alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 2 Actions Activity

Automated Manifest Update #4914

Merged
alexlebens merged 1 commits from auto/update-manifests into manifests 2026-03-20 04:11:48 +00:00
Conversation 0 Commits 1 Files Changed 9 +100 -118
9 changed files with 100 additions and 118 deletions
Download Patch File Download Diff File Expand all files Collapse all files

63
clusters/cl01tl/manifests/music-grabber/Deployment-music-grabber.yaml
View File

@@ -34,69 +34,6 @@ spec:
hostPID: false hostPID: false
dnsPolicy: ClusterFirst dnsPolicy: ClusterFirst
containers: containers:
- env:
- name: VPN_SERVICE_PROVIDER
value: protonvpn
- name: VPN_TYPE
value: wireguard
- name: WIREGUARD_PRIVATE_KEY
valueFrom:
secretKeyRef:
key: private-key
name: music-grabber-wireguard-conf
- name: UPDATER_PROTONVPN_EMAIL
valueFrom:
secretKeyRef:
key: proton-email
name: music-grabber-wireguard-conf
- name: UPDATER_PROTONVPN_PASSWORD
valueFrom:
secretKeyRef:
key: proton-password
name: music-grabber-wireguard-conf
- name: FIREWALL_OUTBOUND_SUBNETS
value: 10.0.0.0/8
- name: FIREWALL_INPUT_PORTS
value: "8080"
- name: DNS_UPSTREAM_RESOLVER_TYPE
value: dot
- name: HTTPPROXY
value: "off"
- name: SHADOWSOCKS
value: "off"
image: ghcr.io/qdm12/gluetun:v3.41.1@sha256:1a5bf4b4820a879cdf8d93d7ef0d2d963af56670c9ebff8981860b6804ebc8ab
imagePullPolicy: IfNotPresent
lifecycle:
postStart:
exec:
command:
- /bin/sh
- -c
- (ip rule del table 51820; ip -6 rule del table 51820) || true
livenessProbe:
exec:
command:
- /gluetun-entrypoint
- healthcheck
failureThreshold: 5
initialDelaySeconds: 30
periodSeconds: 30
successThreshold: 1
timeoutSeconds: 15
name: gluetun
resources:
limits:
devic.es/tun: "1"
requests:
cpu: 10m
devic.es/tun: "1"
memory: 128Mi
securityContext:
capabilities:
add:
- NET_ADMIN
- SYS_MODULE
privileged: true
- env: - env:
- name: MUSIC_DIR - name: MUSIC_DIR
value: /mnt/store/Music Grabber/ value: /mnt/store/Music Grabber/

21
clusters/cl01tl/manifests/music-grabber/ExternalSecret-music-grabber-wireguard-conf.yaml
View File

@@ -16,20 +16,27 @@ spec:
remoteRef: remoteRef:
conversionStrategy: Default conversionStrategy: Default
decodingStrategy: None decodingStrategy: None
key: /protonvpn/conf/cl01tl key: /airvpn/conf/cl01tl
metadataPolicy: None metadataPolicy: None
property: private-key property: private-key
- secretKey: proton-email - secretKey: preshared-key
remoteRef: remoteRef:
conversionStrategy: Default conversionStrategy: Default
decodingStrategy: None decodingStrategy: None
key: /protonvpn/conf/cl01tl key: /airvpn/conf/cl01tl
metadataPolicy: None metadataPolicy: None
property: email property: preshared-key
- secretKey: proton-password - secretKey: addresses
remoteRef: remoteRef:
conversionStrategy: Default conversionStrategy: Default
decodingStrategy: None decodingStrategy: None
key: /protonvpn/conf/cl01tl key: /airvpn/conf/cl01tl
metadataPolicy: None metadataPolicy: None
property: password property: addresses
- secretKey: input-ports
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /airvpn/conf/cl01tl
metadataPolicy: None
property: input-ports

17
clusters/cl01tl/manifests/qbittorrent/Deployment-qbittorrent-main.yaml
View File

