From c81cf5c2e0aa2cd6db25da9c2dcdecd08a647670 Mon Sep 17 00:00:00 2001
From: William P <me@williamtpeebles.com>
Date: Thu, 6 Mar 2025 20:34:31 -0500
Subject: [PATCH 01/22] add emby

---
 emby/cert-dubyatp-xyz.yaml | 10 +++++++
 emby/deployment.yaml       | 53 ++++++++++++++++++++++++++++++++++++++
 emby/ingress.yaml          | 22 ++++++++++++++++
 emby/pvc.yaml              | 12 +++++++++
 emby/svc.yaml              | 23 +++++++++++++++++
 5 files changed, 120 insertions(+)
 create mode 100644 emby/cert-dubyatp-xyz.yaml
 create mode 100644 emby/deployment.yaml
 create mode 100644 emby/ingress.yaml
 create mode 100644 emby/pvc.yaml
 create mode 100644 emby/svc.yaml

diff --git a/emby/cert-dubyatp-xyz.yaml b/emby/cert-dubyatp-xyz.yaml
new file mode 100644
index 0000000..dc95814
--- /dev/null
+++ b/emby/cert-dubyatp-xyz.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: cert-dubyatp-xyz
+  annotations:
+    replicator.v1.mittwald.de/replicate-from: "cert-manager/cert-dubyatp-xyz"
+    replicator.v1.mittwald.de/replicated-keys: "tls.crt,tls.key"
+  data:
+    tls.crt: ""
+    tls.key: ""
\ No newline at end of file
diff --git a/emby/deployment.yaml b/emby/deployment.yaml
new file mode 100644
index 0000000..88e461b
--- /dev/null
+++ b/emby/deployment.yaml
@@ -0,0 +1,53 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: emby
+spec:
+  selector:
+    matchLabels:
+      app: emby
+  template:
+    metadata:
+      labels:
+        app: emby
+    spec:
+      volumes:
+        - name: tv-shows
+          nfs:
+            server: 10.105.15.20
+            path: /mnt/hdd-pool/tv-shows
+        - name: movies
+          nfs:
+            server: 10.105.15.20
+            path: /mnt/hdd-pool/movies
+        - name: emby-config
+          persistentVolumeClaim:
+            claimName: emby-config
+        - name: dev-dri
+          hostPath:
+            path: /dev/dri
+      securityContext:
+        privileged: true
+      containers:
+      - name: emby
+        image: emby/embyserver:4.9.0.41
+        volumeMounts:
+          - name: tv-shows
+            mountPath: /mnt/tv-shows
+          - name: movies
+            mountPath: /mnt/movies
+          - name: emby-config
+            mountPath: /config
+          - name: dev-dri
+            mountPath: /dev/dri
+        env:
+        - name: UID
+          value: "1000"
+        - name: GID
+          value: "1000"
+        - name: GIDLIST
+          value: "100"
+        resources:
+          limits:
+            memory: "4096Mi"
+            cpu: "1000m"
diff --git a/emby/ingress.yaml b/emby/ingress.yaml
new file mode 100644
index 0000000..2708b4d
--- /dev/null
+++ b/emby/ingress.yaml
@@ -0,0 +1,22 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: emby-ingress
+  annotations:
+    traefik.ingress.kubernetes.io/router.middlewares: cloudflarewarp@file
+spec:
+  rules:
+  - host: emby.dubyatp.xyz
+    http:
+      paths:
+      - pathType: Prefix
+        path: "/"
+        backend:
+          service:
+            name: emby-http-svc
+            port: 
+              number: 80
+  tls:
+  - hosts:
+    - emby.dubyatp.xyz
+    secretName: cert-dubyatp-xyz
\ No newline at end of file
diff --git a/emby/pvc.yaml b/emby/pvc.yaml
new file mode 100644
index 0000000..35318b4
--- /dev/null
+++ b/emby/pvc.yaml
@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: emby-config
+spec:
+  storageClassName: weyma-shared
+  resources:
+    requests:
+      storage: 10Gi
+  volumeMode: Filesystem
+  accessModes:
+    - ReadWriteOnce
\ No newline at end of file
diff --git a/emby/svc.yaml b/emby/svc.yaml
new file mode 100644
index 0000000..c29bb39
--- /dev/null
+++ b/emby/svc.yaml
@@ -0,0 +1,23 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: emby-http-svc
+spec:
+  type: ClusterIP
+  selector:
+    app: emby
+  ports:
+  - port: 8096
+    targetPort: 8096
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: emby-https-svc
+spec:
+  type: ClusterIP
+  selector:
+    app: emby
+  ports:
+  - port: 8920
+    targetPort: 8920
\ No newline at end of file

