fix

.github/workflows/renovate.yml

@@ -1,15 +0,0 @@
-name: Renovate
-on:
-  workflow_dispatch:
-  schedule:
-    - cron: '0 */6 * * *'
-jobs:
-  renovate:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-      - name: Self-hosted Renovate
-        uses: renovatebot/github-action@v40.2.2
-        with:
-          token: ${{ secrets.RENOVATE_TOKEN }}

.gitignore

@@ -1,4 +1,2 @@
 /secret.*.yaml
 /data/
-/.envrc
-*.DS_Store

charts/apps/apprise/templates/client.yaml

@@ -1,10 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: OidcClient
-metadata:
-  name: '{{ .Release.Name }}'
-spec:
-  environment: '{{ .Values.globals.environment }}'
-  redirectUris:
-    - path: /oauth/oidc/callback
-      subdomain: '{{ .Values.subdomain }}'
-      matchingMode: strict

charts/apps/apprise/templates/deployment.yaml

@@ -1,43 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  strategy:
-    type: Recreate
-  replicas: 1
-  selector:
-    matchLabels:
-      app: "{{ .Release.Name }}"
-  template:
-    metadata:
-      labels:
-        app: "{{ .Release.Name }}"
-    spec:
-      containers:
-        - name: "{{ .Release.Name }}"
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
-          imagePullPolicy: "{{ .Values.image.pullPolicy }}"
-          ports:
-            - name: http
-              containerPort: 8000
-              protocol: TCP
-          livenessProbe:
-            tcpSocket:
-              port: http
-          readinessProbe:
-            tcpSocket:
-              port: http
-          env:
-            - name: TZ
-              value: "{{ .Values.globals.timezone }}"
-            - name: BASE_URL
-              value: https://{{ .Values.subdomain }}.{{ .Values.globals.domain }}
-          volumeMounts:
-            - mountPath: /config
-              name: data
-
-      volumes:
-        - name: data
-          persistentVolumeClaim:
-            claimName: "{{ .Release.Name }}-data"

charts/apps/apprise/templates/http-service.yaml

@@ -1,11 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: HttpService
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  environment: "{{ .Values.globals.environment }}"
-  subdomain: "{{ .Values.subdomain }}"
-  destination:
-    host: "{{ .Release.Name }}"
-    port:
-      number: 80

charts/apps/apprise/templates/service.yaml

@@ -1,15 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: "{{ .Release.Name }}"
-  labels:
-    app: "{{ .Release.Name }}"
-spec:
-  type: ClusterIP
-  ports:
-    - port: 80
-      targetPort: 8000
-      protocol: TCP
-      name: http
-  selector:
-    app: "{{ .Release.Name }}"

charts/apps/apprise/values.yaml

@@ -1,9 +0,0 @@
-globals:
-  environment: prod
-  timezone: Europe/Amsterdam
-  domain: olsen.cloud
-image:
-  repository: docker.io/caronc/apprise
-  tag: latest@sha256:127b3834f0679502529397ead8ffeaadf5189019c4c863fa6652e9b942fdccf8
-  pullPolicy: IfNotPresent
-subdomain: apprise

charts/apps/audiobookshelf/values.yaml

@@ -2,6 +2,6 @@ globals:
   environment: prod
 image:
   repository: ghcr.io/advplyr/audiobookshelf
-  tag: 2.26.1@sha256:5901162ccdf4b44f563ff2012484d5e315d9a1ecd6af86f7fe605ec96bbc5039
+  tag: 2.26.1
   pullPolicy: IfNotPresent
 subdomain: audiobookshelf

charts/apps/baikal/templates/database.yaml

@@ -1,6 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: PostgresDatabase
-metadata:
-  name: '{{ .Release.Name }}'
-spec:
-  environment: '{{ .Values.globals.environment }}'

charts/apps/baikal/templates/deployment.yaml

@@ -1,46 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  strategy:
-    type: Recreate
-  replicas: 1
-  selector:
-    matchLabels:
-      app: "{{ .Release.Name }}"
-  template:
-    metadata:
-      labels:
-        app: "{{ .Release.Name }}"
-    spec:
-      containers:
-        - name: "{{ .Release.Name }}"
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
-          imagePullPolicy: "{{ .Values.image.pullPolicy }}"
-          ports:
-            - name: http
-              containerPort: 80
-              protocol: TCP
-          livenessProbe:
-            tcpSocket:
-              port: http
-          readinessProbe:
-            tcpSocket:
-              port: http
-          env:
-            - name: TZ
-              value: "{{ .Values.globals.timezone }}"
-          volumeMounts:
-            - mountPath: /var/www/baikal/Specific
-              name: data
-            - mountPath: /var/www/baikal/config
-              name: config
-
-      volumes:
-        - name: data
-          persistentVolumeClaim:
-            claimName: "{{ .Release.Name }}-data"
-        - name: config
-          persistentVolumeClaim:
-            claimName: "{{ .Release.Name }}-config"

charts/apps/baikal/templates/http-service.yaml

@@ -1,11 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: HttpService
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  environment: "{{ .Values.globals.environment }}"
-  subdomain: "{{ .Values.subdomain }}"
-  destination:
-    host: "{{ .Release.Name }}"
-    port:
-      number: 80

charts/apps/baikal/templates/pvc.yaml

@@ -1,24 +0,0 @@
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: "{{ .Release.Name }}-data"
-spec:
-  accessModes:
-    - "ReadWriteOnce"
-  resources:
-    requests:
-      storage: "1Gi"
-  storageClassName: "{{ .Values.globals.environment }}"
-
----
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: "{{ .Release.Name }}-config"
-spec:
-  accessModes:
-    - "ReadWriteOnce"
-  resources:
-    requests:
-      storage: "1Gi"
-  storageClassName: "{{ .Values.globals.environment }}"

charts/apps/baikal/templates/service.yaml

@@ -1,15 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: "{{ .Release.Name }}"
-  labels:
-    app: "{{ .Release.Name }}"
-spec:
-  type: ClusterIP
-  ports:
-    - port: 80
-      targetPort: 80
-      protocol: TCP
-      name: http
-  selector:
-    app: "{{ .Release.Name }}"

charts/apps/baikal/values.yaml

@@ -1,9 +0,0 @@
-globals:
-  environment: prod
-  timezone: Europe/Amsterdam
-  domain: olsen.cloud
-image:
-  repository: docker.io/ckulka/baikal
-  tag: nginx@sha256:27bd9afbb8142c2143b6959c023074b05c86356ded0f589fcb1424ab5fbe0a70
-  pullPolicy: IfNotPresent
-subdomain: baikal

charts/apps/bytestash/templates/_headless-service.yaml

@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: '{{ .Release.Name }}-headless'
+  labels:
+    app: '{{ .Release.Name }}'
+spec:
+  clusterIP: None
+  ports:
+    - port: 5000
+      name: http
+  selector:
+    app: '{{ .Release.Name }}'

