fix

charts/apps/gitea/templates/deployment.yaml

@@ -1,23 +1,23 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: "{{ .Release.Name }}"
+  name: '{{ .Release.Name }}'
 spec:
   strategy:
     type: Recreate
   replicas: 1
   selector:
     matchLabels:
-      app: "{{ .Release.Name }}"
+      app: '{{ .Release.Name }}'
   template:
     metadata:
       labels:
-        app: "{{ .Release.Name }}"
+        app: '{{ .Release.Name }}'
     spec:
       containers:
-        - name: "{{ .Release.Name }}"
+        - name: '{{ .Release.Name }}'
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
+          image: '{{ .Values.image.repository }}:{{ .Values.image.tag }}'
-          imagePullPolicy: "{{ .Values.image.pullPolicy }}"
+          imagePullPolicy: '{{ .Values.image.pullPolicy }}'
           ports:
             - name: http
               containerPort: 3000
@@ -36,66 +36,64 @@ spec:
               name: data
           env:
             - name: TZ
-              value: "{{ .Values.globals.timezone }}"
+              value: '{{ .Values.globals.timezone }}'
             - name: USER_UID
-              value: "1000"
+              value: '1000'
             - name: USER_GID
-              value: "1000"
+              value: '1000'
-            - name: GITEA__server__SSH_DOMAIN
-              value: gitea-ssh.olsen.cloud
             - name: GITEA__service__REQUIRE_EXTERNAL_REGISTRATION_PASSWORD
-              value: "true"
+              value: 'true'
             #- name: GITEA__service__ENABLE_BASIC_AUTHENTICATION
             #  value: 'true'
             - name: GITEA__service__ENABLE_PASSWORD_SIGNIN_FORM
-              value: "false"
+              value: 'false'
             - name: GITEA__service__DEFAULT_KEEP_EMAIL_PRIVATE
-              value: "true"
+              value: 'true'
             - name: GITEA__service__DEFAULT_USER_IS_RESTRICTED
-              value: "true"
+              value: 'true'
             - name: GITEA__service__DEFAULT_USER_VISIBILITY
-              value: "private"
+              value: 'private'
             - name: GITEA__service__DEFAULT_ORG_VISIBILITY
-              value: "private"
+              value: 'private'
             - name: GITEA__service__ALLOW_ONLY_EXTERNAL_REGISTRATION
-              value: "true"
+              value: 'true'
             - name: GITEA__other__SHOW_FOOTER_POWERED_BY
-              value: "false"
+              value: 'false'
             - name: GITEA__other__SHOW_FOOTER_TEMPLATE_LOAD_TIME
-              value: "false"
+              value: 'false'
             - name: GITEA__other__SHOW_FOOTER_VERSION
-              value: "false"
+              value: 'false'
             - name: GITEA__repository__ENABLE_PUSH_CREATE_USER
-              value: "true"
+              value: 'true'
             - name: GITEA__repository__ENABLE_PUSH_CREATE_ORG
-              value: "true"
+              value: 'true'
             - name: GITEA__openid__ENABLE_OPENID_SIGNIN
-              value: "false"
+              value: 'false'
             - name: GITEA__openid__ENABLE_OPENID_SIGNUP
-              value: "false"
+              value: 'false'
             - name: GITEA__database__DB_TYPE
               value: postgres
             - name: GITEA__database__NAME
               valueFrom:
                 secretKeyRef:
-                  name: "{{ .Release.Name }}-pg-connection"
+                  name: '{{ .Release.Name }}-pg-connection'
                   key: database
             - name: GITEA__database__HOST
               valueFrom:
                 secretKeyRef:
-                  name: "{{ .Release.Name }}-pg-connection"
+                  name: '{{ .Release.Name }}-pg-connection'
                   key: host
             - name: GITEA__database__USER
               valueFrom:
                 secretKeyRef:
-                  name: "{{ .Release.Name }}-pg-connection"
+                  name: '{{ .Release.Name }}-pg-connection'
                   key: user
             - name: GITEA__database__PASSWD
               valueFrom:
                 secretKeyRef:
-                  name: "{{ .Release.Name }}-pg-connection"
+                  name: '{{ .Release.Name }}-pg-connection'
                   key: password
       volumes:
         - name: data
           persistentVolumeClaim:
-            claimName: "{{ .Release.Name }}-data"
+            claimName: '{{ .Release.Name }}-data'