From df8a1c898064db44a54217d2b743548c5070cbde Mon Sep 17 00:00:00 2001
From: William P <me@williamtpeebles.com>
Date: Thu, 6 Mar 2025 20:52:10 -0500
Subject: [PATCH 02/22] emby: fix ingress port

---
 emby/ingress.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/emby/ingress.yaml b/emby/ingress.yaml
index 2708b4d..4b1821d 100644
--- a/emby/ingress.yaml
+++ b/emby/ingress.yaml
@@ -15,7 +15,7 @@ spec:
           service:
             name: emby-http-svc
             port: 
-              number: 80
+              number: 8096
   tls:
   - hosts:
     - emby.dubyatp.xyz

From e9326a4ffdff494956d25bba32d182d6d8f99c18 Mon Sep 17 00:00:00 2001
From: William P <me@williamtpeebles.com>
Date: Thu, 6 Mar 2025 21:04:31 -0500
Subject: [PATCH 03/22] move securityContext to correct spot

---
 emby/deployment.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/emby/deployment.yaml b/emby/deployment.yaml
index 88e461b..4056836 100644
--- a/emby/deployment.yaml
+++ b/emby/deployment.yaml
@@ -26,8 +26,6 @@ spec:
         - name: dev-dri
           hostPath:
             path: /dev/dri
-      securityContext:
-        privileged: true
       containers:
       - name: emby
         image: emby/embyserver:4.9.0.41
@@ -47,6 +45,8 @@ spec:
           value: "1000"
         - name: GIDLIST
           value: "100"
+        securityContext:
+          privileged: true
         resources:
           limits:
             memory: "4096Mi"

From 81e0994ddd23cb0a77184df5971578158eebcc22 Mon Sep 17 00:00:00 2001
From: William P <me@williamtpeebles.com>
Date: Thu, 6 Mar 2025 21:12:04 -0500
Subject: [PATCH 04/22] emby: add pod affinity for i915

---
 emby/deployment.yaml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/emby/deployment.yaml b/emby/deployment.yaml
index 4056836..4fed5c7 100644
--- a/emby/deployment.yaml
+++ b/emby/deployment.yaml
@@ -51,3 +51,10 @@ spec:
           limits:
             memory: "4096Mi"
             cpu: "1000m"
+      affinity:
+        nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+            - matchExpressions:
+              - key: extensions.talos.dev/i915
+                operator: Exists
\ No newline at end of file

From 8cfb675b2335445d157ae3da67bcaf0eb994e710 Mon Sep 17 00:00:00 2001
From: William P <me@williamtpeebles.com>
Date: Thu, 6 Mar 2025 22:03:17 -0500
Subject: [PATCH 05/22] emby: add emby-config to velero backups

---
 emby/deployment.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/emby/deployment.yaml b/emby/deployment.yaml
index 4fed5c7..1822203 100644
--- a/emby/deployment.yaml
+++ b/emby/deployment.yaml
@@ -8,6 +8,8 @@ spec:
       app: emby
   template:
     metadata:
+      annotations:
+        backup.velero.io/backup-volumes: emby-config
       labels:
         app: emby
     spec:

From dba9f6caf144907ce826fff07452821ba6e005b8 Mon Sep 17 00:00:00 2001
From: William P <me@williamtpeebles.com>
Date: Fri, 7 Mar 2025 20:19:23 -0500
Subject: [PATCH 06/22] attic: add

---
 attic/cert-dubyatp-xyz.yaml | 10 ++++++++++
 attic/deployment.yaml       | 30 ++++++++++++++++++++++++++++++
 attic/ingress.yaml          | 24 ++++++++++++++++++++++++
 attic/pvc.yaml              | 12 ++++++++++++
 attic/secret.yaml           | 17 +++++++++++++++++
 attic/service.yaml          | 11 +++++++++++
 6 files changed, 104 insertions(+)
 create mode 100644 attic/cert-dubyatp-xyz.yaml
 create mode 100644 attic/deployment.yaml
 create mode 100644 attic/ingress.yaml
 create mode 100644 attic/pvc.yaml
 create mode 100644 attic/secret.yaml
 create mode 100644 attic/service.yaml

diff --git a/attic/cert-dubyatp-xyz.yaml b/attic/cert-dubyatp-xyz.yaml
new file mode 100644
index 0000000..5bf57b8
--- /dev/null
+++ b/attic/cert-dubyatp-xyz.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: cert-dubyatp-xyz
+  annotations:
+    replicator.v1.mittwald.de/replicate-from: "cert-manager/cert-dubyatp-xyz"
+    replicator.v1.mittwald.de/replicated-keys: "tls.crt,tls.key"
+data:
+  tls.crt: ""
+  tls.key: ""
\ No newline at end of file
diff --git a/attic/deployment.yaml b/attic/deployment.yaml
new file mode 100644
index 0000000..38d3dfe
--- /dev/null
+++ b/attic/deployment.yaml
@@ -0,0 +1,30 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: attic
+spec:
+  selector:
+    matchLabels:
+      app: attic
+  template:
+    metadata:
+      labels:
+        app: attic
+    spec:
+      containers:
+      - name: attic
+        image: ghcr.io/zhaofengli/attic:ff8a897d1f4408ebbf4d45fa9049c06b3e1e3f4e
+        envFrom:
+        - secretRef:
+            name: attic-secret
+        volumeMounts:
+        - name: attic-pvc
+          mountPath: /var/empty
+        resources:
+          limits:
+            memory: "256Mi"
+            cpu: "500m"
+      volumes:
+      - name: attic-pvc
+        persistentVolumeClaim:
+          claimName: attic-pvc
\ No newline at end of file
diff --git a/attic/ingress.yaml b/attic/ingress.yaml
new file mode 100644
index 0000000..b209b39
--- /dev/null
+++ b/attic/ingress.yaml
@@ -0,0 +1,24 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: attic
+  labels:
+    name: attic
+  annotations:
+    traefik.ingress.kubernetes.io/router.middlewares: cloudflarewarp@file
+spec:
+  rules:
+  - host: nix-cache.dubyatp.xyz
+    http:
+      paths:
+      - pathType: Prefix
+        path: "/"
+        backend:
+          service:
+            name: attic-svc
+            port: 
+              number: 8080
+  tls:
+  - hosts:
+    - nix-cache.dubyatp.xyz
+    secretName: cert-dubyatp-xyz
\ No newline at end of file
diff --git a/attic/pvc.yaml b/attic/pvc.yaml
new file mode 100644
index 0000000..e0cef5c
--- /dev/null
+++ b/attic/pvc.yaml
@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: attic-pvc
+spec:
+  storageClassName: weyma-shared
+  resources:
+    requests:
+      storage: 20Gi
+  volumeMode: Filesystem
+  accessModes:
+    - ReadWriteMany
diff --git a/attic/secret.yaml b/attic/secret.yaml
new file mode 100644
index 0000000..2364167
--- /dev/null
+++ b/attic/secret.yaml
@@ -0,0 +1,17 @@
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: attic-secret
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    name: weyma-vault
+    kind: ClusterSecretStore
+  target:
+    name: attic-secret
+    creationPolicy: Owner
+  data:
+    - secretKey: ATTIC_SERVER_TOKEN_RS256_SECRET_BASE64
+      remoteRef:
+        key: attic
+        property: ATTIC_SERVER_TOKEN_RS256_SECRET_BASE64
\ No newline at end of file
diff --git a/attic/service.yaml b/attic/service.yaml
new file mode 100644
index 0000000..936945e
--- /dev/null
+++ b/attic/service.yaml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: attic-svc
+spec:
+  type: ClusterIP
+  selector:
+    app: attic
+  ports:
+  - port: 8080
+    targetPort: 8080

From c31e9f8873c2b8f7269a80e2f8640a627f018f0d Mon Sep 17 00:00:00 2001
From: William P <me@williamtpeebles.com>
Date: Fri, 7 Mar 2025 20:20:37 -0500
Subject: [PATCH 07/22] fix cert-dubyatp-xyz in authentik emby and vaultwarden

