From af50da35a27f1f4e28c8a038af7745eb92b55417 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Mon, 16 Jun 2025 17:00:34 +0000 Subject: [PATCH 01/95] chore(deps): update renovate/renovate docker tag to v40.59.1 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 754e760..c808d01 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:40.59.0 + image: renovate/renovate:40.59.1 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 5118c01618773baa61206988e7a021b2b6d47fe8 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Mon, 16 Jun 2025 22:00:32 +0000 Subject: [PATCH 02/95] chore(deps): update renovate/renovate docker tag to v40.59.2 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index c808d01..7660f03 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:40.59.1 + image: renovate/renovate:40.59.2 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 4ca04d2e574549e382ce477ee910fd9cae78a49a Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 17 Jun 2025 04:00:28 +0000 Subject: [PATCH 03/95] chore(deps): update renovate/renovate docker tag to v40.59.3 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 7660f03..dfbd287 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:40.59.2 + image: renovate/renovate:40.59.3 env: - name: LOG_LEVEL value: debug -- 2.49.1 From e3be97f7610ad25e49cf41f759f07857b014388f Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 17 Jun 2025 10:00:27 +0000 Subject: [PATCH 04/95] chore(deps): update renovate/renovate docker tag to v40.59.4 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index dfbd287..7f01c5f 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:40.59.3 + image: renovate/renovate:40.59.4 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 8fb31fb52eebfde98103ee68496dd2194fe9603b Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 17 Jun 2025 13:00:32 +0000 Subject: [PATCH 05/95] chore(deps): update renovate/renovate docker tag to v40.60.0 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 7f01c5f..b4f3ba9 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:40.59.4 + image: renovate/renovate:40.60.0 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 6035817e3dfacfef9a53c06a95c8e8e96b59233e Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 18 Jun 2025 00:00:29 +0000 Subject: [PATCH 06/95] chore(deps): update renovate/renovate docker tag to v40.60.1 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index b4f3ba9..195eefa 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:40.60.0 + image: renovate/renovate:40.60.1 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 062423fb96dbcb5d42229af442efbf4f8daa0e7b Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 18 Jun 2025 08:00:30 +0000 Subject: [PATCH 07/95] chore(deps): update renovate/renovate docker tag to v40.60.2 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 195eefa..3e9dbc2 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:40.60.1 + image: renovate/renovate:40.60.2 env: - name: LOG_LEVEL value: debug -- 2.49.1 From a4bd8d099ae14c84ddf791e5386e1f193ea97211 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 18 Jun 2025 12:00:28 +0000 Subject: [PATCH 08/95] chore(deps): update renovate/renovate docker tag to v40.60.4 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 3e9dbc2..5b31de5 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:40.60.2 + image: renovate/renovate:40.60.4 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 1912538cfa15c0cbb932c118eab4c5d5aca89e2d Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 18 Jun 2025 14:00:46 +0000 Subject: [PATCH 09/95] chore(deps): update renovate/renovate docker tag to v40.60.5 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 5b31de5..19d513e 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:40.60.4 + image: renovate/renovate:40.60.5 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 7ead96cc14284721e14a0d708e34dc65e6c74e9e Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 18 Jun 2025 15:00:30 +0000 Subject: [PATCH 10/95] chore(deps): update renovate/renovate docker tag to v40.61.0 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 19d513e..1bcc997 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:40.60.5 + image: renovate/renovate:40.61.0 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 5f6d32accc9f1ee0f09545b7f95fec91a4351822 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 18 Jun 2025 19:00:25 +0000 Subject: [PATCH 11/95] chore(deps): update renovate/renovate docker tag to v40.61.1 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 1bcc997..4a6c271 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:40.61.0 + image: renovate/renovate:40.61.1 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 252defe48ee6960b71b7af33f495ef2a898b1433 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 18 Jun 2025 20:00:29 +0000 Subject: [PATCH 12/95] chore(deps): update renovate/renovate docker tag to v40.61.2 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 4a6c271..07fe04e 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:40.61.1 + image: renovate/renovate:40.61.2 env: - name: LOG_LEVEL value: debug -- 2.49.1 From bdbecb8dfce0bf7ca99ab1814afe1bbb9b600f94 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 19 Jun 2025 05:00:24 +0000 Subject: [PATCH 13/95] chore(deps): update renovate/renovate docker tag to v40.61.3 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 07fe04e..cd08cc9 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:40.61.2 + image: renovate/renovate:40.61.3 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 0ae8984484a593275836a3e95d8fb15f1543ad1d Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 19 Jun 2025 07:00:23 +0000 Subject: [PATCH 14/95] chore(deps): update renovate/renovate docker tag to v40.62.0 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index cd08cc9..267f348 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:40.61.3 + image: renovate/renovate:40.62.0 env: - name: LOG_LEVEL value: debug -- 2.49.1 From bb68fb1ab3ff4043f1466ebfd00975f66a679f5e Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 19 Jun 2025 08:00:32 +0000 Subject: [PATCH 15/95] chore(deps): update renovate/renovate docker tag to v40.62.1 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 267f348..71ce379 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:40.62.0 + image: renovate/renovate:40.62.1 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 33429a01c172438fa5fdd2c7d1f3711e85b8bb9d Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 19 Jun 2025 10:00:30 +0000 Subject: [PATCH 16/95] chore(deps): update renovate/renovate docker tag to v41 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 71ce379..621b3d7 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:40.62.1 + image: renovate/renovate:41.0.0 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 49996499d6855a0c88bfa1d342ae6102b3d9ee07 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 19 Jun 2025 14:00:29 +0000 Subject: [PATCH 17/95] chore(deps): update renovate/renovate docker tag to v41.1.0 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 621b3d7..9b1a8cd 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.0.0 + image: renovate/renovate:41.1.0 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 3432145d31d5f773c1f80f224acc603f70271153 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 19 Jun 2025 19:01:02 +0000 Subject: [PATCH 18/95] chore(deps): update ghcr.io/pocket-id/pocket-id docker tag to v1.4.0 --- apps/pocketid/deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/pocketid/deployment.yaml b/apps/pocketid/deployment.yaml index 02abc54..e93713f 100644 --- a/apps/pocketid/deployment.yaml +++ b/apps/pocketid/deployment.yaml @@ -20,7 +20,7 @@ spec: claimName: pocketid-data-pvc-yuyuko containers: - name: pocketid - image: ghcr.io/pocket-id/pocket-id:v1.3.1 + image: ghcr.io/pocket-id/pocket-id:v1.4.0 imagePullPolicy: Always ports: - containerPort: 1411 -- 2.49.1 From 39812a4f77a0132e949a7205668e160eb9f3d123 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 19 Jun 2025 22:00:27 +0000 Subject: [PATCH 19/95] chore(deps): update renovate/renovate docker tag to v41.1.1 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 9b1a8cd..8cbf855 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.1.0 + image: renovate/renovate:41.1.1 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 5562605aabcf31e37ac3187b1887174c8f155c05 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 20 Jun 2025 07:00:24 +0000 Subject: [PATCH 20/95] chore(deps): update renovate/renovate docker tag to v41.1.2 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 8cbf855..22d619e 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.1.1 + image: renovate/renovate:41.1.2 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 