charts/apps/bytestash/templates/deployment.yaml

@@ -1,49 +1,50 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: "{{ .Release.Name }}"
+  name: '{{ .Release.Name }}'
   labels:
-    app: "{{ .Release.Name }}"
+    app: '{{ .Release.Name }}'
 spec:
+  serviceName: '{{ .Release.Name }}-headless'
   replicas: 1
   selector:
     matchLabels:
-      app: "{{ .Release.Name }}"
+      app: '{{ .Release.Name }}'
   template:
     metadata:
       labels:
-        app: "{{ .Release.Name }}"
+        app: '{{ .Release.Name }}'
     spec:
       containers:
-        - name: "{{ .Release.Name }}"
+        - name: '{{ .Release.Name }}'
           image: ghcr.io/jordan-dalby/bytestash:latest
           ports:
             - containerPort: 5000
               name: http
           env:
             - name: ALLOW_NEW_ACCOUNTS
-              value: "true"
+              value: 'true'
             - name: DISABLE_INTERNAL_ACCOUNTS
-              value: "true"
+              value: 'true'
             - name: OIDC_ENABLED
-              value: "true"
+              value: 'true'
             - name: OIDC_DISPLAY_NAME
               value: OIDC
             - name: OIDC_CLIENT_ID
               valueFrom:
                 secretKeyRef:
-                  name: "{{ .Release.Name }}-client"
+                  name: '{{ .Release.Name }}-client'
                   key: clientId
             - name: OIDC_CLIENT_SECRET
               valueFrom:
                 secretKeyRef:
-                  name: "{{ .Release.Name }}-client"
+                  name: '{{ .Release.Name }}-client'
                   key: clientSecret
             - name: OIDC_ISSUER_URL
               valueFrom:
                 secretKeyRef:
-                  name: "{{ .Release.Name }}-client"
+                  name: '{{ .Release.Name }}-client'
-                  key: configurationIssuer
+                  key: configuration
 
           volumeMounts:
             - mountPath: /data/snippets
@@ -51,4 +52,4 @@ spec:
       volumes:
         - name: data
           persistentVolumeClaim:
-            claimName: "{{ .Release.Name }}-data"
+            claimName: '{{ .Release.Name }}-data'

charts/apps/calibre-web/Chart.yaml

@@ -1,3 +0,0 @@
-apiVersion: v2
-version: 1.0.0
-name: calibre-web

charts/apps/calibre-web/templates/deployment.yaml

@@ -1,42 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: "{{ .Release.Name }}"
-  labels:
-    app: "{{ .Release.Name }}"
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: "{{ .Release.Name }}"
-  template:
-    metadata:
-      labels:
-        app: "{{ .Release.Name }}"
-    spec:
-      containers:
-        - name: "{{ .Release.Name }}"
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
-          imagePullPolicy: "{{ .Values.image.pullPolicy }}"
-          ports:
-            - containerPort: 8083
-              name: http
-          env:
-            - name: TZ
-              value: "{{ .Values.globals.timezone }}"
-            - name: PUID
-              value: "1000"
-            - name: PGID
-              value: "1000"
-          volumeMounts:
-            - mountPath: /config
-              name: data
-            - mountPath: /books
-              name: books
-      volumes:
-        - name: data
-          persistentVolumeClaim:
-            claimName: "{{ .Release.Name }}-data"
-        - name: books
-          persistentVolumeClaim:
-            claimName: books

charts/apps/calibre-web/templates/external-http-service.yaml

@@ -1,11 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: ExternalHttpService
-metadata:
-  name: '{{ .Release.Name }}'
-spec:
-  environment: '{{ .Values.globals.environment }}'
-  subdomain: '{{ .Values.subdomain }}'
-  destination:
-    host: '{{ .Release.Name }}.{{ .Release.Namespace }}.svc.cluster.local'
-    port:
-      number: 80

charts/apps/calibre-web/templates/http-service.yaml

@@ -1,11 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: HttpService
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  environment: "{{ .Values.globals.environment }}"
-  subdomain: "{{ .Values.subdomain }}"
-  destination:
-    host: "{{ .Release.Name }}"
-    port:
-      number: 80

charts/apps/calibre-web/templates/pvc.yaml

@@ -1,11 +0,0 @@
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: '{{ .Release.Name }}-data'
-spec:
-  accessModes:
-    - 'ReadWriteOnce'
-  resources:
-    requests:
-      storage: '1Gi'
-  storageClassName: '{{ .Values.globals.environment }}'

charts/apps/calibre-web/templates/service.yaml

@@ -1,15 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: "{{ .Release.Name }}"
-  labels:
-    app: "{{ .Release.Name }}"
-spec:
-  type: ClusterIP
-  ports:
-    - port: 80
-      targetPort: 8083
-      protocol: TCP
-      name: http
-  selector:
-    app: "{{ .Release.Name }}"

charts/apps/calibre-web/values.yaml

@@ -1,9 +0,0 @@
-globals:
-  environment: prod
-  domain: olsen.cloud
-  timezone: Europe/Amsterdam
-image:
-  repository: lscr.io/linuxserver/calibre-web
-  tag: latest@sha256:a833d4cf90333f167871fe6ab1f034c7be7bc3d2061a1563fdb6a8fa27af346e
-  pullPolicy: IfNotPresent
-subdomain: calibre-web

charts/apps/coder/values.yaml

@@ -2,6 +2,6 @@ globals:
   environment: prod
 image:
   repository: ghcr.io/coder/coder
-  tag: latest@sha256:73714e0685addde01bbff905cf5b647d6b677d77977c8009b6293d40fdf0f562
+  tag: latest
   pullPolicy: IfNotPresent
 subdomain: coder

charts/apps/esphome/Chart.yaml

@@ -1,3 +0,0 @@
-apiVersion: v2
-version: 1.0.0
-name: esphome

charts/apps/esphome/templates/deployment.yaml

@@ -1,42 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  strategy:
-    type: Recreate
-  replicas: 1
-  selector:
-    matchLabels:
-      app: "{{ .Release.Name }}"
-  template:
-    metadata:
-      labels:
-        app: "{{ .Release.Name }}"
-    spec:
-      hostNetwork: true
-      containers:
-        - name: "{{ .Release.Name }}"
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
-          imagePullPolicy: "{{ .Values.image.pullPolicy }}"
-          ports:
-            - name: http
-              containerPort: 6052
-              protocol: TCP
-          livenessProbe:
-            tcpSocket:
-              port: http
-          readinessProbe:
-            tcpSocket:
-              port: http
-          env:
-            - name: TZ
-              value: "{{ .Values.globals.timezone }}"
-          volumeMounts:
-            - mountPath: /config
-              name: data
-
-      volumes:
-        - name: data
-          persistentVolumeClaim:
-            claimName: "{{ .Release.Name }}-data"

charts/apps/esphome/templates/http-service.yaml

@@ -1,11 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: HttpService
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  environment: "{{ .Values.globals.environment }}"
-  subdomain: "{{ .Values.subdomain }}"
-  destination:
-    host: "{{ .Release.Name }}"
-    port:
-      number: 80

charts/apps/esphome/templates/pvc.yaml

@@ -1,11 +0,0 @@
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: '{{ .Release.Name }}-data'
-spec:
-  accessModes:
-    - 'ReadWriteOnce'
-  resources:
-    requests:
-      storage: '1Gi'
-  storageClassName: '{{ .Values.globals.environment }}'