---
 authentik/values.yaml             | 6 +++---
 emby/cert-dubyatp-xyz.yaml        | 6 +++---
 vaultwarden/cert-dubyatp-xyz.yaml | 6 +++---
 3 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/authentik/values.yaml b/authentik/values.yaml
index c1a3dc5..9e5a513 100644
--- a/authentik/values.yaml
+++ b/authentik/values.yaml
@@ -114,9 +114,9 @@ authentik:
         annotations:
           replicator.v1.mittwald.de/replicate-from: "cert-manager/cert-dubyatp-xyz"
           replicator.v1.mittwald.de/replicated-keys: "tls.crt,tls.key"
-        data:
-          tls.crt: ""
-          tls.key: ""
+      data:
+        tls.crt: ""
+        tls.key: ""
     - apiVersion: external-secrets.io/v1beta1
       kind: ExternalSecret
       metadata:
diff --git a/emby/cert-dubyatp-xyz.yaml b/emby/cert-dubyatp-xyz.yaml
index dc95814..5bf57b8 100644
--- a/emby/cert-dubyatp-xyz.yaml
+++ b/emby/cert-dubyatp-xyz.yaml
@@ -5,6 +5,6 @@ metadata:
   annotations:
     replicator.v1.mittwald.de/replicate-from: "cert-manager/cert-dubyatp-xyz"
     replicator.v1.mittwald.de/replicated-keys: "tls.crt,tls.key"
-  data:
-    tls.crt: ""
-    tls.key: ""
\ No newline at end of file
+data:
+  tls.crt: ""
+  tls.key: ""
\ No newline at end of file
diff --git a/vaultwarden/cert-dubyatp-xyz.yaml b/vaultwarden/cert-dubyatp-xyz.yaml
index dc95814..5bf57b8 100644
--- a/vaultwarden/cert-dubyatp-xyz.yaml
+++ b/vaultwarden/cert-dubyatp-xyz.yaml
@@ -5,6 +5,6 @@ metadata:
   annotations:
     replicator.v1.mittwald.de/replicate-from: "cert-manager/cert-dubyatp-xyz"
     replicator.v1.mittwald.de/replicated-keys: "tls.crt,tls.key"
-  data:
-    tls.crt: ""
-    tls.key: ""
\ No newline at end of file
+data:
+  tls.crt: ""
+  tls.key: ""
\ No newline at end of file

From 70bff665f684516f5bc3c78e86c78795547923f6 Mon Sep 17 00:00:00 2001
From: William P <me@williamtpeebles.com>
Date: Sat, 8 Mar 2025 21:43:38 -0500
Subject: [PATCH 08/22] vaultwarden: add liveness probe

---
 vaultwarden/deployment.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/vaultwarden/deployment.yaml b/vaultwarden/deployment.yaml
index 16d63ac..113547f 100644
--- a/vaultwarden/deployment.yaml
+++ b/vaultwarden/deployment.yaml
@@ -16,6 +16,12 @@ spec:
       containers:
       - name: vaultwarden
         image: vaultwarden/server:1.33.2-alpine
+        livenessProbe:
+          exec:
+            command:
+              - /healthcheck.sh
+            initialDelaySeconds: 10
+            periodSeconds: 60
         resources:
           limits:
             memory: "128Mi"

From abdf6ceb80a8f4e288393fa5045d9ca913aa0058 Mon Sep 17 00:00:00 2001
From: William P <me@williamtpeebles.com>
Date: Sat, 8 Mar 2025 21:49:14 -0500
Subject: [PATCH 09/22] emby: add liveness and readiness probes

---
 emby/deployment.yaml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/emby/deployment.yaml b/emby/deployment.yaml
index 1822203..f3edb70 100644
--- a/emby/deployment.yaml
+++ b/emby/deployment.yaml
@@ -47,6 +47,14 @@ spec:
           value: "1000"
         - name: GIDLIST
           value: "100"
+        livenessProbe:
+          httpGet:
+            path: /
+            port: http
+        readinessProbe:
+          httpGet:
+            path: /
+            port: http
         securityContext:
           privileged: true
         resources:

From 17ba4863ae0d667e4e2ce58b0554378379917d82 Mon Sep 17 00:00:00 2001
From: William P <me@williamtpeebles.com>
Date: Sat, 8 Mar 2025 21:50:41 -0500
Subject: [PATCH 10/22] emby: set strategy to recreate

---
 emby/deployment.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/emby/deployment.yaml b/emby/deployment.yaml
index f3edb70..875ca45 100644
--- a/emby/deployment.yaml
+++ b/emby/deployment.yaml
@@ -55,6 +55,8 @@ spec:
           httpGet:
             path: /
             port: http
+        strategy:
+          type: Recreate
         securityContext:
           privileged: true
         resources:

From c9a7276cc9fd6737c6d08a6c8d75cee8fe4a75dc Mon Sep 17 00:00:00 2001
From: William P <me@williamtpeebles.com>
Date: Sat, 8 Mar 2025 21:51:09 -0500
Subject: [PATCH 11/22] vaultwarden: add strategy to recreate

