chore(deps): update helm release searxng to v1.1.2

2026-06-09 16:00:10 +00:00
17 changed files with 73 additions and 142 deletions
@@ -0,0 +1,10 @@
 apiVersion: v1
 kind: Secret
 metadata:
  name: cert-dubyatp-xyz
  annotations:
    replicator.v1.mittwald.de/replicate-from: "cert-manager/cert-dubyatp-xyz"
    replicator.v1.mittwald.de/replicated-keys: "tls.crt,tls.key"
 data:
  tls.crt: ""
  tls.key: ""
@@ -1,18 +0,0 @@
 apiVersion: gateway.networking.k8s.io/v1
 kind: Gateway
 metadata:
  name: traefik
 spec:
  gatewayClassName: traefik
  listeners:
    - name: https
      protocol: HTTPS
      port: 8443
      tls:
        mode: Terminate
        certificateRefs:
          - name: cert-dubyatp-xyz
            namespace: cert-manager
      allowedRoutes:
        namespaces:
          from: Same
@@ -1,19 +0,0 @@
 apiVersion: gateway.networking.k8s.io/v1
 kind: HTTPRoute
 metadata:
  name: attic
 spec:
  parentRefs:
    - name: traefik
      sectionName: https
      kind: Gateway
  hostnames:
    - nix-cache.dubyatp.xyz
  rules:
     - matches:
        - path:
            type: PathPrefix
            value: /
       backendRefs:
        - name: attic-svc
          port: 8080
@@ -24,5 +24,5 @@ appVersion: "1.0"
 dependencies:
 - name: authentik
-  version: 2026.8.0
+  version: 2026.5.2
  repository: https://charts.goauthentik.io
@@ -77,24 +77,6 @@ authentik:
            name: authentik-files
            key: AWS_SECRET_ACCESS_KEY      
  additionalObjects:
    - apiVersion: gateway.networking.k8s.io/v1
      kind: Gateway
      metadata:
        name: traefik
      spec:
        gatewayClassName: traefik
        listeners:
          - name: https
            protocol: HTTPS
            port: 8443
            tls:
              mode: Terminate
              certificateRefs:
                - name: cert-dubyatp-xyz
                  namespace: cert-manager
            allowedRoutes:
              namespaces:
                from: Same
    - apiVersion: networking.k8s.io/v1
      kind: Ingress
      metadata:
@@ -24,5 +24,5 @@ appVersion: "1.0"
 dependencies:
 - name: gitea
-  version: 12.7.3
+  version: 12.6.0
  repository: https://weyma-s3.infra.dubyatp.xyz/helm-bucket-ea34bc44-ef19-480d-a16a-1e583991f123/charts/
@@ -1,27 +1,15 @@
 gitea:
  replicaCount: 3
-#  ingress:
+  ingress:
-#    enabled: true
+    enabled: true
-#    hosts:
+    hosts:
-#      - host: git.dubyatp.xyz
+      - host: git.dubyatp.xyz
-#        paths:
+        paths:
-#          - path: /
+          - path: /
-#    tls:
+    tls:
-#      - secretName: cert-dubyatp-xyz
+      - secretName: cert-dubyatp-xyz
-#        hosts:
+        hosts:
-#          - git.dubyatp.xyz
+          - git.dubyatp.xyz
  gateway:
    httpRoute:
      enabled: true
      hostnames:
        - git.dubyatp.xyz
      parentRefs:
        - name: traefik
          sectionName: https
          kind: Gateway
      pathType: PathPrefix
      paths:
        - path: /
  persistence:
    enabled: true
    create: true
@@ -83,6 +71,8 @@ gitea:
        OFFLINE_MODE: false
      service:
        DISABLE_REGISTRATION: true
      webhook:
        ALLOWED_HOST_LIST: "drone.infra.dubyatp.xyz,argocd.infra.dubyatp.xyz,discord.com,10.0.0.0/8"
      mailer:
        ENABLED: true
        FROM: [email protected]
@@ -92,7 +82,6 @@ gitea:
        USER: gitea_dubyatp
      security:
        INSTALL_LOCK: true
        ALLOWED_HOST_LIST: "drone.infra.dubyatp.xyz,argocd.infra.dubyatp.xyz,discord.com,10.0.0.0/8"
    metrics:
      enabled: true
      serviceMonitor:
@@ -116,24 +105,16 @@ gitea:
          services:
          - name: gitea-ssh
            port: 22
-    - apiVersion: gateway.networking.k8s.io/v1
+    - apiVersion: v1
-      kind: Gateway
+      kind: Secret
      metadata:
-        name: traefik
+        name: cert-dubyatp-xyz
-      spec:
+        annotations:
-        gatewayClassName: traefik
+          replicator.v1.mittwald.de/replicate-from: "cert-manager/cert-dubyatp-xyz"
-        listeners:
+          replicator.v1.mittwald.de/replicated-keys: "tls.crt,tls.key"
-          - name: https