charts/apps/esphome/templates/service.yaml

@@ -1,15 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: "{{ .Release.Name }}"
-  labels:
-    app: "{{ .Release.Name }}"
-spec:
-  type: ClusterIP
-  ports:
-    - port: 80
-      targetPort: 6052
-      protocol: TCP
-      name: http
-  selector:
-    app: "{{ .Release.Name }}"

charts/apps/esphome/values.yaml

@@ -1,9 +0,0 @@
-globals:
-  environment: prod
-  timezone: Europe/Amsterdam
-  domain: olsen.cloud
-image:
-  repository: ghcr.io/esphome/esphome
-  tag: latest@sha256:393775c4c02e0b09d086cd794815a723f90d4af7c3d871935e22be1a34c5d89a
-  pullPolicy: IfNotPresent
-subdomain: esphome

charts/apps/gitea/templates/deployment.yaml

@@ -1,23 +1,23 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: "{{ .Release.Name }}"
+  name: '{{ .Release.Name }}'
 spec:
   strategy:
     type: Recreate
   replicas: 1
   selector:
     matchLabels:
-      app: "{{ .Release.Name }}"
+      app: '{{ .Release.Name }}'
   template:
     metadata:
       labels:
-        app: "{{ .Release.Name }}"
+        app: '{{ .Release.Name }}'
     spec:
       containers:
-        - name: "{{ .Release.Name }}"
+        - name: '{{ .Release.Name }}'
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
+          image: '{{ .Values.image.repository }}:{{ .Values.image.tag }}'
-          imagePullPolicy: "{{ .Values.image.pullPolicy }}"
+          imagePullPolicy: '{{ .Values.image.pullPolicy }}'
           ports:
             - name: http
               containerPort: 3000
@@ -36,68 +36,64 @@ spec:
               name: data
           env:
             - name: TZ
-              value: "{{ .Values.globals.timezone }}"
+              value: '{{ .Values.globals.timezone }}'
             - name: USER_UID
-              value: "1000"
+              value: '1000'
             - name: USER_GID
-              value: "1000"
+              value: '1000'
-            - name: GITEA__server__SSH_DOMAIN
-              value: ssh-gitea.olsen.cloud
-            - name: GITEA__server__SSH_PORT
-              value: "2205"
             - name: GITEA__service__REQUIRE_EXTERNAL_REGISTRATION_PASSWORD
-              value: "true"
+              value: 'true'
             #- name: GITEA__service__ENABLE_BASIC_AUTHENTICATION
             #  value: 'true'
             - name: GITEA__service__ENABLE_PASSWORD_SIGNIN_FORM
-              value: "false"
+              value: 'false'
             - name: GITEA__service__DEFAULT_KEEP_EMAIL_PRIVATE
-              value: "true"
+              value: 'true'
             - name: GITEA__service__DEFAULT_USER_IS_RESTRICTED
-              value: "true"
+              value: 'true'
             - name: GITEA__service__DEFAULT_USER_VISIBILITY
-              value: "private"
+              value: 'private'
             - name: GITEA__service__DEFAULT_ORG_VISIBILITY
-              value: "private"
+              value: 'private'
             - name: GITEA__service__ALLOW_ONLY_EXTERNAL_REGISTRATION
-              value: "true"
+              value: 'true'
             - name: GITEA__other__SHOW_FOOTER_POWERED_BY
-              value: "false"
+              value: 'false'
             - name: GITEA__other__SHOW_FOOTER_TEMPLATE_LOAD_TIME
-              value: "false"
+              value: 'false'
             - name: GITEA__other__SHOW_FOOTER_VERSION
-              value: "false"
+              value: 'false'
             - name: GITEA__repository__ENABLE_PUSH_CREATE_USER
-              value: "true"
+              value: 'true'
             - name: GITEA__repository__ENABLE_PUSH_CREATE_ORG
-              value: "true"
+              value: 'true'
             - name: GITEA__openid__ENABLE_OPENID_SIGNIN
-              value: "false"
+              value: 'false'
             - name: GITEA__openid__ENABLE_OPENID_SIGNUP
-              value: "false"
+              value: 'false'
             - name: GITEA__database__DB_TYPE
               value: postgres
             - name: GITEA__database__NAME
               valueFrom:
                 secretKeyRef:
-                  name: "{{ .Release.Name }}-pg-connection"
+                  name: '{{ .Release.Name }}-pg-connection'
                   key: database
             - name: GITEA__database__HOST
               valueFrom:
                 secretKeyRef:
-                  name: "{{ .Release.Name }}-pg-connection"
+                  name: '{{ .Release.Name }}-pg-connection'
                   key: host
             - name: GITEA__database__USER
               valueFrom:
                 secretKeyRef:
-                  name: "{{ .Release.Name }}-pg-connection"
+                  name: '{{ .Release.Name }}-pg-connection'
                   key: user
             - name: GITEA__database__PASSWD
               valueFrom:
                 secretKeyRef:
-                  name: "{{ .Release.Name }}-pg-connection"
+                  name: '{{ .Release.Name }}-pg-connection'
                   key: password
       volumes:
         - name: data
           persistentVolumeClaim:
-            claimName: "{{ .Release.Name }}-data"
+            claimName: '{{ .Release.Name }}-data'

charts/apps/gitea/templates/service.yaml

@@ -1,9 +1,9 @@
 apiVersion: v1
 kind: Service
 metadata:
-  name: "{{ .Release.Name }}"
+  name: '{{ .Release.Name }}'
   labels:
-    app: "{{ .Release.Name }}"
+    app: '{{ .Release.Name }}'
 spec:
   type: ClusterIP
   ports:
@@ -12,21 +12,21 @@ spec:
       protocol: TCP
       name: http
   selector:
-    app: "{{ .Release.Name }}"
+    app: '{{ .Release.Name }}'
 
 ---
 apiVersion: v1
 kind: Service
 metadata:
-  name: "{{ .Release.Name }}-ssh"
+  name: '{{ .Release.Name }}-ssh'
   labels:
-    app: "{{ .Release.Name }}"
+    app: '{{ .Release.Name }}'
 spec:
   type: LoadBalancer
   ports:
-    - port: 2205
+    - port: 2202
       targetPort: 22
       protocol: TCP
       name: ssh
   selector:
-    app: "{{ .Release.Name }}"
+    app: '{{ .Release.Name }}'

charts/apps/gitea/values.yaml

@@ -3,6 +3,6 @@ globals:
   timezone: Europe/Amsterdam
 image:
   repository: docker.gitea.com/gitea
-  tag: latest@sha256:2edc102cbb636ae1ddac5fa0c715aa5b03079dee13ac6800b2cef6d4e912e718
+  tag: latest
   pullPolicy: IfNotPresent
 subdomain: gitea