---
 vaultwarden/deployment.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/vaultwarden/deployment.yaml b/vaultwarden/deployment.yaml
index 113547f..9e7a4b6 100644
--- a/vaultwarden/deployment.yaml
+++ b/vaultwarden/deployment.yaml
@@ -22,6 +22,8 @@ spec:
               - /healthcheck.sh
             initialDelaySeconds: 10
             periodSeconds: 60
+        strategy:
+          type: Recreate
         resources:
           limits:
             memory: "128Mi"

From 04719f8ea5b6bf32702e9d724165eee0f775f828 Mon Sep 17 00:00:00 2001
From: William P <me@williamtpeebles.com>
Date: Sat, 8 Mar 2025 21:52:14 -0500
Subject: [PATCH 12/22] vaultwarden: fix livenessprobe

---
 vaultwarden/deployment.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/vaultwarden/deployment.yaml b/vaultwarden/deployment.yaml
index 9e7a4b6..e01a222 100644
--- a/vaultwarden/deployment.yaml
+++ b/vaultwarden/deployment.yaml
@@ -20,8 +20,8 @@ spec:
           exec:
             command:
               - /healthcheck.sh
-            initialDelaySeconds: 10
-            periodSeconds: 60
+          initialDelaySeconds: 10
+          periodSeconds: 60
         strategy:
           type: Recreate
         resources:

From b91760fdc8f2cbf5ac6f90199110f6cd324af384 Mon Sep 17 00:00:00 2001
From: William P <me@williamtpeebles.com>
Date: Sat, 8 Mar 2025 21:56:27 -0500
Subject: [PATCH 13/22] emby: remove readiness probe

---
 emby/deployment.yaml | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/emby/deployment.yaml b/emby/deployment.yaml
index 875ca45..e54cade 100644
--- a/emby/deployment.yaml
+++ b/emby/deployment.yaml
@@ -51,10 +51,6 @@ spec:
           httpGet:
             path: /
             port: http
-        readinessProbe:
-          httpGet:
-            path: /
-            port: http
         strategy:
           type: Recreate
         securityContext:

From 01c2f949de5cddc3ef21d92acebaefe525158a3c Mon Sep 17 00:00:00 2001
From: William P <me@williamtpeebles.com>
Date: Sun, 9 Mar 2025 16:29:57 -0400
Subject: [PATCH 14/22] vaultwarden: fix strategy

---
 vaultwarden/deployment.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/vaultwarden/deployment.yaml b/vaultwarden/deployment.yaml
index e01a222..21933d6 100644
--- a/vaultwarden/deployment.yaml
+++ b/vaultwarden/deployment.yaml
@@ -3,6 +3,8 @@ kind: Deployment
 metadata:
   name: vaultwarden
 spec:
+  strategy:
+    type: Recreate
   selector:
     matchLabels:
       app: vaultwarden
@@ -22,8 +24,6 @@ spec:
               - /healthcheck.sh
           initialDelaySeconds: 10
           periodSeconds: 60
-        strategy:
-          type: Recreate
         resources:
           limits:
             memory: "128Mi"

From c3902a8b21154a69cef25490c02455ac9a5c3dab Mon Sep 17 00:00:00 2001
From: William P <me@williamtpeebles.com>
Date: Sun, 9 Mar 2025 16:30:25 -0400
Subject: [PATCH 15/22] emby: fix strategy

---
 emby/deployment.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/emby/deployment.yaml b/emby/deployment.yaml
index e54cade..c0680f8 100644
--- a/emby/deployment.yaml
+++ b/emby/deployment.yaml
@@ -3,6 +3,8 @@ kind: Deployment
 metadata:
   name: emby
 spec:
+  strategy:
+    type: Recreate
   selector:
     matchLabels:
       app: emby
@@ -51,8 +53,6 @@ spec:
           httpGet:
             path: /
             port: http
-        strategy:
-          type: Recreate
         securityContext:
           privileged: true
         resources:

From 763efab0776a77434b560907c95e78cff1691be9 Mon Sep 17 00:00:00 2001
From: William P <me@williamtpeebles.com>
Date: Sun, 9 Mar 2025 18:37:12 -0400
Subject: [PATCH 16/22] whatsmyip: add

