alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 2 Actions Activity

Automated Manifest Update #4939

Merged
alexlebens merged 1 commits from auto/update-manifests into manifests 2026-03-20 22:56:03 +00:00
Conversation 0 Commits 1 Files Changed 16 +408 -3
16 changed files with 408 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
clusters/cl01tl/manifests/blocky/ConfigMap-blocky.yaml
View File

@@ -120,6 +120,7 @@ data:
jellystat IN CNAME traefik-cl01tl jellystat IN CNAME traefik-cl01tl
kiwix IN CNAME traefik-cl01tl kiwix IN CNAME traefik-cl01tl
komodo IN CNAME traefik-cl01tl komodo IN CNAME traefik-cl01tl
languagetool IN CNAME traefik-cl01tl
lidarr IN CNAME traefik-cl01tl lidarr IN CNAME traefik-cl01tl
mail IN CNAME traefik-cl01tl mail IN CNAME traefik-cl01tl
medialyze IN CNAME traefik-cl01tl medialyze IN CNAME traefik-cl01tl

2
clusters/cl01tl/manifests/blocky/Deployment-blocky.yaml
View File

@@ -22,7 +22,7 @@ spec:
template: template:
metadata: metadata:
annotations: annotations:
checksum/configMaps: 0c275932feefc274b62a19c99977fbdba22231191e4c87b818c21099198bb465 checksum/configMaps: 2f8dc0eeaa9f5418260be77e87da1084297c5a7bb36c18028b85e5a76fc3b993
labels: labels:
app.kubernetes.io/controller: main app.kubernetes.io/controller: main
app.kubernetes.io/instance: blocky app.kubernetes.io/instance: blocky

9
clusters/cl01tl/manifests/gatus/ConfigMap-gatus.yaml
View File

@@ -222,6 +222,15 @@ data:
interval: 30s interval: 30s
name: excalidraw name: excalidraw
url: https://excalidraw.alexlebens.net url: https://excalidraw.alexlebens.net
- alerts:
- type: ntfy
conditions:
- '[STATUS] == 200'
- '[CERTIFICATE_EXPIRATION] > 240h'
group: core
interval: 30s
name: languagetool
url: https://languagetool.alexlebens.net
- alerts: - alerts:
- type: ntfy - type: ntfy
conditions: conditions:

2
clusters/cl01tl/manifests/gatus/Deployment-gatus.yaml
View File

@@ -26,7 +26,7 @@ spec:
app.kubernetes.io/name: gatus app.kubernetes.io/name: gatus
app.kubernetes.io/instance: gatus app.kubernetes.io/instance: gatus
annotations: annotations:
checksum/config: 38aa4be973458d898e882b1b6aa4f7957a31da116b15b30c86fc6a15a32b1132 checksum/config: 2cb54b0ea6e63a3e66e2ccfcff9fb4d5c6b307440e41365097906c8ef8ff30b9
spec: spec:
serviceAccountName: default serviceAccountName: default
automountServiceAccountToken: false automountServiceAccountToken: false

6
clusters/cl01tl/manifests/homepage/ConfigMap-homepage.yaml
View File

@@ -253,6 +253,12 @@ data:
href: https://excalidraw.alexlebens.net href: https://excalidraw.alexlebens.net
siteMonitor: http://excalidraw.excalidraw:80 siteMonitor: http://excalidraw.excalidraw:80
statusStyle: dot statusStyle: dot
- Proofreading:
icon: sh-languagetool.webp
description: LanguageTool
href: https://languagetool.alexlebens.net
siteMonitor: http://languagetool.languagetool:80
statusStyle: dot
- Code: - Code:
- Code (Public): - Code (Public):
icon: sh-gitea.webp icon: sh-gitea.webp

2
clusters/cl01tl/manifests/homepage/Deployment-homepage.yaml
View File

@@ -24,7 +24,7 @@ spec:
template: template:
metadata: metadata:
annotations: annotations:
checksum/configMaps: 93016d56f06e31c71b9d3e47f8f82c3ede788fce50b24637c4b5b61ecc3453fe checksum/configMaps: 54450288e26e5e482e4797e650af4d838a1d78d7257c13c8c590a099b801542d
checksum/secrets: d3ba83f111cd32f92c909268c55ad8bbd4f9e299b74b35b33c1a011180d8b378 checksum/secrets: d3ba83f111cd32f92c909268c55ad8bbd4f9e299b74b35b33c1a011180d8b378
labels: labels:
app.kubernetes.io/controller: main app.kubernetes.io/controller: main

57
clusters/cl01tl/manifests/languagetool/Deployment-languagetool.yaml Normal file
View File

@@ -0,0 +1,57 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: languagetool
labels:
app.kubernetes.io/controller: main
app.kubernetes.io/instance: languagetool
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: languagetool
helm.sh/chart: languagetool-4.6.2
namespace: languagetool
spec:
revisionHistoryLimit: 3
replicas: 1
strategy:
type: Recreate
selector:
matchLabels:
app.kubernetes.io/controller: main
app.kubernetes.io/name: languagetool
app.kubernetes.io/instance: languagetool
template:
metadata:
labels:
app.kubernetes.io/controller: main
app.kubernetes.io/instance: languagetool
app.kubernetes.io/name: languagetool
spec:
enableServiceLinks: false
serviceAccountName: default
automountServiceAccountToken: true
hostIPC: false
hostNetwork: false
hostPID: false
dnsPolicy: ClusterFirst
containers:
- env:
- name: langtool_languageModel
value: /ngrams
- name: Java_Xms
value: 512m
- name: Java_Xmx
value: 1g
image: erikvl87/languagetool:6.7
imagePullPolicy: IfNotPresent
name: main
resources:
requests:
cpu: 10m
memory: 128Mi
volumeMounts:
- mountPath: /ngrams
name: data
volumes:
- name: data
persistentVolumeClaim:
claimName: languagetool-data