charts/apps/harbor/Chart.yaml

@@ -1,3 +1,3 @@
 apiVersion: v2
 version: 1.0.0
-name: esphome
+name: monitoring

charts/apps/harbor/templates/helm.yaml

@@ -0,0 +1,38 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: '{{ .Release.Name }}'
+spec:
+  interval: 1h
+  url: https://helm.goharbor.io
+
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: '{{ .Release.Name }}'
+spec:
+  chart:
+    spec:
+      chart: harbor
+      reconcileStrategy: ChartVersion
+      sourceRef:
+        apiVersion: source.toolkit.fluxcd.io/v1
+        kind: HelmRepository
+        name: '{{ .Release.Name }}'
+        namespace: '{{ .Release.Namespace }}'
+  interval: 1h
+  values:
+    persistence:
+      persistentVolumeClaim:
+        registry:
+          storageClass: '{{ .Values.globals.environment }}'
+        jobservice:
+          jobLog:
+            storageClass: '{{ .Values.globals.environment }}'
+        database:
+          storageClass: '{{ .Values.globals.environment }}'
+        redis:
+          storageClass: '{{ .Values.globals.environment }}'
+        trivy:
+          storageClass: '{{ .Values.globals.environment }}'

charts/apps/harbor/templates/http-service.yaml

@@ -1,5 +1,5 @@
 apiVersion: homelab.mortenolsen.pro/v1
-kind: ExternalHttpService
+kind: HttpService
 metadata:
   name: '{{ .Release.Name }}'
 spec:

charts/apps/harbor/values.yaml

@@ -0,0 +1,3 @@
+globals:
+  environment: prod
+subdomain: harbor

charts/apps/headscale/values.yaml

@@ -2,6 +2,6 @@ globals:
   environment: prod
 image:
   repository: headscale/headscale
-  tag: latest@sha256:ea9b5ee06274d757a4d52103de56cd11a9c393acb19d9a35f4b9fe52ada410de
+  tag: latest
   pullPolicy: IfNotPresent
 subdomain: headscale

charts/apps/homarr/Chart.yaml

@@ -1,3 +0,0 @@
-apiVersion: v2
-version: 1.0.0
-name: openwebui

charts/apps/homarr/templates/client.yaml

@@ -1,10 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: OidcClient
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  environment: "{{ .Values.globals.environment }}"
-  redirectUris:
-    - path: /api/auth/callback/oidc
-      subdomain: "{{ .Values.subdomain }}"
-      matchingMode: strict

charts/apps/homarr/templates/deployment.yaml

@@ -1,83 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  strategy:
-    type: Recreate
-  replicas: 1
-  selector:
-    matchLabels:
-      app: "{{ .Release.Name }}"
-  template:
-    metadata:
-      labels:
-        app: "{{ .Release.Name }}"
-    spec:
-      containers:
-        - name: "{{ .Release.Name }}"
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
-          imagePullPolicy: "{{ .Values.image.pullPolicy }}"
-          ports:
-            - name: http
-              containerPort: 7575
-              protocol: TCP
-          livenessProbe:
-            tcpSocket:
-              port: http
-          readinessProbe:
-            tcpSocket:
-              port: http
-          volumeMounts:
-            - mountPath: /appdata
-              name: data
-          env:
-            - name: BASE_URL
-              value: https://homarr.olsen.cloud # TODO
-
-            - name: NEXTAUTH_URL
-              value: https://homarr.olsen.cloud
-
-            - name: AUTH_PROVIDERS
-              value: oidc
-
-            - name: AUTH_OIDC_CLIENT_NAME
-              value: Authentik
-
-            - name: AUTH_OIDC_SCOPE_OVERWRITE
-              value: openid email profile
-
-            - name: AUTH_OIDC_GROUPS_ATTRIBUTE
-              value: groups
-
-            - name: AUTH_OIDC_AUTO_LOGIN
-              value: "true"
-
-            - name: SECRET_ENCRYPTION_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: "{{ .Release.Name }}-secrets"
-                  key: encryptionkey
-
-            - name: AUTH_OIDC_ISSUER
-              valueFrom:
-                secretKeyRef:
-                  name: "{{ .Release.Name }}-client"
-                  key: configurationIssuer
-
-            - name: AUTH_OIDC_CLIENT_ID
-              valueFrom:
-                secretKeyRef:
-                  name: "{{ .Release.Name }}-client"
-                  key: clientId
-
-            - name: AUTH_OIDC_CLIENT_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: "{{ .Release.Name }}-client"
-                  key: clientSecret
-
-      volumes:
-        - name: data
-          persistentVolumeClaim:
-            claimName: "{{ .Release.Name }}-data"

charts/apps/homarr/templates/http-service.yaml

@@ -1,11 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: HttpService
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  environment: "{{ .Values.globals.environment }}"
-  subdomain: "{{ .Values.subdomain }}"
-  destination:
-    host: "{{ .Release.Name }}.{{ .Release.Namespace }}.svc.cluster.local"
-    port:
-      number: 80

charts/apps/homarr/templates/pvc.yaml

@@ -1,11 +0,0 @@
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: '{{ .Release.Name }}-data'
-spec:
-  accessModes:
-    - 'ReadWriteOnce'
-  resources:
-    requests:
-      storage: '1Gi'
-  storageClassName: '{{ .Values.globals.environment }}'

charts/apps/homarr/templates/secret.yaml

@@ -1,9 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: GenerateSecret
-metadata:
-  name: "{{ .Release.Name }}-secrets"
-spec:
-  fields:
-    - name: encryptionkey
-      encoding: hex
-      length: 64

charts/apps/homarr/templates/service.yaml

@@ -1,15 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: "{{ .Release.Name }}"
-  labels:
-    app: "{{ .Release.Name }}"
-spec:
-  type: ClusterIP
-  ports:
-    - port: 80
-      targetPort: 7575
-      protocol: TCP
-      name: http
-  selector:
-    app: "{{ .Release.Name }}"

charts/apps/homarr/values.yaml

@@ -1,7 +0,0 @@
-globals:
-  environment: prod
-image:
-  repository: ghcr.io/homarr-labs/homarr
-  tag: latest@sha256:7d58149aa544037d173a48f41fbde86706068d2b8933a33a911dce26457ecf16
-  pullPolicy: IfNotPresent
-subdomain: homarr

charts/apps/home-assistant/Chart.yaml

@@ -1,3 +0,0 @@
-apiVersion: v2
-version: 1.0.0
-name: home-assistant

charts/apps/home-assistant/templates/client.yaml

@@ -1,10 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: OidcClient
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  environment: "{{ .Values.globals.environment }}"
-  redirectUris:
-    - path: /auth/openid/callback
-      subdomain: "{{ .Values.subdomain }}"
-      matchingMode: strict

charts/apps/home-assistant/templates/deployment.yaml

@@ -1,45 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  strategy:
-    type: Recreate
-  replicas: 1
-  selector:
-    matchLabels:
-      app: "{{ .Release.Name }}"
-  template:
-    metadata:
-      labels:
-        app: "{{ .Release.Name }}"
-    spec:
-      hostNetwork: true
-      dnsPolicy: ClusterFirstWithHostNet
-
-      containers:
-        - name: "{{ .Release.Name }}"
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
-          imagePullPolicy: "{{ .Values.image.pullPolicy }}"
-          env:
-            - name: TZ
-              value: "{{ .Values.globals.timezone }}"
-          ports:
-            - name: http
-              containerPort: 8123
-              protocol: TCP
-          livenessProbe:
-            tcpSocket:
-              port: http
-          readinessProbe:
-            tcpSocket:
-              port: http
-          volumeMounts:
-            - mountPath: /config
-              name: config
-          securityContext:
-            privileged: true
-      volumes:
-        - name: config
-          persistentVolumeClaim:
-            claimName: "{{ .Release.Name }}-config"