charts/apps/homarr/Chart.yaml

@@ -1,3 +0,0 @@
-apiVersion: v2
-version: 1.0.0
-name: openwebui

charts/apps/homarr/templates/client.yaml

@@ -1,10 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: OidcClient
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  environment: "{{ .Values.globals.environment }}"
-  redirectUris:
-    - path: /api/auth/callback/oidc
-      subdomain: "{{ .Values.subdomain }}"
-      matchingMode: strict

charts/apps/homarr/templates/deployment.yaml

@@ -1,83 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  strategy:
-    type: Recreate
-  replicas: 1
-  selector:
-    matchLabels:
-      app: "{{ .Release.Name }}"
-  template:
-    metadata:
-      labels:
-        app: "{{ .Release.Name }}"
-    spec:
-      containers:
-        - name: "{{ .Release.Name }}"
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
-          imagePullPolicy: "{{ .Values.image.pullPolicy }}"
-          ports:
-            - name: http
-              containerPort: 7575
-              protocol: TCP
-          livenessProbe:
-            tcpSocket:
-              port: http
-          readinessProbe:
-            tcpSocket:
-              port: http
-          volumeMounts:
-            - mountPath: /appdata
-              name: data
-          env:
-            - name: BASE_URL
-              value: https://homarr.olsen.cloud # TODO
-
-            - name: NEXTAUTH_URL
-              value: https://homarr.olsen.cloud
-
-            - name: AUTH_PROVIDERS
-              value: oidc
-
-            - name: AUTH_OIDC_CLIENT_NAME
-              value: Authentik
-
-            - name: AUTH_OIDC_SCOPE_OVERWRITE
-              value: openid email profile
-
-            - name: AUTH_OIDC_GROUPS_ATTRIBUTE
-              value: groups
-
-            - name: AUTH_OIDC_AUTO_LOGIN
-              value: "true"
-
-            - name: SECRET_ENCRYPTION_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: "{{ .Release.Name }}-secrets"
-                  key: encryptionkey
-
-            - name: AUTH_OIDC_ISSUER
-              valueFrom:
-                secretKeyRef:
-                  name: "{{ .Release.Name }}-client"
-                  key: configurationIssuer
-
-            - name: AUTH_OIDC_CLIENT_ID
-              valueFrom:
-                secretKeyRef:
-                  name: "{{ .Release.Name }}-client"
-                  key: clientId
-
-            - name: AUTH_OIDC_CLIENT_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: "{{ .Release.Name }}-client"
-                  key: clientSecret
-
-      volumes:
-        - name: data
-          persistentVolumeClaim:
-            claimName: "{{ .Release.Name }}-data"

charts/apps/homarr/templates/external-http-service.yaml

@@ -1,11 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: ExternalHttpService
-metadata:
-  name: '{{ .Release.Name }}'
-spec:
-  environment: '{{ .Values.globals.environment }}'
-  subdomain: '{{ .Values.subdomain }}'
-  destination:
-    host: '{{ .Release.Name }}.{{ .Release.Namespace }}.svc.cluster.local'
-    port:
-      number: 80

charts/apps/homarr/templates/http-service.yaml

@@ -1,11 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: HttpService
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  environment: "{{ .Values.globals.environment }}"
-  subdomain: "{{ .Values.subdomain }}"
-  destination:
-    host: "{{ .Release.Name }}.{{ .Release.Namespace }}.svc.cluster.local"
-    port:
-      number: 80

charts/apps/homarr/templates/pvc.yaml

@@ -1,11 +0,0 @@
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: '{{ .Release.Name }}-data'
-spec:
-  accessModes:
-    - 'ReadWriteOnce'
-  resources:
-    requests:
-      storage: '1Gi'
-  storageClassName: '{{ .Values.globals.environment }}'

charts/apps/homarr/templates/secret.yaml

@@ -1,9 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: GenerateSecret
-metadata:
-  name: "{{ .Release.Name }}-secrets"
-spec:
-  fields:
-    - name: encryptionkey
-      encoding: hex
-      length: 64