---
 whatismyip/Chart.yaml  | 28 ++++++++++++++++++++++++++++
 whatismyip/values.yaml | 24 ++++++++++++++++++++++++
 2 files changed, 52 insertions(+)
 create mode 100644 whatismyip/Chart.yaml
 create mode 100644 whatismyip/values.yaml

diff --git a/whatismyip/Chart.yaml b/whatismyip/Chart.yaml
new file mode 100644
index 0000000..09ea8fd
--- /dev/null
+++ b/whatismyip/Chart.yaml
@@ -0,0 +1,28 @@
+apiVersion: v2
+name: whatismyip
+description: A Helm chart for Kubernetes
+
+# A chart can be either an 'application' or a 'library' chart.
+#
+# Application charts are a collection of templates that can be packaged into versioned archives
+# to be deployed.
+#
+# Library charts provide useful utilities or functions for the chart developer. They're included as
+# a dependency of application charts to inject those utilities and functions into the rendering
+# pipeline. Library charts do not define any templates and therefore cannot be deployed.
+type: application
+
+# This is the chart version. This version number should be incremented each time you make changes
+# to the chart and its templates, including the app version.
+# Versions are expected to follow Semantic Versioning (https://semver.org/)
+version: 0.1.0
+
+# This is the version number of the application being deployed. This version number should be
+# incremented each time you make changes to the application. Versions are not expected to
+# follow Semantic Versioning. They should reflect the version the application is using.
+appVersion: "1.0"
+
+dependencies:
+- name: whatismyip
+  version: 1.3.1
+  repository: https://eugenmayer.github.io/helm-charts/
\ No newline at end of file
diff --git a/whatismyip/values.yaml b/whatismyip/values.yaml
new file mode 100644
index 0000000..3eb5a48
--- /dev/null
+++ b/whatismyip/values.yaml
@@ -0,0 +1,24 @@
+whatismyip:
+  ingress:
+    main:
+      enabled: true
+      annotations:
+        traefik.ingress.kubernetes.io/router.middlewares: cloudflarewarp@file
+      hosts:
+        - host: whatismyip.dubyatp.xyz
+          paths:
+            - path: /
+              pathType: Prefix
+      tls:
+        - hosts:
+            - whatismyip.dubyatp.xyz
+          secretName: cert-dubyatp-xyz
+  secret:
+    cert-dubyatp-xyz:
+      enabled: true
+      annotations:
+        replicator.v1.mittwald.de/replicate-from: "cert-manager/cert-dubyatp-xyz"
+        replicator.v1.mittwald.de/replicated-keys: "tls.crt,tls.key"
+      data:
+        tls.crt: ""
+        tls.key: ""
\ No newline at end of file

From fd259fc6d06b73beaab5f285b307d3fe5f85cb18 Mon Sep 17 00:00:00 2001
From: William P <me@williamtpeebles.com>
Date: Sun, 9 Mar 2025 18:41:15 -0400
Subject: [PATCH 17/22] whatismyip: fix spelling

---
 whatismyip/Chart.yaml  | 2 +-
 whatismyip/values.yaml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/whatismyip/Chart.yaml b/whatismyip/Chart.yaml
index 09ea8fd..76821fd 100644
--- a/whatismyip/Chart.yaml
+++ b/whatismyip/Chart.yaml
@@ -23,6 +23,6 @@ version: 0.1.0
 appVersion: "1.0"
 
 dependencies:
-- name: whatismyip
+- name: whatsmyip
   version: 1.3.1
   repository: https://eugenmayer.github.io/helm-charts/
\ No newline at end of file
diff --git a/whatismyip/values.yaml b/whatismyip/values.yaml
index 3eb5a48..22e1000 100644
--- a/whatismyip/values.yaml
+++ b/whatismyip/values.yaml
@@ -1,4 +1,4 @@
-whatismyip:
+whatsmyip:
   ingress:
     main:
       enabled: true

From e31ae14aaf6e80a1950def8b9fefe11a5747a6cd Mon Sep 17 00:00:00 2001
From: William P <me@williamtpeebles.com>
Date: Sun, 9 Mar 2025 18:46:10 -0400
Subject: [PATCH 18/22] whatismyip: try without annotations

---
 whatismyip/values.yaml | 2 --
 1 file changed, 2 deletions(-)

diff --git a/whatismyip/values.yaml b/whatismyip/values.yaml
index 22e1000..4673a87 100644
--- a/whatismyip/values.yaml
+++ b/whatismyip/values.yaml
@@ -2,8 +2,6 @@ whatsmyip:
   ingress:
     main:
       enabled: true
-      annotations:
-        traefik.ingress.kubernetes.io/router.middlewares: cloudflarewarp@file
       hosts:
         - host: whatismyip.dubyatp.xyz
           paths:

From 9f2f202fa37ddd99be4e6e23c917fc6f573bda6d Mon Sep 17 00:00:00 2001
From: William P <me@williamtpeebles.com>
Date: Sun, 9 Mar 2025 18:52:47 -0400
Subject: [PATCH 19/22] whatismyip: replace chart with manifests

