Update image docker.io/excalidraw/excalidraw to 56163a0

.editorconfig

@@ -1,5 +1,3 @@
-; https://editorconfig.org/
-
 root = true
 
 [*]

.vscode/settings.json

@@ -15,7 +15,6 @@
     "hack": "scripts",
     "repositories": "database",
     "vars": "other",
-    // namespaces
     "cert-manager": "guard",
     "external-secrets": "keys",
     "kube-system": "kubernetes",

kubernetes/apps/ai/open-webui/app/helmrelease.yaml

@@ -14,8 +14,6 @@ spec:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-  dependsOn:
-    - name: ollama
   install:
     remediation:
       retries: 3

kubernetes/apps/anime/radarr/app/helmrelease.yaml

@@ -66,11 +66,6 @@ spec:
               allowPrivilegeEscalation: false
               readOnlyRootFilesystem: true
               capabilities: { drop: ["ALL"] }
-            resources:
-              requests:
-                cpu: 10m
-              limits:
-                memory: 6Gi
         pod:
           securityContext:
             runAsUser: 568
@@ -107,7 +102,7 @@ spec:
         type: emptyDir
       media:
         type: nfs
-        server: 10.1.1.13
+        server: 10.1.1.61
         path: /eru/media
         globalMounts:
           - path: /data/nas-media

kubernetes/apps/anime/sonarr/app/helmrelease.yaml

@@ -66,11 +66,6 @@ spec:
               allowPrivilegeEscalation: false
               readOnlyRootFilesystem: true
               capabilities: { drop: ["ALL"] }
-            resources:
-              requests:
-                cpu: 10m
-              limits:
-                memory: 6Gi
         pod:
           securityContext:
             runAsUser: 568
@@ -107,7 +102,7 @@ spec:
         type: emptyDir
       media:
         type: nfs
-        server: 10.1.1.13
+        server: 10.1.1.61
         path: /eru/media
         globalMounts:
           - path: /data/nas-media

kubernetes/apps/database/kustomization.yaml

@@ -10,4 +10,4 @@ resources:
   - ./dragonfly/ks.yaml
   - ./emqx/ks.yaml
   - ./influxdb/ks.yaml
-  - ./mariadb/ks.yaml
+  # - ./mariadb/ks.yaml

kubernetes/apps/default/kustomization.yaml

@@ -17,7 +17,7 @@ resources:
   - ./overseerr/ks.yaml
   - ./plex/ks.yaml
   - ./prowlarr/ks.yaml
-  - ./pterodactyl/ks.yaml
+  # - ./pterodactyl/ks.yaml
   - ./radarr/ks.yaml
   - ./recyclarr/ks.yaml
   - ./redlib/ks.yaml

kubernetes/apps/default/radarr/app/helmrelease.yaml

@@ -64,11 +64,6 @@ spec:
               allowPrivilegeEscalation: false
               readOnlyRootFilesystem: true
               capabilities: { drop: ["ALL"] }
-            resources:
-              requests:
-                cpu: 10m
-              limits:
-                memory: 16Gi
         pod:
           securityContext:
             runAsUser: 568
@@ -105,7 +100,7 @@ spec:
         type: emptyDir
       media:
         type: nfs
-        server: 10.1.1.13
+        server: 10.1.1.61
         path: /eru/media
         globalMounts:
           - path: /data/nas-media

kubernetes/apps/default/sabnzbd/app/helmrelease.yaml

@@ -76,8 +76,6 @@ spec:
               readOnlyRootFilesystem: true
               capabilities: { drop: ["ALL"] }
     defaultPodOptions:
-      nodeSelector: # ~~testing~~
-        kubernetes.io/hostname: gandalf-01
       securityContext:
         runAsNonRoot: true
         runAsUser: 568
@@ -120,7 +118,7 @@ spec:
           - readOnly: true
       media:
         type: nfs
-        server: 10.1.1.13
+        server: 10.1.1.61
         path: /eru/media
         globalMounts:
           - path: /data/nas-media

kubernetes/apps/default/sonarr/app/helmrelease.yaml

@@ -64,11 +64,6 @@ spec:
               allowPrivilegeEscalation: false
               readOnlyRootFilesystem: true
               capabilities: { drop: ["ALL"] }
-            resources:
-              requests:
-                cpu: 10m
-              limits:
-                memory: 16Gi
         pod:
           securityContext:
             runAsUser: 568
@@ -105,7 +100,7 @@ spec:
         type: emptyDir
       media:
         type: nfs
-        server: 10.1.1.13
+        server: 10.1.1.61
         path: /eru/media
         globalMounts:
           - path: /data/nas-media
@@ -126,4 +121,3 @@ spec:
           - path: /scripts/refresh-series.sh
             subPath: refresh-series.sh
             readOnly: true
-

kubernetes/apps/default/unpackerr/app/helmrelease.yaml

@@ -76,7 +76,7 @@ spec:
     persistence:
       media:
         type: nfs
-        server: 10.1.1.13
+        server: 10.1.1.61
         path: /eru/media
         advancedMounts:
           unpackerr:

kubernetes/apps/kube-system/kubelet-csr-approver/app/helm-values.yml

@@ -1,2 +1,2 @@
 ---
-providerRegex: ^bilbo|^frodo|^sam|^merry|^pippin|^rosie|^gandalf-01$
+providerRegex: ^bilbo|^frodo|^sam|^merry|^pippin|^rosie$

kubernetes/apps/observability/smartctl-exporter/app/helmrelease.yaml

@@ -18,17 +18,6 @@ spec:
     controllers:
       smartctl-exporter:
         type: daemonset
-        pod:
-          affinity:
-            nodeAffinity:
-              requiredDuringSchedulingIgnoredDuringExecution:
-                nodeSelectorTerms:
-                  - matchExpressions:
-                      - key: kubernetes.io/hostname
-                        operator: NotIn
-                        values:
-                          - gandalf-01
-                          - shadowfax-01
         containers:
           app:
             image: &image
@@ -51,43 +40,12 @@ spec:
                     port: &port 9633
                     path: /
               readiness: *probes
-      smartctl-exporter-vms:
-        type: daemonset
-        pod:
-          affinity:
-            nodeAffinity:
-              requiredDuringSchedulingIgnoredDuringExecution:
-                nodeSelectorTerms:
-                  - matchExpressions:
-                      - key: kubernetes.io/hostname
-                        operator: In
-                        values:
-                          - gandalf-01
-                          - shadowfax-01
-        containers:
-          app:
-            image: *image
-            args:
-              - --smartctl.path=/usr/sbin/smartctl
-              - --smartctl.interval=120s
-              - --web.listen-address=0.0.0.0:9633
-              - --web.telemetry-path=/metrics
-              - --smartctl.device=/dev/nvme0
-            securityContext: *securityContext
-            probes:
-              liveness: *probes
-              readiness: *probes
     service:
       smartctl-exporter:
         controller: smartctl-exporter
         ports:
           exporter:
             port: *port
-      smartctl-exporter-vms:
-        controller: smartctl-exporter-vms
-        ports:
-          exporter:
-            port: *port
     persistence:
       dev:
         type: hostPath
@@ -105,15 +63,3 @@ spec:
             path: /metrics
             interval: 1m
             scrapeTimeout: 10s
-      smartctl-exporter-vms:
-        selector:
-          matchLabels:
-            app.kubernetes.io/instance: smartctl-exporter
-            app.kubernetes.io/name: smartctl-exporter
-            app.kubernetes.io/service: smartctl-exporter-smartctl-exporter-vms
-        endpoints:
-          - port: exporter
-            scheme: http
-            path: /metrics
-            interval: 1m
-            scrapeTimeout: 10s

kubernetes/apps/observability/victoria-metrics/cluster/kustomization.yaml

@@ -5,5 +5,4 @@ kind: Kustomization
 resources:
   - vmagent.yaml
   - vmalert.yaml
-  - vmscrapeconfig.yaml
   - vmsingle.yaml