charts/apps/homarr/templates/service.yaml

@@ -1,15 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: "{{ .Release.Name }}"
-  labels:
-    app: "{{ .Release.Name }}"
-spec:
-  type: ClusterIP
-  ports:
-    - port: 80
-      targetPort: 7575
-      protocol: TCP
-      name: http
-  selector:
-    app: "{{ .Release.Name }}"

charts/apps/homarr/values.yaml

@@ -1,7 +0,0 @@
-globals:
-  environment: prod
-image:
-  repository: ghcr.io/homarr-labs/homarr
-  tag: latest
-  pullPolicy: IfNotPresent
-subdomain: homarr

charts/apps/home-assistant/Chart.yaml

@@ -1,3 +0,0 @@
-apiVersion: v2
-version: 1.0.0
-name: home-assistant

charts/apps/home-assistant/templates/deployment.yaml

@@ -1,44 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  strategy:
-    type: Recreate
-  replicas: 1
-  selector:
-    matchLabels:
-      app: "{{ .Release.Name }}"
-  template:
-    metadata:
-      labels:
-        app: "{{ .Release.Name }}"
-    spec:
-      hostNetwork: true
-
-      containers:
-        - name: "{{ .Release.Name }}"
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
-          imagePullPolicy: "{{ .Values.image.pullPolicy }}"
-          env:
-            - name: TZ
-              value: "{{ .Values.globals.timezone }}"
-          ports:
-            - name: http
-              containerPort: 8123
-              protocol: TCP
-          livenessProbe:
-            tcpSocket:
-              port: http
-          readinessProbe:
-            tcpSocket:
-              port: http
-          volumeMounts:
-            - mountPath: /config
-              name: config
-          securityContext:
-            privileged: true
-      volumes:
-        - name: config
-          persistentVolumeClaim:
-            claimName: "{{ .Release.Name }}-config"

charts/apps/home-assistant/templates/http-service.yaml

@@ -1,11 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: HttpService
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  environment: "{{ .Values.globals.environment }}"
-  subdomain: "{{ .Values.subdomain }}"
-  destination:
-    host: "{{ .Release.Name }}.{{ .Release.Namespace }}.svc.cluster.local"
-    port:
-      number: 80

charts/apps/home-assistant/templates/pvc.yaml

@@ -1,11 +0,0 @@
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: "{{ .Release.Name }}-config"
-spec:
-  accessModes:
-    - "ReadWriteOnce"
-  resources:
-    requests:
-      storage: "1Gi"
-  storageClassName: "{{ .Values.globals.environment }}"

charts/apps/home-assistant/templates/service.yaml

@@ -1,15 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: "{{ .Release.Name }}"
-  labels:
-    app: "{{ .Release.Name }}"
-spec:
-  type: ClusterIP
-  ports:
-    - port: 80
-      targetPort: 8123
-      protocol: TCP
-      name: http
-  selector:
-    app: "{{ .Release.Name }}"

charts/apps/home-assistant/values.yaml

@@ -1,8 +0,0 @@
-globals:
-  environment: prod
-  timezone: Europe/Amsterdam
-image:
-  repository: ghcr.io/home-assistant/home-assistant
-  tag: stable
-  pullPolicy: IfNotPresent
-subdomain: home-assistant

charts/apps/music-assistant/Chart.yaml

@@ -1,3 +0,0 @@
-apiVersion: v2
-version: 1.0.0
-name: music-assistant

charts/apps/music-assistant/templates/deployment.yaml

@@ -1,44 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  strategy:
-    type: Recreate
-  replicas: 1
-  selector:
-    matchLabels:
-      app: "{{ .Release.Name }}"
-  template:
-    metadata:
-      labels:
-        app: "{{ .Release.Name }}"
-    spec:
-      hostNetwork: true
-
-      containers:
-        - name: "{{ .Release.Name }}"
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
-          imagePullPolicy: "{{ .Values.image.pullPolicy }}"
-          ports:
-            - name: http
-              containerPort: 8095
-              protocol: TCP
-          livenessProbe:
-            tcpSocket:
-              port: http
-          readinessProbe:
-            tcpSocket:
-              port: http
-          volumeMounts:
-            - mountPath: /data
-              name: data
-          securityContext:
-            capabilities:
-              add:
-                - SYS_ADMIN
-                - DAC_READ_SEARCH
-      volumes:
-        - name: data
-          persistentVolumeClaim:
-            claimName: "{{ .Release.Name }}-data"