charts/apps/home-assistant/templates/external-http-service.yaml

@@ -1,11 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: ExternalHttpService
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  environment: "{{ .Values.globals.environment }}"
-  subdomain: "{{ .Values.subdomain }}"
-  destination:
-    host: "{{ .Release.Name }}.{{ .Release.Namespace }}.svc.cluster.local"
-    port:
-      number: 80

charts/apps/home-assistant/templates/http-service.yaml

@@ -1,11 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: HttpService
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  environment: "{{ .Values.globals.environment }}"
-  subdomain: "{{ .Values.subdomain }}"
-  destination:
-    host: "{{ .Release.Name }}.{{ .Release.Namespace }}.svc.cluster.local"
-    port:
-      number: 80

charts/apps/home-assistant/templates/piper.yaml

@@ -1,59 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: "{{ .Release.Name }}-piper"
-spec:
-  strategy:
-    type: Recreate
-  replicas: 1
-  selector:
-    matchLabels:
-      app: "{{ .Release.Name }}-piper"
-  template:
-    metadata:
-      labels:
-        app: "{{ .Release.Name }}-piper"
-    spec:
-      hostNetwork: true
-
-      containers:
-        - name: "{{ .Release.Name }}-piper"
-          image: "{{ .Values.piper.image.repository }}:{{ .Values.piper.image.tag }}"
-          imagePullPolicy: "{{ .Values.piper.image.pullPolicy }}"
-          args:
-            - --piper
-            - /usr/share/piper/piper
-            - --data-dir
-            - /usr/share/piper-voices
-            - --voice
-            - "{{ .Values.piper.model }}"
-          env:
-            - name: TZ
-              value: "{{ .Values.globals.timezone }}"
-          ports:
-            - name: http
-              containerPort: 10200
-              protocol: TCP
-          livenessProbe:
-            tcpSocket:
-              port: http
-          readinessProbe:
-            tcpSocket:
-              port: http
-
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: "{{ .Release.Name }}-piper"
-  labels:
-    app: "{{ .Release.Name }}-piper"
-spec:
-  type: ClusterIP
-  ports:
-    - port: 80
-      targetPort: 10200
-      protocol: TCP
-      name: http
-  selector:
-    app: "{{ .Release.Name }}-piper"

charts/apps/home-assistant/templates/pvc.yaml

@@ -1,11 +0,0 @@
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: "{{ .Release.Name }}-config"
-spec:
-  accessModes:
-    - "ReadWriteOnce"
-  resources:
-    requests:
-      storage: "1Gi"
-  storageClassName: "{{ .Values.globals.environment }}"

charts/apps/home-assistant/templates/service.yaml

@@ -1,15 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: "{{ .Release.Name }}"
-  labels:
-    app: "{{ .Release.Name }}"
-spec:
-  type: ClusterIP
-  ports:
-    - port: 80
-      targetPort: 8123
-      protocol: TCP
-      name: http
-  selector:
-    app: "{{ .Release.Name }}"

charts/apps/home-assistant/templates/whisper.yaml

@@ -1,57 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: "{{ .Release.Name }}-whisper"
-spec:
-  strategy:
-    type: Recreate
-  replicas: 1
-  selector:
-    matchLabels:
-      app: "{{ .Release.Name }}-whisper"
-  template:
-    metadata:
-      labels:
-        app: "{{ .Release.Name }}-whisper"
-    spec:
-      hostNetwork: true
-
-      containers:
-        - name: "{{ .Release.Name }}-whisper"
-          image: "{{ .Values.whisper.image.repository }}:{{ .Values.whisper.image.tag }}"
-          imagePullPolicy: "{{ .Values.whisper.image.pullPolicy }}"
-          args:
-            - --model
-            - "{{ .Values.whisper.model }}"
-            - --language
-            - "{{ .Values.whisper.language }}"
-          env:
-            - name: TZ
-              value: "{{ .Values.globals.timezone }}"
-          ports:
-            - name: http
-              containerPort: 10300
-              protocol: TCP
-          livenessProbe:
-            tcpSocket:
-              port: http
-          readinessProbe:
-            tcpSocket:
-              port: http
-
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: "{{ .Release.Name }}-whisper"
-  labels:
-    app: "{{ .Release.Name }}-whisper"
-spec:
-  type: ClusterIP
-  ports:
-    - port: 80
-      targetPort: 10300
-      protocol: TCP
-      name: http
-  selector:
-    app: "{{ .Release.Name }}-whisper"

charts/apps/home-assistant/values.yaml

@@ -1,21 +0,0 @@
-globals:
-  environment: prod
-  timezone: Europe/Amsterdam
-image:
-  repository: ghcr.io/home-assistant/home-assistant
-  tag: stable@sha256:37af5e84627dc6cc4f8ce2de631cca7ee1fc76c908b429b3a8c1ec46f246a5fe
-  pullPolicy: IfNotPresent
-subdomain: home-assistant
-piper:
-  image:
-    repository: ghcr.io/morten-olsen/glados-voice
-    tag: main@sha256:8fcc19bd9e7e846bdfd9e9e569c8c944dcfb1d0b47e3f479cbaa7f5587c7206c
-    pullPolicy: Always
-  model: en_US-glados-medium
-whisper:
-  image:
-    repository: rhasspy/wyoming-whisper
-    tag: latest@sha256:f03456914affe8076fc7688c0890f4c708d93ebfac7340b0b2467f721412012d
-    pullPolicy: IfNotPresent
-  model: tiny-int8
-  language: us

charts/apps/jellyfin/values.yaml

@@ -2,6 +2,6 @@ globals:
   environment: prod
 image:
   repository: docker.io/jellyfin/jellyfin
-  tag: latest@sha256:7ae36aab93ef9b6aaff02b37f8bb23df84bb2d7a3f6054ec8fc466072a648ce2
+  tag: latest
   pullPolicy: IfNotPresent
 subdomain: jellyfin

charts/apps/mealie/Chart.yaml

@@ -1,3 +0,0 @@
-apiVersion: v2
-version: 1.0.0
-name: mealie

charts/apps/mealie/templates/client.yaml

@@ -1,10 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: OidcClient
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  environment: "{{ .Values.globals.environment }}"
-  redirectUris:
-    - path: /login
-      subdomain: "{{ .Values.subdomain }}"
-      matchingMode: strict

