prettysunflower/infra
1
Fork 0
Code Issues 1 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Compare commits

base: prettysunflower:bee2aaeb7d81bc88f0307403ade4ebece528ab71
Branches Tags
prettysunflower:main prettysunflower:renovate/ghcr.io-suwayomi-suwayomi-server-2.x prettysunflower:renovate/privatebin-nginx-fpm-alpine-2.x
..
compare: prettysunflower:renovate/ghcr.io-suwayomi-suwayomi-server-2.x
Branches Tags
prettysunflower:main prettysunflower:renovate/ghcr.io-suwayomi-suwayomi-server-2.x prettysunflower:renovate/privatebin-nginx-fpm-alpine-2.x

22 Commits
bee2aaeb7d ... renovate/g

Author SHA1 Message Date
Renovate Bot
227598996a chore(deps): update ghcr.io/suwayomi/suwayomi-server docker tag to v2.1.1875 2025-08-01 13:04:59 +00:00
renovate-bot
01b7ee9b05 Merge pull request 'chore(deps): update renovate/renovate docker tag to v41.46.5' (#157) from renovate/renovate-renovate-41.x into main 2025-07-31 14:25:29 +00:00
Renovate Bot
5ad1696e4a chore(deps): update renovate/renovate docker tag to v41.46.5 2025-07-31 14:25:20 +00:00
prettysunflower
439d3d415d Added template for apps 
Signed-off-by: prettysunflower <me@prettysunflower.moe>
 2025-07-29 19:03:43 -04:00
prettysunflower
7ad308376e Merge remote-tracking branch 'origin/renovate/vaultwarden-server-1.x' 2025-07-27 23:12:15 -04:00
renovate-bot
95a0786224 Merge pull request 'chore(deps): update renovate/renovate docker tag to v41.43.5' (#156) from renovate/renovate-renovate-41.x into main 2025-07-28 03:11:46 +00:00
Renovate Bot
3400636511 chore(deps): update renovate/renovate docker tag to v41.43.5 2025-07-28 03:11:37 +00:00
Renovate Bot
12aaed3521 chore(deps): update vaultwarden/server docker tag to v1.34.2 2025-07-28 03:11:26 +00:00
prettysunflower
d901395e50 chose(deps): Updated Anubis to v1.21.3 2025-07-27 23:10:57 -04:00
prettysunflower
c16fa7e6a5 chore(deps): Updated PocketID to 1.6.4 2025-07-27 23:08:06 -04:00
renovate-bot
07a5a14438 Merge pull request 'chore(deps): update renovate/renovate docker tag to v41.39.0' (#154) from renovate/renovate-renovate-41.x into main 2025-07-19 14:10:08 +00:00
Renovate Bot
e09a328eea chore(deps): update renovate/renovate docker tag to v41.39.0 2025-07-19 14:09:52 +00:00
renovate-bot
69c854f99a Merge pull request 'chore(deps): update renovate/renovate docker tag to v41.38.1' (#153) from renovate/renovate-renovate-41.x into main 2025-07-18 16:01:26 +00:00
Renovate Bot
83213f104b chore(deps): update renovate/renovate docker tag to v41.38.1 2025-07-18 16:01:07 +00:00
prettysunflower
ce3a73515a apps(teable): Updated to 1.9.0 2025-07-17 11:46:37 -04:00
prettysunflower
6f8a22275b Merge remote-tracking branch 'origin/main' 2025-07-16 15:51:35 -04:00
prettysunflower
97d92f8d3f config(gotosocial): Changed GTS_TRUSTED_PROXIES to Sekibanki pod net 2025-07-16 15:51:30 -04:00
renovate-bot
c36ca81d99 Merge pull request 'chore(deps): update renovate/renovate docker tag to v41.37.2' (#150) from renovate/renovate-renovate-41.x into main 2025-07-16 15:00:41 +00:00
Renovate Bot
f060fe730b chore(deps): update renovate/renovate docker tag to v41.37.2 2025-07-16 15:00:31 +00:00
prettysunflower
368f69871e Merge pull request 'chore(deps): update registry.k8s.io/sig-storage/csi-provisioner docker tag to v5' (#149) from renovate/registry.k8s.io-sig-storage-csi-provisioner-5.x into main 
Reviewed-on: #149
 2025-07-16 14:55:42 +00:00
prettysunflower
559a55735d Merge pull request 'chore(deps): update registry.k8s.io/sig-storage/livenessprobe docker tag to v2.16.0' (#148) from renovate/registry.k8s.io-sig-storage-livenessprobe-2.x into main 
Reviewed-on: #148
 2025-07-16 14:55:25 +00:00
Renovate Bot
f96eb5e1fd chore(deps): update registry.k8s.io/sig-storage/livenessprobe docker tag to v2.16.0 2025-07-16 14:51:55 +00:00
17 changed files with 121 additions and 14 deletions
Expand all files Collapse all files

