kiwix
-  - https://github.com/kiwix/kiwix-tools/pkgs/container/kiwix-serve
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: kiwix
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kiwix-dark.png
-appVersion: 3.7.0

clusters/cl01tl/applications/kiwix/templates/http-route.yaml

@@ -1,28 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
-metadata:
-  name: http-route-kiwix
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: http-route-kiwix
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  parentRefs:
-    - group: gateway.networking.k8s.io
-      kind: Gateway
-      name: traefik-gateway
-      namespace: traefik
-  hostnames:
-    - kiwix.alexlebens.net
-  rules:
-    - matches:
-      - path:
-          type: PathPrefix
-          value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: kiwix
-          port: 80
-          weight: 100

clusters/cl01tl/applications/kiwix/templates/persistent-volume-claim.yaml

@@ -1,17 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: kiwix-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kiwix-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: kiwix-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi

clusters/cl01tl/applications/kiwix/templates/persistent-volume.yaml

@@ -1,23 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: kiwix-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kiwix-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Kiwix
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac

clusters/cl01tl/applications/kiwix/values.yaml

@@ -1,38 +0,0 @@
-kiwix:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: ghcr.io/kiwix/kiwix-serve
-            tag: 3.8.0
-            pullPolicy: IfNotPresent
-          args:
-            - '*.zim'
-          env:
-            - name: PORT
-              value: 8080
-          resources:
-            requests:
-              cpu: 50m
-              memory: 512Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 8080
-          protocol: HTTP
-  persistence:
-    media:
-      existingClaim: kiwix-nfs-storage
-      advancedMounts:
-        main:
-          main:
-            - path: /data
-              readOnly: true

clusters/cl01tl/applications/libation/Chart.yaml

@@ -1,22 +0,0 @@
-apiVersion: v2
-name: libation
-version: 1.0.0
-description: Libation
-keywords:
-  - libation
-  - audiobooks
-  - audible
-home: https://wiki.alexlebens.dev/s/63beac50-a63f-45fe-b8e5-e1691dd5e9b0
-sources:
-  - https://github.com/rmcrackan/Libation
-  - https://hub.docker.com/r/rmcrackan/libation
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: libation
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/libation.png
-appVersion: 12.4.3

clusters/cl01tl/applications/libation/templates/persistent-volume-claim.yaml

@@ -1,36 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: libation-config
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: libation-config
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 1Gi
-  volumeMode: Filesystem
-
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: libation-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: libation-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: libation-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi

clusters/cl01tl/applications/libation/templates/persistent-volume.yaml

@@ -1,23 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: libation-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: libation-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Audiobooks/
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac

clusters/cl01tl/applications/libation/values.yaml

@@ -1,44 +0,0 @@
-libation:
-  controllers:
-    main:
-      type: cronjob
-      cronjob:
-        suspend: false
-        concurrencyPolicy: Forbid
-        timeZone: US/Central
-        schedule: "30 4 * * *"
-        startingDeadlineSeconds: 90
-        successfulJobsHistory: 3
-        failedJobsHistory: 3
-        backoffLimit: 3
-        parallelism: 1
-      containers:
-        main:
-          image:
-            repository: rmcrackan/libation
-            tag: 12.7.4
-            pullPolicy: IfNotPresent
-          env:
-            - name: SLEEP_TIME
-              value: "-1"
-            - name: LIBATION_BOOKS_DIR
-              value: /data
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-  persistence:
-    config:
-      existingClaim: libation-config
-      advancedMounts:
-        main:
-          main:
-            - path: /config
-              readOnly: false
-    data:
-      existingClaim: libation-nfs-storage
-      advancedMounts:
-        main:
-          main:
-            - path: /data
-              readOnly: false

clusters/cl01tl/applications/lidatube/Chart.yaml

@@ -1,22 +0,0 @@
-apiVersion: v2
-name: lidatube
-version: 1.0.0
-description: LidaTube
-keywords:
-  - lidatube
-  - music
-  - yt-dlp
-home: https://wiki.alexlebens.dev/s/10d95030-85be-4ced-a8d7-b4aaeca9bee6
-sources:
-  - https://github.com/TheWicklowWolf/LidaTube
-  - https://registry.hub.docker.com/r/thewicklowwolf/lidatube
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: lidatube
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/lidatube.png
-appVersion: 0.2.22