+      data:
-            protocol: HTTPS
+        tls.crt: ""
-            port: 8443
+        tls.key: ""
            tls:
              mode: Terminate
              certificateRefs:
                - name: cert-dubyatp-xyz
                  namespace: cert-manager
            allowedRoutes:
              namespaces:
                from: Same
    - apiVersion: external-secrets.io/v1
      kind: ExternalSecret
      metadata:
@@ -191,6 +191,6 @@ grafana:
    image:
      registry: docker.io
      repository: bats/bats
-      tag: 1.14.0
+      tag: 1.13.0
    imagePullPolicy: IfNotPresent
  useStatefulSet: false
@@ -1,18 +0,0 @@
 apiVersion: gateway.networking.k8s.io/v1
 kind: Gateway
 metadata:
  name: traefik
 spec:
  gatewayClassName: traefik
  listeners:
    - name: https
      protocol: HTTPS
      port: 8443
      tls:
        mode: Terminate
        certificateRefs:
          - name: cert-dubyatp-xyz
            namespace: cert-manager
      allowedRoutes:
        namespaces:
          from: Same
@@ -1,4 +1,4 @@
-{{- if and (.Values.jellyfin.metrics.enabled) (.Values.jellyfin.httpRoute.enabled) -}}
+{{- if and (.Values.jellyfin.metrics.enabled) (.Values.jellyfin.ingress.enabled) -}}
 ---
 apiVersion: v1
 kind: Service
@@ -13,22 +13,21 @@ spec:
      port: 6767
      targetPort: 6767
 ---
-apiVersion: gateway.networking.k8s.io/v1
+apiVersion: networking.k8s.io/v1
-kind: HTTPRoute
+kind: Ingress
 metadata:
  name: block-metrics
  namespace: {{ .Release.Namespace }}
 spec:
  parentRefs:
    {{- toYaml .Values.jellyfin.httpRoute.parentRefs | nindent 4 }}
  hostnames:
    {{- toYaml .Values.jellyfin.httpRoute.hostnames | nindent 4 }}
  rules:
-    - matches:
+  - host: {{ (index .Values.jellyfin.ingress.hosts 0).host }}
-        - path:
+    http:
-            type: PathPrefix
+      paths:
-            value: /metrics
+      - pathType: Prefix
-      backendRefs:
+        path: "/metrics"
-        - name: dummy-svc
+        backend:
-          port: 6767
+          service:
            name: dummy-svc
            port: 
              number: 6767
 {{- end }}
@@ -0,0 +1,11 @@
 apiVersion: v1
 data:
  tls.crt:
  tls.key:
 kind: Secret
 metadata:
  annotations:
    replicator.v1.mittwald.de/replicate-from: cert-manager/cert-dubyatp-xyz
    replicator.v1.mittwald.de/replicated-keys: tls.crt,tls.key
  name: cert-dubyatp-xyz
 type: Opaque
@@ -1,14 +1,17 @@
 jellyfin:
  deploymentStrategy:
    type: Recreate
-  httpRoute:
+  ingress:
    enabled: true
-    parentRefs:
+    hosts:
-      - name: traefik
+      - host: jellyfin.dubyatp.xyz
-        sectionName: https
+        paths:
-        kind: Gateway
+          - path: /
-    hostnames:
+            pathType: ImplementationSpecific
-      - jellyfin.dubyatp.xyz
+    tls:
      - secretName: cert-dubyatp.xyz
        hosts:
          - jellyfin.dubyatp.xyz
  persistence:
    config:
      size: 25Gi
@@ -54,7 +54,7 @@ spec:
        envFrom:
          - configMapRef:
              name: netmaker-config
-        image: gravitl/netmaker:v1.6.0
+        image: gravitl/netmaker:v1.4.0
        imagePullPolicy: Always
        name: netmaker
        ports:
@@ -14,7 +14,7 @@ spec:
    spec:
      containers:
      - name: netmaker-ui
-        image: gravitl/netmaker-ui:v1.6.0
+        image: gravitl/netmaker-ui:v1.1.0
        env:
        - name: BACKEND_URL
          value: 'https://api.netmaker.infra.dubyatp.xyz'
@@ -24,5 +24,5 @@ appVersion: "1.0"
 dependencies:
 - name: searxng
-  version: 1.1.4
+  version: 1.1.2
  repository: https://charts.kubito.dev
@@ -17,7 +17,7 @@ spec:
    spec:
      containers:
      - name: vaultwarden
-        image: vaultwarden/server:1.37.0-alpine
+        image: vaultwarden/server:1.35.2-alpine
        livenessProbe:
          exec:
            command:
@@ -14,7 +14,7 @@ spec:
    spec:
      containers:
        - name: yt-dlp-bot
-          image: 'git.dubyatp.xyz/williamp/yt-dlp-bot:1060228'
+          image: 'git.dubyatp.xyz/williamp/yt-dlp-bot:23993d7'
          env:
            - name: OUT_PATH
              value: /data/youtube-vids