remove secret rotation

apps/charts/paperless-ngx/values.yaml

@@ -31,13 +31,13 @@ volumes:
     persistentVolumeClaim: data
   - name: media
     mountPath: /usr/src/paperless/media
-    persistentVolumeClaim: media
+    persistentVolumeClaim: paperless-ngx-media
   - name: consume
     mountPath: /usr/src/paperless/consume
-    persistentVolumeClaim: consume
+    persistentVolumeClaim: paperless-ngx-consume
   - name: export
     mountPath: /usr/src/paperless/export
-    persistentVolumeClaim: export
+    persistentVolumeClaim: paperless-ngx-export
 
 # Persistent volume claims
 persistentVolumeClaims:
@@ -79,7 +79,7 @@ externalSecrets:
       - name: secretkey
         length: 64
         encoding: hex
-        allowRepeat: false
+        allowRepeat: true
         secretKeys:
           - secretkey
 

apps/charts/syncthing/Chart.yaml

@@ -1,3 +0,0 @@
-apiVersion: v2
-version: 1.0.0
-name: syncthing

apps/charts/syncthing/templates/deployment.yaml

@@ -1,64 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  strategy:
-    type: Recreate
-  replicas: 1
-  revisionHistoryLimit: 0
-  selector:
-    matchLabels:
-      app: "{{ .Release.Name }}"
-  template:
-    metadata:
-      labels:
-        app: "{{ .Release.Name }}"
-    spec:
-      containers:
-        - name: "{{ .Release.Name }}"
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
-          imagePullPolicy: "{{ .Values.image.pullPolicy }}"
-          ports:
-            - name: http
-              containerPort: 8384
-              protocol: TCP
-          livenessProbe:
-            tcpSocket:
-              port: http
-          readinessProbe:
-            tcpSocket:
-              port: http
-          volumeMounts:
-            - mountPath: /var/syncthing
-              name: data
-            - mountPath: /media/music
-              name: music
-              readOnly: true
-            - mountPath: /media/kids-music
-              name: kidsmusic
-              readOnly: true
-            - mountPath: /media/pictures/pixel9
-              name: pictures
-              subPath: imports/pixel9
-          env:
-            - name: PUID
-              value: "1000"
-            - name: GUID
-              value: "1000"
-            - name: TZ
-              value: "{{ .Values.globals.timezone }}"
-
-      volumes:
-        - name: data
-          persistentVolumeClaim:
-            claimName: "{{ .Release.Name }}-data"
-        - name: music
-          persistentVolumeClaim:
-            claimName: music
-        - name: kidsmusic
-          persistentVolumeClaim:
-            claimName: kidsmusic
-        - name: pictures
-          persistentVolumeClaim:
-            claimName: pictures

apps/charts/syncthing/templates/pvc.yaml

@@ -1,11 +0,0 @@
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: '{{ .Release.Name }}-data'
-spec:
-  accessModes:
-    - 'ReadWriteOnce'
-  resources:
-    requests:
-      storage: '1Gi'
-  storageClassName: persistent

apps/charts/syncthing/templates/service.yaml

@@ -1,15 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: "{{ .Release.Name }}"
-  labels:
-    app: "{{ .Release.Name }}"
-spec:
-  type: ClusterIP
-  ports:
-    - port: 80
-      targetPort: 8384
-      protocol: TCP
-      name: http
-  selector:
-    app: "{{ .Release.Name }}"

apps/charts/syncthing/values.yaml

@@ -1,5 +0,0 @@
-image:
-  repository: syncthing/syncthing
-  tag: latest@sha256:7ae77d066e9b81d3d8c312b2f9e1a874a5115680bfde90aff5fc9aece694ec93
-  pullPolicy: IfNotPresent
-subdomain: syncthing

apps/charts/volumes/values.yaml

@@ -5,7 +5,7 @@ shares:
   tvshows:
     path: /mnt/HDD/TV-Shows
   music:
-    path: /mnt/HDD/Music2
+    path: /mnt/HDD/Music
   books:
     path: /mnt/HDD/Books
   podcasts:
@@ -19,7 +19,7 @@ shares:
   misc:
     path: /mnt/HDD/Misc
   kidsmusic:
-    path: /mnt/HDD/Misc/Kids_Music
+    path: /mnt/HDD/Kids/Music
   images:
     path: /mnt/HDD/images
   kidsyoutube:

apps/charts/zerobyte/templates/virtual-service.yaml

@@ -1,19 +0,0 @@
-apiVersion: networking.istio.io/v1
-kind: VirtualService
-metadata:
-  name: "{{ .Release.Name }}-private"
-  namespace: "{{ .Release.Namespace }}"
-spec:
-  gateways:
-    - "{{ .Values.globals.istio.gateways.private }}"
-    - mesh
-  hosts:
-    - "{{ .Values.subdomain }}.{{ .Values.globals.domain }}"
-    - mesh
-  http:
-    - route:
-        - destination:
-            host: "{{ .Release.Name }}"
-            port:
-              number: 80
-

apps/common/templates/_helpers.tpl

@@ -654,7 +654,7 @@ metadata:
   labels:
     {{- include "common.labels" $ | nindent 4 }}
 spec:
-  refreshInterval: 1h
+  refreshInterval: "0"
   # rotationPolicy is intentionally not set to ensure no automatic rotation
   target:
     name: {{ $secretName }}