Merge pull request #758 from 3dwardch3ng/misc

remove opensign secrets

.sops.pub.asc

@@ -1,63 +0,0 @@
------BEGIN PGP PUBLIC KEY BLOCK-----
-
-mQINBGZlM+cBEADb3FqX+ZswYKVKx7kUGSvvBT0+Pe/6BZIQYDt8DE+gXTAwNDlq
-4Yy1XyPN5ispHo1/huUkUOaFUpkolfjzuciEIWaw2qHhTn9a7rPTx7DGCni9epic
-SuQYykC7MgQtAOkxUlx5R9XTL30JksICqlVLz8SMDHAzraLZU+4Pde+Cqgzx4x0K
-EfBzoAfjQtRe1RtikQ0ShklbbrbfETG9oGYh28RCI/ic22pgVV3EN1K1RDJDx9O+
-+CWW/dahKBCrKl8BUAd7dblOkIT1iwBtteyAfvYgcaGL2O0pHKIx2XmM2OWvjbPR
-TJvYtDQXpLHEYValuDWSF3TxxlYw05MFK3TRK0bSp8f7RN8Y12bZ/yGI3HpTfF2u
-B/ZGP++v5SwzuOEJw/7VrCqihLPuq/yeCi7xUGYpuhW0vjE5GVH3R7BBpP3B1Svg
-gCrdZOP0KoMVNM0SHzVvUzf4okWo1ctHU1zhmBPmW+LAyugYvq8di7q7rRDelELW
-IBnIqEfxXCKdqD2YylUJYXRuHhSvfGw8ABt873xBYfLTQSJmadaQevB58nTCooCe
-kt9AaOpdjCjfaArajbhUQx+56GdSLh5OUabu/zG75SF3kGJJ69G3BFZH5vZSwkt9
-22O75IBBN0A+d7xt/NsPNAfckwmPHFNiKxSPMXzrdGbfHTZTiYykarqVwwARAQAB
-tClycGk1LWNsdXN0ZXIuZWR3YXJkLnN5ZG5leSAoZmx1eCBzZWNyZXRzKYkCTgQT
-AQoAOBYhBGzqkd2xlkhpyU3Ox69uO7G0T2abBQJmZTPnAhsvBQsJCAcCBhUKCQgL
-AgQWAgMBAh4BAheAAAoJEK9uO7G0T2ab2gIQAI/MhtpzyIqAto0O9erPG74HNqsB
-B4Fi/DssU+WHYOiLR8COXNYV1Hzb7VWaucyKku0OB58AN8fMfTEE5b/K2kvhAyAW
-oK+FWgLWQXrLIwZuz+rlwIZEEWJrUYOle3tosmOyE8vlvPwv9hzS1q6ueEanvT1K
-2UrtRWCdfDRVJciUTI78v88XNYD7CpOfJqlS62tk2su6NGjBg4T5N9j0u0ddZ1pU
-eH28L4jvaCiAQkKZbKSBr5LFKJio4LIkCOsYyraQrv6PxuPd5c2E2GbMOMLF2iLO
-25hlr2o34UnjDMV0bHFHUw2ujULYCzp83A5oNce6vjY/ZL0LrrjVqVn+gcnpR9MF
-K3ArlkUkp0oNuVnZ1o/zObfcv6XEG/LoQGc7nuYLMooQEEeNEP2RwvlRTAhpKPZW
-ZPthGwe7RzWwPWjmkPvBVQy4njk7rDu0Ob0NkJKOBOc28Su5iOIwzKRyzvDV6g1o
-2yYWuKmZSkjBvP909LSccoFW8I55bUg3tUH5n7BCkdeOAmsq4cGPMviJeVRByOxt
-oK4wS63g/R8h916eLwygMxutDeIEnrAcGrpCXDRzH7kOq533LbuMk1p2giY4VAIK
-S26C0zzhjF0vJwls7BoP55XZfJf/WGQdRtfH6QvKfJwk1n/2OTeeY3McSEg7JoCf
-cmPZtQG/mGAhpomjuQINBGZlM+cBEADh4OFFjCOjbPn/5B0FwZ4wqjND/ARSD6iu
-CUNAEEex+WNkEt8h2lZdUq0CAmNPqQIJQ2QE68TdueVl9X+is5uqDGgEyGo2ZccE
-RkpM89l883Pvfd/fiJSHCo/lBGSMhJQLzE/AWu4FKxkCmqFFQ9aK6XJhV/knsJ4Z
-Nis0n4weCF0YETE0vq2bPPMl2xvpMy4VKvG4t7Dhl0wJRakgtZYApOlBVpupzHh4
-bx27jkh7K2lEmJIoWc7xBtMYonvys66tQyHy86kPfQXw+gzzkUpf2XYCHRzvjPZ9
-YiZqV370LCkjLMg0zfLaINXUsw6xrHXfbnutTb3qW9YIp7xyQS64wFbKM9d+y7XL
-ZUXsAQbn9cNoEBP5pXoJSvrrkGRAZDwFW0ax2XveuAlfBRv5tiXpHyD7M7Arrjb0
-yc6ijU/ZBv0vaQZMtSt28M10Z5Tn1A93nHff2xdM0njZc3KImM/QpGXlY8pct18Q
-zUqoYu69po7j7mH78a8h2tI5X7AmU1T1JOcQQ4bp46ik3uBKCVxLSyesAeGE1Au8
-QksLqELZ/jVlV/+WQ54NDLt3bc24V8MIj57xPDumejsJnY8cJLOW7Rrsn3WJCBkw
-AKM4BlrR/HigX7sjZ57N9ZsRTuaxpvCJwlRdK4YPsEBhO2UvQNGVWLEj8dogq2+v
-a31vc/kyrwARAQABiQRsBBgBCgAgFiEEbOqR3bGWSGnJTc7Hr247sbRPZpsFAmZl
-M+cCGy4CQAkQr247sbRPZpvBdCAEGQEKAB0WIQTvmsGobbjnhWp6fYQ2D2kqSUqH
-CgUCZmUz5wAKCRA2D2kqSUqHClj8D/4pHqnYlIcJpDOhGxYlQtrk6GRSfq1g3suh
-5Lhc+eHFpVQtQM85qJTSIhS3w/XAf3GwekYuiKjGAdhrWJcglphxCPX5IMg9ofMX
-ICbOxyjdEeOwgfEMvuyPgLUet6reK8rSTefhR5L2FRuU+qibs08LKMAtRoooZ3I1
-W7q38hWBcrrQXnBxtb7YLQ6Kzwd7mEq0KXnJxV8UBUj9x90j7R5+YEs3ZIAUh6sV
-jR23RpRuBQmgGXsjv3LsYyeDCglUNmWZKWfVhhmLcIbJ5/Dej4Eg79qY6DrmyXLM
-0Sw1ZhGAj/xRGw3GMrLXoj1gjEI1etUbiCKLUud2llUk4d15NP5CfhQ6s4Gh9p60
-x1eL8+hNuoSDRuQWzn/8MWglWKeUnalXF7krjLuOVtpMR+Uh9YwufUXDiQRmx6Iy
-/k7yOKg9V6IBm+6+xxKXKPZeBuVucKPegyI00gbM9F2ql9z30/WGVRtt6vIowuPi
-5p5e3mmeL83FUv7tpVnNR50ulfVEflTBHbfgop1THJIYgNT6OODCUQFw/GPzzMNi
-8jz3a1GB+OTYNF+x7OzrgBx1AvtryNQz+8lvkWVSfhJx0kgeUwwghIPw5zV4fypf
-8XQiP67BcarnB4RiWSgUjs7uQ25ZBxRbZ+D3StvP9+5QEBIh9q7yaj2gxo6fcaNk
-ZxKPd2thGiIZD/9H27JXAz7r/U+wtycteXKXogcAdu4i5Zlpqd5c3p2K3XO+sc6Y
-cA+uFNWBrz2RsKwIAX2djfYDi8Vp6uACRkE8Vzyo5WoIk0LF6upCCD44DIZGWlzH
-t59dGr8HQFvk/6RTuWoMnbtbK1k6qV5CK6q3jVZo2Do4v4uY2D/eXjzaIew+3kDG
-v+HDAOVZuTiW2V8XQSrXUr3duCK4Lch+EE8Cw8RyPy1Um6jSUbUGXFryqiLuaqub
-72JON1QDH6sLci7xGEccKGyk9xsTLthxFTWkPEjPXNPTAlvbPwdL/eOFmmOOLUqH
-HomXDoKITUOJ5ytUQ6WgIpfdOSkRmamMtzfvs6kkogzL53vwNXJMRm05HYgjm1bD
-moLpcoFhxEDj8Cd3sY+e+J6rKOgWq8f3+cKNi4qIzpv7JyAUW2gM2sfPPJ6PViPB
-MV1CnKli8ZRLEoHXcakjq5ScJi0UyG+rT3vodUdKbVQKxeohry1gX6QO27lDSn2d
-6KQy5mueEy9eZh3WsCWXTp/oILRlrgOrxQWySv2M6b15lxFjRvHc1j2/4szaqNWr
-fPUQZsDUwl84VrjzoQpXmt+Nn8xgAGEEWpXAc5P6tkm4Nk8lkUErRkbdSWEAjOOF
-8cVKCymSVdmFE2RPvZdK9vYCCckjFNBArbT6xQwDjAo4srdaMtxJWb+3kA==
-=8DLE
------END PGP PUBLIC KEY BLOCK-----

.sops.yaml

@@ -1,5 +0,0 @@
-creation_rules:
-  - path_regex: \.ya?ml$
-    encrypted_regex: ^(data|stringData)$
-    pgp: 6CEA91DDB1964869C94DCEC7AF6E3BB1B44F669B
-    age: age1d47q8mlty404pxx378q49hr93aqexca4mkeqtdm00w4gjd09xd0qhxcdcz

apps/adguard-home/base/deployment.yaml

@@ -13,13 +13,6 @@ spec:
     metadata:
       labels:
         app.kubernetes.io/name: adguard-home
-        rpi5.cluster.policy/egress-kubeapi: "true"
-        rpi5.cluster.policy/egress-namespace: "true"
-        rpi5.cluster.policy/egress-world: "true"
-        rpi5.cluster.policy/ingress-namespace: "true"
-        rpi5.cluster.policy/ingress-nginx: "true"
-        rpi5.cluster.policy/ingress-nodes: "true"
-        rpi5.cluster.policy/ingress-world: "true"
     spec:
       containers:
         - name: adguard-home

apps/adguard-home/base/kustomization.yaml

@@ -1,5 +1,5 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-- gotk-components.yaml
+  - ./deployment.yaml
-- gotk-sync.yaml
+  - ./service.yaml

apps/adguard-home/env/k3s-cluster/config.json

@@ -0,0 +1,12 @@
+{
+  "appName": "adguard-home",
+  "userGivenName": "adguard-home",
+  "namespace": "adguard-home",
+  "destNamespace": "adguard-home",
+  "destServer": "https://kubernetes.default.svc",
+  "srcPath": "apps/adguard-home/env/k3s-cluster",
+  "srcRepoURL": "https://github.com/3dwardch3ng/home-cluster-ops.git",
+  "srcTargetRevision": "",
+  "labels": null,
+  "annotations": null
+}

apps/adguard-home/env/k3s-cluster/kustomization.yaml

@@ -1,5 +1,5 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - ingress-nginx.yaml
+  - ../../base
-  - ingress-nginx-config.yaml
+  - ./ingress.yaml

apps/chattts/base/deployment.yaml

@@ -0,0 +1,30 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: chattts
+  namespace: chattts
+  labels:
+    app.kubernetes.io/name: chattts
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: chattts
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: chattts
+    spec:
+      securityContext:
+        runAsUser: 1000
+        runAsGroup: 1000
+      containers:
+        - name: chattts
+          image: lcs13324/chattts:v1.0
+          securityContext:
+            allowPrivilegeEscalation: false
+          ports:
+            - protocol: TCP
+              containerPort: 8888
+              name: http
+      nodeSelector:
+        kubernetes.io/arch: amd64

apps/chattts/base/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./deployment.yaml
+  - ./service.yaml

apps/chattts/base/service.yaml

@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: chattts
+  namespace: chattts
+  labels:
+    app.kubernetes.io/name: chattts
+spec:
+  selector:
+    app.kubernetes.io/name: chattts
+  type: ClusterIP
+  internalTrafficPolicy: Cluster
+  ports:
+    - protocol: TCP
+      port: 8888
+      targetPort: 8888
+      name: http

apps/chattts/env/k3s-cluster/kustomization.yaml

@@ -1,4 +1,4 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - cilium.yaml
+  - ../../base

apps/coder/env/k3s-cluster/config.json

@@ -0,0 +1,12 @@
+{
+  "appName": "coder",
+  "userGivenName": "coder",
+  "namespace": "coder",
+  "destNamespace": "coder",
+  "destServer": "https://kubernetes.default.svc",
+  "srcPath": "apps/coder/env/k3s-cluster",
+  "srcRepoURL": "https://github.com/3dwardch3ng/home-cluster-ops.git",
+  "srcTargetRevision": "",
+  "labels": null,
+  "annotations": null
+}

apps/coder/env/k3s-cluster/kustomization.yaml

@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+helmCharts:
+  - name: coder
+    repo: https://helm.coder.com/v2
+    version: 2.13.1
+    releaseName: coder
+    valuesFile: values.yaml

apps/coder/env/k3s-cluster/values.yaml

@@ -0,0 +1,22 @@
+coder:
+  env:
+    - name: CODER_ACCESS_URL
+      value: "https://coder.cluster.edward.sydney"
+    - name: CODER_PG_CONNECTION_URL
+      valueFrom:
+        secretKeyRef:
+          # You'll need to create a secret called coder-db-url with your
+          # Postgres connection URL like:
+          # postgres://coder:password@postgres:5432/coder?sslmode=disable
+          name: coder-secrets
+          key: db_url
+  volumes:
+    - name: coder-data
+      persistentVolumeClaim:
+        claimName: coder-pvc
+  volumeMounts:
+    - name: coder-data
+      mountPath: /config
+  service:
+    type: NodePort
+    httpNodePort: 31180

apps/gitea/env/k3s-cluster/config.json

@@ -0,0 +1,12 @@
+{
+  "appName": "gitea",
+  "userGivenName": "gitea",
+  "namespace": "gitea",
+  "destNamespace": "gitea",
+  "destServer": "https://kubernetes.default.svc",
+  "srcPath": "apps/gitea/env/k3s-cluster",
+  "srcRepoURL": "https://github.com/3dwardch3ng/home-cluster-ops.git",
+  "srcTargetRevision": "",
+  "labels": null,
+  "annotations": null
+}