charts/apps/music-assistant/templates/http-service.yaml

@@ -1,11 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: HttpService
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  environment: "{{ .Values.globals.environment }}"
-  subdomain: "{{ .Values.subdomain }}"
-  destination:
-    host: "{{ .Release.Name }}.{{ .Release.Namespace }}.svc.cluster.local"
-    port:
-      number: 80

charts/apps/music-assistant/templates/pvc.yaml

@@ -1,11 +0,0 @@
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: "{{ .Release.Name }}-data"
-spec:
-  accessModes:
-    - "ReadWriteOnce"
-  resources:
-    requests:
-      storage: "1Gi"
-  storageClassName: "{{ .Values.globals.environment }}"

charts/apps/music-assistant/templates/service.yaml

@@ -1,15 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: "{{ .Release.Name }}"
-  labels:
-    app: "{{ .Release.Name }}"
-spec:
-  type: ClusterIP
-  ports:
-    - port: 80
-      targetPort: 8095
-      protocol: TCP
-      name: http
-  selector:
-    app: "{{ .Release.Name }}"

charts/apps/music-assistant/values.yaml

@@ -1,7 +0,0 @@
-globals:
-  environment: prod
-image:
-  repository: ghcr.io/music-assistant/server
-  tag: latest
-  pullPolicy: IfNotPresent
-subdomain: music-assistant

charts/apps/photoprism/Chart.yaml

@@ -1,3 +0,0 @@
-apiVersion: v2
-version: 1.0.0
-name: photoprism

charts/apps/photoprism/templates/client.yaml

@@ -1,10 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: OidcClient
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  environment: "{{ .Values.globals.environment }}"
-  redirectUris:
-    - path: /api/v1/oidc/redirect
-      subdomain: "{{ .Values.subdomain }}"
-      matchingMode: strict

charts/apps/photoprism/templates/deployment.yaml

@@ -1,92 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  strategy:
-    type: Recreate
-  replicas: 1
-  selector:
-    matchLabels:
-      app: "{{ .Release.Name }}"
-  template:
-    metadata:
-      labels:
-        app: "{{ .Release.Name }}"
-    spec:
-      containers:
-        - name: "{{ .Release.Name }}"
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
-          imagePullPolicy: "{{ .Values.image.pullPolicy }}"
-          env:
-            - name: PHOTOPRISM_UPLOAD_NSFW
-              value: "true"
-            - name: PHOTOPRISM_SITE_URL
-              value: "https://{{ .Values.subdomain }}.olsen.cloud" #TODO
-            # - name: PHOTOPRISM_UID
-            #   value: "1000"
-            # - name: PHOTOPRISM_GID
-            #   value: "1000"
-            # - name: PHOTOPRISM_DISABLE_CHOWN
-            #   value: "true"
-            - name: PHOTOPRISM_AUTH_MODE
-              value: password
-            - name: PHOTOPRISM_DISABLE_TLS
-              value: "false"
-            - name: PHOTOPRISM_READONLY
-              value: "false"
-            - name: PHOTOPRISM_HTTP_COMPRESSION
-              value: "gzip"
-
-            - name: PHOTOPRISM_ADMIN_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: "{{ .Release.Name }}-secrets"
-                  key: password
-            - name: PHOTOPRISM_OIDC_SCOPES
-              value: "openid email profile offline_access"
-            - name: PHOTOPRISM_OIDC_PROVIDER
-              value: Authentik
-            - name: PHOTOPRISM_OIDC_ICON
-              value: https://cdn.jsdelivr.net/gh/selfhst/icons/png/authentik.png
-            - name: PHOTOPRISM_OIDC_REGISTER
-              value: "true"
-            - name: PHOTOPRISM_OIDC_REDIRECT
-              value: "false"
-            - name: PHOTOPRISM_OIDC_CLIENT
-              valueFrom:
-                secretKeyRef:
-                  name: "{{ .Release.Name }}-client"
-                  key: clientId
-            - name: PHOTOPRISM_OIDC_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: "{{ .Release.Name }}-client"
-                  key: clientSecret
-            - name: PHOTOPRISM_OIDC_URI
-              valueFrom:
-                secretKeyRef:
-                  name: "{{ .Release.Name }}-client"
-                  key: configurationIssuer
-          ports:
-            - name: http
-              containerPort: 2342
-              protocol: TCP
-          livenessProbe:
-            tcpSocket:
-              port: http
-          readinessProbe:
-            tcpSocket:
-              port: http
-          volumeMounts:
-            - mountPath: /photoprism/storage
-              name: data
-            - mountPath: /photoprism/originals
-              name: originals
-      volumes:
-        - name: data
-          persistentVolumeClaim:
-            claimName: "{{ .Release.Name }}-data"
-        - name: originals
-          persistentVolumeClaim:
-            claimName: pictures