clusters/cl01tl/applications/lidatube/templates/external-secret.yaml

@@ -1,21 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: lidatube-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: lidatube-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: lidarr_api_key
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/lidarr2/key
-        metadataPolicy: None
-        property: key

clusters/cl01tl/applications/lidatube/templates/http-route.yaml

@@ -1,28 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
-metadata:
-  name: http-route-lidatube
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: http-route-lidatube
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  parentRefs:
-    - group: gateway.networking.k8s.io
-      kind: Gateway
-      name: traefik-gateway
-      namespace: traefik
-  hostnames:
-    - lidatube.alexlebens.net
-  rules:
-    - matches:
-      - path:
-          type: PathPrefix
-          value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: lidatube
-          port: 80
-          weight: 100

clusters/cl01tl/applications/lidatube/templates/persistent-volume-claim.yaml

@@ -1,17 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: lidatube-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: lidatube-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: lidatube-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi

clusters/cl01tl/applications/lidatube/templates/persistent-volume.yaml

@@ -1,23 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: lidatube-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: lidatube-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Music
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac

clusters/cl01tl/applications/lidatube/values.yaml

@@ -1,66 +0,0 @@
-lidatube:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      pod:
-        securityContext:
-          fsGroup: 1000
-          fsGroupChangePolicy: OnRootMismatch
-      containers:
-        main:
-          image:
-            repository: thewicklowwolf/lidatube
-            tag: 0.2.41
-            pullPolicy: IfNotPresent
-          env:
-            - name: PUID
-              value: 1000
-            - name: PGID
-              value: 1000
-            - name: lidarr_address
-              value: http://lidarr.lidarr:80
-            - name: lidarr_api_key
-              valueFrom:
-                secretKeyRef:
-                  name: lidatube-secret
-                  key: lidarr_api_key
-            - name: sleep_interval
-              value: 360
-            - name: sync_schedule
-              value: 4
-            - name: attempt_lidarr_import
-              value: true
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 5000
-          protocol: HTTP
-  persistence:
-    config:
-      forceRename: lidatube-config
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 5Gi
-      retain: true
-      advancedMounts:
-        main:
-          main:
-            - path: /lidatube/config
-              readOnly: false
-    music:
-      existingClaim: lidatube-nfs-storage
-      advancedMounts:
-        main:
-          main:
-            - path: /lidatube/downloads
-              readOnly: false

clusters/cl01tl/applications/listenarr/Chart.yaml

@@ -1,20 +0,0 @@
-apiVersion: v2
-name: listenarr
-version: 1.0.0
-description: Listenarr
-keywords:
-  - listenarr
-  - audiobooks
-home: https://wiki.alexlebens.dev/
-sources:
-  - https://github.com/therobbiedavis/Listenarr
-  - https://hub.docker.com/r/therobbiedavis/listenarr
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: listenarr
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
-appVersion: 0.2.35

clusters/cl01tl/applications/listenarr/templates/http-route.yaml

@@ -1,28 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
-metadata:
-  name: http-route-listenarr
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: http-route-listenarr
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  parentRefs:
-    - group: gateway.networking.k8s.io
-      kind: Gateway
-      name: traefik-gateway
-      namespace: traefik
-  hostnames:
-    - listenarr.alexlebens.net
-  rules:
-    - matches:
-      - path:
-          type: PathPrefix
-          value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: listenarr
-          port: 80
-          weight: 100

clusters/cl01tl/applications/listenarr/templates/persistent-volume-claim.yaml

@@ -1,17 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: listenarr-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: listenarr-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: listenarr-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi

clusters/cl01tl/applications/listenarr/templates/persistent-volume.yaml

@@ -1,23 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: listenarr-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: listenarr-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Audiobooks
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac

clusters/cl01tl/applications/listenarr/values.yaml

@@ -1,46 +0,0 @@
-listenarr:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: therobbiedavis/listenarr
-            tag: canary-0.2.35
-            pullPolicy: IfNotPresent
-          env:
-            - name: LISTENARR_PUBLIC_URL
-              value: https://listenarr.alexlebens.net
-          resources:
-            requests:
-              cpu: 50m
-              memory: 128Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 5000
-          protocol: HTTP
-  persistence:
-    config:
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 5Gi
-      retain: true
-      advancedMounts:
-        main:
-          main:
-            - path: /app/config
-              readOnly: false
-    media:
-      existingClaim: listenarr-nfs-storage
-      advancedMounts:
-        main:
-          main:
-            - path: /data
-              readOnly: false

clusters/cl01tl/applications/omni-tools/Chart.yaml

@@ -1,20 +0,0 @@
-apiVersion: v2
-name: omni-tools
-version: 1.0.0
-description: OmniTools
-keywords:
-  - omni-tools
-home: https://wiki.alexlebens.dev/s/8820cd36-dcf6-4ddf-8b2f-584271628a54
-sources:
-  - https://github.com/iib0011/omni-tools
-  - https://hub.docker.com/r/iib0011/omni-tools
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: omni-tools
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/omnitools.png
-appVersion: 0.4.0

clusters/cl01tl/applications/omni-tools/templates/http-route.yaml

@@ -1,28 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
-metadata:
-  name: http-route-omni-tools
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: http-route-omni-tools
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  parentRefs:
-    - group: gateway.networking.k8s.io
-      kind: Gateway
-      name: traefik-gateway
-      namespace: traefik
-  hostnames:
-    - omni-tools.alexlebens.net
-  rules:
-    - matches:
-      - path:
-          type: PathPrefix
-          value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: omni-tools
-          port: 80
-          weight: 100

clusters/cl01tl/applications/omni-tools/values.yaml

@@ -1,25 +0,0 @@
-omni-tools:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: iib0011/omni-tools
-            tag: 0.6.0
-            pullPolicy: IfNotPresent
-          resources:
-            requests:
-              cpu: 50m
-              memory: 512Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 80
-          protocol: HTTP

clusters/cl01tl/applications/outline/Chart.yaml

@@ -1,34 +0,0 @@
-apiVersion: v2
-name: outline
-version: 1.0.0
-description: Outline
-keywords:
-  - outline
-  - wiki
-  - documentation
-home: https://wiki.alexlebens.dev/s/c530c2b9-82b7-44df-b7ef-870c8b29242f
-sources:
-  - https://github.com/outline/outline
-  - https://github.com/cloudflare/cloudflared
-  - https://github.com/cloudnative-pg/cloudnative-pg
-  - https://hub.docker.com/r/outlinewiki/outline
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/cloudflared
-  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: outline
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
-  - name: cloudflared
-    alias: cloudflared-outline
-    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.23.0
-  - name: postgres-cluster
-    alias: postgres-17-cluster
-    version: 6.16.0
-    repository: oci://harbor.alexlebens.net/helm-charts
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/outline.png
-appVersion: 0.84.0

clusters/cl01tl/applications/outline/templates/external-secret.yaml

@@ -1,148 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: outline-key-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: outline-key-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: secret-key
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/outline/key
-        metadataPolicy: None
-        property: secret-key
-    - secretKey: utils-key
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/outline/key
-        metadataPolicy: None
-        property: utils-key
-
----
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: outline-oidc-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: outline-oidc-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: client
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /authentik/oidc/outline
-        metadataPolicy: None
-        property: client
-    - secretKey: secret
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /authentik/oidc/outline
-        metadataPolicy: None
-        property: secret
-
----
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: outline-cloudflared-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: outline-cloudflared-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: cf-tunnel-token
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cloudflare/tunnels/outline
-        metadataPolicy: None
-        property: token
-
----
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: outline-postgresql-17-cluster-backup-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: outline-postgresql-17-cluster-backup-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/postgres-backups
-        metadataPolicy: None
-        property: access
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/postgres-backups
-        metadataPolicy: None
-        property: secret
-
----
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: outline-postgresql-17-cluster-backup-secret-garage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: outline-postgresql-17-cluster-backup-secret-garage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
-        property: ACCESS_KEY_ID
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
-        property: ACCESS_SECRET_KEY
-    - secretKey: ACCESS_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
-        property: ACCESS_REGION