apps/gitea/env/k3s-cluster/kustomization.yaml

@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+helmCharts:
+  - name: gitea
+    repo: oci://registry-1.docker.io/bitnamicharts
+    version: 2.3.14
+    releaseName: gitea
+    valuesFile: values.yaml

apps/gitea/env/k3s-cluster/values.yaml

@@ -0,0 +1,30 @@
+namespaceOverride: "gitea"
+podAntiAffinityPreset: ""
+adminUsername: "gitea_admin"
+adminEmail: "edward@cheng.sydney"
+appName: "gitea"
+existingSecret: "gitea-secrets"
+existingSecretKey: "admin-password"
+smtpHost: "smtp.gmail.com"
+smtpPort: "587"
+smtpUser: "me@edward.sydney"
+smtpExistingSecret: "gitea-secrets"
+persistence:
+  existingClaim: "gitea-pvc"
+service:
+  ports:
+    http: 10080
+    ssh: 10022
+ingress:
+  enabled: true
+  ingressClassName: "nginx"
+  hostname: "gitea.cluster.edward.sydney"
+serviceAccount:
+  create: false
+postgresql:
+  enabled: false
+externalDatabase:
+  host: "postgresql-primary.argocd.svc.cluster.local"
+  user: "gitea_user"
+  existingSecret: "gitea-secrets"
+  existingSecretPasswordKey: "db-password"

apps/homer/base/deployment.yaml

@@ -13,8 +13,6 @@ spec:
     metadata:
       labels:
         app.kubernetes.io/name: homer
-        rpi5.cluster.policy/egress-world: "true"
-        rpi5.cluster.policy/ingress-world: "true"
     spec:
       securityContext:
         runAsUser: 1000
@@ -34,10 +32,10 @@ spec:
               containerPort: 8088
               name: http
           volumeMounts:
-            - name: assets
+            - name: www
-              mountPath: /www/assets
+              mountPath: /www
       volumes:
-        - name: assets
+        - name: www
           hostPath:
-            path: /mnt/nfs/AppData/homer/www/assets
+            path: /mnt/nfs/AppData/homer/www
             type: Directory

apps/homer/base/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./deployment.yaml
+  - ./service.yaml

apps/homer/env/k3s-cluster/config.json

@@ -0,0 +1,12 @@
+{
+  "appName": "homer",
+  "userGivenName": "homer",
+  "namespace": "homer",
+  "destNamespace": "homer",
+  "destServer": "https://kubernetes.default.svc",
+  "srcPath": "apps/homer/env/k3s-cluster",
+  "srcRepoURL": "https://github.com/3dwardch3ng/home-cluster-ops.git",
+  "srcTargetRevision": "",
+  "labels": null,
+  "annotations": null
+}

apps/homer/env/k3s-cluster/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../../base
+  - ./ingress.yaml

apps/jellyfin/base/kustomization.yaml

@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+helmCharts:
+  - name: jellyfin
+    repo: https://beluga-cloud.github.io/charts
+    version: 2.3.0
+    releaseName: jellyfin
+    valuesFile: values.yaml

apps/jellyfin/base/values.yaml

@@ -0,0 +1,155 @@
+podSecurityContext:
+  runAsGroup: 1000
+  runAsUser: 1000
+  fsGroup: 1000
+containerSecurityContext:
+  runAsGroup: 1000
+  runAsUser: 1000
+persistence:
+  config:
+    enabled: true
+    volumeClaimSpec:
+      accessModes:
+        - ReadWriteOnce
+      volumeName: jellyfin-config
+      storageClassName: local-path
+  data:
+    enabled: true
+    volumeClaimSpec:
+      accessModes:
+        - ReadWriteOnce
+      volumeName: jellyfin-data
+      storageClassName: local-path
+jellyfin:
+  mediaVolumes:
+    - name: movies
+      readOnly: false
+      volumeSpec:
+        storageClassName: local-path
+        volumeMode: Filesystem
+        capacity:
+          storage: 256Gi
+        accessModes:
+          - ReadWriteOnce
+        persistentVolumeReclaimPolicy: Retain
+        nodeAffinity:
+          required:
+            nodeSelectorTerms:
+              - matchExpressions:
+                  - key: kubernetes.io/os
+                    operator: In
+                    values:
+                      - linux
+        claimRef:
+          apiVersion: v1
+          kind: PersistentVolumeClaim
+          name: jellyfin-mediavol-movies
+          namespace: jellyfin
+        hostPath:
+          path: "/mnt/nfs/media/movie"
+          type: "Directory"
+    - name: series
+      readOnly: false
+      volumeSpec:
+        storageClassName: local-path
+        volumeMode: Filesystem
+        capacity:
+          storage: 256Gi
+        accessModes:
+          - ReadWriteOnce
+        persistentVolumeReclaimPolicy: Retain
+        nodeAffinity:
+          required:
+            nodeSelectorTerms:
+              - matchExpressions:
+                  - key: kubernetes.io/os
+                    operator: In
+                    values:
+                      - linux
+        claimRef:
+          apiVersion: v1
+          kind: PersistentVolumeClaim
+          name: jellyfin-mediavol-series
+          namespace: jellyfin
+        hostPath:
+          path: "/mnt/nfs/media/tv"
+          type: "Directory"
+    - name: music-videos
+      readOnly: false
+      volumeSpec:
+        storageClassName: local-path
+        volumeMode: Filesystem
+        capacity:
+          storage: 128Gi
+        accessModes:
+          - ReadWriteOnce
+        persistentVolumeReclaimPolicy: Retain
+        nodeAffinity:
+          required:
+            nodeSelectorTerms:
+              - matchExpressions:
+                  - key: kubernetes.io/os
+                    operator: In
+                    values:
+                      - linux
+        claimRef:
+          apiVersion: v1
+          kind: PersistentVolumeClaim
+          name: jellyfin-mediavol-music-videos
+          namespace: jellyfin
+        hostPath:
+          path: "/mnt/nfs/media/music-video"
+          type: "Directory"
+    - name: short-videos
+      readOnly: false
+      volumeSpec:
+        storageClassName: local-path
+        volumeMode: Filesystem
+        capacity:
+          storage: 32Gi
+        accessModes:
+          - ReadWriteOnce
+        persistentVolumeReclaimPolicy: Retain
+        nodeAffinity:
+          required:
+            nodeSelectorTerms:
+              - matchExpressions:
+                  - key: kubernetes.io/os
+                    operator: In
+                    values:
+                      - linux
+        claimRef:
+          apiVersion: v1
+          kind: PersistentVolumeClaim
+          name: jellyfin-mediavol-short-videos
+          namespace: jellyfin
+        hostPath:
+          path: "/mnt/nfs/media/short-video"
+          type: "Directory"
+    - name: gv
+      readOnly: false
+      volumeSpec:
+        storageClassName: local-path
+        volumeMode: Filesystem
+        capacity:
+          storage: 64Gi
+        accessModes:
+          - ReadWriteOnce
+        persistentVolumeReclaimPolicy: Retain
+        nodeAffinity:
+          required:
+            nodeSelectorTerms:
+              - matchExpressions:
+                  - key: kubernetes.io/os
+                    operator: In
+                    values:
+                      - linux
+        claimRef:
+          apiVersion: v1
+          kind: PersistentVolumeClaim
+          name: jellyfin-mediavol-gv
+          namespace: jellyfin
+        hostPath:
+          path: "/mnt/nfs/media/gv"
+          type: "Directory"
+  persistentTranscodes: true

apps/jellyfin/env/k3s-cluster/config.json

@@ -0,0 +1,12 @@
+{
+  "appName": "jellyfin",
+  "userGivenName": "jellyfin",
+  "namespace": "jellyfin",
+  "destNamespace": "jellyfin",
+  "destServer": "https://kubernetes.default.svc",
+  "srcPath": "apps/jellyfin/env/k3s-cluster",
+  "srcRepoURL": "https://github.com/3dwardch3ng/home-cluster-ops.git",
+  "srcTargetRevision": "",
+  "labels": null,
+  "annotations": null
+}

apps/jellyfin/env/k3s-cluster/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../../base
+  - ./ingress.yaml

apps/kavita/base/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - deployment.yaml
+  - ./service.yaml

apps/kavita/env/k3s-cluster/config.json

@@ -0,0 +1,12 @@
+{
+  "appName": "kavita",
+  "userGivenName": "kavita",
+  "namespace": "kavita",
+  "destNamespace": "kavita",
+  "destServer": "https://kubernetes.default.svc",
+  "srcPath": "apps/kavita/env/k3s-cluster",
+  "srcRepoURL": "https://github.com/3dwardch3ng/home-cluster-ops.git",
+  "srcTargetRevision": "",
+  "labels": null,
+  "annotations": null
+}

apps/kavita/env/k3s-cluster/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../../base
+  - ./ingress.yaml

apps/kubernetes-dashboard/README.md

@@ -0,0 +1,3 @@
+### Command to generate the token
+```bash
+kubectl -n argocd create token admin-user

apps/kubernetes-dashboard/base/kustomization.yaml

@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+helmCharts:
+  - name: kubernetes-dashboard
+    repo: https://kubernetes.github.io/dashboard/
+    version: 7.5.0
+    releaseName: kubernetes-dashboard
+    valuesFile: values.yaml

apps/kubernetes-dashboard/base/values.yaml

@@ -0,0 +1,8 @@
+app:
+  ingress:
+    enabled: true
+    hosts:
+      - k3s-dashboard.cluster.edward.sydney
+    ingressClassName: nginx
+    tls:
+      enabled: false

apps/kubernetes-dashboard/env/k3s-cluster/cluster-role.yaml

@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: admin-user
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cluster-admin
+subjects:
+  - kind: ServiceAccount
+    name: admin-user
+    namespace: argocd

apps/kubernetes-dashboard/env/k3s-cluster/config.json

@@ -0,0 +1,12 @@
+{
+  "appName": "kubernetes-dashboard",
+  "userGivenName": "kubernetes-dashboard",
+  "namespace": "argocd",
+  "destNamespace": "argocd",
+  "destServer": "https://kubernetes.default.svc",
+  "srcPath": "apps/kubernetes-dashboard/env/k3s-cluster",
+  "srcRepoURL": "https://github.com/3dwardch3ng/home-cluster-ops.git",
+  "srcTargetRevision": "",
+  "labels": null,
+  "annotations": null
+}

apps/kubernetes-dashboard/env/k3s-cluster/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../../base
+  - ./service-account.yaml
+  - ./cluster-role.yaml

apps/kubernetes-dashboard/env/k3s-cluster/service-account.yaml

@@ -0,0 +1,5 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: admin-user
+  namespace: argocd

apps/nextcloud/base/deployment.yaml

@@ -0,0 +1,76 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: nextcloud
+  namespace: nextcloud
+  labels:
+    app.kubernetes.io/name: nextcloud
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: nextcloud
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: nextcloud
+    spec:
+      securityContext:
+        runAsUser: 1000
+        runAsGroup: 1000
+      containers:
+        - name: nextcloud
+          image: nextcloud/all-in-one:latest
+          securityContext:
+            allowPrivilegeEscalation: false
+          env:
+            - name: SKIP_DOMAIN_VALIDATION
+              value: "true"
+            - name: APACHE_PORT
+              value: "11000"
+            - name: APACHE_IP_BINDING
+              value: "0.0.0.0"
+          ports:
+            - protocol: TCP
+              containerPort: 80
+              name: 80-tcp
+            - protocol: TCP
+              containerPort: 8080
+              name: 8080-tcp
+            - protocol: TCP
+              containerPort: 8443
+              name: 8443-tcp
+            - protocol: TCP
+              containerPort: 3478
+              name: 3478-tcp
+            - protocol: UDP
+              containerPort: 3478
+              name: 3478-udp
+          volumeMounts:
+            - name: nextcloud_aio_mastercontainer
+              mountPath: /mnt/docker-aio-config
+            - name: nextcloud_aio_nextcloud
+              mountPath: /mnt/ncdata
+            - name: nextcloud_storagebox
+              mountPath: /mnt/storagebox
+            - name: docker-socket
+              mountPath: /var/run/docker.sock
+              readOnly: true
+      volumes:
+        - name: nextcloud_aio_mastercontainer
+          hostPath:
+            path: /mnt/nfs/AppData/nextcloud/config
+            type: Directory
+        - name: nextcloud_aio_nextcloud
+          hostPath:
+            path: /mnt/nfs/AppData/nextcloud/data
+            type: Directory
+        - name: nextcloud_storagebox
+          hostPath:
+            path: /mnt/nfs/AppData/nextcloud/storagebox
+            type: Directory
+        - name: docker-socket
+          hostPath:
+            path: /var/run/docker.sock
+            type: Socket
+      nodeSelector:
+        kubernetes.io/arch: amd64

apps/nextcloud/base/ingress.yaml

@@ -1,21 +1,21 @@
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
-  name: capacitor-ingress
+  name: nextcloud-ingress
-  namespace: capacitor
+  namespace: nextcloud
   annotations:
     nginx.ingress.kubernetes.io/ssl-redirect: "false"
     nginx.ingress.kubernetes.io/use-regex: "true"
 spec:
   ingressClassName: nginx
   rules:
-    - host: "capacitor.cluster.edward.sydney"
+    - host: "nextcloud.cluster.edward.sydney"
       http:
         paths:
           - pathType: Prefix
             path: "/"
             backend:
               service:
-                name: capacitor
+                name: nextcloud
                 port:
-                  number: 9000
+                  number: 8080

apps/nextcloud/base/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./deployment.yaml
+  - ./service.yaml
+  - ./ingress.yaml

apps/nextcloud/base/service.yaml

@@ -0,0 +1,25 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: nextcloud
+  namespace: nextcloud
+  labels:
+    app.kubernetes.io/name: nextcloud
+spec:
+  selector:
+    app.kubernetes.io/name: nextcloud
+  type: ClusterIP
+  internalTrafficPolicy: Cluster
+  ports:
+    - protocol: TCP
+      port: 80
+      targetPort: 80
+      name: 80-tcp
+    - protocol: TCP
+      port: 8080
+      targetPort: 8080
+      name: 8080-tcp
+    - protocol: TCP
+      port: 8443
+      targetPort: 8443
+      name: 8443-tcp

apps/nextcloud/env/k3s-cluster/kustomization.yaml

@@ -1,4 +1,4 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - repositories.yaml
+  - ../../base

apps/nexus/base/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./deployment.yaml
+  - ./service.yaml

apps/nexus/env/k3s-cluster/config.json

@@ -0,0 +1,11 @@
+{
+  "appName": "nexus",
+  "userGivenName": "nexus",
+  "destNamespace": "nexus",
+  "destServer": "https://kubernetes.default.svc",
+  "srcPath": "apps/nexus/env/k3s-cluster",
+  "srcRepoURL": "https://github.com/3dwardch3ng/home-cluster-ops.git",
+  "srcTargetRevision": "",
+  "labels": null,
+  "annotations": null
+}

apps/nexus/env/k3s-cluster/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../../base

apps/plane/base/configmap.yaml

@@ -0,0 +1,28 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  namespace: plane
+  name: plane-app-vars
+data:
+  SENTRY_DSN: ""
+  SENTRY_ENVIRONMENT: ""
+  DEBUG: "0"
+  DOCKERIZED: "1"
+  GUNICORN_WORKERS: "1"
+  WEB_URL: "http://plane.cluster.edward.sydney"
+  CORS_ALLOWED_ORIGINS: "http://plane.cluster.edward.sydney,https://plane.cluster.edward.sydney"
+  REDIS_URL: "redis://plane-redis.plane.svc.cluster.local:6379/"
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  namespace: plane
+  name: plane-doc-store-vars
+data:
+  FILE_SIZE_LIMIT: "5242880"
+  AWS_S3_BUCKET_NAME: "plane"
+  MINIO_ROOT_USER: "admin"
+  AWS_S3_ENDPOINT_URL: "http://minio.minio.svc.cluster.local:19000"
+  USE_MINIO: "1"
+---

apps/plane/base/deployment.yaml

@@ -0,0 +1,274 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  namespace: plane
+  name: plane-admin-wl
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.name: plane-admin
+  template:
+    metadata:
+      namespace: plane
+      labels:
+        app.name: plane-admin
+    spec:
+      containers:
+        - name: plane-admin
+          imagePullPolicy: Always
+          image: makeplane/plane-admin:stable
+          stdin: true
+          tty: true
+          resources:
+            requests:
+              memory: "50Mi"
+              cpu: "50m"
+            limits:
+              memory: "1000Mi"
+              cpu: "500m"
+          command:
+            - node
+          args:
+            - admin/server.js
+            - admin
+      serviceAccount: plane-srv-account
+      serviceAccountName: plane-srv-account
+      nodeSelector:
+        kubernetes.io/arch: arm64
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  namespace: plane
+  name: plane-api-wl
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.name: plane-api
+  template:
+    metadata:
+      namespace: plane
+      labels:
+        app.name: plane-api
+    spec:
+      containers:
+        - name: plane-api
+          imagePullPolicy: Always
+          image: makeplane/plane-backend:stable
+          stdin: true
+          tty: true
+          resources:
+            requests:
+              memory: "50Mi"
+              cpu: "50m"
+            limits:
+              memory: "1000Mi"
+              cpu: "500m"
+          command:
+            - ./bin/docker-entrypoint-api.sh
+          envFrom:
+            - configMapRef:
+                name: plane-app-vars
+                optional: false
+            - secretRef:
+                name: plane-app-secrets
+                optional: false
+            - configMapRef:
+                name: plane-doc-store-vars
+                optional: false
+            - secretRef:
+                name: plane-doc-store-secrets
+                optional: false
+          readinessProbe:
+            failureThreshold: 30
+            httpGet:
+              path: /
+              port: 8000
+              scheme: HTTP
+            periodSeconds: 10
+            successThreshold: 1
+            timeoutSeconds: 1
+      serviceAccount: plane-srv-account
+      serviceAccountName: plane-srv-account
+      nodeSelector:
+        kubernetes.io/arch: arm64
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  namespace: plane
+  name: plane-beat-worker-wl
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.name: plane-beat-worker
+  template:
+    metadata:
+      namespace: plane
+      labels:
+        app.name: plane-beat-worker
+    spec:
+      containers:
+        - name: plane-beat-worker
+          imagePullPolicy: Always
+          image: makeplane/plane-backend:stable
+          stdin: true
+          tty: true
+          resources:
+            requests:
+              memory: "50Mi"
+              cpu: "50m"
+            limits:
+              memory: "1000Mi"
+              cpu: "500m"
+          command:
+            - ./bin/docker-entrypoint-beat.sh
+          envFrom:
+            - configMapRef:
+                name: plane-app-vars
+                optional: false
+            - secretRef:
+                name: plane-app-secrets
+                optional: false
+            - configMapRef:
+                name: plane-doc-store-vars
+                optional: false
+            - secretRef:
+                name: plane-doc-store-secrets
+                optional: false
+      serviceAccount: plane-srv-account
+      serviceAccountName: plane-srv-account
+      nodeSelector:
+        kubernetes.io/arch: arm64
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  namespace: plane
+  name: plane-space-wl
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.name: plane-space
+  template:
+    metadata:
+      namespace: plane
+      labels:
+        app.name: plane-space
+    spec:
+      containers:
+        - name: plane-space
+          imagePullPolicy: Always
+          image: makeplane/plane-space:stable
+          stdin: true
+          tty: true
+          resources:
+            requests:
+              memory: "50Mi"
+              cpu: "50m"
+            limits:
+              memory: "1000Mi"
+              cpu: "500m"
+          command:
+            - node
+          args:
+            - space/server.js
+            - space
+      serviceAccount: plane-srv-account
+      serviceAccountName: plane-srv-account
+      nodeSelector:
+        kubernetes.io/arch: arm64
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  namespace: plane
+  name: plane-web-wl
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.name: plane-web
+  template:
+    metadata:
+      namespace: plane
+      labels:
+        app.name: plane-web
+    spec:
+      containers:
+        - name: plane-web
+          imagePullPolicy: Always
+          image: makeplane/plane-frontend:stable
+          stdin: true
+          tty: true
+          resources:
+            requests:
+              memory: "50Mi"
+              cpu: "50m"
+            limits:
+              memory: "1000Mi"
+              cpu: "500m"
+          command:
+            - node
+          args:
+            - web/server.js
+            - web
+      serviceAccount: plane-srv-account
+      serviceAccountName: plane-srv-account
+      nodeSelector:
+        kubernetes.io/arch: arm64
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  namespace: plane
+  name: plane-worker-wl
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.name: plane-worker
+  template:
+    metadata:
+      namespace: plane
+      labels:
+        app.name: plane-worker
+    spec:
+      containers:
+        - name: plane-worker
+          imagePullPolicy: Always
+          image: makeplane/plane-backend:stable
+          stdin: true
+          tty: true
+          resources:
+            requests:
+              memory: "50Mi"
+              cpu: "50m"
+            limits:
+              memory: "1000Mi"
+              cpu: "500m"
+          command:
+            - ./bin/docker-entrypoint-worker.sh
+          envFrom:
+            - configMapRef:
+                name: plane-app-vars
+                optional: false
+            - secretRef:
+                name: plane-app-secrets
+                optional: false
+            - configMapRef:
+                name: plane-doc-store-vars
+                optional: false
+            - secretRef:
+                name: plane-doc-store-secrets
+                optional: false
+      serviceAccount: plane-srv-account
+      serviceAccountName: plane-srv-account
+      nodeSelector:
+        kubernetes.io/arch: arm64
+---

apps/plane/base/ingress.yaml

@@ -0,0 +1,46 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  namespace: plane
+  name: plane-ingress
+spec:
+  ingressClassName: nginx
+  rules:
+    - host: plane.cluster.edward.sydney
+      http:
+        paths:
+          - backend:
+              service:
+                port:
+                  number: 3000
+                name: plane-web
+            path: /
+            pathType: Prefix
+          - backend:
+              service:
+                port:
+                  number: 8000
+                name: plane-api
+            path: /api
+            pathType: Prefix
+          - backend:
+              service:
+                port:
+                  number: 8000
+                name: plane-api
+            path: /auth
+            pathType: Prefix
+          - backend:
+              service:
+                port:
+                  number: 3000
+                name: plane-space
+            path: /spaces
+            pathType: Prefix
+          - backend:
+              service:
+                port:
+                  number: 3000
+                name: plane-admin
+            path: /god-mode
+            pathType: Prefix