charts/apps/photoprism/templates/external-http-service.yaml

@@ -1,11 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: ExternalHttpService
-metadata:
-  name: '{{ .Release.Name }}'
-spec:
-  environment: '{{ .Values.globals.environment }}'
-  subdomain: '{{ .Values.subdomain }}'
-  destination:
-    host: '{{ .Release.Name }}.{{ .Release.Namespace }}.svc.cluster.local'
-    port:
-      number: 80

charts/apps/photoprism/templates/http-service.yaml

@@ -1,11 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: HttpService
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  environment: "{{ .Values.globals.environment }}"
-  subdomain: "{{ .Values.subdomain }}"
-  destination:
-    host: "{{ .Release.Name }}.{{ .Release.Namespace }}.svc.cluster.local"
-    port:
-      number: 80

charts/apps/photoprism/templates/pvc.yaml

@@ -1,11 +0,0 @@
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: "{{ .Release.Name }}-data"
-spec:
-  accessModes:
-    - "ReadWriteOnce"
-  resources:
-    requests:
-      storage: "1Gi"
-  storageClassName: "{{ .Values.globals.environment }}"

charts/apps/photoprism/templates/secret.yaml

@@ -1,9 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: GenerateSecret
-metadata:
-  name: "{{ .Release.Name }}-secrets"
-spec:
-  fields:
-    - name: password
-      encoding: base64
-      length: 64

charts/apps/photoprism/templates/service.yaml

@@ -1,15 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: "{{ .Release.Name }}"
-  labels:
-    app: "{{ .Release.Name }}"
-spec:
-  type: ClusterIP
-  ports:
-    - port: 80
-      targetPort: 2342
-      protocol: TCP
-      name: http
-  selector:
-    app: "{{ .Release.Name }}"

charts/apps/photoprism/values.yaml

@@ -1,7 +0,0 @@
-globals:
-  environment: prod
-image:
-  repository: photoprism/photoprism
-  tag: latest
-  pullPolicy: IfNotPresent
-subdomain: photoprism

charts/backup/templates/cron-job-backup.yaml

@@ -15,9 +15,6 @@ spec:
   jobTemplate:
     spec:
       template:
-        metadata:
-          annotations:
-            sidecar.istio.io/inject: "false"
         spec:
           containers:
             - name: "{{ $release.Name }}-{{ $key }}-backup"

charts/backup/templates/cron-job-cleanup.yaml

@@ -15,9 +15,6 @@ spec:
   jobTemplate:
     spec:
       template:
-        metadata:
-          annotations:
-            sidecar.istio.io/inject: "false"
         spec:
           containers:
             - name: "{{ $release.Name }}-{{ $key }}-cleanup"

images/backup/backup.sh

@@ -20,7 +20,7 @@ restic init --repo "$RESTIC_REPOSITORY" || true
 
 echo "Running Restic backup..."
 restic backup \
-  -r "$RESTIC_REPOSITORY" \
+  -r "$RESTIC_REPOSITORY"
   "$SOURCE_DIR" \
   --verbose \
   --tag "daily"