1
.gitignore vendored
View File

@@ -1,3 +1,4 @@
secrets.yaml
!apps/template/secrets.yaml
infra/*/tailscale.patch.yaml
.DS_Store

2
apps/seija/kakigoori/deployment.yaml
View File

@@ -35,7 +35,7 @@ spec:
seccompProfile:
type: RuntimeDefault
- name: anubis
image: ghcr.io/techarohq/anubis:v1.20.0
image: ghcr.io/techarohq/anubis:v1.21.3
env:
- name: "BIND"
value: ":8080"

2
apps/seija/ourfigurecollection/deployment.yaml
View File

@@ -50,7 +50,7 @@ spec:
ports:
- containerPort: 8002
- name: anubis
image: ghcr.io/techarohq/anubis:v1.20.0
image: ghcr.io/techarohq/anubis:v1.21.3
env:
- name: "BIND"
value: ":8080"

2
apps/seija/pocketid/deployment.yaml
View File

@@ -20,7 +20,7 @@ spec:
claimName: pocketid-pvc
containers:
- name: pocketid
image: ghcr.io/pocket-id/pocket-id:v1.6.2-distroless
image: ghcr.io/pocket-id/pocket-id:v1.6.4-distroless
imagePullPolicy: Always
ports:
- containerPort: 1411

2
apps/seija/prettysunflower-website/deployment.yaml
View File

@@ -29,7 +29,7 @@ spec:
ports:
- containerPort: 8001
- name: anubis
image: ghcr.io/techarohq/anubis:latest
image: ghcr.io/techarohq/anubis:v1.21.3
imagePullPolicy: Always
env:
- name: "BIND"

2
apps/seija/privatebin/deployment.yaml
View File

@@ -39,7 +39,7 @@ spec:
seccompProfile:
type: RuntimeDefault
- name: anubis
image: ghcr.io/techarohq/anubis:v1.20.0
image: ghcr.io/techarohq/anubis:v1.21.3
imagePullPolicy: Always
env:
- name: "BIND"

2
apps/sekibanki/gotosocial/configmap.yaml
View File

@@ -5,6 +5,6 @@ metadata:
data:
GTS_HOST: fedi.prettysunflower.moe
GTS_ACCOUNT_DOMAIN: prettysunflower.moe
GTS_TRUSTED_PROXIES: "10.217.0.0/32"
GTS_TRUSTED_PROXIES: "10.217.0.0/16"
GTS_INSTANCE_LANGUAGES: en,fr
GTS_ACCOUNTS_ALLOW_CUSTOM_CSS: "true"

2
apps/sekibanki/renovate/cronjob.yaml
View File

@@ -25,7 +25,7 @@ spec:
- fsn
containers:
- name: renovate
image: renovate/renovate:41.37.1
image: renovate/renovate:41.46.5
env:
- name: LOG_LEVEL
value: debug

4
apps/sekibanki/teable/deployment.yaml
View File

@@ -21,7 +21,7 @@ spec:
- "mail.prettysunflower.moe"
initContainers:
- name: db-migrate
image: ghcr.io/teableio/teable:83745958bbba83111145e1cd48de811cfc7db601
image: ghcr.io/teableio/teable:a2e95e3a2d258af01eb3d4af118a2f88bbca1a42
args:
- migrate-only
envFrom:
@@ -48,7 +48,7 @@ spec:
type: RuntimeDefault
containers:
- name: teable
image: ghcr.io/teableio/teable:83745958bbba83111145e1cd48de811cfc7db601
image: ghcr.io/teableio/teable:a2e95e3a2d258af01eb3d4af118a2f88bbca1a42
args:
- skip-migrate
ports:

2
apps/sekibanki/vaultwarden/deployment.yaml
View File

@@ -34,7 +34,7 @@ spec:
- "mail.prettysunflower.moe"
containers:
- name: teable
image: vaultwarden/server:1.34.1
image: vaultwarden/server:1.34.2
ports:
- containerPort: 80
name: http

2
apps/suwayomi/deployment.yaml
View File

@@ -29,7 +29,7 @@ spec:
claimName: suwayomi-pvc
containers:
- name: suwayomi
image: ghcr.io/suwayomi/suwayomi-server:v2.0.1851
image: ghcr.io/suwayomi/suwayomi-server:v2.1.1875
ports:
- containerPort: 4567
name: http

6
apps/template/configmap.yaml Normal file
View File

@@ -0,0 +1,6 @@
apiVersion: v1
kind: ConfigMap
metadata:
name: app-configmap
data:

69
apps/template/deployment.yaml Normal file
View File

@@ -0,0 +1,69 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: app
labels:
app.kubernetes.io/name: app
spec:
replicas: 1
selector:
matchLabels:
app.kubernetes.io/name: app
template:
metadata:
labels:
app.kubernetes.io/name: app
spec:
volumes:
- name: mountName
persistentVolumeClaim:
claimName: app-pvc
containers:
- name: containerName
image: image
envFrom:
- configMapRef:
name: configMap
- secretRef:
name: secrets
ports:
- containerPort: 1234
name: http
volumeMounts:
- name: mountName
mountPath: "/"
livenessProbe:
exec:
command:
- /app/pocket-id
- healthcheck
httpGet:
path: /healthz
port: 8080
initialDelaySeconds: 10
failureThreshold: 3
periodSeconds: 90
startupProbe:
exec:
command:
- /app/pocket-id
- healthcheck
httpGet:
path: /healthz
port: 8080
failureThreshold: 30
periodSeconds: 10
securityContext:
runAsUser: 1000
runAsGroup: 1000
runAsNonRoot: true
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
seccompProfile:
type: RuntimeDefault
dnsPolicy: "ClusterFirst"
dnsConfig:
nameservers:
- 100.96.226.96

11
apps/template/pvc.yaml Normal file
View File

@@ -0,0 +1,11 @@
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: app-pvc
spec:
accessModes:
- ReadWriteOnce
resources:
requests:
storage: 5Gi
storageClassName: nfs-csi|hcloud-volumes

7
apps/template/secrets.yaml Normal file
View File

@@ -0,0 +1,7 @@
apiVersion: v1
kind: Secret
metadata:
name: app-secrets
type: Opaque
stringData:

13
apps/template/svc.yaml Normal file
View File

@@ -0,0 +1,13 @@
apiVersion: v1
kind: Service
metadata:
name: app
spec:
type: NodePort
selector:
app.kubernetes.io/name: app
ports:
- protocol: TCP
port: 80
targetPort: 1234
name: http

4
infra/seija/csi/hcloud-csi.yaml
View File

@@ -199,7 +199,7 @@ spec:
limits: {}
requests: {}
- name: liveness-probe
image: registry.k8s.io/sig-storage/livenessprobe:v2.9.0
image: registry.k8s.io/sig-storage/livenessprobe:v2.16.0
imagePullPolicy: IfNotPresent
volumeMounts:
- mountPath: /run/csi
@@ -332,7 +332,7 @@ spec:
mountPath: /run/csi
- name: liveness-probe
image: registry.k8s.io/sig-storage/livenessprobe:v2.9.0
image: registry.k8s.io/sig-storage/livenessprobe:v2.16.0
imagePullPolicy: IfNotPresent
resources:
limits: {}