clusters/cl01tl/applications/outline/templates/object-bucket-claim.yaml

@@ -1,30 +0,0 @@
-apiVersion: objectbucket.io/v1alpha1
-kind: ObjectBucketClaim
-metadata:
-  name: ceph-bucket-outline
-  labels:
-    app.kubernetes.io/name: ceph-bucket-outline
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  generateBucketName: bucket-outline
-  storageClassName: ceph-bucket
-  additionalConfig:
-    bucketPolicy: |
-        {
-            "Version": "2012-10-17",
-            "Statement": [
-                {
-                    "Sid": "VisualEditor",
-                    "Effect": "Allow",
-                    "Action": [
-                        "s3:GetObjectAcl",
-                        "s3:DeleteObject",
-                        "s3:PutObject",
-                        "s3:GetObject",
-                        "s3:PutObjectAcl"
-                    ],
-                    "Resource": "arn:aws:s3:::bucket-outline-630c57e0-d475-4d78-926c-c1c082291d73/*"
-                }
-            ]
-        }

clusters/cl01tl/applications/outline/templates/redis-replication.yaml

@@ -1,32 +0,0 @@
-apiVersion: redis.redis.opstreelabs.in/v1beta2
-kind: RedisReplication
-metadata:
-  name: redis-replication-outline
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: redis-replication-outline
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  clusterSize: 3
-  podSecurityContext:
-    runAsUser: 1000
-    fsGroup: 1000
-  kubernetesConfig:
-    image: quay.io/opstree/redis:v8.0.3
-    imagePullPolicy: IfNotPresent
-    resources:
-      requests:
-        cpu: 50m
-        memory: 128Mi
-  storage:
-    volumeClaimTemplate:
-      spec:
-        storageClassName: ceph-block
-        accessModes: ["ReadWriteOnce"]
-        resources:
-          requests:
-            storage: 1Gi
-  redisExporter:
-    enabled: true
-    image: quay.io/opstree/redis-exporter:v1.48.0

clusters/cl01tl/applications/outline/templates/service-monitor.yaml

@@ -1,19 +0,0 @@
-apiVersion: monitoring.coreos.com/v1
-kind: ServiceMonitor
-metadata:
-  name: redis-replication-outline
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: redis-replication-outline
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-    redis-operator: "true"
-    env: production
-spec:
-  selector:
-    matchLabels:
-      redis_setup_type: replication
-  endpoints:
-    - port: redis-exporter
-      interval: 30s
-      scrapeTimeout: 10s