5fa9bd8b994511d8789b6a10f732c2f76ad3826a Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 20 Jun 2025 10:00:30 +0000 Subject: [PATCH 21/95] chore(deps): update renovate/renovate docker tag to v41.1.3 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 22d619e..1b477de 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.1.2 + image: renovate/renovate:41.1.3 env: - name: LOG_LEVEL value: debug -- 2.49.1 From aebf61704d8e710dd21cc4955a8f310cd39b3b8f Mon Sep 17 00:00:00 2001 From: prettysunflower Date: Sat, 21 Jun 2025 16:40:37 -0400 Subject: [PATCH 22/95] apps(kakigoori): Updated Anubis to v1.20.0-pre1 --- apps/kakigoori/deployment.yaml | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/apps/kakigoori/deployment.yaml b/apps/kakigoori/deployment.yaml index 8a4595d..8c5c07e 100644 --- a/apps/kakigoori/deployment.yaml +++ b/apps/kakigoori/deployment.yaml @@ -45,7 +45,7 @@ spec: seccompProfile: type: RuntimeDefault - name: anubis - image: reg.xeiaso.net/techaro/anubis:thoth + image: ghcr.io/techarohq/anubis:v1.20.0-pre1 imagePullPolicy: Always env: - name: "BIND" @@ -97,4 +97,8 @@ spec: volumes: - name: config configMap: - name: kakigoori-config \ No newline at end of file + name: kakigoori-config + dnsPolicy: "None" + dnsConfig: + nameservers: + - 100.96.226.96 -- 2.49.1 From adfd0debc462bd7ddee31adbcd824585a507dd5a Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sun, 22 Jun 2025 04:00:33 +0000 Subject: [PATCH 23/95] chore(deps): update renovate/renovate docker tag to v41.1.4 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 1b477de..8034373 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.1.3 + image: renovate/renovate:41.1.4 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 672d32d99326905486fc1d1cf4a0421ba3c176fa Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sun, 22 Jun 2025 20:00:30 +0000 Subject: [PATCH 24/95] chore(deps): update ghcr.io/pocket-id/pocket-id docker tag to v1.4.1 --- apps/pocketid/deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/pocketid/deployment.yaml b/apps/pocketid/deployment.yaml index e93713f..305ccd6 100644 --- a/apps/pocketid/deployment.yaml +++ b/apps/pocketid/deployment.yaml @@ -20,7 +20,7 @@ spec: claimName: pocketid-data-pvc-yuyuko containers: - name: pocketid - image: ghcr.io/pocket-id/pocket-id:v1.4.0 + image: ghcr.io/pocket-id/pocket-id:v1.4.1 imagePullPolicy: Always ports: - containerPort: 1411 -- 2.49.1 From 31a3fc45fa50ee5a3a18d74c6f61f0654998a07f Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Mon, 23 Jun 2025 09:00:29 +0000 Subject: [PATCH 25/95] chore(deps): update renovate/renovate docker tag to v41.2.0 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 8034373..35145de 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.1.4 + image: renovate/renovate:41.2.0 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 4bf0bc9e69213468db036354ae3c98ab73a30ae7 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Mon, 23 Jun 2025 12:00:38 +0000 Subject: [PATCH 26/95] chore(deps): update renovate/renovate docker tag to v41.3.0 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 35145de..fd5b200 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.2.0 + image: renovate/renovate:41.3.0 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 99d83603445a98fb78ad4251ce42bfabddc39e06 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Mon, 23 Jun 2025 13:00:43 +0000 Subject: [PATCH 27/95] chore(deps): update renovate/renovate docker tag to v41.4.0 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index fd5b200..37b50c7 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.3.0 + image: renovate/renovate:41.4.0 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 8cf8177e453e6107fc3716b23325390025eb8d8b Mon Sep 17 00:00:00 2001 From: prettysunflower Date: Mon, 23 Jun 2025 11:30:37 -0400 Subject: [PATCH 28/95] apps(vaultwarden): Added Vaultwarden to cluster --- apps/kustomization.yaml | 3 +- apps/vaultwarden/configmap.yaml | 12 ++++++ apps/vaultwarden/deployment.yaml | 58 +++++++++++++++++++++++++++++ apps/vaultwarden/kustomization.yaml | 6 +++ apps/vaultwarden/pvc.yaml | 11 ++++++ apps/vaultwarden/secrets.sops.yaml | 23 ++++++++++++ apps/vaultwarden/services.yaml | 12 ++++++ 7 files changed, 124 insertions(+), 1 deletion(-) create mode 100644 apps/vaultwarden/configmap.yaml create mode 100644 apps/vaultwarden/deployment.yaml create mode 100644 apps/vaultwarden/kustomization.yaml create mode 100644 apps/vaultwarden/pvc.yaml create mode 100644 apps/vaultwarden/secrets.sops.yaml create mode 100644 apps/vaultwarden/services.yaml diff --git a/apps/kustomization.yaml b/apps/kustomization.yaml index b1a9d68..3150772 100644 --- a/apps/kustomization.yaml +++ b/apps/kustomization.yaml @@ -14,4 +14,5 @@ resources: - technitium - thelounge - uptime-kuma - - znc \ No newline at end of file + - znc + - vaultwarden \ No newline at end of file diff --git a/apps/vaultwarden/configmap.yaml b/apps/vaultwarden/configmap.yaml new file mode 100644 index 0000000..0b57fac --- /dev/null +++ b/apps/vaultwarden/configmap.yaml @@ -0,0 +1,12 @@ +apiVersion: v1 +kind: ConfigMap +metadata: + name: vaultwarden-config +data: + DOMAIN: "https://passwords.prettysunflower.moe" + SMTP_HOST: mail.prettysunflower.moe + SMTP_FROM: vaultwarden@prettysunflower.moe + SMTP_PORT: "587" + SMTP_SECURITY: starttls + SMTP_USERNAME: me@prettysunflower.moe + SIGNUPS_DOMAINS_WHITELIST: prettysunflower.moe \ No newline at end of file diff --git a/apps/vaultwarden/deployment.yaml b/apps/vaultwarden/deployment.yaml new file mode 100644 index 0000000..723994e --- /dev/null +++ b/apps/vaultwarden/deployment.yaml @@ -0,0 +1,58 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: vaultwarden + labels: + app.kubernetes.io/name: vaultwarden +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/name: vaultwarden + template: + metadata: + labels: + app.kubernetes.io/name: vaultwarden + spec: + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - weight: 1 + preference: + matchExpressions: + - key: location + operator: In + values: + - fsn + volumes: + - name: vaultwarden-data + persistentVolumeClaim: + claimName: vaultwarden-data-pvc + hostAliases: + - ip: "100.113.193.5" + hostnames: + - "mail.prettysunflower.moe" + containers: + - name: teable + image: vaultwarden/server:1.34.1 + ports: + - containerPort: 80 + name: http + envFrom: + - configMapRef: + name: vaultwarden-config + - secretRef: + name: vaultwarden-secrets + volumeMounts: + - name: vaultwarden-data + mountPath: "/data" + securityContext: + runAsUser: 1000 + runAsGroup: 1000 + runAsNonRoot: true + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + seccompProfile: + type: RuntimeDefault \ No newline at end of file diff --git a/apps/vaultwarden/kustomization.yaml b/apps/vaultwarden/kustomization.yaml new file mode 100644 index 0000000..8d4a522 --- /dev/null +++ b/apps/vaultwarden/kustomization.yaml @@ -0,0 +1,6 @@ +resources: + - configmap.yaml + - deployment.yaml + - pvc.yaml + - secrets.yaml + - services.yaml \ No newline at end of file diff --git a/apps/vaultwarden/pvc.yaml b/apps/vaultwarden/pvc.yaml new file mode 100644 index 0000000..d70c3a9 --- /dev/null +++ b/apps/vaultwarden/pvc.yaml @@ -0,0 +1,11 @@ +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: vaultwarden-data-pvc +spec: + accessModes: + - ReadWriteOnce + resources: + requests: + storage: 5Gi + storageClassName: seaweedfs-storage \ No newline at end of file diff --git a/apps/vaultwarden/secrets.sops.yaml b/apps/vaultwarden/secrets.sops.yaml new file mode 100644 index 0000000..32105ee --- /dev/null +++ b/apps/vaultwarden/secrets.sops.yaml @@ -0,0 +1,23 @@ +apiVersion: v1 +kind: Secret +metadata: + name: vaultwarden-secrets +type: Opaque +stringData: + SMTP_PASSWORD: ENC[AES256_GCM,data:ufFFpjspCNUdGT3sYNuuKQ==,iv:D3h1kX9ZQ9530gJ63L/YBD15NKu8j8OxhKcCzP61vnM=,tag:IxXauPdCxSqlYRtzFH0Hhw==,type:str] + DATABASE_URL: ENC[AES256_GCM,data:7+H4czU+m7HZhda+y7mj9ST6bayMgC+jcQmRgcLlmZFV+4Nnzypd2vefOrhLAiZV9wpOi1orKvUtcrl9gNsBjOXxgkVGSos6W+pKnckupikbknW+Ra99ij5VJw==,iv:f3zvmuf1Z6ysdmvC0kbstOnkvM9O/zYsrkv5pP026HA=,tag:286U6+3GZyfwZxK2L4wWSw==,type:str] +sops: + age: + - recipient: age1r0tjhg6uexyj0p7fp0ftv5h7r7e3ptzkk2797pznfvrvsm576u0s37yyaw + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1VFNZYnJzd2NQYXV1ckd2 + d3lybWtYbUJIcWxnVlhLV09STTRtVDdhZVZVClZQOVZQZTJqQzJkb3R0clBxNG5q + elY2MFNpNGVLTVYyQkJENUJ5SmQ5TWsKLS0tIGFmWDRsUS9YZVgwaFBsN3RZcVlz + VFRQMEprYVA0ZEU1ZG5ienJ1dEt5S28KgCutiomxOnX/G58d4XOBOJxgr5W9NW0s + GogonWwuW7gCHvS0K2LQFYaQpZtM++9y+IjTFwUYv2fIxuKBkd5QVw== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2025-06-23T15:29:56Z" + mac: ENC[AES256_GCM,data:fFr7jczPTJKtBui7cItBem3TEO2VAEGp6GfyvPeJ3/ZjxUJzxSjIUiTTAVWKYq4a4O69tCHijFfXMlAXSf4C/CgjfFpi0y459gn4Iz0GC8uD2YlJS5558tB8roc5QPF5NK6SN2AtIAOTe37ScbI//aKzM0LYTEb1Lke18yei4Fw=,iv:GzIaYOUgk684UX1lpIhP6iuoxVTenVWfhAbV4tcO8So=,tag:+mY461BhKOJUggExjK7AHA==,type:str] + encrypted_regex: ^(data|stringData)$ + version: 3.10.2 diff --git a/apps/vaultwarden/services.yaml b/apps/vaultwarden/services.yaml new file mode 100644 index 0000000..f6ab5f8 --- /dev/null +++ b/apps/vaultwarden/services.yaml @@ -0,0 +1,12 @@ +apiVersion: v1 +kind: Service +metadata: + name: vaultwarden +spec: + type: ClusterIP + selector: + app.kubernetes.io/name: vaultwarden + ports: + - protocol: TCP + port: 80 + targetPort: http \ No newline at end of file -- 2.49.1 From 45cc81d84fd4248459428a1874b2436bc7804c5c Mon Sep 17 00:00:00 2001 From: prettysunflower Date: Mon, 23 Jun 2025 11:39:53 -0400 Subject: [PATCH 29/95] infra(script): Added scripts to add new buckets and to init seaweed CSI --- infra/create_new_bucket.sh | 3 +++ infra/init_seaweed.sh | 3 +++ 2 files changed, 6 insertions(+) create mode 100644 infra/create_new_bucket.sh create mode 100644 infra/init_seaweed.sh diff --git a/infra/create_new_bucket.sh b/infra/create_new_bucket.sh new file mode 100644 index 0000000..ddc68b4 --- /dev/null +++ b/infra/create_new_bucket.sh @@ -0,0 +1,3 @@ +garage bucket create books +garage bucket allow --read --write --owner books --key k8s +garage bucket allow --read --write books --key prettysunflower \ No newline at end of file diff --git a/infra/init_seaweed.sh b/infra/init_seaweed.sh new file mode 100644 index 0000000..be0885c --- /dev/null +++ b/infra/init_seaweed.sh @@ -0,0 +1,3 @@ +git clone https://github.com/seaweedfs/seaweedfs-csi-driver.git +helm install --set storageClassName="seaweedfs-keiki" --set seaweedfsFiler="100.79.209.9:8888" seaweedfs-csi-keiki-driver ./seaweedfs-csi-driver/deploy/helm/seaweedfs-csi-driver --namespace="kube-system" +helm install --set driverName="seaweedfs-csi-keiki-driver" --set storageClassName="seaweedfs-keiki" --set seaweedfsFiler="100.79.209.9:8888" seaweedfs-csi-keiki-driver ./seaweedfs-csi-driver/deploy/helm/seaweedfs-csi-driver --namespace="kube-system" \ No newline at end of file -- 2.49.1 From a0abcc7674d6e923c9d855b055c38b0f2021df0d Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Mon, 23 Jun 2025 16:00:58 +0000 Subject: [PATCH 30/95] chore(deps): update renovate/renovate docker tag to v41.5.0 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 37b50c7..4b46da4 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.4.0 + image: renovate/renovate:41.5.0 env: - name: LOG_LEVEL value: debug -- 2.49.1 From ead57189ee48365492ec6144c8b7c0f7741b64ec Mon Sep 17 00:00:00 2001 From: prettysunflower Date: Mon, 23 Jun 2025 13:39:02 -0400 Subject: [PATCH 31/95] apps(opengist): Using seaweedfs-storage --- apps/opengist/deployment.yaml | 14 ++------------ apps/opengist/pvc.yaml | 35 ++--------------------------------- 2 files changed, 4 insertions(+), 45 deletions(-) diff --git a/apps/opengist/deployment.yaml b/apps/opengist/deployment.yaml index 4e7e781..0b309f7 100644 --- a/apps/opengist/deployment.yaml +++ b/apps/opengist/deployment.yaml @@ -14,16 +14,6 @@ spec: labels: app.kubernetes.io/name: opengist spec: - affinity: - nodeAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - weight: 1 - preference: - matchExpressions: - - key: location - operator: In - values: - - fsn volumes: - name: opengist-data persistentVolumeClaim: @@ -43,5 +33,5 @@ spec: httpGet: path: /healthcheck port: 6157 - initialDelaySeconds: 3 - periodSeconds: 3 \ No newline at end of file + initialDelaySeconds: 30 + periodSeconds: 5 \ No newline at end of file diff --git a/apps/opengist/pvc.yaml b/apps/opengist/pvc.yaml index 6f3b9b4..34436fb 100644 --- a/apps/opengist/pvc.yaml +++ b/apps/opengist/pvc.yaml @@ -1,32 +1,3 @@ -apiVersion: v1 -kind: PersistentVolume -metadata: - name: opengist-pv -spec: - storageClassName: s3yuyuko - capacity: - storage: 5G - accessModes: - - ReadWriteOnce - claimRef: - namespace: default - name: opengist-data-pvc - csi: - driver: ru.yandex.s3.csi - controllerPublishSecretRef: - name: csi-yuyuko-secret - namespace: kube-system - nodePublishSecretRef: - name: csi-yuyuko-secret - namespace: kube-system - nodeStageSecretRef: - name: csi-yuyuko-secret - namespace: kube-system - volumeAttributes: - capacity: 5G - mounter: s3fs-fuse - options: --memory-limit 1000 --dir-mode 0777 --file-mode 0666 -o allow_other --uid 1000 --gid 1000 - volumeHandle: opengist-pv --- apiVersion: v1 kind: PersistentVolumeClaim @@ -35,9 +6,7 @@ metadata: spec: accessModes: - ReadWriteOnce - storageClassName: s3yuyuko resources: requests: - storage: 5G - volumeMode: Filesystem - volumeName: opengist-pv \ No newline at end of file + storage: 5Gi + storageClassName: seaweedfs-storage \ No newline at end of file -- 2.49.1 From 3a9c0e19cf15c388b857676342e3eae6b2a62a09 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Mon, 23 Jun 2025 19:00:34 +0000 Subject: [PATCH 32/95] chore(deps): update renovate/renovate docker tag to v41.6.0 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 4b46da4..de93e38 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.5.0 + image: renovate/renovate:41.6.0 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 428c074c70655762597b4eeeb46b8a32be7f33e0 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Mon, 23 Jun 2025 20:00:36 +0000 Subject: [PATCH 33/95] chore(deps): update renovate/renovate docker tag to v41.6.1 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index de93e38..97e2d99 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.6.0 + image: renovate/renovate:41.6.1 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 177d4e95e09338427d89efc249941ccf529b1d04 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Mon, 23 Jun 2025 22:00:37 +0000 Subject: [PATCH 34/95] chore(deps): update renovate/renovate docker tag to v41.6.2 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 97e2d99..2c200d5 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.6.1 + image: renovate/renovate:41.6.2 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 9ea3e18a25c7195b3c4dfba5d0330677a7519785 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Mon, 23 Jun 2025 23:00:55 +0000 Subject: [PATCH 35/95] chore(deps): update renovate/renovate docker tag to v41.6.3 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 2c200d5..fbd3451 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.6.2 + image: renovate/renovate:41.6.3 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 7f2225bcba48fd0c910c77c2cca1518e86b44912 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 24 Jun 2025 00:00:31 +0000 Subject: [PATCH 36/95] chore(deps): update renovate/renovate docker tag to v41.6.4 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index fbd3451..422eaf4 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.6.3 + image: renovate/renovate:41.6.4 env: - name: LOG_LEVEL value: debug -- 2.49.1 From c61fb495b5f0afa861f0ba7a78c243e7ad9b0401 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 24 Jun 2025 10:00:32 +0000 Subject: [PATCH 37/95] chore(deps): update renovate/renovate docker tag to v41.7.0 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 422eaf4..420750d 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.6.4 + image: renovate/renovate:41.7.0 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 8a61f772ae1722156425a6c8e8ab9aee689f6520 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 24 Jun 2025 20:00:28 +0000 Subject: [PATCH 38/95] chore(deps): update renovate/renovate docker tag to v41.7.1 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 420750d..71b9515 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.7.0 + image: renovate/renovate:41.7.1 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 9aca80729df2c12fa341e5459ef2373b01e419c6 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 25 Jun 2025 02:00:28 +0000 Subject: [PATCH 39/95] chore(deps): update renovate/renovate docker tag to v41.7.2 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 71b9515..b86345e 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.7.1 + image: renovate/renovate:41.7.2 env: - name: LOG_LEVEL value: debug -- 2.49.1 From cca3b4447bc9e0a60b39f559a2e1d54f2befaff2 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 25 Jun 2025 03:00:44 +0000 Subject: [PATCH 40/95] chore(deps): update renovate/renovate docker tag to v41.8.0 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index b86345e..caec342 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.7.2 + image: renovate/renovate:41.8.0 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 7dc18181aebb1b53bad86d3447f4e50e01096304 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 25 Jun 2025 06:00:33 +0000 Subject: [PATCH 41/95] chore(deps): update renovate/renovate