charts/apps/mealie/templates/deployment.yaml

@@ -1,72 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: "{{ .Release.Name }}"
-  labels:
-    app: "{{ .Release.Name }}"
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: "{{ .Release.Name }}"
-  template:
-    metadata:
-      labels:
-        app: "{{ .Release.Name }}"
-    spec:
-      containers:
-        - name: "{{ .Release.Name }}"
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
-          ports:
-            - containerPort: 9000
-              name: http
-          env:
-            - name: TZ
-              value: "{{ .Values.globals.timezone }}"
-            - name: BASE_URL
-              value: https://{{ .Values.subdomain }}.{{ .Values.globals.domain }}
-            - name: ALLOW_SIGNUP
-              value: "false"
-            - name: PUID
-              value: "1000"
-            - name: PGID
-              value: "1000"
-            - name: OIDC_AUTH_ENABLED
-              value: "true"
-            - name: OIDC_SIGNUP_ENABLED
-              value: "true"
-            - name: OIDC_USER_GROUP
-              value: "mealie-users"
-            - name: OIDC_ADMIN_GROUP
-              value: "admin"
-            - name: OIDC_AUTO_REDIRECT
-              value: "true"
-            - name: OIDC_PROVIDER_NAME
-              value: Authentik
-            - name: OIDC_REMEMBER_ME
-              value: "true"
-            - name: OIDC_SIGNING_ALGORITHM
-              value: RS256
-            - name: OIDC_CLIENT_ID
-              valueFrom:
-                secretKeyRef:
-                  name: "{{ .Release.Name }}-client"
-                  key: clientId
-            - name: OIDC_CLIENT_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: "{{ .Release.Name }}-client"
-                  key: clientSecret
-            - name: OIDC_CONFIGURATION_URL
-              valueFrom:
-                secretKeyRef:
-                  name: "{{ .Release.Name }}-client"
-                  key: configuration
-
-          volumeMounts:
-            - mountPath: /app/data
-              name: data
-      volumes:
-        - name: data
-          persistentVolumeClaim:
-            claimName: "{{ .Release.Name }}-data"

charts/apps/mealie/templates/external-http-service.yaml

@@ -1,11 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: ExternalHttpService
-metadata:
-  name: '{{ .Release.Name }}'
-spec:
-  environment: '{{ .Values.globals.environment }}'
-  subdomain: '{{ .Values.subdomain }}'
-  destination:
-    host: '{{ .Release.Name }}.{{ .Release.Namespace }}.svc.cluster.local'
-    port:
-      number: 80

charts/apps/mealie/templates/http-service.yaml

@@ -1,11 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: HttpService
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  environment: "{{ .Values.globals.environment }}"
-  subdomain: "{{ .Values.subdomain }}"
-  destination:
-    host: "{{ .Release.Name }}"
-    port:
-      number: 80

charts/apps/mealie/templates/pvc.yaml

@@ -1,11 +0,0 @@
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: '{{ .Release.Name }}-data'
-spec:
-  accessModes:
-    - 'ReadWriteOnce'
-  resources:
-    requests:
-      storage: '1Gi'
-  storageClassName: '{{ .Values.globals.environment }}'

charts/apps/mealie/templates/service.yaml

@@ -1,15 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: "{{ .Release.Name }}"
-  labels:
-    app: "{{ .Release.Name }}"
-spec:
-  type: ClusterIP
-  ports:
-    - port: 80
-      targetPort: 9000
-      protocol: TCP
-      name: http
-  selector:
-    app: "{{ .Release.Name }}"

charts/apps/mealie/values.yaml

@@ -1,8 +0,0 @@
-globals:
-  environment: prod
-  domain: olsen.cloud
-  timezone: Europe/Amsterdam
-subdomain: mealie
-image:
-  repository: ghcr.io/mealie-recipes/mealie
-  tag: latest@sha256:d872fb529097df2d77b3c6f5e469b047f99d0d1c9f793a84ae27aa106e1f5d7e

charts/apps/metamcp/values.yaml

@@ -3,6 +3,6 @@ globals:
   timezone: Europe/Amsterdam
 image:
   repository: ghcr.io/metatool-ai/metamcp
-  tag: latest@sha256:09e467e3ac40132f4ee11407e792ca5767894b0909d56c270223bdfe64dfcfd2
+  tag: latest
   pullPolicy: IfNotPresent
 subdomain: metamcp

charts/apps/miniflux.disable/Chart.yaml

@@ -1,3 +1,3 @@
 apiVersion: v2
 version: 1.0.0
-name: apprise
+name: ByteStash

charts/apps/miniflux.disable/templates/client.yaml

@@ -6,5 +6,5 @@ spec:
   environment: '{{ .Values.globals.environment }}'
   redirectUris:
     - path: /api/auth/oidc/callback
-      subdomain: '{{ .Values.subdomain }}'
+      subdomain: bytestash
       matchingMode: strict

charts/apps/miniflux.disable/templates/deployment.yaml

@@ -0,0 +1,55 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: '{{ .Release.Name }}'
+  labels:
+    app: '{{ .Release.Name }}'
+spec:
+  serviceName: '{{ .Release.Name }}-headless'
+  replicas: 1
+  selector:
+    matchLabels:
+      app: '{{ .Release.Name }}'
+  template:
+    metadata:
+      labels:
+        app: '{{ .Release.Name }}'
+    spec:
+      containers:
+        - name: '{{ .Release.Name }}'
+          image: ghcr.io/miniflux/miniflux:latest
+          ports:
+            - containerPort: 8080
+              name: http
+          env:
+            - name: ALLOW_NEW_ACCOUNTS
+              value: 'true'
+            - name: DISABLE_INTERNAL_ACCOUNTS
+              value: 'true'
+            - name: OIDC_ENABLED
+              value: 'true'
+            - name: OIDC_DISPLAY_NAME
+              value: OIDC
+            - name: OIDC_CLIENT_ID
+              valueFrom:
+                secretKeyRef:
+                  name: '{{ .Release.Name }}-client'
+                  key: clientId
+            - name: OIDC_CLIENT_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: '{{ .Release.Name }}-client'
+                  key: clientSecret
+            - name: OIDC_ISSUER_URL
+              valueFrom:
+                secretKeyRef:
+                  name: '{{ .Release.Name }}-client'
+                  key: configuration
+
+          volumeMounts:
+            - mountPath: /data/snippets
+              name: data
+      volumes:
+        - name: data
+          persistentVolumeClaim:
+            claimName: '{{ .Release.Name }}-data'

charts/apps/miniflux.disable/templates/service.yaml

@@ -1,9 +1,9 @@
 apiVersion: v1
 kind: Service
 metadata:
-  name: "{{ .Release.Name }}"
+  name: '{{ .Release.Name }}'
   labels:
-    app: "{{ .Release.Name }}"
+    app: '{{ .Release.Name }}'
 spec:
   type: ClusterIP
   ports:
@@ -12,4 +12,4 @@ spec:
       protocol: TCP
       name: http
   selector:
-    app: "{{ .Release.Name }}"
+    app: '{{ .Release.Name }}'

charts/apps/miniflux.disable/values.yaml

@@ -0,0 +1,3 @@
+globals:
+  environment: prod
+subdomain: miniflux

charts/apps/miniflux/Chart.yaml

@@ -1,3 +0,0 @@
-apiVersion: v2
-version: 1.0.0
-name: miniflux

charts/apps/miniflux/templates/client.yaml

@@ -1,10 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: OidcClient
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  environment: "{{ .Values.globals.environment }}"
-  redirectUris:
-    - path: oauth2/oidc/callback
-      subdomain: "{{ .Values.subdomain }}"
-      matchingMode: strict

charts/apps/miniflux/templates/database.yaml

@@ -1,6 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: PostgresDatabase
-metadata:
-  name: '{{ .Release.Name }}'
-spec:
-  environment: '{{ .Values.globals.environment }}'

