clusters/cl01tl/manifests/qbittorrent/Deployment-qbittorrent-main.yaml

@@ -81,21 +81,17 @@ spec:
                   key: private-key
                   name: protonvpn-wireguard-conf
             - name: FIREWALL_OUTBOUND_SUBNETS
-              value: 192.168.1.0/24,10.244.0.0/16,10.96.0.0/16
+              value: 192.168.1.0/24,10.244.0.0/16,10.96.0.0/12
             - name: FIREWALL_INPUT_PORTS
               value: 8080,9022
             - name: VPN_PORT_FORWARDING
               value: "on"
             - name: VPN_PORT_FORWARDING_UP_COMMAND
-              value: /bin/sh -c "/gluetun/update.sh {{PORTS}}"
+              value: /bin/sh -c "/gluetun/update.sh {{PORT}}"
-            - name: DNS_UPSTREAM_RESOLVER_TYPE
+            - name: PORT_FORWARD_ONLY
-              value: dot
+              value: "on"
             - name: BLOCK_MALICIOUS
               value: "off"
-            - name: HTTPPROXY
-              value: "off"
-            - name: SHADOWSOCKS
-              value: "off"
           image: ghcr.io/qdm12/gluetun:latest@sha256:725d3e51091dde4ca43e3e3f26e2e6d3d0ccc66821e92d505c3da04958f7d472
           lifecycle:
             postStart:

clusters/cl01tl/manifests/slskd/Deployment-slskd.yaml

@@ -70,17 +70,11 @@ spec:
                   key: private-key
                   name: protonvpn-wireguard-conf
             - name: FIREWALL_OUTBOUND_SUBNETS
-              value: 192.168.1.0/24,10.0.0.0/8
+              value: 192.168.1.0/24,10.244.0.0/16,10.96.0.0/12
             - name: FIREWALL_INPUT_PORTS
-              value: 5030,50300
+              value: "5030"
-            - name: DNS_UPSTREAM_RESOLVER_TYPE
-              value: dot
             - name: BLOCK_MALICIOUS
               value: "off"
-            - name: HTTPPROXY
-              value: "off"
-            - name: SHADOWSOCKS
-              value: "off"
           image: ghcr.io/qdm12/gluetun:v3.41.1@sha256:1a5bf4b4820a879cdf8d93d7ef0d2d963af56670c9ebff8981860b6804ebc8ab
           lifecycle:
             postStart:

clusters/cl01tl/manifests/tubearchivist/Deployment-tubearchivist.yaml

@@ -50,15 +50,11 @@ spec:
                   key: private-key
                   name: protonvpn-wireguard-conf
             - name: FIREWALL_OUTBOUND_SUBNETS
-              value: 192.168.1.0/24,10.0.0.0/8
+              value: 192.168.1.0/24,10.244.0.0/16,10.96.0.0/12
             - name: FIREWALL_INPUT_PORTS
-              value: 80,8000,24000
+              value: "24000"
-            - name: DNS_UPSTREAM_RESOLVER_TYPE
+            - name: DNS_CACHING
-              value: dot
+              value: "false"
-            - name: HTTPPROXY
-              value: "off"
-            - name: SHADOWSOCKS
-              value: "off"
           image: ghcr.io/qdm12/gluetun:v3.41.1@sha256:1a5bf4b4820a879cdf8d93d7ef0d2d963af56670c9ebff8981860b6804ebc8ab
           lifecycle:
             postStart:
@@ -101,7 +97,7 @@ spec:
             - name: ES_DISABLE_VERIFY_SSL
               value: "true"
             - name: REDIS_CON
-              value: redis://tubearchivist-valkey.tubearchivist:6379
+              value: redis://tubearchivist-valkey.tubearchivist.svc.cluster.local:6379
             - name: TA_HOST
               value: https://tubearchivist.alexlebens.net http://tubearchivist.tubearchivist:80/
             - name: TA_PORT
@@ -112,6 +108,15 @@ spec:
             - secretRef:
                 name: tubearchivist-config
           image: bbilly1/tubearchivist:v0.5.10@sha256:dfe723cf008520e1758ecc3e59e6ea8761dd10d5bb099cd87289e80f5bd66567
+          livenessProbe:
+            failureThreshold: 5
+            httpGet:
+              path: /api/health/
+              port: 24000
+            initialDelaySeconds: 30
+            periodSeconds: 30
+            successThreshold: 1
+            timeoutSeconds: 15
           name: main
           resources:
             requests: