diff --git a/.yamllint b/.yamllint index a9bdbc2..e6293d3 100644 --- a/.yamllint +++ b/.yamllint @@ -3,8 +3,12 @@ extends: default rules: document-start: disable line-length: - max: 80 - allow-non-breakable-words: false + max: 150 + allow-non-breakable-words: true + allow-non-breakable-inline-mappings: true + comments: + min-spaces-from-content: 1 + comments-indentation: disable ignore: | **/*sealed*.yaml diff --git a/apps/soulsync/deployment.yaml b/apps/soulsync/deployment.yaml index ef8301d..63c8b39 100644 --- a/apps/soulsync/deployment.yaml +++ b/apps/soulsync/deployment.yaml @@ -8,7 +8,7 @@ metadata: spec: replicas: 1 strategy: - type: Recreate + type: Recreate selector: matchLabels: app: slskd @@ -40,7 +40,6 @@ spec: readOnly: true - name: wg-config mountPath: /config - containers: - name: protonvpn-wireguard image: linuxserver/wireguard:1.0.20250521 @@ -60,7 +59,6 @@ spec: volumeMounts: - name: wg-config mountPath: /config - - name: slskd image: slskd/slskd:0.25.1.65534-8e152ed6 securityContext: @@ -93,7 +91,6 @@ spec: - name: slskd-music mountPath: /app/music readOnly: true - - name: soulsync image: boulderbadgedad/soulsync:2.7.3 securityContext: @@ -139,7 +136,6 @@ spec: - name: soulsync-ephemeral mountPath: /app/scripts subPath: scripts - volumes: - name: wg-secret secret: diff --git a/apps/soulsync/kustomization.yaml b/apps/soulsync/kustomization.yaml index 574ce1b..612e5a4 100644 --- a/apps/soulsync/kustomization.yaml +++ b/apps/soulsync/kustomization.yaml @@ -1,6 +1,5 @@ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization - resources: - namespace.yaml - storage.yaml diff --git a/apps/soulsync/network-policy.yaml b/apps/soulsync/network-policy.yaml index db6372c..3b522fd 100644 --- a/apps/soulsync/network-policy.yaml +++ b/apps/soulsync/network-policy.yaml @@ -10,7 +10,6 @@ spec: endpointSelector: matchLabels: app: slskd - ingress: - fromEntities: - ingress @@ -20,7 +19,6 @@ spec: protocol: TCP - port: "8008" protocol: TCP - --- # ---------------------------------------------------- # VPN killswitch — only allow egress to ProtonVPN endpoint @@ -35,7 +33,6 @@ spec: endpointSelector: matchLabels: app: slskd - egress: - toCIDR: - "149.50.216.205/32" diff --git a/apps/soulsync/protonvpn-wg-sealed.yaml b/apps/soulsync/protonvpn-wg-sealed.yaml index 79e78cc..d5626e8 100644 --- a/apps/soulsync/protonvpn-wg-sealed.yaml +++ b/apps/soulsync/protonvpn-wg-sealed.yaml @@ -1,4 +1,3 @@ ---- apiVersion: bitnami.com/v1alpha1 kind: SealedSecret metadata: diff --git a/apps/soulsync/slskd-sealed.yaml b/apps/soulsync/slskd-sealed.yaml index 73c1b21..5b55db6 100644 --- a/apps/soulsync/slskd-sealed.yaml +++ b/apps/soulsync/slskd-sealed.yaml @@ -1,4 +1,3 @@ ---- apiVersion: bitnami.com/v1alpha1 kind: SealedSecret metadata: diff --git a/management/platform-apps/kustomization.yaml b/management/platform-apps/kustomization.yaml index ae6aa50..b7c6bbe 100644 --- a/management/platform-apps/kustomization.yaml +++ b/management/platform-apps/kustomization.yaml @@ -1,6 +1,5 @@ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization - resources: - kyverno-core.yaml - kyverno-policies.yaml @@ -19,6 +18,6 @@ resources: - navidrome.yaml - bytestash.yaml - stirling-pdf.yaml - # - soulsync.yaml + - soulsync.yaml - vikunja.yaml - argocd-config.yaml