@@ -69,7 +69,7 @@ spec:
memory: 64Mi memory: 64Mi
- env: - env:
- name: VPN_SERVICE_PROVIDER - name: VPN_SERVICE_PROVIDER
value: protonvpn value: airvpn
- name: VPN_TYPE - name: VPN_TYPE
value: wireguard value: wireguard
- name: WIREGUARD_PRIVATE_KEY - name: WIREGUARD_PRIVATE_KEY
@@ -77,20 +77,23 @@ spec:
secretKeyRef: secretKeyRef:
key: private-key key: private-key
name: qbittorrent-wireguard-conf name: qbittorrent-wireguard-conf
- name: UPDATER_PROTONVPN_EMAIL - name: WIREGUARD_PRESHARED_KEY
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
key: proton-email key: preshared-key
name: qbittorrent-wireguard-conf name: qbittorrent-wireguard-conf
- name: UPDATER_PROTONVPN_PASSWORD - name: WIREGUARD_ADDRESSES
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
key: proton-password key: addresses
name: qbittorrent-wireguard-conf name: qbittorrent-wireguard-conf
- name: VPN_PORT_FORWARDING - name: VPN_PORT_FORWARDING
value: "on" value: "on"
- name: VPN_PORT_FORWARDING_UP_COMMAND - name: FIREWALL_VPN_INPUT_PORTS
value: /bin/sh -c "/gluetun/update.sh {{PORTS}}" valueFrom:
secretKeyRef:
key: input-ports
name: qbittorrent-wireguard-conf
- name: PORT_FORWARD_ONLY - name: PORT_FORWARD_ONLY
value: "on" value: "on"
- name: FIREWALL_OUTBOUND_SUBNETS - name: FIREWALL_OUTBOUND_SUBNETS

21
clusters/cl01tl/manifests/qbittorrent/ExternalSecret-qbittorrent-wireguard-conf.yaml
View File

@@ -16,20 +16,27 @@ spec:
remoteRef: remoteRef:
conversionStrategy: Default conversionStrategy: Default
decodingStrategy: None decodingStrategy: None
key: /protonvpn/conf/cl01tl key: /airvpn/conf/cl01tl
metadataPolicy: None metadataPolicy: None
property: private-key property: private-key
- secretKey: proton-email - secretKey: preshared-key
remoteRef: remoteRef:
conversionStrategy: Default conversionStrategy: Default
decodingStrategy: None decodingStrategy: None
key: /protonvpn/conf/cl01tl key: /airvpn/conf/cl01tl
metadataPolicy: None metadataPolicy: None
property: email property: preshared-key
- secretKey: proton-password - secretKey: addresses
remoteRef: remoteRef:
conversionStrategy: Default conversionStrategy: Default
decodingStrategy: None decodingStrategy: None
key: /protonvpn/conf/cl01tl key: /airvpn/conf/cl01tl
metadataPolicy: None metadataPolicy: None
property: password property: addresses
- secretKey: input-ports
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /airvpn/conf/cl01tl
metadataPolicy: None
property: input-ports

23
clusters/cl01tl/manifests/slskd/Deployment-slskd-main.yaml
View File

@@ -53,30 +53,37 @@ spec:
containers: containers:
- env: - env:
- name: VPN_SERVICE_PROVIDER - name: VPN_SERVICE_PROVIDER
value: protonvpn value: airvpn
- name: VPN_TYPE - name: VPN_TYPE
value: wireguard value: wireguard
- name: WIREGUARD_PRIVATE_KEY - name: WIREGUARD_PRIVATE_KEY
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
key: private-key key: private-key
name: slskd-wireguard-conf name: qbittorrent-wireguard-conf
- name: UPDATER_PROTONVPN_EMAIL - name: WIREGUARD_PRESHARED_KEY
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
key: proton-email key: preshared-key
name: slskd-wireguard-conf name: qbittorrent-wireguard-conf
- name: UPDATER_PROTONVPN_PASSWORD - name: WIREGUARD_ADDRESSES
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
key: proton-password key: addresses
name: slskd-wireguard-conf name: qbittorrent-wireguard-conf
- name: VPN_PORT_FORWARDING - name: VPN_PORT_FORWARDING
value: "on" value: "on"
- name: FIREWALL_VPN_INPUT_PORTS
valueFrom:
secretKeyRef:
key: input-ports
name: qbittorrent-wireguard-conf
- name: PORT_FORWARD_ONLY - name: PORT_FORWARD_ONLY
value: "on" value: "on"
- name: FIREWALL_OUTBOUND_SUBNETS - name: FIREWALL_OUTBOUND_SUBNETS
value: 192.168.1.0/24,10.244.0.0/16 value: 192.168.1.0/24,10.244.0.0/16
- name: FIREWALL_OUTBOUND_SUBNETS
value: 192.168.1.0/24,10.244.0.0/16
- name: FIREWALL_INPUT_PORTS - name: FIREWALL_INPUT_PORTS
value: 5030,50300 value: 5030,50300
- name: DNS_UPSTREAM_RESOLVER_TYPE - name: DNS_UPSTREAM_RESOLVER_TYPE

21
clusters/cl01tl/manifests/slskd/ExternalSecret-slskd-wireguard-conf.yaml
View File