58
clusters/cl01tl/manifests/languagetool/ExternalSecret-languagetool-data-backup-secret-external.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: languagetool-data-backup-secret-external
namespace: languagetool
labels:
helm.sh/chart: volsync-target-data-0.8.0
app.kubernetes.io/instance: languagetool
app.kubernetes.io/part-of: languagetool
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: languagetool-data-backup-secret-external
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/languagetool/languagetool-data"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/digital-ocean
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/digital-ocean
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /digital-ocean/home-infra/volsync-backups
metadataPolicy: None
property: AWS_DEFAULT_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /digital-ocean/home-infra/volsync-backups
metadataPolicy: None
property: AWS_ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /digital-ocean/home-infra/volsync-backups
metadataPolicy: None
property: AWS_SECRET_ACCESS_KEY

58
clusters/cl01tl/manifests/languagetool/ExternalSecret-languagetool-data-backup-secret-local.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: languagetool-data-backup-secret-local
namespace: languagetool
labels:
helm.sh/chart: volsync-target-data-0.8.0
app.kubernetes.io/instance: languagetool
app.kubernetes.io/part-of: languagetool
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: languagetool-data-backup-secret-local
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/languagetool/languagetool-data"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

58
clusters/cl01tl/manifests/languagetool/ExternalSecret-languagetool-data-backup-secret-remote.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: languagetool-data-backup-secret-remote
namespace: languagetool
labels:
helm.sh/chart: volsync-target-data-0.8.0
app.kubernetes.io/instance: languagetool
app.kubernetes.io/part-of: languagetool
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: languagetool-data-backup-secret-remote
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/languagetool/languagetool-data"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

30
clusters/cl01tl/manifests/languagetool/HTTPRoute-languagetool.yaml Normal file
View File

@@ -0,0 +1,30 @@
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: languagetool
labels:
app.kubernetes.io/instance: languagetool
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: languagetool
helm.sh/chart: languagetool-4.6.2
namespace: languagetool
spec:
parentRefs:
- group: gateway.networking.k8s.io
kind: Gateway
name: traefik-gateway
namespace: traefik
hostnames:
- "languagetool.alexlebens.net"
rules:
- backendRefs:
- group: ""
kind: Service
name: languagetool
namespace: languagetool
port: 80
weight: 100
matches:
- path:
type: PathPrefix
value: /

19
clusters/cl01tl/manifests/languagetool/PersistentVolumeClaim-languagetool-data.yaml Normal file
View File

@@ -0,0 +1,19 @@
kind: PersistentVolumeClaim
apiVersion: v1
metadata:
name: languagetool-data
labels:
app.kubernetes.io/instance: languagetool
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: languagetool
helm.sh/chart: languagetool-4.6.2
annotations:
helm.sh/resource-policy: keep
namespace: languagetool
spec:
accessModes:
- "ReadWriteOnce"
resources:
requests:
storage: "1Gi"
storageClassName: "ceph-block"

29
clusters/cl01tl/manifests/languagetool/ReplicationSource-languagetool-data-backup-source-external.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: languagetool-data-backup-source-external
namespace: languagetool
labels:
helm.sh/chart: volsync-target-data-0.8.0
app.kubernetes.io/instance: languagetool
app.kubernetes.io/part-of: languagetool
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: languagetool-data-backup
spec:
sourcePVC: languagetool-data
trigger:
schedule: 38 14 * * *
restic:
pruneIntervalDays: 7
repository: languagetool-data-backup-secret-external
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

29
clusters/cl01tl/manifests/languagetool/ReplicationSource-languagetool-data-backup-source-local.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: languagetool-data-backup-source-local
namespace: languagetool
labels:
helm.sh/chart: volsync-target-data-0.8.0
app.kubernetes.io/instance: languagetool
app.kubernetes.io/part-of: languagetool
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: languagetool-data-backup
spec:
sourcePVC: languagetool-data
trigger:
schedule: 38 11 * * *
restic:
pruneIntervalDays: 7
repository: languagetool-data-backup-secret-local
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

29
clusters/cl01tl/manifests/languagetool/ReplicationSource-languagetool-data-backup-source-remote.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: languagetool-data-backup-source-remote
namespace: languagetool
labels:
helm.sh/chart: volsync-target-data-0.8.0
app.kubernetes.io/instance: languagetool
app.kubernetes.io/part-of: languagetool
app.kubernetes.io/version: "0.8.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: languagetool-data-backup
spec:
sourcePVC: languagetool-data
trigger:
schedule: 38 12 * * *
restic:
pruneIntervalDays: 7
repository: languagetool-data-backup-secret-remote
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

22
clusters/cl01tl/manifests/languagetool/Service-languagetool.yaml Normal file
View File

@@ -0,0 +1,22 @@
apiVersion: v1
kind: Service
metadata:
name: languagetool
labels:
app.kubernetes.io/instance: languagetool
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: languagetool
app.kubernetes.io/service: languagetool
helm.sh/chart: languagetool-4.6.2
namespace: languagetool
spec:
type: ClusterIP
ports:
- port: 80
targetPort: 8010
protocol: TCP
name: http
selector:
app.kubernetes.io/controller: main
app.kubernetes.io/instance: languagetool
app.kubernetes.io/name: languagetool