docker tag to v41.9.0 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index caec342..3495897 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.8.0 + image: renovate/renovate:41.9.0 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 89c1aa5781f1c1abc1b5083f1f8265e2a647f663 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 25 Jun 2025 10:00:36 +0000 Subject: [PATCH 42/95] chore(deps): update renovate/renovate docker tag to v41.10.0 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 3495897..6848ad2 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.9.0 + image: renovate/renovate:41.10.0 env: - name: LOG_LEVEL value: debug -- 2.49.1 From a939bab0eaa437a25eb2d43a16d8fb43938c2276 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 25 Jun 2025 13:00:32 +0000 Subject: [PATCH 43/95] chore(deps): update renovate/renovate docker tag to v41.10.1 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 6848ad2..8421047 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.10.0 + image: renovate/renovate:41.10.1 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 7f76e71089d787afbd643524320202cfb1acd590 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 25 Jun 2025 16:00:32 +0000 Subject: [PATCH 44/95] chore(deps): update renovate/renovate docker tag to v41.11.0 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 8421047..161ae6b 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.10.1 + image: renovate/renovate:41.11.0 env: - name: LOG_LEVEL value: debug -- 2.49.1 From ef0ffb08fa60f9247a4371a61ec58c6f9d9808d2 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 25 Jun 2025 21:00:25 +0000 Subject: [PATCH 45/95] chore(deps): update renovate/renovate docker tag to v41.11.1 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 161ae6b..5f39848 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.11.0 + image: renovate/renovate:41.11.1 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 33cfce4624d39b24c0a3152ab2e28ef88586dc02 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 26 Jun 2025 09:00:30 +0000 Subject: [PATCH 46/95] chore(deps): update renovate/renovate docker tag to v41.12.0 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 5f39848..9fa6c4f 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.11.1 + image: renovate/renovate:41.12.0 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 11c4e6b60f33e023cc77d1c9a255a6817cda3c59 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 26 Jun 2025 20:00:26 +0000 Subject: [PATCH 47/95] chore(deps): update renovate/renovate docker tag to v41.12.1 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 9fa6c4f..257b9ae 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.12.0 + image: renovate/renovate:41.12.1 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 5808670ad98e6baa1164c038a5d5989ca4d46040 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 27 Jun 2025 00:01:49 +0000 Subject: [PATCH 48/95] chore(deps): update renovate/renovate docker tag to v41.13.0 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 257b9ae..3ee3295 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.12.1 + image: renovate/renovate:41.13.0 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 88c89bc8ae505cc977d1303e205347537314157b Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 27 Jun 2025 07:01:11 +0000 Subject: [PATCH 49/95] chore(deps): update renovate/renovate docker tag to v41.13.1 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 3ee3295..6bfbf62 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.13.0 + image: renovate/renovate:41.13.1 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 04dd3fef18f673136c68a963d114963a0a56ac74 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 27 Jun 2025 10:00:31 +0000 Subject: [PATCH 50/95] chore(deps): update renovate/renovate docker tag to v41.14.0 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 6bfbf62..b79eba7 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.13.1 + image: renovate/renovate:41.14.0 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 7c4ef9813bb5ea5d9d4417e79aa4f798bcd3f50b Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 27 Jun 2025 16:00:32 +0000 Subject: [PATCH 51/95] chore(deps): update renovate/renovate docker tag to v41.15.0 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index b79eba7..2e4ff22 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.14.0 + image: renovate/renovate:41.15.0 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 3525ab0d368943e403e749d91b2576330d9bc5a9 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 27 Jun 2025 17:00:26 +0000 Subject: [PATCH 52/95] chore(deps): update ghcr.io/techarohq/anubis docker tag to v1.20.0 --- apps/privatebin/deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/privatebin/deployment.yaml b/apps/privatebin/deployment.yaml index 14057b8..12da33c 100644 --- a/apps/privatebin/deployment.yaml +++ b/apps/privatebin/deployment.yaml @@ -40,7 +40,7 @@ spec: seccompProfile: type: RuntimeDefault - name: anubis - image: ghcr.io/techarohq/anubis:v1.19.1 + image: ghcr.io/techarohq/anubis:v1.20.0 imagePullPolicy: Always env: - name: "BIND" -- 2.49.1 From 7055d2395eea0ac272674a2cf06ea9d7bc81d96d Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 27 Jun 2025 23:00:28 +0000 Subject: [PATCH 53/95] chore(deps): update ghcr.io/pocket-id/pocket-id docker tag to v1.5.0 --- apps/pocketid/deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/pocketid/deployment.yaml b/apps/pocketid/deployment.yaml index 305ccd6..837d6dc 100644 --- a/apps/pocketid/deployment.yaml +++ b/apps/pocketid/deployment.yaml @@ -20,7 +20,7 @@ spec: claimName: pocketid-data-pvc-yuyuko containers: - name: pocketid - image: ghcr.io/pocket-id/pocket-id:v1.4.1 + image: ghcr.io/pocket-id/pocket-id:v1.5.0 imagePullPolicy: Always ports: - containerPort: 1411 -- 2.49.1 From 9c9fd5be95b3942c1cceb608fdd49eb2b03e722c Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sat, 28 Jun 2025 08:00:30 +0000 Subject: [PATCH 54/95] chore(deps): update renovate/renovate docker tag to v41.16.0 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 2e4ff22..909b033 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.15.0 + image: renovate/renovate:41.16.0 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 7e8aa4ba107e5672df89ef6ec085cf6d7904c3d1 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sat, 28 Jun 2025 10:00:28 +0000 Subject: [PATCH 55/95] chore(deps): update renovate/renovate docker tag to v41.16.1 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 909b033..7a703e3 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.16.0 + image: renovate/renovate:41.16.1 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 41cd691be74efa76a57cbf323d1484a94625ec29 Mon Sep 17 00:00:00 2001 From: prettysunflower Date: Sat, 28 Jun 2025 17:05:41 -0400 Subject: [PATCH 56/95] apps(pocketid): Moved pvc to seaweedfs-storage --- apps/pocketid/deployment.yaml | 2 +- apps/pocketid/pvc.yaml | 16 ++-------------- 2 files changed, 3 insertions(+), 15 deletions(-) diff --git a/apps/pocketid/deployment.yaml b/apps/pocketid/deployment.yaml index 837d6dc..bb40351 100644 --- a/apps/pocketid/deployment.yaml +++ b/apps/pocketid/deployment.yaml @@ -17,7 +17,7 @@ spec: volumes: - name: pocketid-data persistentVolumeClaim: - claimName: pocketid-data-pvc-yuyuko + claimName: pocketid-pvc containers: - name: pocketid image: ghcr.io/pocket-id/pocket-id:v1.5.0 diff --git a/apps/pocketid/pvc.yaml b/apps/pocketid/pvc.yaml index 1b6ef86..a723e97 100644 --- a/apps/pocketid/pvc.yaml +++ b/apps/pocketid/pvc.yaml @@ -1,23 +1,11 @@ apiVersion: v1 kind: PersistentVolumeClaim metadata: - name: pocketid-data-pvc + name: pocketid-pvc spec: accessModes: - ReadWriteOnce - storageClassName: longhorn resources: requests: storage: 2Gi ---- -apiVersion: v1 -kind: PersistentVolumeClaim -metadata: - name: pocketid-data-pvc-yuyuko -spec: - accessModes: - - ReadWriteOnce - storageClassName: s3yuyuko - resources: - requests: - storage: 2Gi \ No newline at end of file + storageClassName: seaweedfs-storage \ No newline at end of file -- 2.49.1 From bb087b863ef89ebd5d5221739d317dea96b1129b Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sun, 29 Jun 2025 06:00:25 +0000 Subject: [PATCH 57/95] chore(deps): update renovate/renovate docker tag to v41.16.2 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 7a703e3..0ad1aa0 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.16.1 + image: renovate/renovate:41.16.2 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 9b257ec0b98b62dfbdd260f426e797446af8be9f Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sun, 29 Jun 2025 08:00:24 +0000 Subject: [PATCH 58/95] chore(deps): update renovate/renovate docker tag to v41.16.3 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 0ad1aa0..fdbb707 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.16.2 + image: renovate/renovate:41.16.3 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 50ea018c5cc1dc7e9f49da44ccd79b7aefd91f77 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sun, 29 Jun 2025 10:00:26 +0000 Subject: [PATCH 59/95] chore(deps): update renovate/renovate docker tag to v41.17.0 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index fdbb707..a6974b7 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.16.3 + image: renovate/renovate:41.17.0 env: - name: LOG_LEVEL value: debug -- 2.49.1 From e1bd150acfe802d1a5062d37caeefaa8fb1e5642 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sun, 29 Jun 2025 16:00:33 +0000 Subject: [PATCH 60/95] chore(deps): update renovate/renovate docker tag to v41.17.1 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index a6974b7..b51ea17 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.17.0 + image: renovate/renovate:41.17.1 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 84625f252f865aa7e3344b499c467c5ab6dbf55e Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sun, 29 Jun 2025 18:00:27 +0000 Subject: [PATCH 61/95] chore(deps): update renovate/renovate docker tag to v41.17.2 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index b51ea17..4617efc 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.17.1 + image: renovate/renovate:41.17.2 env: - name: LOG_LEVEL value: debug -- 2.49.1 From fef6d508c3ae709029a94a9cfe7ec1e0dc0c4749 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Mon, 30 Jun 2025 10:00:33 +0000 Subject: [PATCH 62/95] chore(deps): update privatebin/nginx-fpm-alpine docker tag to v1.7.8 --- apps/privatebin/deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/privatebin/deployment.yaml b/apps/privatebin/deployment.yaml index 12da33c..941a675 100644 --- a/apps/privatebin/deployment.yaml +++ b/apps/privatebin/deployment.yaml @@ -20,7 +20,7 @@ spec: persistentVolumeClaim: claimName: privatebin-data-yuyuko-pvc containers: - - image: privatebin/nginx-fpm-alpine:1.7.6 + - image: privatebin/nginx-fpm-alpine:1.7.8 name: privatebin imagePullPolicy: Always ports: -- 2.49.1 From 18330b1b45cdbc855126e7e5fbdda6e5e04249ec Mon Sep 17 00:00:00 2001 From: prettysunflower Date: Mon, 30 Jun 2025 09:10:56 -0400 Subject: [PATCH 63/95] infra(talos): Changed config to put byakuren as endpoint, and changed cluster secrets (we blew up our cluster recently~) --- infra/talconfig.yaml | 2 +- infra/talsecret.sops.yaml | 42 +++++++++++++++++++-------------------- 2 files changed, 22 insertions(+), 22 deletions(-) diff --git a/infra/talconfig.yaml b/infra/talconfig.yaml index 46ae42c..3406c19 100644 --- a/infra/talconfig.yaml +++ b/infra/talconfig.yaml @@ -2,7 +2,7 @@ clusterName: yakumo talosVersion: v1.10.4 kubernetesVersion: v1.33.1 -endpoint: https://10.0.0.240:6443 +endpoint: https://10.0.15.33:6443 domain: yakumo.prettysunflower.moe allowSchedulingOnControlPlanes: false clusterPodNets: diff --git a/infra/talsecret.sops.yaml b/infra/talsecret.sops.yaml index 8564d9f..c5cc523 100644 --- a/infra/talsecret.sops.yaml +++ b/infra/talsecret.sops.yaml @@ -1,38 +1,38 @@ cluster: - id: ENC[AES256_GCM,data:fuY8AWGu+gJ5kagI5DcIr1MPwGsoG/sInRCwimbvhkP/wXUP6qJSInCDgS0=,iv:XRTRwtynyppcrH++VLfnHAfVYYvUNrEEaCa1/iC40Z4=,tag:SUtVQcRwDdBlEUtF3lVhDQ==,type:str] - secret: ENC[AES256_GCM,data:qPBT6oqhEAYT45lg/+tgMrOFO8clxWUJldTsYeADbGFVa/hskihcIGqzQcg=,iv:2Z0IpOTWlDkm5peO7aNlHNpP+l5LNsKVtNG2NuunidQ=,tag:KxjjIDRakDAsNv+j0tFWkw==,type:str] + id: ENC[AES256_GCM,data:ru7IlZsHavKUhpsWPf6il18aRJScAmxJg/cyY4qKSXTaFR/+aVT991gMqF0=,iv:qDQGwSoUBKj36bD7IPXBnW4UO/HIFtW4ANkgT/IugH8=,tag:I7bjT/XyP1yVljLoiweKvg==,type:str] + secret: ENC[AES256_GCM,data:nLajhyzbOu+QkjkSy9kueGL4w66qVfX0B0kbidaycm501y565OCBYuDEPL4=,iv:WJypiyJZLk2TIVueKCZxsgrUoPEWTI4JUfwgI1tlX2M=,tag:MlkR/z727XJOIup7pRTxqQ==,type:str] secrets: - bootstraptoken: ENC[AES256_GCM,data:l+GDB1t3GA6Vxdow4eQwvcXAmN3DuNM=,iv:IC4brNm1HyBENtS3hCHTRA365Szctbnzdv6fUD5SwP4=,tag:Lz5tHGc97VXPBabIahIpYQ==,type:str] - secretboxencryptionsecret: ENC[AES256_GCM,data:K44R4MxFRQ3YvwfMsBFPJ/d6hji4109T/X2YZlq9W/COG+tHR58LhegnzQ4=,iv:Pxpy6a5E6++jH8WppRAJfKjiw1RehQ2Uh9uLES+BdvU=,tag:BS2JkaX23+jIOX2TRfLvLg==,type:str] + bootstraptoken: ENC[AES256_GCM,data:Y1G9g9PojkMhPJbTG1UzeDHgb9QTFQs=,iv:z11O1NGbPLQ7Ud3WJK3KwaGfXvUx8Jc8kkx5p1Q9q0I=,tag:k5DimznRv8ECXL7ELasOlg==,type:str] + secretboxencryptionsecret: ENC[AES256_GCM,data:MGS+FwnexfGSIbzdbvV0YCq6phnRr/r0/j6qxsz2pUo/HgDfSEvc5xDr+yI=,iv:kg6+bKPVHiyh0Ri8tDhyl6e/lo3MBW1lljFYS7+7Sf0=,tag:W6jnqxljFezFjJMYNmRFIg==,type:str] trustdinfo: - token: ENC[AES256_GCM,data:+mfvVnRM+fikocPXoOfESyYXix17N7A=,iv:dnvrs6ESVQ0Es/kqiSoynpxvGmxFmcUf4Kk3PVl67uo=,tag:6sENfoBWyzC89I7yLWblBQ==,type:str] + token: ENC[AES256_GCM,data:3Vo0nE8OveQdsuQDOzA4YVJzCWCTsRs=,iv:7tv16Frwx2jqwz6nXv7iAX9IpAO+GnIk/nQ8bExHmbY=,tag:edANtYhueV/23KOQ/f8A4g==,type:str] certs: etcd: - crt: ENC[AES256_GCM,data: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,iv:A4EBCpfmiFWm8K6Syr/ze0JsS5FDIIaFORN0lbWAvyE=,tag:0ow0venLaDsu76WEtyo6Gw==,type:str] - key: ENC[AES256_GCM,data:0nsmCp4BB1TbJctnQpJL8jGhz7D5CHXj2NvNNUHURlvNHZ6xZDKmoWuKNIUPgkvAQMapqvICKqNw9AaWKFfNviGeqFAUBiv2MmM7Iwj6us/rwIGww1OUtKOxTe/RpOXnkbE0RSVp2CFHgHyub4yZqi4byBjuSxVmZwQCowYy1xyRB/fcwcovMoEsyop7Qsdoy7LjxbC7tGCSHnN5lXgCdD2yUgAKPlD6mznsVmA2Yce+sCG5WsCrvEt7OezJZAzyqBFYHlbELw5aVxLBsQOtWpfG6sYzANUkMnIDn/xjYAk7Ybk7UaX+8x1SY7Qh/CgShVy6SY0HilmUIYVYQDg0t4SoAetgagHgoWP8ucn9ZJPTBlyDlBieyhK8oOkS94pxRqlqvbuH0qTZamCUt5GTKw==,iv:pWyXnX8qJWj5FBl3aS7gxUQIQ26+lcm7wEqTcEnuDmk=,tag:COMMktSxqMhv6qh4GA8RZQ==,type:str] + crt: ENC[AES256_GCM,data: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,iv:7YXoxHOvffV0nUFOvvH2+4v2aslupgXpmThGTVTZzUI=,tag:y5k3I1kcLDV3k4dfm1ypCg==,type:str] + key: ENC[AES256_GCM,data:ioHaiIPq9VNBQm6Q+NJz3r5mRgowaKbpn5O9+430SefQlfhOaFVcuvhhLHJyIyPnpIXzDRZ10vsJoHaFLiE5C9WbBiu8yrlg6sv0fYh/h1yU3VqBLKDY1SM+MjmR6FEbHuv3KL7BTcP7aEzM0k2hOhXTLsGzizotnu3xP2ZyX2TU4r+UrC5QoYjQZF0A/aTn9LExehKl6m2nlzU1yKbSplv2NHKYvZoezS9/p31JKbVYmRcuHQ9HscSiig2bHRJMrX8n0fgxBYi/cJt4jVBRemA6xh4y4Xkj1RtIOfP7xZi5o53oUS67k4YPraHnSy9mhKd2bMkrgOcEicAOdxP5IPmXhhzIfbCSgUwh78LzOjy+f2q8jFpKjeBMetZKffY//i0JBC+Z3HkdjbSzhaf0Tg==,iv:e4kAbeQjyvwZivAiXRmnX9QQXcRtVhjHeAyGgQdiiRo=,tag:C6GTYLG4y7oeHxgEytbhfg==,type:str] k8s: - crt: ENC[AES256_GCM,data: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,iv:nfVMzz9y7KwEKaestqPy+h4TT0nF6hp3sSba8Pxxcz8=,tag:Yjap3lfdK1rpM3PovOkpHw==,type:str] - key: ENC[AES256_GCM,data:Qs8pBKGE3wNonn/ygoJUYtZq/SI28pPNupYpli95ENLOQbxRmu3lwISVrUrOkuHo7v6QKmmEryhvJrlEL8pOLOrHOC/JEqCutErJM/DdizBsdwHR1dwHypFVDruHyYWqJCYBsLA7L4gE3onAh9hhamRHMbqgQlfgUB1kZ5o/4MI6HKd/gie86en3bcW1gCM7WsNO7aYwCmjZ6r3kM9K98spUneaTSbCZ6KFkLArBOmgy3lvG3FZUV25T5jRirzo6KTFDotoHcvDpoUi8VgHbdMN4Fh+UImNGIbF2xTwqr3uPa07LokJ3x3cabX12IfHyRsBu7QEYioUIJvYoFzaVlEH74TQluPcEBf+6gw9CAFcf6cARraiToXOFws4zIi3BWFGVHyMrghXpWo4ohjwR0A==,iv:kuedJH+Z8ykYe4tMcqrgdxG1CPNcfzmwGxVOmdwsPfs=,tag:SFqZ/TlHW0JQWVkIZ6ZhMA==,type:str] + crt: ENC[AES256_GCM,data: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,iv:5XZsuLqeN9ijCoWCXMR0oIIZddpPD/H68yhGjIg1umU=,tag:StQoHfsPWzp8bz3Qq4xWAA==,type:str] + key: ENC[AES256_GCM,data:ZQpqRVz9HqVLxJoaa+TBOT2kF/zbQkXNyK4t8MJZ5u+Q7/WboHdOZQki6nD9GyAbxjFlhGAZn0q7EV1uRYgtyqMyPTeD2Jsc21YAvPi+o+4JJ019c8Ztme6jYIh8cRfXX/PO/zVVTSYDxETqIOrurDjT2sgHfiaf6IXogkTHmbiBChfvfQaxdR63/NuVOMUjOif2X3EouGTJpdzQP5Mrf95neYwS1vtUE6eYMsaP1f4RgxZTQcoRD25t8ezfT6HaLuNGF9rAcoMdB89pL2SBYBDSly6tT8SV12GNeYMOqosA2sTJmsVyeAOhb9rfNhseKLw7vslQ304Q4CcpZXGabBpf+/1g2uHoORs2MvdDKCFm47wmWxAkC8FTRx+vgSoUfRa7cqxzCMYRYbG7Go94Sw==,iv:5Z7HOTdfyJiLjvuxLY7E3OhFVN8efj89/fn1Hn7B8pA=,tag:fFHPEphc2+5VYyW2EIJV7w==,type:str] k8saggregator: - crt: ENC[AES256_GCM,data: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,iv://ISNiw5O8Rhg+TXLUNns73oZ1Pn/T+ZCUOckUdItwc=,tag:xRXaZ+oPimNcq1WhndLGeA==,type:str] - key: ENC[AES256_GCM,data:Y06+CpSVsARj9jpSb1x1yzXw9JWxQMcEcLrImptZVQJXWD7Zzq0kEfDsUZmjgaq2SPZIy6h8PAty/i/aQW/tZpERQBcmOplzFIoLo8Rz5GT/EtWxhdD8i5hSUyLWJ8mmmDHQ/2oIm4+aLDrskmGvP8S8mXehyiUX136AKaxJCNibRl/+2y49asoobxau2bcLoBrYK9iU+jbdYHgG5awBb/0mwxCuBNU8JJT2bLTIgJwuxU7LFvfDDay5FFBSBNTAf9MapIpagdr0fH2Z+F5P9DADCOZZpkh4kUaf3go0Dfga2FwFR/+Cdm5CQpHZTcTMvHP434dSVGhL+3rB6KPCCVwA8JQ9OgzxaOcNpzi5UJVioTQ7Ddx2iO1YStw1R4FL4iW3R1YpmBgq4EAGM9Xm2g==,iv:DdlXMpj4vm+3DNRYcNUNETiWFFRWibQoFyhmbbvVO5o=,tag:M2fqYeSMeEP8w6ufg7cxug==,type:str] + crt: ENC[AES256_GCM,data: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,iv:GZPC9AvPxjxB8w/U5OTDScrcp2VefKf3IAYHNto/BSY=,tag:A4KJnWew2G3GxmIEE3PGeQ==,type:str] + key: ENC[AES256_GCM,data:zaU6Q7WFB1XFlfVqLWANzphAiEB3YoVN3oUV8a0F4updQl+vXR4dGS2VRGq2lKSUiwT3XhyhRmJB7a8Su4MB5BpttoXAZ7wK0UgNFmroUqIhzVQABcwL13toJpvJuPA4/5E+W9jtXQlLryZZvp3aXgRhLQd8sRDawNWQFpf0b1uF5LEkfIYI7AXSCeLx1GhR+sBzxYvES+ah+W3FLtxgpNo52eMaPGyUjXqDugZY6xmWqERvHRwDBq34OAgU7rnNge96+VkVh59kT3KTtalYfAKyvBJFL2QB6/dXmQGyH8IP4NIwT4eCSZ1r+loZl73vaDwMMWFUczN+RYcziOPIf7pFu672XBj5aKgeAd8DyTwCUIv1hUrT0DaSvIVBeZtfHwjaDmUqKM1UvTB1pE7YTQ==,iv:ItAxNRkEjWlD7zXTBca/jEL18V+T8iGpa5/ae78KLws=,tag:vRp+RARdR1mczjSI5JsLaQ==,type:str] k8sserviceaccount: - key: ENC[AES256_GCM,data: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,iv:+QaOFpgf9X/dz9ysondyJSSQke9DsuYHl4VVGIxfzDU=,tag:17mrsxKZfagcKFf/nYc/KA==,type:str] + key: ENC[AES256_GCM,data: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,iv:kbs5FdLFBXgTWFu97xnrvW5bZFTWlaoZu+433HTIjXY=,tag:4Z1/EbWRFizJj2hyKk0v0w==,type:str] os: - crt: ENC[AES256_GCM,data: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,iv:+150tnx1pNnxWBRUuhXbHgnAGcLMSrsF20XfVUu6auc=,tag:HT/lrswxEdTL4RfxG0mMyQ==,type:str] - key: ENC[AES256_GCM,data:zeoqW8yFPhdodUig+mPpqytnTnIoq/Pi1eFnVReDKRabcU/LtoQ+47jm3Bfnde81PfBLGXg4hcPlDY8/Fm9BnT7XC/W9hUCV2eVsnrkn47Ra9fZhoD0p6RpsG+dGmH9JptYPc8avF6FA6M5u4jjqpZYgA3PakMq24dD6z4AQwHvInL42bN9LbyBJvy56nyGzXlQR3BpiVd82x3y2RY6GLwTzC+IraTclxCe4tOIFn7KQF1ul,iv:UsTFKYnb+kDnaWusTT94+z3AJ+Z2sLly7NEy0cYz4y8=,tag:EVqWw2Jj+OgRo7yAD79uIA==,type:str] + crt: ENC[AES256_GCM,data:v2NBBYpIE5gSG1dT0bEo7CtPKV/mshb8dRlRFWi9TuuE6DhIyWPSERT2Hnff3eScVjoYiQA9DrvIJPwL9pCDKglqfhP5tdQcugJYTpzWsAedu/3l+OJkcadnPMirV/F4SZxj6KjW3tymVt9lKgy5W9EmnQY899YwokaJrt37LkPsLSiUk82MB3vgaLjXVeMR4m2f9uBd4CHv8zt+vW5LjefAf8VScMrwRksd4zaJxRLonpAkfTqxqM6ajVpT/cN7619eqlBatlrdgRYWcYdUaf6S2wGeWnVjK2v7RN1MluxdY/y5usyJqUWAPkss5MZhc/blikriXNv0fCleDC3cxzykqgobsnQIWaIO4AzEIAVvpfsmQlaYrQhMxtZvxOFGNCjr6kY1QeRDt0pA/tF4oZ0d7dz7EsAF0sOH/kuPvUXjcft/glPioh6QDWEtA2T6/u3EcvGxgoomcrAXTINNn3dlrbC4IpVZIwUvLPuzQ38baJ6nwG8e3D5OM6MQLhiZijHAqNgKnzEXYcyS+/T9eDXll24G4YoC0MC78/KD6VbL+TMt9h+tnWDCRsPOOXy42o5sxNzaj7BNqxWreriWv2jZPk3gYnRYpbHd4OGemI+w9H8u1UtIIwBiI/ldVpKhiQK5IWorp5SL0mGXmb1wTZzo00Jmtfd1GVdusjotKeMepsCsZPkPBmQRWI5FJ1xf838y5kTHrHVdxdX7hnhI4ldla9cLgtrOzymg62cIwvClonsVWF5XD/RHCjXr5DJlH71V9bADWImKQONbhZimv91BNB5ae4VMlG8+TNq6ybFmkVnoxkluDGtbaVlXaoSACr25IRymfeO+eOL1m8ccuv3T9PmYT7kXkf/u9vazRf2buLAw,iv:UBoFFCWRTsWUcqTODvgky7qitOcZlJD10SuuyGJQOiU=,tag:jaIt8kKdH8LiRaFztTsWbA==,type:str] + key: ENC[AES256_GCM,data:zTKIGgtynJZxP61tQRA9V+ClkoJKHysWCiMB4JlnhDvsgDVTMHqJ9Euj7m0G9xwuh+jSzQvz5xSRPDZu39n98FoDLCjmM83FvhPqP+bfQVMo5cMujkLLa7IuIl0cdRXdbweZD9gU+9KrD3Np/whAfnqynCH+pEzP2ISG56IUBpITstjt4XtzkNP9HsWDcIwLDWS3vn4x9ui2GJhWY0ZMkJRcLRMGpiqXxL1VxTfsz6UeHq7Z,iv:KOr3YpSlWR2YltO9Ph6VpxzwivLQIR+CGIsN0yTkQUg=,tag:D5KHEsH34jfjOWd8BRwJKg==,type:str] sops: age: - recipient: age1r0tjhg6uexyj0p7fp0ftv5h7r7e3ptzkk2797pznfvrvsm576u0s37yyaw enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtUlA3czcrZU9zNHVxUG85 - K3hLbnFJWUs2N2VWc3NDZHFtSEdMOS84RERZClRLOEJHN29PT2VaZFErWHNwcWM1 - RDdZajBPUGMva2pjNVpKQ29VNmhrUTgKLS0tIEFURXplajM4OThjTUtFdlVZM1ZO - dmVURHQxbmw4WFVFZ0VFOWZZOUdOZ1UK6jnKy6GV7ImvBoxpCcjtA2rdN5MmxryN - ibnHMg5zcfgdRzgL4iVBi3G4jL8L1Fk+OwDlJjkecRO0TcKF3s2F6Q== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzNDhqOHJtNHA0YzJqem5x + SEJaZGtNanNEQ1h3S1lyQnVvTnYrc2RKTkdnClgwN1NOU2Nqam9GY2swZDdxa1V5 + V2ZpNWYrUXJNcUsrblJyWkdNcWhWUGMKLS0tIE5abHZWeURicjZUWkhyM084dmNz + ZVNyYnc0N1hrWERBMmVBd09TdE1qcEkK/qIVrg2rqb4cISqzB41gOVKt4eM1faMY + H42hl7edFN5jgD3Wj/TJsapgNkttZ3CxNK2HvLSPw5CGBJEFdaOR6w== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-05-28T15:53:49Z" - mac: ENC[AES256_GCM,data:3kMAJqlJw/vXr3toXrat8RYWGC3x2PsF1tQTFpHURcqjOKH72abhPXklZZpQWKDxXm53VJb7eArR0VfMWIO5iJRmlUCxR7dCFvDSnbYmF73067tNvqw7HLiurfrDB8Cxz7uzRdhpvjvn6pVRvHfnhA8sXCzP7f3D8JtQRuDexns=,iv:iVkecq11q40DDUF5UcMFSBxozdE4xKwu0qTJGf06B04=,tag:esq6Ns8wn84JiL/jib5Ohw==,type:str] + lastmodified: "2025-06-29T00:48:56Z" + mac: ENC[AES256_GCM,data:uaikHfoklOF2MBkfNchcGpui2bQCN0O80qz7MjhXnycu9bVKnnIK4WQb42qzYtragXtzo3wR4d1pUUfL90FXVQdNAg1mZkRyO6zV9AxAZEykwoWEp8R1YWmSoJ3jNUOBU28TVVRJttFt2hNBd1YBsKytR8vANlRfLLAtYK1Fnng=,iv:4ecpqtiyItuAfEHOUgzdXiWlEF3QsWbe4iJyaJe7ztY=,tag:J2sMNFc5NF9GnzzbSH9jmA==,type:str] unencrypted_suffix: _unencrypted version: 3.10.2 -- 2.49.1 From 98f0cd3bb8f4801a07104cf45f58f450cfb8b04b Mon Sep 17 00:00:00 2001 From: prettysunflower Date: Mon, 30 Jun 2025 09:12:09 -0400 Subject: [PATCH 64/95] apps(znc): Moved storage to seaweedfs-storage --- apps/znc/pvc.yaml | 38 +++----------------------------------- apps/znc/statefulset.yaml | 2 +- 2 files changed, 4 insertions(+), 36 deletions(-) diff --git a/apps/znc/pvc.yaml b/apps/znc/pvc.yaml index 3536d54..9dd1ce7 100644 --- a/apps/znc/pvc.yaml +++ b/apps/znc/pvc.yaml @@ -1,43 +1,11 @@ apiVersion: v1 -kind: PersistentVolume -metadata: - name: znc-pv -spec: - storageClassName: s3yuyuko - capacity: - storage: 5G - accessModes: - - ReadWriteOnce - claimRef: - namespace: default - name: znc-yuyuko-pvc - csi: - driver: ru.yandex.s3.csi - controllerPublishSecretRef: - name: csi-yuyuko-secret - namespace: kube-system - nodePublishSecretRef: - name: csi-yuyuko-secret - namespace: kube-system - nodeStageSecretRef: - name: csi-yuyuko-secret - namespace: kube-system - volumeAttributes: - capacity: 5G - mounter: s3fs-fuse - options: --memory-limit 1000 --dir-mode 0777 --file-mode 0666 -o allow_other --uid 1000 --gid 1000 - volumeHandle: znc-pv ---- -apiVersion: v1 kind: PersistentVolumeClaim metadata: - name: znc-yuyuko-pvc + name: znc-pvc spec: accessModes: - ReadWriteOnce - storageClassName: s3yuyuko resources: requests: - storage: 5G - volumeMode: Filesystem - volumeName: znc-pv \ No newline at end of file + storage: 5Gi + storageClassName: seaweedfs-storage \ No newline at end of file diff --git a/apps/znc/statefulset.yaml b/apps/znc/statefulset.yaml index 360a629..084c573 100644 --- a/apps/znc/statefulset.yaml +++ b/apps/znc/statefulset.yaml @@ -18,7 +18,7 @@ spec: volumes: - name: znc-config persistentVolumeClaim: - claimName: znc-yuyuko-pvc + claimName: znc-pvc containers: - name: znc image: znc:1.10.0 -- 2.49.1 From 27c181849587c4820a9396ae45069defd9687170 Mon Sep 17 00:00:00 2001 From: prettysunflower Date: Mon, 30 Jun 2025 09:12:55 -0400 Subject: [PATCH 65/95] apps(thelounge): Moved storage to seaweedfs-storage --- apps/thelounge/pvc.yaml | 37 ++----------------------------------- 1 file changed, 2 insertions(+), 35 deletions(-) diff --git a/apps/thelounge/pvc.yaml b/apps/thelounge/pvc.yaml index 8883b8a..8e24130 100644 --- a/apps/thelounge/pvc.yaml +++ b/apps/thelounge/pvc.yaml @@ -1,44 +1,11 @@ apiVersion: v1 -kind: PersistentVolume -metadata: - name: thelounge-pv -spec: - storageClassName: s3yuyuko - capacity: - storage: 5G - accessModes: - - ReadWriteOnce - claimRef: - namespace: default - name: thelounge-pvc - csi: - driver: ru.yandex.s3.csi - controllerPublishSecretRef: - name: csi-yuyuko-secret - namespace: kube-system - nodePublishSecretRef: - name: csi-yuyuko-secret - namespace: kube-system - nodeStageSecretRef: - name: csi-yuyuko-secret - namespace: kube-system - volumeAttributes: - capacity: 5G - mounter: s3fs-fuse - options: --memory-limit 1000 --dir-mode 0777 --file-mode 0666 - volumeHandle: thelounge-pv ---- -apiVersion: v1 kind: PersistentVolumeClaim metadata: name: thelounge-pvc spec: accessModes: - ReadWriteOnce - storageClassName: s3yuyuko resources: requests: - storage: 5G - volumeMode: Filesystem - volumeName: thelounge-pv - + storage: 3Gi + storageClassName: seaweedfs-storage \ No newline at end of file -- 2.49.1 From 50662b7132b435d16b6224f10d3c2ae28ed8707c Mon Sep 17 00:00:00 2001 From: prettysunflower Date: Mon, 30 Jun 2025 09:13:56 -0400 Subject: [PATCH 66/95] apps(opengist): healthcheck: Failure Threshold is now 3 and check is now every 30 seconds --- apps/opengist/deployment.yaml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/apps/opengist/deployment.yaml b/apps/opengist/deployment.yaml index 0b309f7..0b70fb2 100644 --- a/apps/opengist/deployment.yaml +++ b/apps/opengist/deployment.yaml @@ -34,4 +34,5 @@ spec: path: /healthcheck port: 6157 initialDelaySeconds: 30 - periodSeconds: 5 \ No newline at end of file + periodSeconds: 30 + failureThreshold: 3 \ No newline at end of file -- 2.49.1 From feabc1f16ffd641764aa219282ed9f6f6434565b Mon Sep 17 00:00:00 2001 From: prettysunflower Date: Mon, 30 Jun 2025 09:15:07 -0400 Subject: [PATCH 67/95] apps(teable): Running as non-root, and moved storage to seaweedfs-storage --- apps/teable/deployment.yaml | 20 ++++++++++++++++++++ apps/teable/pvc.yaml | 4 ++-- 2 files changed, 22 insertions(+), 2 deletions(-) diff --git a/apps/teable/deployment.yaml b/apps/teable/deployment.yaml index 4f20383..48a1784 100644 --- a/apps/teable/deployment.yaml +++ b/apps/teable/deployment.yaml @@ -51,6 +51,16 @@ spec: limits: cpu: 1000m memory: 1024Mi + securityContext: + runAsUser: 1000 + runAsGroup: 1000 + runAsNonRoot: true + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + seccompProfile: + type: RuntimeDefault containers: - name: teable image: ghcr.io/teableio/teable:sha-257d098af67e9260b6abb09da0e08eafef34ae08 @@ -110,3 +120,13 @@ spec: volumeMounts: - name: valkey-data mountPath: "/data" + securityContext: + runAsUser: 1000 + runAsGroup: 1000 + runAsNonRoot: true + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + seccompProfile: + type: RuntimeDefault diff --git a/apps/teable/pvc.yaml b/apps/teable/pvc.yaml index d479558..cf03a05 100644 --- a/apps/teable/pvc.yaml +++ b/apps/teable/pvc.yaml @@ -6,7 +6,7 @@ metadata: spec: accessModes: - ReadWriteOnce - storageClassName: s3yuyuko resources: requests: - storage: 2Gi \ No newline at end of file + storage: 5Gi + storageClassName: seaweedfs-storage \ No newline at end of file -- 2.49.1 From a119072dc728ba60af696475c4f8852330bf5a79 Mon Sep 17 00:00:00 2001 From: prettysunflower Date: Mon, 30 Jun 2025 09:18:07 -0400 Subject: [PATCH 68/95] apps(privatebin): Moved to default namespace, replicas to 2, and moved storage to seaweedfs-storage --- apps/privatebin/deployment.yaml | 7 +++---- apps/privatebin/kustomization.yaml | 1 - apps/privatebin/namespace.yaml | 6 ------ apps/privatebin/pvc.yaml | 10 +++++----- apps/privatebin/secrets.sops.yaml | 1 - apps/privatebin/services.yaml | 1 - 6 files changed, 8 insertions(+), 18 deletions(-) delete mode 100644 apps/privatebin/namespace.yaml diff --git a/apps/privatebin/deployment.yaml b/apps/privatebin/deployment.yaml index 941a675..beeb566 100644 --- a/apps/privatebin/deployment.yaml +++ b/apps/privatebin/deployment.yaml @@ -2,11 +2,10 @@ apiVersion: apps/v1 kind: Deployment metadata: name: privatebin - namespace: privatebin labels: app.kubernetes.io/name: privatebin spec: - replicas: 3 + replicas: 2 selector: matchLabels: app.kubernetes.io/name: privatebin @@ -18,7 +17,7 @@ spec: volumes: - name: privatebin-data persistentVolumeClaim: - claimName: privatebin-data-yuyuko-pvc + claimName: privatebin-data-pvc containers: - image: privatebin/nginx-fpm-alpine:1.7.8 name: privatebin @@ -76,4 +75,4 @@ spec: drop: - ALL seccompProfile: - type: RuntimeDefault \ No newline at end of file + type: RuntimeDefault diff --git a/apps/privatebin/kustomization.yaml b/apps/privatebin/kustomization.yaml index aaba80a..0e5fe18 100644 --- a/apps/privatebin/kustomization.yaml +++ b/apps/privatebin/kustomization.yaml @@ -1,5 +1,4 @@ resources: -- namespace.yaml - pvc.yaml - deployment.yaml - services.yaml diff --git a/apps/privatebin/namespace.yaml b/apps/privatebin/namespace.yaml deleted file mode 100644 index dee180d..0000000 --- a/apps/privatebin/namespace.yaml +++ /dev/null @@ -1,6 +0,0 @@ -kind: Namespace -apiVersion: v1 -metadata: - name: privatebin - labels: - name: privatebin \ No newline at end of file diff --git a/apps/privatebin/pvc.yaml b/apps/privatebin/pvc.yaml index 723d0ad..347ac21 100644 --- a/apps/privatebin/pvc.yaml +++ b/apps/privatebin/pvc.yaml @@ -1,12 +1,12 @@ +--- apiVersion: v1 kind: PersistentVolumeClaim metadata: - name: privatebin-data-yuyuko-pvc - namespace: privatebin + name: privatebin-data-pvc spec: accessModes: - - ReadWriteMany - storageClassName: s3yuyuko + - ReadWriteOnce resources: requests: - storage: 5Gi \ No newline at end of file + storage: 5Gi + storageClassName: seaweedfs-storage diff --git a/apps/privatebin/secrets.sops.yaml b/apps/privatebin/secrets.sops.yaml index 1ff0b1f..90470a2 100644 --- a/apps/privatebin/secrets.sops.yaml +++ b/apps/privatebin/secrets.sops.yaml @@ -2,7 +2,6 @@ apiVersion: v1 kind: Secret metadata: name: anubis-key - namespace: privatebin type: Opaque data: ED25519_PRIVATE_KEY_HEX: ENC[AES256_GCM,data:DBMXjeG7KguofrBF8wFRZoplFKhsxRGvWAXga5QJkhYn4HNF6WvFr8dkCww7Z6qpqdskKqBQqBiYq6OgTe5f55or9sWeO5XwKprjTUYYJ+/Yxvg1MBMlSg==,iv:MfK068uL94QNPlh62FNjBMK26M6Uig9yWvHRLpmEASE=,tag:0w4OMh/KcWsK5n4xnkLzaw==,type:str] diff --git a/apps/privatebin/services.yaml b/apps/privatebin/services.yaml index 8d1da85..af3c45e 100644 --- a/apps/privatebin/services.yaml +++ b/apps/privatebin/services.yaml @@ -2,7 +2,6 @@ apiVersion: v1 kind: Service metadata: name: privatebin - namespace: privatebin spec: type: ClusterIP selector: -- 2.49.1 From ec74f939f5a880238766e0af08ae804c6da6f6d6 Mon Sep 17 00:00:00 2001 From: prettysunflower Date: Mon, 30 Jun 2025 13:47:39 -0400 Subject: [PATCH 69/95] apps(kakigoori): Updated Anubis to 1.20.0 --- apps/kakigoori/deployment.yaml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/apps/kakigoori/deployment.yaml b/apps/kakigoori/deployment.yaml index 8c5c07e..ff163a2 100644 --- a/apps/kakigoori/deployment.yaml +++ b/apps/kakigoori/deployment.yaml @@ -45,8 +45,7 @@ spec: seccompProfile: type: RuntimeDefault - name: anubis - image: ghcr.io/techarohq/anubis:v1.20.0-pre1 - imagePullPolicy: Always + image: ghcr.io/techarohq/anubis:v1.20.0 env: - name: "BIND" value: ":8080" -- 2.49.1 From ac120b2002fb230a17b3eddd1560b8bdf414e148 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 2 Jul 2025 01:00:25 +0000 Subject: [PATCH 70/95] chore(deps): update znc docker tag to v1.10.1 --- apps/znc/statefulset.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/znc/statefulset.yaml b/apps/znc/statefulset.yaml index 084c573..35b7576 100644 --- a/apps/znc/statefulset.yaml +++ b/apps/znc/statefulset.yaml @@ -21,7 +21,7 @@ spec: claimName: znc-pvc containers: - name: znc - image: znc:1.10.0 + image: znc:1.10.1 imagePullPolicy: Always ports: - containerPort: 4921 -- 2.49.1 From 7981133a50589279b6a5434707d0430ac578fc0a Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 3 Jul 2025 18:00:26 +0000 Subject: [PATCH 71/95] chore(deps): update renovate/renovate docker tag to v41.18.0 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 4617efc..3a9c47d 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.17.2 + image: renovate/renovate:41.18.0 env: - name: LOG_LEVEL value: debug -- 2.49.1 From f16acebd2ed9a7604b001a828b65d43d8dbe8bcf Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 3 Jul 2025 19:00:27 +0000 Subject: [PATCH 72/95] chore(deps): update renovate/renovate docker tag to v41.18.1 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 3a9c47d..607f253 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.18.0 + image: renovate/renovate:41.18.1 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 71a9697dab1d1e371b3e636968e170284db18f60 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 4 Jul 2025 04:00:33 +0000 Subject: [PATCH 73/95] chore(deps): update renovate/renovate docker tag to v41.18.2 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 607f253..a3a29b9 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.18.1 + image: renovate/renovate:41.18.2 env: - name: LOG_LEVEL value: debug -- 2.49.1 From ecb62f0af8bae40977a25dd4a6a2547fcee6a4b9 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 4 Jul 2025 05:00:26 +0000 Subject: [PATCH 74/95] chore(deps): update renovate/renovate docker tag to v41.18.3 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index a3a29b9..0243f32 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.18.2 + image: renovate/renovate:41.18.3 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 50f41fe8df0870d911bfa371840a1a110f491499 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 4 Jul 2025 09:00:27 +0000 Subject: [PATCH 75/95] chore(deps): update renovate/renovate docker tag to v41.18.4 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 0243f32..738abca 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.18.3 + image: renovate/renovate:41.18.4 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 5270d81da133fe599c0716b5a70c559e41aab6fd Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 4 Jul 2025 10:00:38 +0000 Subject: [PATCH 76/95] chore(deps): update renovate/renovate docker tag to v41.19.0 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 738abca..068a78b 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.18.4 + image: renovate/renovate:41.19.0 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 76009a4ecd21433aff12c19c68ce4597216f2f8a Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 4 Jul 2025 11:00:24 +0000 Subject: [PATCH 77/95] chore(deps): update renovate/renovate docker tag to v41.20.0 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 068a78b..cdcc753 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.19.0 + image: renovate/renovate:41.20.0 env: - name: LOG_LEVEL value: debug -- 2.49.1 From a2474c79771a9e170adbf4e6689f6ddbe9bcfaa2 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 4 Jul 2025 17:00:35 +0000 Subject: [PATCH 78/95] chore(deps): update renovate/renovate docker tag to v41.20.1 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index cdcc753..7f86ce9 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.20.0 + image: renovate/renovate:41.20.1 env: - name: LOG_LEVEL value: debug -- 2.49.1 From