@@ -16,20 +16,27 @@ spec:
remoteRef: remoteRef:
conversionStrategy: Default conversionStrategy: Default
decodingStrategy: None decodingStrategy: None
key: /protonvpn/conf/cl01tl key: /airvpn/conf/cl01tl
metadataPolicy: None metadataPolicy: None
property: private-key property: private-key
- secretKey: proton-email - secretKey: preshared-key
remoteRef: remoteRef:
conversionStrategy: Default conversionStrategy: Default
decodingStrategy: None decodingStrategy: None
key: /protonvpn/conf/cl01tl key: /airvpn/conf/cl01tl
metadataPolicy: None metadataPolicy: None
property: email property: preshared-key
- secretKey: proton-password - secretKey: addresses
remoteRef: remoteRef:
conversionStrategy: Default conversionStrategy: Default
decodingStrategy: None decodingStrategy: None
key: /protonvpn/conf/cl01tl key: /airvpn/conf/cl01tl
metadataPolicy: None metadataPolicy: None
property: password property: addresses
- secretKey: input-ports
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /airvpn/conf/cl01tl
metadataPolicy: None
property: input-ports

10
clusters/cl01tl/manifests/tubearchivist/Deployment-tubearchivist.yaml
View File

@@ -39,7 +39,7 @@ spec:
name: bgutil name: bgutil
- env: - env:
- name: VPN_SERVICE_PROVIDER - name: VPN_SERVICE_PROVIDER
value: protonvpn value: airvpn
- name: VPN_TYPE - name: VPN_TYPE
value: wireguard value: wireguard
- name: WIREGUARD_PRIVATE_KEY - name: WIREGUARD_PRIVATE_KEY
@@ -47,15 +47,15 @@ spec:
secretKeyRef: secretKeyRef:
key: private-key key: private-key
name: tubearchivist-wireguard-conf name: tubearchivist-wireguard-conf
- name: UPDATER_PROTONVPN_EMAIL - name: WIREGUARD_PRESHARED_KEY
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
key: proton-email key: preshared-key
name: tubearchivist-wireguard-conf name: tubearchivist-wireguard-conf
- name: UPDATER_PROTONVPN_PASSWORD - name: WIREGUARD_ADDRESSES
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
key: proton-password key: addresses
name: tubearchivist-wireguard-conf name: tubearchivist-wireguard-conf
- name: FIREWALL_OUTBOUND_SUBNETS - name: FIREWALL_OUTBOUND_SUBNETS
value: 10.0.0.0/8 value: 10.0.0.0/8

21
clusters/cl01tl/manifests/tubearchivist/ExternalSecret-tubearchivist-wireguard-conf.yaml
View File

@@ -16,20 +16,27 @@ spec:
remoteRef: remoteRef:
conversionStrategy: Default conversionStrategy: Default
decodingStrategy: None decodingStrategy: None
key: /protonvpn/conf/cl01tl key: /airvpn/conf/cl01tl
metadataPolicy: None metadataPolicy: None
property: private-key property: private-key
- secretKey: proton-email - secretKey: preshared-key
remoteRef: remoteRef:
conversionStrategy: Default conversionStrategy: Default
decodingStrategy: None decodingStrategy: None
key: /protonvpn/conf/cl01tl key: /airvpn/conf/cl01tl
metadataPolicy: None metadataPolicy: None
property: email property: preshared-key
- secretKey: proton-password - secretKey: addresses
remoteRef: remoteRef:
conversionStrategy: Default conversionStrategy: Default
decodingStrategy: None decodingStrategy: None
key: /protonvpn/conf/cl01tl key: /airvpn/conf/cl01tl
metadataPolicy: None metadataPolicy: None
property: password property: addresses
- secretKey: input-ports
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /airvpn/conf/cl01tl
metadataPolicy: None
property: input-ports

21
clusters/cl01tl/manifests/yubal/ExternalSecret-yubal-wireguard-conf.yaml
View File

@@ -16,20 +16,27 @@ spec:
remoteRef: remoteRef:
conversionStrategy: Default conversionStrategy: Default
decodingStrategy: None decodingStrategy: None
key: /protonvpn/conf/cl01tl key: /airvpn/conf/cl01tl
metadataPolicy: None metadataPolicy: None
property: private-key property: private-key
- secretKey: proton-email - secretKey: preshared-key
remoteRef: remoteRef:
conversionStrategy: Default conversionStrategy: Default
decodingStrategy: None decodingStrategy: None
key: /protonvpn/conf/cl01tl key: /airvpn/conf/cl01tl
metadataPolicy: None metadataPolicy: None
property: email property: preshared-key
- secretKey: proton-password - secretKey: addresses
remoteRef: remoteRef:
conversionStrategy: Default conversionStrategy: Default
decodingStrategy: None decodingStrategy: None
key: /protonvpn/conf/cl01tl key: /airvpn/conf/cl01tl
metadataPolicy: None metadataPolicy: None
property: password property: addresses
- secretKey: input-ports
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /airvpn/conf/cl01tl
metadataPolicy: None
property: input-ports