---
 whatismyip/Chart.yaml            | 28 ----------------------------
 whatismyip/cert-dubyatp-xyz.yaml |  0
 whatismyip/deployment.yaml       | 20 ++++++++++++++++++++
 whatismyip/ingress.yaml          | 22 ++++++++++++++++++++++
 whatismyip/svc.yaml              | 10 ++++++++++
 whatismyip/values.yaml           | 22 ----------------------
 6 files changed, 52 insertions(+), 50 deletions(-)
 delete mode 100644 whatismyip/Chart.yaml
 create mode 100644 whatismyip/cert-dubyatp-xyz.yaml
 create mode 100644 whatismyip/deployment.yaml
 create mode 100644 whatismyip/ingress.yaml
 create mode 100644 whatismyip/svc.yaml
 delete mode 100644 whatismyip/values.yaml

diff --git a/whatismyip/Chart.yaml b/whatismyip/Chart.yaml
deleted file mode 100644
index 76821fd..0000000
--- a/whatismyip/Chart.yaml
+++ /dev/null
@@ -1,28 +0,0 @@
-apiVersion: v2
-name: whatismyip
-description: A Helm chart for Kubernetes
-
-# A chart can be either an 'application' or a 'library' chart.
-#
-# Application charts are a collection of templates that can be packaged into versioned archives
-# to be deployed.
-#
-# Library charts provide useful utilities or functions for the chart developer. They're included as
-# a dependency of application charts to inject those utilities and functions into the rendering
-# pipeline. Library charts do not define any templates and therefore cannot be deployed.
-type: application
-
-# This is the chart version. This version number should be incremented each time you make changes
-# to the chart and its templates, including the app version.
-# Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.1.0
-
-# This is the version number of the application being deployed. This version number should be
-# incremented each time you make changes to the application. Versions are not expected to
-# follow Semantic Versioning. They should reflect the version the application is using.
-appVersion: "1.0"
-
-dependencies:
-- name: whatsmyip
-  version: 1.3.1
-  repository: https://eugenmayer.github.io/helm-charts/
\ No newline at end of file
diff --git a/whatismyip/cert-dubyatp-xyz.yaml b/whatismyip/cert-dubyatp-xyz.yaml
new file mode 100644
index 0000000..e69de29
diff --git a/whatismyip/deployment.yaml b/whatismyip/deployment.yaml
new file mode 100644
index 0000000..07d89d9
--- /dev/null
+++ b/whatismyip/deployment.yaml
@@ -0,0 +1,20 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: whatismyip
+spec:
+  selector:
+    matchLabels:
+      app: whatismyip
+  template:
+    metadata:
+      labels:
+        app: whatismyip
+    spec:
+      containers:
+      - name: whatismyip
+        image: ghcr.io/eugenmayer/whatsmyip:0.0.1
+        resources:
+          limits:
+            memory: "128Mi"
+            cpu: "500m"
diff --git a/whatismyip/ingress.yaml b/whatismyip/ingress.yaml
new file mode 100644
index 0000000..47983db
--- /dev/null
+++ b/whatismyip/ingress.yaml
@@ -0,0 +1,22 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: whatismyip-ingress
+  annotations:
+    traefik.ingress.kubernetes.io/router.middlewares: cloudflarewarp@file
+spec:
+  rules:
+  - host: whatismyip.dubyatp.xyz
+    http:
+      paths:
+      - pathType: Prefix
+        path: "/"
+        backend:
+          service:
+            name: whatismyip-svc
+            port: 
+              number: 8080
+  tls:
+  - hosts:
+    - whatismyip.dubyatp.xyz
+    secretName: cert-dubyatp-xyz
\ No newline at end of file
diff --git a/whatismyip/svc.yaml b/whatismyip/svc.yaml
new file mode 100644
index 0000000..2cb3a4c
--- /dev/null
+++ b/whatismyip/svc.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: whatismyip-svc
+spec:
+  selector:
+    app: whatismyip
+  ports:
+  - port: 8080
+    targetPort: 8080
diff --git a/whatismyip/values.yaml b/whatismyip/values.yaml
deleted file mode 100644
index 4673a87..0000000
--- a/whatismyip/values.yaml
+++ /dev/null
@@ -1,22 +0,0 @@
-whatsmyip:
-  ingress:
-    main:
-      enabled: true
-      hosts:
-        - host: whatismyip.dubyatp.xyz
-          paths:
-            - path: /
-              pathType: Prefix
-      tls:
-        - hosts:
-            - whatismyip.dubyatp.xyz
-          secretName: cert-dubyatp-xyz
-  secret:
-    cert-dubyatp-xyz:
-      enabled: true
-      annotations:
-        replicator.v1.mittwald.de/replicate-from: "cert-manager/cert-dubyatp-xyz"
-        replicator.v1.mittwald.de/replicated-keys: "tls.crt,tls.key"
-      data:
-        tls.crt: ""
-        tls.key: ""
\ No newline at end of file