charts/apps/miniflux/templates/deployment.yaml

@@ -1,74 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  strategy:
-    type: Recreate
-  replicas: 1
-  selector:
-    matchLabels:
-      app: "{{ .Release.Name }}"
-  template:
-    metadata:
-      labels:
-        app: "{{ .Release.Name }}"
-    spec:
-      containers:
-        - name: "{{ .Release.Name }}"
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
-          imagePullPolicy: "{{ .Values.image.pullPolicy }}"
-          ports:
-            - name: http
-              containerPort: 8080
-              protocol: TCP
-          livenessProbe:
-            tcpSocket:
-              port: http
-          readinessProbe:
-            tcpSocket:
-              port: http
-          volumeMounts:
-            - mountPath: /data
-              name: data
-          env:
-            - name: TZ
-              value: "{{ .Values.globals.timezone }}"
-            - name: BASE_URL
-              value: https://{{ .Values.subdomain }}.{{ .Values.globals.domain }}
-            - name: RUN_MIGRATIONS
-              value: "1"
-            - name: DISABLE_LOCAL_AUTH
-              value: "1"
-            - name: OAUTH2_CLIENT_ID
-              valueFrom:
-                secretKeyRef:
-                  name: "{{ .Release.Name }}-client"
-                  key: clientId
-            - name: OAUTH2_CLIENT_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: "{{ .Release.Name }}-client"
-                  key: clientSecret
-            - name: OAUTH2_OIDC_DISCOVERY_ENDPOINT
-              valueFrom:
-                secretKeyRef:
-                  name: "{{ .Release.Name }}-client"
-                  key: configurationIssuer
-            - name: OAUTH2_OIDC_PROVIDER_NAME
-              value: Authentik
-            - name: OAUTH2_PROVIDER
-              value: oidc
-            - name: OAUTH2_REDIRECT_URL
-              value: https://{{ .Values.subdomain }}.{{ .Values.globals.domain }}/oauth2/oidc/callback
-            - name: OAUTH2_USER_CREATION
-              value: "1"
-            - name: DATABASE_URL
-              valueFrom:
-                secretKeyRef:
-                  name: "{{ .Release.Name }}-pg-connection"
-                  key: url
-      volumes:
-        - name: data
-          persistentVolumeClaim:
-            claimName: "{{ .Release.Name }}-data"

charts/apps/miniflux/templates/external-http-service.yaml

@@ -1,11 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: ExternalHttpService
-metadata:
-  name: '{{ .Release.Name }}'
-spec:
-  environment: '{{ .Values.globals.environment }}'
-  subdomain: '{{ .Values.subdomain }}'
-  destination:
-    host: '{{ .Release.Name }}.{{ .Release.Namespace }}.svc.cluster.local'
-    port:
-      number: 80

charts/apps/miniflux/templates/pvc.yaml

@@ -1,11 +0,0 @@
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: '{{ .Release.Name }}-data'
-spec:
-  accessModes:
-    - 'ReadWriteOnce'
-  resources:
-    requests:
-      storage: '1Gi'
-  storageClassName: '{{ .Values.globals.environment }}'

charts/apps/miniflux/values.yaml

@@ -1,9 +0,0 @@
-globals:
-  environment: prod
-  timezone: Europe/Amsterdam
-  domain: olsen.cloud
-image:
-  repository: ghcr.io/miniflux/miniflux
-  tag: latest@sha256:b435a1ea2408f996c8d4c00c4f46523fa9203971ee1e85b1fe7ad3f0e7ae617f
-  pullPolicy: IfNotPresent
-subdomain: miniflux

charts/apps/mqtt/Chart.yaml

@@ -1,3 +0,0 @@
-apiVersion: v2
-version: 1.0.0
-name: apprise

charts/apps/mqtt/templates/client.yaml

@@ -1,10 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: OidcClient
-metadata:
-  name: '{{ .Release.Name }}'
-spec:
-  environment: '{{ .Values.globals.environment }}'
-  redirectUris:
-    - path: /oauth/oidc/callback
-      subdomain: '{{ .Values.subdomain }}'
-      matchingMode: strict

charts/apps/mqtt/templates/config.yaml

@@ -1,12 +0,0 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: "{{ .Release.Name }}-config"
-  labels:
-    app: "{{ .Release.Name }}"
-data:
-  mosquitto.conf: |
-    persistence true
-    persistence_location /mosquitto/data/
-    listener 1884 0.0.0.0
-    allow_anonymous true

charts/apps/mqtt/templates/deployment.yaml

@@ -1,62 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  strategy:
-    type: Recreate
-  replicas: 1
-  selector:
-    matchLabels:
-      app: "{{ .Release.Name }}"
-  template:
-    metadata:
-      labels:
-        app: "{{ .Release.Name }}"
-    spec:
-      containers:
-        - name: "{{ .Release.Name }}"
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
-          imagePullPolicy: "{{ .Values.image.pullPolicy }}"
-          ports:
-            - name: mqtt
-              containerPort: 1883
-              protocol: TCP
-          livenessProbe:
-            exec:
-              command:
-                - sh
-                - -c
-                - mosquitto_pub -h localhost -p 1884 -t health/ready -m "ready" -q 0 -i readiness_client -V 5
-            initialDelaySeconds: 10 # Give broker time to start
-            periodSeconds: 20 # Check every 20 seconds
-            timeoutSeconds: 5 # Fail if command takes longer than 5 seconds
-            failureThreshold: 3 # Restart if 3 consecutive failures
-          readinessProbe:
-            exec:
-              command:
-                - sh
-                - -c
-                - mosquitto_pub -h localhost -p 1884 -t health/ready -m "ready" -q 0 -i readiness_client -V 5
-            initialDelaySeconds: 15
-            periodSeconds: 20
-            timeoutSeconds: 5
-            failureThreshold: 3
-          env:
-            - name: TZ
-              value: "{{ .Values.globals.timezone }}"
-            - name: MODE
-              value: "{{ .Values.mode }}"
-          volumeMounts:
-            - mountPath: /mosquitto/config
-              name: config
-            - mountPath: /mosquitto/data
-              name: data
-
-      volumes:
-        - name: config
-          configMap:
-            name: "{{ .Release.Name }}-config"
-        - name: data
-          persistentVolumeClaim:
-            claimName: "{{ .Release.Name }}-data"

charts/apps/mqtt/templates/pvc.yaml

@@ -1,11 +0,0 @@
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: "{{ .Release.Name }}-data"
-spec:
-  accessModes:
-    - "ReadWriteOnce"
-  resources:
-    requests:
-      storage: "1Gi"
-  storageClassName: "{{ .Values.globals.environment }}"

charts/apps/mqtt/templates/service.yaml

@@ -1,15 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: "{{ .Release.Name }}"
-  labels:
-    app: "{{ .Release.Name }}"
-spec:
-  type: ClusterIP
-  ports:
-    - port: 1883
-      targetPort: 1883
-      protocol: TCP
-      name: mqtt
-  selector:
-    app: "{{ .Release.Name }}"