kubernetes/apps/observability/victoria-metrics/cluster/vmscrapeconfig.yaml

@@ -1,16 +0,0 @@
----
-# yaml-language-server: $schema=https://ks.hsn.dev/operator.victoriametrics.com/vmscrapeconfig_v1beta1.json
-apiVersion: operator.victoriametrics.com/v1beta1
-kind: VMScrapeConfig
-metadata:
-  name: &name zfs-exporter
-spec:
-  staticConfigs:
-    - targets:
-        - "shadowfax.jahanson.tech:9134"
-        - "gandalf.jahanson.tech:9134"
-  path: /metrics
-  relabelConfigs:
-    - action: replace
-      targetLabel: job
-      replacement: *name

kubernetes/apps/qbittorrent/cross-seed/app/helmrelease.yaml

@@ -86,7 +86,7 @@ spec:
             readOnly: true
       media:
         type: nfs
-        server: 10.1.1.13
+        server: 10.1.1.61
         path: /eru/media
         globalMounts:
           - path: /data/nas-media

kubernetes/apps/qbittorrent/qbittorrent/app/helmrelease.yaml

@@ -67,8 +67,6 @@ spec:
                 drop:
                   - ALL
     defaultPodOptions:
-      nodeSelector: # ~~testing~~
-        kubernetes.io/hostname: gandalf-01
       securityContext:
         runAsNonRoot: true
         runAsUser: 568
@@ -122,7 +120,7 @@ spec:
           - path: /tmp
       media:
         type: nfs
-        server: gandalf.jahanson.tech
+        server: 10.1.1.61
         path: /eru/media
         advancedMounts:
           qbittorrent:

kubernetes/apps/qbittorrent/qbittorrent/tools/helmrelease.yaml

@@ -136,7 +136,7 @@ spec:
             readOnly: true
       media:
         type: nfs
-        server: 10.1.1.13
+        server: 10.1.1.61
         path: /eru/media
         advancedMounts:
           orphaned:

kubernetes/apps/rook-ceph/rook-ceph/cluster/helmrelease.yaml

@@ -67,7 +67,7 @@ spec:
       storage:
         useAllNodes: true
         useAllDevices: false
-        deviceFilter: "nvme0n1"
+        deviceFilter: "nvme[0-9]+n1"
       resources:
         mgr:
           requests:

kubernetes/bootstrap/talos/talconfig.yaml

@@ -74,42 +74,6 @@ nodes:
     networkInterfaces:
       - interface: eno1
         dhcp: true
-  - hostname: gandalf-01
-    disableSearchDomain: true
-    ipAddress: 10.1.1.68
-    controlPlane: false
-    installDisk: /dev/sda
-    networkInterfaces:
-      - interface: enp5s0
-        dhcp: true
-
-  - hostname: shadowfax-01
-    disableSearchDomain: true
-    ipAddress: 10.1.1.69
-    controlPlane: false
-    installDiskSelector:
-      busPath: /pci0000:00/0000:00:01.1/0000:02:00.0/virtio6/host0/target0:0:0/0:0:0:1/
-    networkInterfaces:
-      - interface: enp5s0
-        dhcp: true
-    patches:
-      - |-
-        machine:
-          sysctls:
-            net.core.bpf_jit_harden: 1
-
-    kernelModules:
-      - name: nvidia
-      - name: nvidia_uvm
-      - name: nvidia_drm
-      - name: nvidia_modeset
-    schematic:
-      customization:
-        systemExtensions:
-          officialExtensions:
-            - siderolabs/amd-ucode
-            - siderolabs/nonfree-kmod-nvidia-production
-            - siderolabs/nvidia-container-toolkit-production
 
 worker:
   schematic:

shell.nix

@@ -24,5 +24,6 @@ pkgs.mkShell {
     kustomize
     yq-go
     go-task
+    kubectl
   ];
 }