clusters/cl01tl/applications/outline/values.yaml

@@ -1,203 +0,0 @@
-outline:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: outlinewiki/outline
-            tag: 1.1.0
-            pullPolicy: IfNotPresent
-          env:
-            - name: NODE_ENV
-              value: production
-            - name: URL
-              value: https://wiki.alexlebens.dev
-            - name: PORT
-              value: 3000
-            - name: SECRET_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: outline-key-secret
-                  key: secret-key
-            - name: UTILS_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: outline-key-secret
-                  key: utils-key
-            - name: POSTGRES_USERNAME
-              valueFrom:
-                secretKeyRef:
-                  name: outline-postgresql-17-cluster-app
-                  key: username
-            - name: POSTGRES_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: outline-postgresql-17-cluster-app
-                  key: password
-            - name: POSTGRES_DATABASE_NAME
-              valueFrom:
-                secretKeyRef:
-                  name: outline-postgresql-17-cluster-app
-                  key: dbname
-            - name: POSTGRES_DATABASE_HOST
-              valueFrom:
-                secretKeyRef:
-                  name: outline-postgresql-17-cluster-app
-                  key: host
-            - name: POSTGRES_DATABASE_PORT
-              valueFrom:
-                secretKeyRef:
-                  name: outline-postgresql-17-cluster-app
-                  key: port
-            - name: DATABASE_URL
-              value: postgres://$(POSTGRES_USERNAME):$(POSTGRES_PASSWORD)@$(POSTGRES_DATABASE_HOST):$(POSTGRES_DATABASE_PORT)/$(POSTGRES_DATABASE_NAME)
-            - name: DATABASE_URL_TEST
-              value: postgres://$(POSTGRES_USERNAME):$(POSTGRES_PASSWORD)@$(POSTGRES_DATABASE_HOST):$(POSTGRES_DATABASE_PORT)/$(POSTGRES_DATABASE_NAME)-test
-            - name: DATABASE_CONNECTION_POOL_MIN
-              value: "2"
-            - name: DATABASE_CONNECTION_POOL_MAX
-              value: "20"
-            - name: PGSSLMODE
-              value: disable
-            - name: REDIS_URL
-              value: redis://redis-replication-outline-master.outline:6379
-            - name: FILE_STORAGE
-              value: s3
-            - name: AWS_ACCESS_KEY_ID
-              valueFrom:
-                secretKeyRef:
-                  name: ceph-bucket-outline
-                  key: AWS_ACCESS_KEY_ID
-            - name: AWS_SECRET_ACCESS_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: ceph-bucket-outline
-                  key: AWS_SECRET_ACCESS_KEY
-            - name: AWS_REGION
-              value: us-east-1
-            - name: AWS_S3_UPLOAD_BUCKET_NAME
-              valueFrom:
-                configMapKeyRef:
-                  name: ceph-bucket-outline
-                  key: BUCKET_NAME
-            - name: AWS_S3_UPLOAD_BUCKET_URL
-              value: https://objects.alexlebens.dev
-            - name: AWS_S3_FORCE_PATH_STYLE
-              value: true
-            - name: AWS_S3_ACL
-              value: private
-            - name: FILE_STORAGE_UPLOAD_MAX_SIZE
-              value: "26214400"
-            - name: FORCE_HTTPS
-              value: false
-            - name: ENABLE_UPDATES
-              value: false
-            - name: WEB_CONCURRENCY
-              value: 1
-            - name: FILE_STORAGE_IMPORT_MAX_SIZE
-              value: 5120000
-            - name: LOG_LEVEL
-              value: info
-            - name: DEFAULT_LANGUAGE
-              value: en_US
-            - name: RATE_LIMITER_ENABLED
-              value: false
-            - name: DEVELOPMENT_UNSAFE_INLINE_CSP
-              value: false
-            - name: OIDC_CLIENT_ID
-              valueFrom:
-                secretKeyRef:
-                  name: outline-oidc-secret
-                  key: client
-            - name: OIDC_CLIENT_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: outline-oidc-secret
-                  key: secret
-            - name: OIDC_AUTH_URI
-              value: https://auth.alexlebens.dev/application/o/authorize/
-            - name: OIDC_TOKEN_URI
-              value: https://auth.alexlebens.dev/application/o/token/
-            - name: OIDC_USERINFO_URI
-              value: https://auth.alexlebens.dev/application/o/userinfo/
-            - name: OIDC_USERNAME_CLAIM
-              value: email
-            - name: OIDC_DISPLAY_NAME
-              value: Authentik
-            - name: OIDC_SCOPES
-              value: openid profile email
-          resources:
-            requests:
-              cpu: 10m
-              memory: 512Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 3000
-          targetPort: 3000
-          protocol: HTTP
-cloudflared-outline:
-  existingSecretName: outline-cloudflared-secret
-  name: cloudflared-outline
-postgres-17-cluster:
-  mode: recovery
-  cluster:
-    storage:
-      storageClass: local-path
-    walStorage:
-      storageClass: local-path
-    monitoring:
-      enabled: true
-      prometheusRule:
-        enabled: true
-  recovery:
-    method: objectStore
-    objectStore:
-      destinationPath: s3://postgres-backups/cl01tl/outline/outline-postgresql-17-cluster
-      endpointURL: http://garage-main.garage:3900
-      index: 1
-      endpointCredentials: outline-postgresql-17-cluster-backup-secret-garage
-  backup:
-    objectStore:
-      - name: external
-        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/outline/outline-postgresql-17-cluster
-        index: 1
-        retentionPolicy: "30d"
-        isWALArchiver: false
-      - name: garage-local
-        destinationPath: s3://postgres-backups/cl01tl/outline/outline-postgresql-17-cluster
-        index: 1
-        endpointURL: http://garage-main.garage:3900
-        endpointCredentials: outline-postgresql-17-cluster-backup-secret-garage
-        endpointCredentialsIncludeRegion: true
-        retentionPolicy: "3d"
-        isWALArchiver: true
-      # - name: garage-remote
-      #   destinationPath: s3://postgres-backups/cl01tl/outline/outline-postgresql-17-cluster
-      #   index: 1
-      #   endpointURL: https://garage-ps10rp.boreal-beaufort.ts.net:3900
-      #   endpointCredentials: outline-postgresql-17-cluster-backup-secret-garage
-      #   retentionPolicy: "30d"
-      #   data:
-      #     compression: bzip2
-      #     jobs: 2
-    scheduledBackups:
-      - name: daily-backup
-        suspend: false
-        schedule: "0 0 0 * * *"
-        backupName: external
-      - name: live-backup
-        suspend: false
-        immediate: true
-        schedule: "0 0 0 * * *"
-        backupName: garage-local
-      # - name: weekly-backup
-      #   suspend: false
-      #   schedule: "0 10 4 * * SAT"
-      #   backupName: garage-remote