charts/apps/mqtt/values.yaml

@@ -1,10 +0,0 @@
-globals:
-  environment: prod
-  timezone: Europe/Amsterdam
-  domain: olsen.cloud
-image:
-  repository: docker.io/eclipse-mosquitto
-  tag: latest@sha256:d219d3a72847f3aed6a1d66975972d3b17f86e39e8f6f6b86b4088b879c1a2d6
-  pullPolicy: IfNotPresent
-subdomain: mqtt
-mode: json-rpc

charts/apps/music-assistant/Chart.yaml

@@ -1,3 +0,0 @@
-apiVersion: v2
-version: 1.0.0
-name: music-assistant

charts/apps/music-assistant/templates/deployment.yaml

@@ -1,44 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  strategy:
-    type: Recreate
-  replicas: 1
-  selector:
-    matchLabels:
-      app: "{{ .Release.Name }}"
-  template:
-    metadata:
-      labels:
-        app: "{{ .Release.Name }}"
-    spec:
-      hostNetwork: true
-
-      containers:
-        - name: "{{ .Release.Name }}"
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
-          imagePullPolicy: "{{ .Values.image.pullPolicy }}"
-          ports:
-            - name: http
-              containerPort: 8095
-              protocol: TCP
-          livenessProbe:
-            tcpSocket:
-              port: http
-          readinessProbe:
-            tcpSocket:
-              port: http
-          volumeMounts:
-            - mountPath: /data
-              name: data
-          securityContext:
-            capabilities:
-              add:
-                - SYS_ADMIN
-                - DAC_READ_SEARCH
-      volumes:
-        - name: data
-          persistentVolumeClaim:
-            claimName: "{{ .Release.Name }}-data"

charts/apps/music-assistant/templates/http-service.yaml

@@ -1,11 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: HttpService
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  environment: "{{ .Values.globals.environment }}"
-  subdomain: "{{ .Values.subdomain }}"
-  destination:
-    host: "{{ .Release.Name }}.{{ .Release.Namespace }}.svc.cluster.local"
-    port:
-      number: 80

charts/apps/music-assistant/templates/pvc.yaml

@@ -1,11 +0,0 @@
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: "{{ .Release.Name }}-data"
-spec:
-  accessModes:
-    - "ReadWriteOnce"
-  resources:
-    requests:
-      storage: "1Gi"
-  storageClassName: "{{ .Values.globals.environment }}"

charts/apps/music-assistant/templates/service.yaml

@@ -1,15 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: "{{ .Release.Name }}"
-  labels:
-    app: "{{ .Release.Name }}"
-spec:
-  type: ClusterIP
-  ports:
-    - port: 80
-      targetPort: 8095
-      protocol: TCP
-      name: http
-  selector:
-    app: "{{ .Release.Name }}"

charts/apps/music-assistant/values.yaml

@@ -1,7 +0,0 @@
-globals:
-  environment: prod
-image:
-  repository: ghcr.io/music-assistant/server
-  tag: latest@sha256:f534116c53d49b3120961c908a5fa24f28684806bf222ccd74add9e16b105aa4
-  pullPolicy: IfNotPresent
-subdomain: music-assistant

charts/apps/n8n/templates/deployment.yaml

@@ -1,23 +1,23 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: "{{ .Release.Name }}"
+  name: '{{ .Release.Name }}'
 spec:
   strategy:
     type: Recreate
   replicas: 1
   selector:
     matchLabels:
-      app: "{{ .Release.Name }}"
+      app: '{{ .Release.Name }}'
   template:
     metadata:
       labels:
-        app: "{{ .Release.Name }}"
+        app: '{{ .Release.Name }}'
     spec:
       containers:
-        - name: "{{ .Release.Name }}"
+        - name: '{{ .Release.Name }}'
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
+          image: '{{ .Values.image.repository }}:{{ .Values.image.tag }}'
-          imagePullPolicy: "{{ .Values.image.pullPolicy }}"
+          imagePullPolicy: '{{ .Values.image.pullPolicy }}'
           ports:
             - name: http
               containerPort: 5678
@@ -33,49 +33,41 @@ spec:
               name: data
           env:
             - name: TZ
-              value: "{{ .Values.globals.timezone }}"
+              value: '{{ .Values.globals.timezone }}'
             - name: GENERIC_TIMEZONE
-              value: "{{ .Values.globals.timezone }}"
+              value: '{{ .Values.globals.timezone }}'
             - name: N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS
-              value: "true"
+              value: 'true'
             - name: N8N_RUNNERS_ENABLED
-              value: "true"
+              value: 'true'
-            - name: N8N_EDITOR_BASE_URL
-              value: https://{{ .Values.subdomain }}.{{ .Values.globals.domain }}
-            - name: VUE_APP_URL_BASE_API
-              value: https://{{ .Values.subdomain }}.{{ .Values.globals.domain }}
-            - name: N8N_HOST
-              value: "{{ .Values.subdomain }}.{{ .Values.globals.domain }}"
-            - name: N8N_DIAGNOSTICS_ENABLED
-              value: "false"
             - name: DB_TYPE
               value: postgresdb
             - name: DB_POSTGRESDB_DATABASE
               valueFrom:
                 secretKeyRef:
-                  name: "{{ .Release.Name }}-pg-connection"
+                  name: '{{ .Release.Name }}-pg-connection'
                   key: database
             - name: DB_POSTGRESDB_HOST
               valueFrom:
                 secretKeyRef:
-                  name: "{{ .Release.Name }}-pg-connection"
+                  name: '{{ .Release.Name }}-pg-connection'
                   key: host
             - name: DB_POSTGRESDB_PORT
               valueFrom:
                 secretKeyRef:
-                  name: "{{ .Release.Name }}-pg-connection"
+                  name: '{{ .Release.Name }}-pg-connection'
                   key: port
             - name: DB_POSTGRESDB_USER
               valueFrom:
                 secretKeyRef:
-                  name: "{{ .Release.Name }}-pg-connection"
+                  name: '{{ .Release.Name }}-pg-connection'
                   key: user
             - name: DB_POSTGRESDB_PASSWORD
               valueFrom:
                 secretKeyRef:
-                  name: "{{ .Release.Name }}-pg-connection"
+                  name: '{{ .Release.Name }}-pg-connection'
                   key: password
       volumes:
         - name: data
           persistentVolumeClaim:
-            claimName: "{{ .Release.Name }}-data"
+            claimName: '{{ .Release.Name }}-data'

charts/apps/n8n/values.yaml

@@ -1,9 +1,8 @@
 globals:
   environment: prod
   timezone: Europe/Amsterdam
-  domain: olsen.cloud
 image:
   repository: docker.n8n.io/n8nio/n8n
-  tag: latest@sha256:6c0c7650150a3fb0fd30d13160a87b5227963c36c9297b5bda618bcadfcee932
+  tag: latest
   pullPolicy: IfNotPresent
 subdomain: n8n

charts/apps/ollama/values.yaml

@@ -2,6 +2,6 @@ globals:
   environment: prod
 image:
   repository: ollama/ollama
-  tag: 0.11.8@sha256:03eaa1581455ba16e7c954d799e4f44996b60ae668261acd00a0e80a241ed720
+  tag: 0.11.8
   pullPolicy: IfNotPresent
 subdomain: openwebui