From 56728fea8ee09b54a464638990647d63a0e415c5 Mon Sep 17 00:00:00 2001
From: William P <me@williamtpeebles.com>
Date: Sun, 9 Mar 2025 19:08:11 -0400
Subject: [PATCH 20/22] whatismyip: add cert

---
 whatismyip/cert-dubyatp-xyz.yaml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/whatismyip/cert-dubyatp-xyz.yaml b/whatismyip/cert-dubyatp-xyz.yaml
index e69de29..5bf57b8 100644
--- a/whatismyip/cert-dubyatp-xyz.yaml
+++ b/whatismyip/cert-dubyatp-xyz.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: cert-dubyatp-xyz
+  annotations:
+    replicator.v1.mittwald.de/replicate-from: "cert-manager/cert-dubyatp-xyz"
+    replicator.v1.mittwald.de/replicated-keys: "tls.crt,tls.key"
+data:
+  tls.crt: ""
+  tls.key: ""
\ No newline at end of file

From 6e0af8725b6b22822151a7fb0939771fb33372cf Mon Sep 17 00:00:00 2001
From: William P <me@williamtpeebles.com>
Date: Sun, 9 Mar 2025 19:20:06 -0400
Subject: [PATCH 21/22] emby: add resilio sync

---
 emby/resilio-pvc.yaml  | 12 ++++++++++++
 emby/resilio-sync.yaml | 39 +++++++++++++++++++++++++++++++++++++++
 2 files changed, 51 insertions(+)
 create mode 100644 emby/resilio-pvc.yaml
 create mode 100644 emby/resilio-sync.yaml

diff --git a/emby/resilio-pvc.yaml b/emby/resilio-pvc.yaml
new file mode 100644
index 0000000..8dca22d
--- /dev/null
+++ b/emby/resilio-pvc.yaml
@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: resilio-pvc
+spec:
+  storageClassName: weyma-shared
+  resources:
+    requests:
+      storage: 10Gi
+  volumeMode: Filesystem
+  accessModes:
+    - ReadWriteOnce
diff --git a/emby/resilio-sync.yaml b/emby/resilio-sync.yaml
new file mode 100644
index 0000000..eea4630
--- /dev/null
+++ b/emby/resilio-sync.yaml
@@ -0,0 +1,39 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: resilio-sync
+spec:
+  selector:
+    matchLabels:
+      app: resilio-sync
+  template:
+    metadata:
+      labels:
+        app: resilio-sync
+    spec:
+      containers:
+      - name: resilio-sync
+        image: lscr.io/linuxserver/resilio-sync:3.0.0
+        volumeMounts:
+        - name: config
+          mountPath: /config
+        - name: tv-shows
+          mountPath: /sync/tv-shows
+        - name: movies
+          mountPath: /sync/movies
+        resources:
+          limits:
+            memory: "128Mi"
+            cpu: "500m"
+      volumes:
+        - name: config
+          persistentVolumeClaim:
+            claimName: resilio-pvc
+        - name: tv-shows
+          nfs:
+            server: 10.105.15.20
+            path: /mnt/hdd-pool/tv-shows
+        - name: movies
+          nfs:
+            server: 10.105.15.20
+            path: /mnt/hdd-pool/movies
\ No newline at end of file

From 339f9af7ead04fb43fb30046171f3eb03f657fb5 Mon Sep 17 00:00:00 2001
From: William P <me@williamtpeebles.com>
Date: Sun, 9 Mar 2025 19:28:37 -0400
Subject: [PATCH 22/22] emby: adjust memory limit for resilio

---
 emby/resilio-sync.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/emby/resilio-sync.yaml b/emby/resilio-sync.yaml
index eea4630..dd5afdf 100644
--- a/emby/resilio-sync.yaml
+++ b/emby/resilio-sync.yaml
@@ -23,7 +23,7 @@ spec:
           mountPath: /sync/movies
         resources:
           limits:
-            memory: "128Mi"
+            memory: "700Mi"
             cpu: "500m"
       volumes:
         - name: config