clusters/cl01tl/applications/overseerr/Chart.yaml

@@ -1,21 +0,0 @@
-apiVersion: v2
-name: overseerr
-version: 1.0.0
-description: Overseerr
-keywords:
-  - overseer
-  - media
-  - request
-home: https://wiki.alexlebens.dev/s/ba89ec92-a15c-48d5-9c33-a28a0134b0f9
-sources:
-  - https://github.com/sct/overseerr
-  - https://github.com/sct/overseerr/pkgs/container/overseerr
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/overseerr.png
-appVersion: 1.34.0

clusters/cl01tl/applications/overseerr/templates/external-secret.yaml

@@ -1,55 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: overseerr-main-backup-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: overseerr-main-backup-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  target:
-    template:
-      mergePolicy: Merge
-      engineVersion: v2
-      data:
-        RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/overseerr/overseerr-main"
-  data:
-    - secretKey: BUCKET_ENDPOINT
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/volsync/restic/config
-        metadataPolicy: None
-        property: S3_BUCKET_ENDPOINT
-    - secretKey: RESTIC_PASSWORD
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/volsync/restic/config
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
-    - secretKey: AWS_DEFAULT_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/volsync/restic/config
-        metadataPolicy: None
-        property: AWS_DEFAULT_REGION
-    - secretKey: AWS_ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
-        property: access_key
-    - secretKey: AWS_SECRET_ACCESS_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
-        property: secret_key

clusters/cl01tl/applications/overseerr/templates/http-route.yaml

@@ -1,28 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
-metadata:
-  name: http-route-overseerr
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: http-route-overseerr
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  parentRefs:
-    - group: gateway.networking.k8s.io
-      kind: Gateway
-      name: traefik-gateway
-      namespace: traefik
-  hostnames:
-    - overseerr.alexlebens.net
-  rules:
-    - matches:
-      - path:
-          type: PathPrefix
-          value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: overseerr
-          port: 80
-          weight: 100

clusters/cl01tl/applications/overseerr/templates/replication-source.yaml

@@ -1,25 +0,0 @@
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationSource
-metadata:
-  name: overseerr-main-backup-source
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: overseerr-main-backup-source
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  sourcePVC: overseerr-main
-  trigger:
-    schedule: 0 4 * * *
-  restic:
-    pruneIntervalDays: 7
-    repository: overseerr-main-backup-secret
-    retain:
-      hourly: 1
-      daily: 3
-      weekly: 2
-      monthly: 2
-      yearly: 4
-    copyMethod: Snapshot
-    storageClassName: ceph-block
-    volumeSnapshotClassName: ceph-blockpool-snapshot