aa60665ab8250d337f50c4685438ccfb5f782208 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 4 Jul 2025 19:00:31 +0000 Subject: [PATCH 79/95] chore(deps): update renovate/renovate docker tag to v41.20.2 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 7f86ce9..ce32ed6 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.20.1 + image: renovate/renovate:41.20.2 env: - name: LOG_LEVEL value: debug -- 2.49.1 From c91955c211cc9cc2936609288872c7a84be0cb91 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 4 Jul 2025 21:00:24 +0000 Subject: [PATCH 80/95] chore(deps): update renovate/renovate docker tag to v41.21.0 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index ce32ed6..28efa63 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.20.2 + image: renovate/renovate:41.21.0 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 5d318d82a001aab5af549df493a8a813f0fb245c Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sat, 5 Jul 2025 12:00:26 +0000 Subject: [PATCH 81/95] chore(deps): update renovate/renovate docker tag to v41.21.1 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 28efa63..b22605e 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.21.0 + image: renovate/renovate:41.21.1 env: - name: LOG_LEVEL value: debug -- 2.49.1 From a3bf857dc5175b8143d2633ef0cc3ab7fbdc8763 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sun, 6 Jul 2025 00:00:26 +0000 Subject: [PATCH 82/95] chore(deps): update renovate/renovate docker tag to v41.21.2 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index b22605e..f5cf5fa 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.21.1 + image: renovate/renovate:41.21.2 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 54abdf85ff781aa14c0762fb823f518ea4ae9d2c Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sun, 6 Jul 2025 03:00:29 +0000 Subject: [PATCH 83/95] chore(deps): update renovate/renovate docker tag to v41.21.3 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index f5cf5fa..d45e594 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.21.2 + image: renovate/renovate:41.21.3 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 61621038e5669c665ef8415e809c87df7f9c7db7 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sun, 6 Jul 2025 07:00:27 +0000 Subject: [PATCH 84/95] chore(deps): update renovate/renovate docker tag to v41.22.0 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index d45e594..dcff739 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.21.3 + image: renovate/renovate:41.22.0 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 85c63a631c4bc11e0a11f84153e367fcc403ca6b Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sun, 6 Jul 2025 08:00:25 +0000 Subject: [PATCH 85/95] chore(deps): update renovate/renovate docker tag to v41.23.0 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index dcff739..396b8cb 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.22.0 + image: renovate/renovate:41.23.0 env: - name: LOG_LEVEL value: debug -- 2.49.1 From cfe00c8d2a55026a3ff2e7a15bcb67676f076e10 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sun, 6 Jul 2025 17:00:23 +0000 Subject: [PATCH 86/95] chore(deps): update renovate/renovate docker tag to v41.23.1 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 396b8cb..a19271d 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.23.0 + image: renovate/renovate:41.23.1 env: - name: LOG_LEVEL value: debug -- 2.49.1 From b5e215ace87b1b2155b6bde91f3f9f662789e44d Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sun, 6 Jul 2025 19:00:21 +0000 Subject: [PATCH 87/95] chore(deps): update ghcr.io/pocket-id/pocket-id docker tag to v1.6.0 --- apps/pocketid/deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/pocketid/deployment.yaml b/apps/pocketid/deployment.yaml index bb40351..5b5b141 100644 --- a/apps/pocketid/deployment.yaml +++ b/apps/pocketid/deployment.yaml @@ -20,7 +20,7 @@ spec: claimName: pocketid-pvc containers: - name: pocketid - image: ghcr.io/pocket-id/pocket-id:v1.5.0 + image: ghcr.io/pocket-id/pocket-id:v1.6.0 imagePullPolicy: Always ports: - containerPort: 1411 -- 2.49.1 From 962e396294072057c4d92edc5ddc8376d83fb221 Mon Sep 17 00:00:00 2001 From: prettysunflower Date: Sun, 6 Jul 2025 15:58:46 -0400 Subject: [PATCH 88/95] apps(pocketid): Updated image to the distroless one, and updated healthcheck to use the healthcheck command instead of a HTTP request Signed-off-by: prettysunflower --- apps/pocketid/deployment.yaml | 18 ++++++++++-------- 1 file changed, 10 insertions(+), 8 deletions(-) diff --git a/apps/pocketid/deployment.yaml b/apps/pocketid/deployment.yaml index 5b5b141..b02f242 100644 --- a/apps/pocketid/deployment.yaml +++ b/apps/pocketid/deployment.yaml @@ -20,7 +20,7 @@ spec: claimName: pocketid-pvc containers: - name: pocketid - image: ghcr.io/pocket-id/pocket-id:v1.6.0 + image: ghcr.io/pocket-id/pocket-id:v1.6.0-distroless imagePullPolicy: Always ports: - containerPort: 1411 @@ -41,15 +41,17 @@ spec: seccompProfile: type: RuntimeDefault livenessProbe: - httpGet: - path: /healthz - port: 1411 + exec: + command: + - /app/pocket-id + - healthcheck initialDelaySeconds: 10 failureThreshold: 3 periodSeconds: 90 startupProbe: - httpGet: - path: /healthz - port: 1411 + exec: + command: + - /app/pocket-id + - healthcheck failureThreshold: 30 - periodSeconds: 10 \ No newline at end of file + periodSeconds: 10 -- 2.49.1 From 472fb8db68bb62d7346b54b0ded2b70df73f8c23 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sun, 6 Jul 2025 20:00:55 +0000 Subject: [PATCH 89/95] chore(deps): update renovate/renovate docker tag to v41.23.2 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index a19271d..483b8a9 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.23.1 + image: renovate/renovate:41.23.2 env: - name: LOG_LEVEL value: debug -- 2.49.1 From f8233310b1d738036777b9be7b7efaf294ed06bf Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sun, 6 Jul 2025 21:00:39 +0000 Subject: [PATCH 90/95] chore(deps): update ghcr.io/pocket-id/pocket-id docker tag to v1.6.1 --- apps/pocketid/deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/pocketid/deployment.yaml b/apps/pocketid/deployment.yaml index b02f242..bfd1da9 100644 --- a/apps/pocketid/deployment.yaml +++ b/apps/pocketid/deployment.yaml @@ -20,7 +20,7 @@ spec: claimName: pocketid-pvc containers: - name: pocketid - image: ghcr.io/pocket-id/pocket-id:v1.6.0-distroless + image: ghcr.io/pocket-id/pocket-id:v1.6.1-distroless imagePullPolicy: Always ports: - containerPort: 1411 -- 2.49.1 From 907516c00e5bb88864f33c40e559cde189cf9f1e Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Mon, 7 Jul 2025 07:00:34 +0000 Subject: [PATCH 91/95] chore(deps): update renovate/renovate docker tag to v41.23.3 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 483b8a9..8917538 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.23.2 + image: renovate/renovate:41.23.3 env: - name: LOG_LEVEL value: debug -- 2.49.1 From ee0e5362c7f7adc135e439ba906a73a21236f213 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Mon, 7 Jul 2025 08:00:28 +0000 Subject: [PATCH 92/95] chore(deps): update renovate/renovate docker tag to v41.23.4 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 8917538..388b255 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.23.3 + image: renovate/renovate:41.23.4 env: - name: LOG_LEVEL value: debug -- 2.49.1 From ddf062b11b85822e668868d8601445ee6dd242b3 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Mon, 7 Jul 2025 14:00:28 +0000 Subject: [PATCH 93/95] chore(deps): update renovate/renovate docker tag to v41.23.5 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 388b255..0b6f74a 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.23.4 + image: renovate/renovate:41.23.5 env: - name: LOG_LEVEL value: debug -- 2.49.1 From 8f97bead483f4c817540f446c167e71a02d34bfd Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Mon, 7 Jul 2025 16:01:01 +0000 Subject: [PATCH 94/95] chore(deps): update renovate/renovate docker tag to v41.24.0 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index 0b6f74a..a6553f9 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.23.5 + image: renovate/renovate:41.24.0 env: - name: LOG_LEVEL value: debug -- 2.49.1 From c8da5bd7f0b729a7c32586b0836206a6a7ae9eeb Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 8 Jul 2025 11:00:27 +0000 Subject: [PATCH 95/95] chore(deps): update renovate/renovate docker tag to v41.25.0 --- apps/renovate/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml index a6553f9..0c1ec82 100644 --- a/apps/renovate/cronjob.yaml +++ b/apps/renovate/cronjob.yaml @@ -25,7 +25,7 @@ spec: - "git.prettysunflower.moe" containers: - name: renovate - image: renovate/renovate:41.24.0 + image: renovate/renovate:41.25.0 env: - name: LOG_LEVEL value: debug -- 2.49.1