apps/plane/base/job.yaml

@@ -0,0 +1,35 @@
+---
+apiVersion: batch/v1
+kind: Job
+metadata:
+  namespace: plane
+  name: plane-api-migrate
+spec:
+  backoffLimit: 3
+  template:
+    metadata:
+      labels:
+        app.name: plane-api-migrate
+    spec:
+      containers:
+        - name: plane-api-migrate
+          image: makeplane/plane-backend:stable
+          command:
+            - ./bin/docker-entrypoint-migrator.sh
+          imagePullPolicy: Always
+          envFrom:
+            - configMapRef:
+                name: plane-app-vars
+                optional: false
+            - secretRef:
+                name: plane-app-secrets
+                optional: false
+            - configMapRef:
+                name: plane-doc-store-vars
+                optional: false
+            - secretRef:
+                name: plane-doc-store-secrets
+                optional: false
+      restartPolicy: OnFailure
+      serviceAccount: plane-srv-account
+      serviceAccountName: plane-srv-account

apps/plane/base/kustomization.yaml

@@ -0,0 +1,10 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./configmap.yaml
+  - ./service-account.yaml
+  - ./job.yaml
+  - ./deployment.yaml
+  - ./stateful-set.yaml
+  - ./service.yaml
+  - ./ingress.yaml

apps/plane/base/service-account.yaml

@@ -0,0 +1,6 @@
+apiVersion: v1
+automountServiceAccountToken: true
+kind: ServiceAccount
+metadata:
+  namespace: plane
+  name: plane-srv-account

apps/plane/base/service.yaml

@@ -0,0 +1,80 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  namespace: plane
+  name: plane-admin
+  labels:
+    app.name: plane-admin
+spec:
+  ports:
+    - name: admin-3000
+      port: 3000
+      protocol: TCP
+      targetPort: 3000
+  selector:
+    app.name: plane-admin
+---
+apiVersion: v1
+kind: Service
+metadata:
+  namespace: plane
+  name: plane-api
+  labels:
+    app.name: plane-api
+spec:
+  ports:
+    - name: api-8000
+      port: 8000
+      protocol: TCP
+      targetPort: 8000
+  selector:
+    app.name: plane-api
+---
+apiVersion: v1
+kind: Service
+metadata:
+  namespace: plane
+  name: plane-space
+  labels:
+    app.name: plane-space
+spec:
+  ports:
+    - name: space-3000
+      port: 3000
+      protocol: TCP
+      targetPort: 3000
+  selector:
+    app.name: plane-space
+---
+apiVersion: v1
+kind: Service
+metadata:
+  namespace: plane
+  name: plane-web
+  labels:
+    app.name: plane-web
+spec:
+  ports:
+    - name: web-3000
+      port: 3000
+      protocol: TCP
+      targetPort: 3000
+  selector:
+    app.name: plane-web
+---
+apiVersion: v1
+kind: Service
+metadata:
+  namespace: plane
+  name: plane-redis
+  labels:
+    app.name: plane-redis
+spec:
+  ports:
+    - name: redis-6379
+      port: 6379
+      protocol: TCP
+      targetPort: 6379
+  selector:
+    app.name: plane-redis

apps/plane/base/stateful-set.yaml

@@ -0,0 +1,32 @@
+---
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  namespace: plane
+  name: plane-redis-wl
+spec:
+  selector:
+    matchLabels:
+      app.name: plane-redis
+  serviceName:  plane-redis
+  template:
+    metadata:
+      labels:
+        app.name: plane-redis
+    spec:
+      containers:
+        - image: valkey/valkey:7.2.5-alpine
+          imagePullPolicy: Always
+          name: plane-redis
+          stdin: true
+          tty: true
+          volumeMounts:
+            - mountPath: /data
+              name: plane-redis-data
+      volumes:
+        - name: plane-redis-data
+          persistentVolumeClaim:
+            claimName: plane-redis-pvc
+      serviceAccount: plane-srv-account
+      serviceAccountName: plane-srv-account
+---

apps/plane/env/k3s-cluster/config.json

@@ -0,0 +1,12 @@
+{
+  "appName": "plane",
+  "userGivenName": "plane",
+  "namespace": "plane",
+  "destNamespace": "plane",
+  "destServer": "https://kubernetes.default.svc",
+  "srcPath": "apps/plane/env/k3s-cluster",
+  "srcRepoURL": "https://github.com/3dwardch3ng/home-cluster-ops.git",
+  "srcTargetRevision": "",
+  "labels": null,
+  "annotations": null
+}

apps/plane/env/k3s-cluster/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../../base

apps/plex/base/kustomization.yaml

@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+helmCharts:
+  - name: plex-media-server
+    repo: https://raw.githubusercontent.com/plexinc/pms-docker/gh-pages
+    version: 0.4.0
+    releaseName: plex-media-server
+    valuesFile: values.yaml

apps/plex/base/values.yaml

@@ -0,0 +1,48 @@
+pms:
+  configExistingClaim: plex-config-pvc
+nodeSelector:
+  kubernetes.io/arch: amd64
+extraEnv:
+  PLEX_CLAIM: "claim-EHVggvEm_aaX_E_szfyc"
+  TZ: "Australia/Sydney"
+  PLEX_UID: 1000
+  PLEX_GID: 1000
+  ALLOWED_NETWORKS: "0.0.0.0/0"
+extraVolumeMounts:
+  - name: plex-tv
+    mountPath: /tv
+  - name: plex-movie
+    mountPath: /movie
+  - name: plex-short-video
+    mountPath: /short-video
+  - name: plex-music
+    mountPath: /music
+  - name: plex-music-video
+    mountPath: /music-video
+  - name: plex-gv
+    mountPath: /gv
+extraVolumes:
+  - name: plex-tv
+    hostPath:
+      path: /mnt/nfs/media/tv
+      type: Directory
+  - name: plex-movie
+    hostPath:
+      path: /mnt/nfs/media/movie
+      type: Directory
+  - name: plex-short-video
+    hostPath:
+      path: /mnt/nfs/media/short-video
+      type: Directory
+  - name: plex-music
+    hostPath:
+      path: /mnt/nfs/media/music
+      type: Directory
+  - name: plex-music-video
+    hostPath:
+      path: /mnt/nfs/media/music-video
+      type: Directory
+  - name: plex-gv
+    hostPath:
+      path: /mnt/nfs/media/gv
+      type: Directory

apps/plex/env/k3s-cluster/config.json

@@ -0,0 +1,12 @@
+{
+  "appName": "plex",
+  "userGivenName": "plex",
+  "namespace": "plex",
+  "destNamespace": "plex",
+  "destServer": "https://kubernetes.default.svc",
+  "srcPath": "apps/plex/env/k3s-cluster",
+  "srcRepoURL": "https://github.com/3dwardch3ng/home-cluster-ops.git",
+  "srcTargetRevision": "",
+  "labels": null,
+  "annotations": null
+}

apps/plex/env/k3s-cluster/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../../base

apps/qbittorrent/base/deployment.yaml

@@ -0,0 +1,56 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: qbittorrent
+  namespace: qbittorrent
+  labels:
+    app.kubernetes.io/name: qbittorrent
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: qbittorrent
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: qbittorrent
+    spec:
+      containers:
+        - name: qbittorrent
+          image: lscr.io/linuxserver/qbittorrent:latest
+          securityContext:
+            allowPrivilegeEscalation: false
+          env:
+            - name: PUID
+              value: "1000"
+            - name: PGID
+              value: "1000"
+            - name: TZ
+              value: Australia/Sydney
+            - name: WEBUI_PORT
+              value: "8080"
+            - name: TORRENTING_PORT
+              value: "6881"
+          ports:
+            - protocol: TCP
+              containerPort: 8080
+              name: qb-ui
+            - protocol: TCP
+              containerPort: 6881
+              name: torrenting
+            - protocol: UDP
+              containerPort: 6881
+              name: torrenting-udp
+          volumeMounts:
+            - name: qbittorrent-config
+              mountPath: /config
+            - name: qbittorrent-downloads
+              mountPath: /downloads
+      volumes:
+        - name: qbittorrent-config
+          hostPath:
+            path: /mnt/nfs/AppData/qbittorrent/config
+            type: Directory
+        - name: qbittorrent-downloads
+          hostPath:
+            path: /mnt/nfs/AppData/qbittorrent/downloads
+            type: Directory

apps/qbittorrent/base/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./deployment.yaml
+  - ./service.yaml

apps/qbittorrent/base/service.yaml

@@ -0,0 +1,25 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: qbittorrent
+  namespace: qbittorrent
+  labels:
+    app.kubernetes.io/name: qbittorrent
+spec:
+  selector:
+    app.kubernetes.io/name: qbittorrent
+  type: LoadBalancer
+  internalTrafficPolicy: Cluster
+  ports:
+    - protocol: TCP
+      port: 18880
+      targetPort: 8080
+      name: qb-ui
+    - protocol: TCP
+      port: 6881
+      targetPort: 6881
+      name: torrenting
+    - protocol: UDP
+      port: 6881
+      targetPort: 6881
+      name: torrenting-udp

apps/qbittorrent/env/k3s-cluster/config.json

@@ -0,0 +1,12 @@
+{
+  "appName": "qbittorrent",
+  "userGivenName": "qbittorrent",
+  "namespace": "qbittorrent",
+  "destNamespace": "qbittorrent",
+  "destServer": "https://kubernetes.default.svc",
+  "srcPath": "apps/qbittorrent/env/k3s-cluster",
+  "srcRepoURL": "https://github.com/3dwardch3ng/home-cluster-ops.git",
+  "srcTargetRevision": "",
+  "labels": null,
+  "annotations": null
+}

apps/qbittorrent/env/k3s-cluster/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../../base

apps/rlpa-server/base/deployment.yaml

@@ -0,0 +1,28 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: rlpa-server
+  namespace: rlpa
+  labels:
+    app.kubernetes.io/name: rlpa-server
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: rlpa-server
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: rlpa-server
+    spec:
+      securityContext:
+        runAsUser: 1000
+        runAsGroup: 1000
+      containers:
+        - name: rlpa-server
+          image: damonto/estkme-cloud:1.0.11
+          securityContext:
+            allowPrivilegeEscalation: false
+          ports:
+            - protocol: TCP
+              containerPort: 1888
+              name: api

apps/rlpa-server/base/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./deployment.yaml
+  - ./service.yaml

apps/rlpa-server/base/service.yaml

@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: rlpa-server
+  namespace: rlpa
+  labels:
+    app.kubernetes.io/name: rlpa
+spec:
+  selector:
+    app.kubernetes.io/name: rlpa
+  type: ClusterIP
+  internalTrafficPolicy: Cluster
+  ports:
+    - protocol: TCP
+      port: 1888
+      targetPort: 1888
+      name: rlpa-tcp

apps/rlpa-server/env/k3s-cluster/config.json

@@ -0,0 +1,12 @@
+{
+  "appName": "rlpa-server",
+  "userGivenName": "rlpa-server",
+  "namespace": "rlpa",
+  "destNamespace": "rlpa",
+  "destServer": "https://kubernetes.default.svc",
+  "srcPath": "apps/rlpa-server/env/k3s-cluster",
+  "srcRepoURL": "https://github.com/3dwardch3ng/home-cluster-ops.git",
+  "srcTargetRevision": "",
+  "labels": null,
+  "annotations": null
+}

apps/rlpa-server/env/k3s-cluster/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../../base

apps/snippet-box/base/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./deployment.yaml
+  - ./service.yaml
+  - ./ingress.yaml

apps/snippet-box/env/k3s-cluster/config.json

@@ -0,0 +1,11 @@
+{
+  "appName": "snippet-box",
+  "userGivenName": "snippet-box",
+  "destNamespace": "snippet-box",
+  "destServer": "https://kubernetes.default.svc",
+  "srcPath": "apps/snippet-box/env/k3s-cluster",
+  "srcRepoURL": "https://github.com/3dwardch3ng/home-cluster-ops.git",
+  "srcTargetRevision": "",
+  "labels": null,
+  "annotations": null
+}

apps/snippet-box/env/k3s-cluster/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../../base

apps/sonarqube/env/k3s-cluster/config.json

@@ -0,0 +1,12 @@
+{
+  "appName": "sonarqube",
+  "userGivenName": "sonarqube",
+  "namespace": "sonarqube",
+  "destNamespace": "sonarqube",
+  "destServer": "https://kubernetes.default.svc",
+  "srcPath": "apps/sonarqube/env/k3s-cluster",
+  "srcRepoURL": "https://github.com/3dwardch3ng/home-cluster-ops.git",
+  "srcTargetRevision": "",
+  "labels": null,
+  "annotations": null
+}

apps/sonarqube/env/k3s-cluster/kustomization.yaml

@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+helmCharts:
+  - name: sonarqube
+    repo: oci://registry-1.docker.io/bitnamicharts
+    version: 5.2.10
+    releaseName: sonarqube
+    valuesFile: values.yaml

apps/sonarqube/env/k3s-cluster/values.yaml

@@ -0,0 +1,43 @@
+priorityClassName: system-cluster-critical
+podAntiAffinityPreset: ""
+namespaceOverride: "sonarqube"
+clusterDomain: sonarqube.cluster.edward.sydney
+sonarqubeUsername: sonarqube
+existingSecret: "sonarqube-secrets"
+sonarqubeEmail: "me@edward.sydney"
+smtpHost: "smtp.gmail.com"
+smtpPort: "587"
+smtpUser: "me@edward.sydney"
+smtpProtocol: "TLS"
+smtpExistingSecret: "sonarqube-secrets"
+podSecurityContext:
+  fsGroup: 1000
+containerSecurityContext:
+  runAsUser: 1000
+  runAsGroup: 1000
+service:
+  ports:
+    http: 8090
+    elastic: 9091
+  nodePorts:
+    http: 30089
+    elastic: 30091
+ingress:
+  enabled: true
+  ingressClassName: "nginx"
+  hostname: "sonarqube.cluster.edward.sydney"
+persistence:
+  enabled: true
+  storageClass: local-path
+  size: "32Gi"
+  existingClaim: "sonarqube-pvc"
+serviceAccount:
+  name: "sonarqube"
+postgresql:
+  enabled: false
+externalDatabase:
+  host: "postgresql-primary.argocd.svc.cluster.local"
+  user: "sonarqube_user"
+  existingSecret: "sonarqube-secrets"
+nodeSelector:
+  kubernetes.io/hostname: k3s-cluster-node-3

apps/stirling-pdf/base/deployment.yaml

@@ -0,0 +1,55 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: stirling-pdf
+  namespace: stirling-pdf
+  labels:
+    app.kubernetes.io/name: stirling-pdf
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: stirling-pdf
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: stirling-pdf
+    spec:
+      containers:
+        - name: stirling-pdf
+          image: frooodle/s-pdf:0.26.1
+          securityContext:
+            allowPrivilegeEscalation: false
+          env:
+            - name: DOCKER_ENABLE_SECURITY
+              value: "true"
+          ports:
+            - protocol: TCP
+              containerPort: 8080
+              name: http
+          volumeMounts:
+            - name: s-pdf-tessdata
+              mountPath: /usr/share/tesseract-ocr/5/tessdata
+            - name: s-pdf-configs
+              mountPath: /configs
+            - name: s-pdf-custom-files
+              mountPath: /customFiles
+            - name: s-pdf-logs
+              mountPath: /logs
+      volumes:
+        - name: s-pdf-tessdata
+          hostPath:
+            path: /mnt/nfs/AppData/stirling-pdf/tessdata
+            type: Directory
+        - name: s-pdf-configs
+          hostPath:
+            path: /mnt/nfs/AppData/stirling-pdf/configs
+            type: Directory
+        - name: s-pdf-custom-files
+          hostPath:
+            path: /mnt/nfs/AppData/stirling-pdf/customFiles
+            type: Directory
+        - name: s-pdf-logs
+          hostPath:
+            path: /mnt/nfs/AppData/stirling-pdf/logs
+            type: Directory
+

apps/stirling-pdf/base/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./deployment.yaml
+  - ./service.yaml

apps/stirling-pdf/base/service.yaml

@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: stirling-pdf
+  namespace: stirling-pdf
+  labels:
+    app.kubernetes.io/name: stirling-pdf
+spec:
+  selector:
+    app.kubernetes.io/name: stirling-pdf
+  type: ClusterIP
+  internalTrafficPolicy: Cluster
+  ports:
+    - protocol: TCP
+      port: 8080
+      targetPort: 8080
+      name: http

apps/stirling-pdf/env/k3s-cluster/config.json

@@ -0,0 +1,12 @@
+{
+  "appName": "stirling-pdf",
+  "userGivenName": "stirling-pdf",
+  "namespace": "stirling-pdf",
+  "destNamespace": "stirling-pdf",
+  "destServer": "https://kubernetes.default.svc",
+  "srcPath": "apps/stirling-pdf/env/k3s-cluster",
+  "srcRepoURL": "https://github.com/3dwardch3ng/home-cluster-ops.git",
+  "srcTargetRevision": "",
+  "labels": null,
+  "annotations": null
+}

apps/stirling-pdf/env/k3s-cluster/ingress.yaml

@@ -1,21 +1,21 @@
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
-  name: code-server-ingress
+  name: stirling-pdf-ingress
-  namespace: code-server
+  namespace: stirling-pdf
   annotations:
     nginx.ingress.kubernetes.io/ssl-redirect: "false"
     nginx.ingress.kubernetes.io/use-regex: "true"
 spec:
   ingressClassName: nginx
   rules:
-    - host: "code-server.cluster.edward.sydney"
+    - host: "s-pdf.cluster.edward.sydney"
       http:
         paths:
           - pathType: Prefix
             path: "/"
             backend:
               service:
-                name: code-server
+                name: stirling-pdf
                 port:
-                  number: 8443
+                  number: 8080

apps/stirling-pdf/env/k3s-cluster/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../../base
+  - ./ingress.yaml

apps/trillium/base/deployment.yaml

@@ -0,0 +1,38 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: trillium
+  namespace: trillium
+  labels:
+    app.kubernetes.io/name: trillium
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: trillium
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: trillium
+    spec:
+      containers:
+        - name: trillium
+          image: zadam/trilium:0.63.7
+          env:
+            - name: TRILIUM_DATA_DIR
+              value: "/home/node/trilium-data"
+            - name: USER_UID
+              value: "1000"
+            - name: USER_GID
+              value: "1000"
+          ports:
+            - protocol: TCP
+              containerPort: 8080
+              name: trillium-ui
+          volumeMounts:
+            - name: trillium-data
+              mountPath: /home/node/trilium-data
+      volumes:
+        - name: trillium-data
+          hostPath:
+            path: /mnt/nfs/AppData/trillium
+            type: Directory

apps/trillium/base/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./deployment.yaml
+  - ./service.yaml

apps/trillium/base/service.yaml

@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: trillium
+  namespace: trillium
+  labels:
+    app.kubernetes.io/name: trillium
+spec:
+  selector:
+    app.kubernetes.io/name: trillium
+  type: ClusterIP
+  internalTrafficPolicy: Cluster
+  ports:
+    - protocol: TCP
+      port: 8080
+      targetPort: 8080
+      name: trillium-ui

apps/trillium/env/k3s-cluster/config.json

@@ -0,0 +1,12 @@
+{
+  "appName": "trillium",
+  "userGivenName": "trillium",
+  "namespace": "trillium",
+  "destNamespace": "trillium",
+  "destServer": "https://kubernetes.default.svc",
+  "srcPath": "apps/trillium/env/k3s-cluster",
+  "srcRepoURL": "https://github.com/3dwardch3ng/home-cluster-ops.git",
+  "srcTargetRevision": "",
+  "labels": null,
+  "annotations": null
+}

apps/trillium/env/k3s-cluster/ingress.yaml

@@ -1,21 +1,21 @@
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
-  name: qbittorrent-ingress
+  name: trillium-ingress
-  namespace: qbittorrent
+  namespace: trillium
   annotations:
     nginx.ingress.kubernetes.io/ssl-redirect: "false"
     nginx.ingress.kubernetes.io/use-regex: "true"
 spec:
   ingressClassName: nginx
   rules:
-    - host: "qbittorrent.cluster.edward.sydney"
+    - host: "trillium.cluster.edward.sydney"
       http:
         paths:
           - pathType: Prefix
             path: "/"
             backend:
               service:
-                name: qbittorrent
+                name: trillium
                 port:
-                  number: 8888
+                  number: 8080

apps/trillium/env/k3s-cluster/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../../base
+  - ./ingress.yaml

apps/uptime-kuma/base/deployment.yaml

@@ -0,0 +1,31 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: uptime-kuma
+  namespace: uptime-kuma
+  labels:
+    app.kubernetes.io/name: uptime-kuma
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: uptime-kuma
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: uptime-kuma
+    spec:
+      containers:
+        - name: uptime-kuma
+          image: louislam/uptime-kuma:1.23.13
+          ports:
+            - protocol: TCP
+              containerPort: 3001
+              name: http
+          volumeMounts:
+            - name: data
+              mountPath: /app/data
+      volumes:
+        - name: data
+          hostPath:
+            path: /mnt/nfs/AppData/uptime-kuma
+            type: Directory

apps/uptime-kuma/base/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./deployment.yaml
+  - ./service.yaml

apps/uptime-kuma/base/service.yaml

@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: uptime-kuma
+  namespace: uptime-kuma
+  labels:
+    app.kubernetes.io/name: uptime-kuma
+spec:
+  selector:
+    app.kubernetes.io/name: uptime-kuma
+  type: ClusterIP
+  internalTrafficPolicy: Cluster
+  ports:
+    - protocol: TCP
+      port: 3001
+      targetPort: 3001
+      name: http