clusters/cl01tl/applications/overseerr/values.yaml

@@ -1,40 +0,0 @@
-app-template:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: ghcr.io/sct/overseerr
-            tag: 1.34.0
-            pullPolicy: IfNotPresent
-          env:
-            - name: TZ
-              value: US/Central
-          resources:
-            requests:
-              cpu: 10m
-              memory: 512Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 5055
-          protocol: HTTP
-  persistence:
-    main:
-      forceRename: overseerr-main
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 10Gi
-      retain: true
-      advancedMounts:
-        main:
-          main:
-            - path: /app/config
-              readOnly: false

clusters/cl01tl/applications/photoview/Chart.yaml

@@ -1,26 +0,0 @@
-apiVersion: v2
-name: photoview
-version: 1.0.0
-description: Photoview
-keywords:
-  - photoview
-  - pictures
-home: https://wiki.alexlebens.dev/s/f519a435-8388-4503-a9f9-401bdb424151
-sources:
-  - https://github.com/photoview/photoview
-  - https://github.com/cloudnative-pg/cloudnative-pg
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: photoview
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
-  - name: postgres-cluster
-    alias: postgres-17-cluster
-    version: 6.16.0
-    repository: oci://harbor.alexlebens.net/helm-charts
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/photoview.png
-appVersion: 2.4.0

clusters/cl01tl/applications/photoview/templates/external-secrets.yaml

@@ -1,65 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: photoview-postgresql-17-cluster-backup-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: photoview-postgresql-17-cluster-backup-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/postgres-backups
-        metadataPolicy: None
-        property: access
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/postgres-backups
-        metadataPolicy: None
-        property: secret
-
----
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: photoview-postgresql-17-cluster-backup-secret-garage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: photoview-postgresql-17-cluster-backup-secret-garage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
-        property: ACCESS_KEY_ID
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
-        property: ACCESS_SECRET_KEY
-    - secretKey: ACCESS_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
-        property: ACCESS_REGION

clusters/cl01tl/applications/photoview/templates/http-route.yaml

@@ -1,28 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
-metadata:
-  name: http-route-photoview
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: http-route-photoview
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  parentRefs:
-    - group: gateway.networking.k8s.io
-      kind: Gateway
-      name: traefik-gateway
-      namespace: traefik
-  hostnames:
-    - photoview.alexlebens.net
-  rules:
-    - matches:
-      - path:
-          type: PathPrefix
-          value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: photoview
-          port: 80
-          weight: 100

clusters/cl01tl/applications/photoview/templates/persistent-volume-claim.yaml

@@ -1,17 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: photoview-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: photoview-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: photoview-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi

clusters/cl01tl/applications/photoview/templates/persistent-volume.yaml

@@ -1,23 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: photoview-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: photoview-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Pictures
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac

clusters/cl01tl/applications/photoview/values.yaml

@@ -1,130 +0,0 @@
-photoview:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      initContainers:
-        init-chmod-data:
-          securityContext:
-            runAsUser: 0
-          image:
-            repository: busybox
-            tag: 1.37.0
-            pullPolicy: IfNotPresent
-          command:
-            - /bin/sh
-            - -ec
-            - |
-              /bin/chown -R 999:999 /app/cache
-          resources:
-            requests:
-              cpu: 100m
-              memory: 128Mi
-      containers:
-        main:
-          image:
-            repository: photoview/photoview
-            tag: 2.4.0
-            pullPolicy: IfNotPresent
-          env:
-            - name: PHOTOVIEW_DATABASE_DRIVER
-              value: postgres
-            - name: PHOTOVIEW_POSTGRES_URL
-              valueFrom:
-                secretKeyRef:
-                  name: photoview-postgresql-17-cluster-app
-                  key: uri
-            - name: PHOTOVIEW_MEDIA_CACHE
-              value: /app/cache
-          resources:
-            requests:
-              cpu: 10m
-              memory: 512Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 80
-          protocol: HTTP
-  persistence:
-    cache:
-      forceRename: photoview-cache
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 10Gi
-      retain: false
-      advancedMounts:
-        main:
-          init-chmod-data:
-            - path: /app/cache
-              readOnly: false
-          main:
-            - path: /app/cache
-              readOnly: false
-    media:
-      existingClaim: photoview-nfs-storage
-      advancedMounts:
-        main:
-          main:
-            - path: /photos
-              readOnly: true
-postgres-17-cluster:
-  mode: recovery
-  cluster:
-    storage:
-      storageClass: local-path
-    walStorage:
-      storageClass: local-path
-    monitoring:
-      enabled: true
-      prometheusRule:
-        enabled: true
-  recovery:
-    method: objectStore
-    objectStore:
-      destinationPath: s3://postgres-backups/cl01tl/photoview/photoview-postgresql-17-cluster
-      endpointURL: http://garage-main.garage:3900
-      index: 1
-      endpointCredentials: photoview-postgresql-17-cluster-backup-secret-garage
-  backup:
-    objectStore:
-      - name: external
-        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/photoview/photoview-postgresql-17-cluster
-        index: 1
-        retentionPolicy: "30d"
-        isWALArchiver: false
-      - name: garage-local
-        destinationPath: s3://postgres-backups/cl01tl/photoview/photoview-postgresql-17-cluster
-        index: 1
-        endpointURL: http://garage-main.garage:3900
-        endpointCredentials: photoview-postgresql-17-cluster-backup-secret-garage
-        endpointCredentialsIncludeRegion: true
-        retentionPolicy: "3d"
-        isWALArchiver: true
-      # - name: garage-remote
-      #   destinationPath: s3://postgres-backups/cl01tl/photoview/photoview-postgresql-17-cluster
-      #   index: 1
-      #   endpointURL: https://garage-ps10rp.boreal-beaufort.ts.net:3900
-      #   endpointCredentials: photoview-postgresql-17-cluster-backup-secret-garage
-      #   retentionPolicy: "30d"
-      #   data:
-      #     compression: bzip2
-      #     jobs: 2
-    scheduledBackups:
-      - name: daily-backup
-        suspend: false
-        schedule: "0 0 0 * * *"
-        backupName: external
-      - name: live-backup
-        suspend: false
-        immediate: true
-        schedule: "0 0 0 * * *"
-        backupName: garage-local
-      # - name: weekly-backup
-      #   suspend: false
-      #   schedule: "0 12 4 * * SAT"
-      #   backupName: garage-remote

clusters/cl01tl/applications/plex/Chart.yaml

@@ -1,26 +0,0 @@
-apiVersion: v2
-name: plex
-version: 1.0.0
-description: Plex
-keywords:
-  - plex
-  - tv shows
-  - movies
-  - music
-  - photos
-  - live tv
-home: https://wiki.alexlebens.dev/s/e2833eed-f991-4b00-9fa0-5d7f403a8183
-sources:
-  - https://www.plex.tv/
-  - https://github.com/linuxserver/docker-plex
-  - https://github.com/linuxserver/docker-plex/pkgs/container/plex
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: plex
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/plex.png
-appVersion: 1.41.6

clusters/cl01tl/applications/plex/templates/http-route.yaml

@@ -1,28 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
-metadata:
-  name: http-route-plex
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: http-route-plex
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  parentRefs:
-    - group: gateway.networking.k8s.io
-      kind: Gateway
-      name: traefik-gateway
-      namespace: traefik
-  hostnames:
-    - plex.alexlebens.net
-  rules:
-    - matches:
-      - path:
-          type: PathPrefix
-          value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: plex
-          port: 32400
-          weight: 100

clusters/cl01tl/applications/plex/templates/persistent-volume-claim.yaml

@@ -1,17 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: plex-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: plex-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: plex-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi

clusters/cl01tl/applications/plex/templates/persistent-volume.yaml

@@ -1,23 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: plex-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: plex-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac