chore(deps): update helm release searxng to v1.1.3

attic/cert-dubyatp-xyz.yaml

@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: cert-dubyatp-xyz
+  annotations:
+    replicator.v1.mittwald.de/replicate-from: "cert-manager/cert-dubyatp-xyz"
+    replicator.v1.mittwald.de/replicated-keys: "tls.crt,tls.key"
+data:
+  tls.crt: ""
+  tls.key: ""

attic/gateway.yaml

@@ -1,18 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: Gateway
-metadata:
-  name: traefik
-spec:
-  gatewayClassName: traefik
-  listeners:
-    - name: https
-      protocol: HTTPS
-      port: 8443
-      tls:
-        mode: Terminate
-        certificateRefs:
-          - name: cert-dubyatp-xyz
-            namespace: cert-manager
-      allowedRoutes:
-        namespaces:
-          from: Same

attic/httproute.yaml

@@ -1,19 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
-metadata:
-  name: attic
-spec:
-  parentRefs:
-    - name: traefik
-      sectionName: https
-      kind: Gateway
-  hostnames:
-    - nix-cache.dubyatp.xyz
-  rules:
-     - matches:
-        - path:
-            type: PathPrefix
-            value: /
-       backendRefs:
-        - name: attic-svc
-          port: 8080

authentik/Chart.yaml

@@ -24,5 +24,5 @@ appVersion: "1.0"
 
 dependencies:
 - name: authentik
-  version: 2026.8.0
+  version: 2026.5.2
   repository: https://charts.goauthentik.io

authentik/values.yaml

@@ -77,24 +77,6 @@ authentik:
             name: authentik-files
             key: AWS_SECRET_ACCESS_KEY      
   additionalObjects:
-    - apiVersion: gateway.networking.k8s.io/v1
-      kind: Gateway
-      metadata:
-        name: traefik
-      spec:
-        gatewayClassName: traefik
-        listeners:
-          - name: https
-            protocol: HTTPS
-            port: 8443
-            tls:
-              mode: Terminate
-              certificateRefs:
-                - name: cert-dubyatp-xyz
-                  namespace: cert-manager
-            allowedRoutes:
-              namespaces:
-                from: Same
     - apiVersion: networking.k8s.io/v1
       kind: Ingress
       metadata:

gitea/Chart.yaml

@@ -24,5 +24,5 @@ appVersion: "1.0"
 
 dependencies:
 - name: gitea
-  version: 12.7.3
+  version: 12.6.0
   repository: https://weyma-s3.infra.dubyatp.xyz/helm-bucket-ea34bc44-ef19-480d-a16a-1e583991f123/charts/

gitea/values.yaml

@@ -1,27 +1,15 @@
 gitea:
   replicaCount: 3
-#  ingress:
-#    enabled: true
-#    hosts:
-#      - host: git.dubyatp.xyz
-#        paths:
-#          - path: /
-#    tls:
-#      - secretName: cert-dubyatp-xyz
-#        hosts:
-#          - git.dubyatp.xyz
-  gateway:
-    httpRoute:
-      enabled: true
-      hostnames:
-        - git.dubyatp.xyz
-      parentRefs:
-        - name: traefik
-          sectionName: https
-          kind: Gateway
-      pathType: PathPrefix
-      paths:
-        - path: /
+  ingress:
+    enabled: true
+    hosts:
+      - host: git.dubyatp.xyz
+        paths:
+          - path: /
+    tls:
+      - secretName: cert-dubyatp-xyz
+        hosts:
+          - git.dubyatp.xyz
   persistence:
     enabled: true
     create: true
@@ -83,6 +71,8 @@ gitea:
         OFFLINE_MODE: false
       service:
         DISABLE_REGISTRATION: true
+      webhook:
+        ALLOWED_HOST_LIST: "drone.infra.dubyatp.xyz,argocd.infra.dubyatp.xyz,discord.com,10.0.0.0/8"
       mailer:
         ENABLED: true
         FROM: [email protected]
@@ -92,7 +82,6 @@ gitea:
         USER: gitea_dubyatp
       security:
         INSTALL_LOCK: true
-        ALLOWED_HOST_LIST: "drone.infra.dubyatp.xyz,argocd.infra.dubyatp.xyz,discord.com,10.0.0.0/8"
     metrics:
       enabled: true
       serviceMonitor:
@@ -116,24 +105,16 @@ gitea:
           services:
           - name: gitea-ssh
             port: 22
-    - apiVersion: gateway.networking.k8s.io/v1
-      kind: Gateway
+    - apiVersion: v1
+      kind: Secret
       metadata:
-        name: traefik
-      spec:
-        gatewayClassName: traefik
-        listeners:
-          - name: https
-            protocol: HTTPS
-            port: 8443
-            tls:
-              mode: Terminate
-              certificateRefs:
-                - name: cert-dubyatp-xyz
-                  namespace: cert-manager
-            allowedRoutes:
-              namespaces:
-                from: Same
+        name: cert-dubyatp-xyz
+        annotations:
+          replicator.v1.mittwald.de/replicate-from: "cert-manager/cert-dubyatp-xyz"
+          replicator.v1.mittwald.de/replicated-keys: "tls.crt,tls.key"
+      data:
+        tls.crt: ""
+        tls.key: ""
     - apiVersion: external-secrets.io/v1
       kind: ExternalSecret
       metadata:

grafana/values.yaml

@@ -191,6 +191,6 @@ grafana:
     image:
       registry: docker.io
       repository: bats/bats
-      tag: 1.14.0
+      tag: 1.13.0
     imagePullPolicy: IfNotPresent
   useStatefulSet: false

jellyfin/templates/gateway.yaml

@@ -1,18 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: Gateway
-metadata:
-  name: traefik
-spec:
-  gatewayClassName: traefik
-  listeners:
-    - name: https
-      protocol: HTTPS
-      port: 8443
-      tls:
-        mode: Terminate
-        certificateRefs:
-          - name: cert-dubyatp-xyz
-            namespace: cert-manager
-      allowedRoutes:
-        namespaces:
-          from: Same

jellyfin/templates/metrics-block.yaml

@@ -1,4 +1,4 @@
-{{- if and (.Values.jellyfin.metrics.enabled) (.Values.jellyfin.httpRoute.enabled) -}}
+{{- if and (.Values.jellyfin.metrics.enabled) (.Values.jellyfin.ingress.enabled) -}}
 ---
 apiVersion: v1
 kind: Service
@@ -13,22 +13,21 @@ spec:
       port: 6767
       targetPort: 6767
 ---
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
+apiVersion: networking.k8s.io/v1
+kind: Ingress
 metadata:
   name: block-metrics
   namespace: {{ .Release.Namespace }}
 spec:
-  parentRefs:
-    {{- toYaml .Values.jellyfin.httpRoute.parentRefs | nindent 4 }}
-  hostnames:
-    {{- toYaml .Values.jellyfin.httpRoute.hostnames | nindent 4 }}
   rules:
-    - matches:
-        - path:
-            type: PathPrefix
-            value: /metrics
-      backendRefs:
-        - name: dummy-svc
-          port: 6767
+  - host: {{ (index .Values.jellyfin.ingress.hosts 0).host }}
+    http:
+      paths:
+      - pathType: Prefix
+        path: "/metrics"
+        backend:
+          service:
+            name: dummy-svc
+            port: 
+              number: 6767
 {{- end }}

jellyfin/templates/ssl-cert.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+data:
+  tls.crt:
+  tls.key:
+kind: Secret
+metadata:
+  annotations:
+    replicator.v1.mittwald.de/replicate-from: cert-manager/cert-dubyatp-xyz
+    replicator.v1.mittwald.de/replicated-keys: tls.crt,tls.key
+  name: cert-dubyatp-xyz
+type: Opaque

jellyfin/values.yaml

@@ -1,14 +1,17 @@
 jellyfin:
   deploymentStrategy:
     type: Recreate
-  httpRoute:
+  ingress:
     enabled: true
-    parentRefs:
-      - name: traefik
-        sectionName: https
-        kind: Gateway
-    hostnames:
-      - jellyfin.dubyatp.xyz
+    hosts:
+      - host: jellyfin.dubyatp.xyz
+        paths:
+          - path: /
+            pathType: ImplementationSpecific
+    tls:
+      - secretName: cert-dubyatp.xyz
+        hosts:
+          - jellyfin.dubyatp.xyz
   persistence:
     config:
       size: 25Gi

netmaker/statefulset.yaml

@@ -54,7 +54,7 @@ spec:
         envFrom:
           - configMapRef:
               name: netmaker-config
-        image: gravitl/netmaker:v1.6.0
+        image: gravitl/netmaker:v1.4.0
         imagePullPolicy: Always
         name: netmaker
         ports:

netmaker/ui/deployment.yaml

@@ -14,7 +14,7 @@ spec:
     spec:
       containers:
       - name: netmaker-ui
-        image: gravitl/netmaker-ui:v1.6.0
+        image: gravitl/netmaker-ui:v1.1.0
         env:
         - name: BACKEND_URL
           value: 'https://api.netmaker.infra.dubyatp.xyz'

searxng/Chart.yaml

@@ -24,5 +24,5 @@ appVersion: "1.0"
 
 dependencies:
 - name: searxng
-  version: 1.1.4
+  version: 1.1.3
   repository: https://charts.kubito.dev

vaultwarden/deployment.yaml

@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
       - name: vaultwarden
-        image: vaultwarden/server:1.37.0-alpine
+        image: vaultwarden/server:1.35.2-alpine
         livenessProbe:
           exec:
             command:

yt-dlp-bot/deployment.yaml

@@ -14,7 +14,7 @@ spec:
     spec:
       containers:
         - name: yt-dlp-bot
-          image: 'git.dubyatp.xyz/williamp/yt-dlp-bot:1060228'
+          image: 'git.dubyatp.xyz/williamp/yt-dlp-bot:23993d7'
           env:
             - name: OUT_PATH
               value: /data/youtube-vids