This commit is contained in:
parent
e507515766
commit
a51622cc4b
7 changed files with 8 additions and 15 deletions
|
|
@ -3,8 +3,12 @@ extends: default
|
||||||
rules:
|
rules:
|
||||||
document-start: disable
|
document-start: disable
|
||||||
line-length:
|
line-length:
|
||||||
max: 80
|
max: 150
|
||||||
allow-non-breakable-words: false
|
allow-non-breakable-words: true
|
||||||
|
allow-non-breakable-inline-mappings: true
|
||||||
|
comments:
|
||||||
|
min-spaces-from-content: 1
|
||||||
|
comments-indentation: disable
|
||||||
|
|
||||||
ignore: |
|
ignore: |
|
||||||
**/*sealed*.yaml
|
**/*sealed*.yaml
|
||||||
|
|
|
||||||
|
|
@ -8,7 +8,7 @@ metadata:
|
||||||
spec:
|
spec:
|
||||||
replicas: 1
|
replicas: 1
|
||||||
strategy:
|
strategy:
|
||||||
type: Recreate
|
type: Recreate
|
||||||
selector:
|
selector:
|
||||||
matchLabels:
|
matchLabels:
|
||||||
app: slskd
|
app: slskd
|
||||||
|
|
@ -40,7 +40,6 @@ spec:
|
||||||
readOnly: true
|
readOnly: true
|
||||||
- name: wg-config
|
- name: wg-config
|
||||||
mountPath: /config
|
mountPath: /config
|
||||||
|
|
||||||
containers:
|
containers:
|
||||||
- name: protonvpn-wireguard
|
- name: protonvpn-wireguard
|
||||||
image: linuxserver/wireguard:1.0.20250521
|
image: linuxserver/wireguard:1.0.20250521
|
||||||
|
|
@ -60,7 +59,6 @@ spec:
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
- name: wg-config
|
- name: wg-config
|
||||||
mountPath: /config
|
mountPath: /config
|
||||||
|
|
||||||
- name: slskd
|
- name: slskd
|
||||||
image: slskd/slskd:0.25.1.65534-8e152ed6
|
image: slskd/slskd:0.25.1.65534-8e152ed6
|
||||||
securityContext:
|
securityContext:
|
||||||
|
|
@ -93,7 +91,6 @@ spec:
|
||||||
- name: slskd-music
|
- name: slskd-music
|
||||||
mountPath: /app/music
|
mountPath: /app/music
|
||||||
readOnly: true
|
readOnly: true
|
||||||
|
|
||||||
- name: soulsync
|
- name: soulsync
|
||||||
image: boulderbadgedad/soulsync:2.7.3
|
image: boulderbadgedad/soulsync:2.7.3
|
||||||
securityContext:
|
securityContext:
|
||||||
|
|
@ -139,7 +136,6 @@ spec:
|
||||||
- name: soulsync-ephemeral
|
- name: soulsync-ephemeral
|
||||||
mountPath: /app/scripts
|
mountPath: /app/scripts
|
||||||
subPath: scripts
|
subPath: scripts
|
||||||
|
|
||||||
volumes:
|
volumes:
|
||||||
- name: wg-secret
|
- name: wg-secret
|
||||||
secret:
|
secret:
|
||||||
|
|
|
||||||
|
|
@ -1,6 +1,5 @@
|
||||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||||
kind: Kustomization
|
kind: Kustomization
|
||||||
|
|
||||||
resources:
|
resources:
|
||||||
- namespace.yaml
|
- namespace.yaml
|
||||||
- storage.yaml
|
- storage.yaml
|
||||||
|
|
|
||||||
|
|
@ -10,7 +10,6 @@ spec:
|
||||||
endpointSelector:
|
endpointSelector:
|
||||||
matchLabels:
|
matchLabels:
|
||||||
app: slskd
|
app: slskd
|
||||||
|
|
||||||
ingress:
|
ingress:
|
||||||
- fromEntities:
|
- fromEntities:
|
||||||
- ingress
|
- ingress
|
||||||
|
|
@ -20,7 +19,6 @@ spec:
|
||||||
protocol: TCP
|
protocol: TCP
|
||||||
- port: "8008"
|
- port: "8008"
|
||||||
protocol: TCP
|
protocol: TCP
|
||||||
|
|
||||||
---
|
---
|
||||||
# ----------------------------------------------------
|
# ----------------------------------------------------
|
||||||
# VPN killswitch — only allow egress to ProtonVPN endpoint
|
# VPN killswitch — only allow egress to ProtonVPN endpoint
|
||||||
|
|
@ -35,7 +33,6 @@ spec:
|
||||||
endpointSelector:
|
endpointSelector:
|
||||||
matchLabels:
|
matchLabels:
|
||||||
app: slskd
|
app: slskd
|
||||||
|
|
||||||
egress:
|
egress:
|
||||||
- toCIDR:
|
- toCIDR:
|
||||||
- "149.50.216.205/32"
|
- "149.50.216.205/32"
|
||||||
|
|
|
||||||
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
apiVersion: bitnami.com/v1alpha1
|
apiVersion: bitnami.com/v1alpha1
|
||||||
kind: SealedSecret
|
kind: SealedSecret
|
||||||
metadata:
|
metadata:
|
||||||
|
|
|
||||||
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
apiVersion: bitnami.com/v1alpha1
|
apiVersion: bitnami.com/v1alpha1
|
||||||
kind: SealedSecret
|
kind: SealedSecret
|
||||||
metadata:
|
metadata:
|
||||||
|
|
|
||||||
|
|
@ -1,6 +1,5 @@
|
||||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||||
kind: Kustomization
|
kind: Kustomization
|
||||||
|
|
||||||
resources:
|
resources:
|
||||||
- kyverno-core.yaml
|
- kyverno-core.yaml
|
||||||
- kyverno-policies.yaml
|
- kyverno-policies.yaml
|
||||||
|
|
@ -19,6 +18,6 @@ resources:
|
||||||
- navidrome.yaml
|
- navidrome.yaml
|
||||||
- bytestash.yaml
|
- bytestash.yaml
|
||||||
- stirling-pdf.yaml
|
- stirling-pdf.yaml
|
||||||
# - soulsync.yaml
|
- soulsync.yaml
|
||||||
- vikunja.yaml
|
- vikunja.yaml
|
||||||
- argocd-config.yaml
|
- argocd-config.yaml
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue