Merge branch 'main' into renovate/ghcr.io-linuxserver-radarr

cluster/apps/production/authentik/authentik/values.yaml

@@ -1,4 +1,3 @@
-# all invalid values, pushed to git for testing with flux.
 apiVersion: v1
 kind: ConfigMap
 metadata:

cluster/apps/production/bazarr/bazarr.yaml

@@ -74,30 +74,26 @@ spec:
       protocol: TCP
   type: ClusterIP
 ---
-apiVersion: networking.k8s.io/v1
-kind: Ingress
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
 metadata:
   name: bazarr
   namespace: default
   annotations: 
     kubernetes.io/ingress.class: traefik-external
 spec:
-  rules:
-    - host: "bazarr.mafyuh.com"
-      http:
-        paths:
-          - path: /
-            pathType: Prefix
-            backend:
-              service:
-                name: headless-bazarr
-                port:
-                  number: 6767
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`bazarr.${LOCAL_DOMAIN}`)
+      kind: Rule
+      services:
+        - name: headless-bazarr
+          port: 6767
+      middlewares:
+        - name: default-headers
   tls:
-    - hosts:
-        - "bazarr.local.mafyuh.com"
-      secretName: local-mafyuh-com-production-tls
-
+    secretName: local-mafyuh-com-production-tls
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute

cluster/apps/production/flux/configmap.yaml

@@ -6,4 +6,3 @@ metadata:
 data:
   LOCAL_DOMAIN: "local.mafyuh.com"
   PUBLIC_DOMAIN: "mafyuh.com"
-  NAS_IP: "10.0.0.10"

cluster/apps/production/radarr/radarr.yaml

@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
         - name: radarr
-          image: ghcr.io/linuxserver/radarr@sha256:c5b78b1f1e8556d781788194c4ee2b87ca7e3620b701bfce31499e60ee50eca3
+          image: ghcr.io/linuxserver/radarr@sha256:bf5aaf1577edbc3ba33db069676e7f8324eda33761ca59721942bc8ef56c015c
           imagePullPolicy: IfNotPresent
           env:
             - name: PUID
@@ -42,7 +42,7 @@ spec:
         - name: nas
           nfs:
             path: /mnt/thePool/thePoolShare
-            server: nas.local.mafyuh.com
+            server: 10.0.0.10
         - name: radarr-config
           persistentVolumeClaim:
             claimName: radarr-config

renovate.json

@@ -0,0 +1,7 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["config:recommended"],
+  "kubernetes": {
+    "fileMatch": ["\\.yaml$"]
+  }
+}

secrets/flux-secrets.yaml

@@ -1,7 +0,0 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: apps
-  namespace: flux-system
-data:
-  path: /mnt/thePool/thePoolShare