lint: yaml spaces and tabs

adguardhome/k8s/adguard.yaml

@@ -7,20 +7,20 @@ spec:
   selector:
     app: adguard
   ports:
-  - port: 3000
+    - port: 3000
-    name: webui
+      name: webui
-    targetPort: 3000
+      targetPort: 3000
-  - port: 53
+    - port: 53
-    name: dns
+      name: dns
-    targetPort: 53
+      targetPort: 53
-    protocol: UDP
+      protocol: UDP
-  - port: 53
+    - port: 53
-    name: dns-tcp
+      name: dns-tcp
-    targetPort: 53
+      targetPort: 53
-    protocol: TCP
+      protocol: TCP
-  - port: 853
+    - port: 853
-    name: dot
+      name: dot
-    targetPort: 853
+      targetPort: 853
 ---
 apiVersion: apps/v1
 kind: Deployment
@@ -38,44 +38,44 @@ spec:
         app: adguard
     spec:
       containers:
-      - name: adguard
+        - name: adguard
-        image: adguard/adguardhome:latest
+          image: adguard/adguardhome:latest
-        resources:
+          resources:
-          limits:
+            limits:
-            memory: "1Gi"
+              memory: "1Gi"
-            cpu: "500m"
+              cpu: "500m"
-          requests:
+            requests:
-            memory: "128Mi"
+              memory: "128Mi"
-            cpu: "50m"
+              cpu: "50m"
-        ports:
+          ports:
-        - containerPort: 3000
+            - containerPort: 3000
-          name: webui
+              name: webui
-        - containerPort: 53
+            - containerPort: 53
-          name: dns
+              name: dns
-        - containerPort: 853
+            - containerPort: 853
-          name: dot
+              name: dot
-        volumeMounts:
+          volumeMounts:
-        - name: adguard-data
+            - name: adguard-data
-          mountPath: /opt/adguardhome/work
+              mountPath: /opt/adguardhome/work
-          subPath: work
+              subPath: work
-        - name: adguard-data
+            - name: adguard-data
-          mountPath: /opt/adguardhome/conf
+              mountPath: /opt/adguardhome/conf
-          subPath: conf
+              subPath: conf
-        - name: adguard-certs
+            - name: adguard-certs
-          mountPath: /certs
+              mountPath: /certs
-          readOnly: true
+              readOnly: true
       volumes:
-      - name: adguard-data
+        - name: adguard-data
-        persistentVolumeClaim:
+          persistentVolumeClaim:
-          claimName: adguard-pvc
+            claimName: adguard-pvc
-      - name: adguard-certs
+        - name: adguard-certs
-        secret:
+          secret:
-          secretName: adguard-certs
+            secretName: adguard-certs
-          items:
+            items:
-          - key: tls.crt
+              - key: tls.crt
-            path: fullchain.pem
+                path: fullchain.pem
-          - key: tls.key
+              - key: tls.key
-            path: privkey.pem
+                path: privkey.pem
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim

adguardhome/k8s/namespace.yaml

@@ -1,4 +1,4 @@
 apiVersion: v1
 kind: Namespace
 metadata:
-  name: adguard
+  name: adguard

cfddns/k8s/deployment.yaml

@@ -17,16 +17,16 @@ spec:
       hostNetwork: true
       dnsPolicy: ClusterFirstWithHostNet
       containers:
-      - name: cloudflare-ddns
+        - name: cloudflare-ddns
-        image: timothyjmiller/cloudflare-ddns:latest
+          image: timothyjmiller/cloudflare-ddns:latest
-        imagePullPolicy: Always
+          imagePullPolicy: Always
-        resources:
+          resources:
-          requests:
+            requests:
-            memory: "32Mi"
+              memory: "32Mi"
-            cpu: "50m"
+              cpu: "50m"
-          limits:
+            limits:
-            memory: "64Mi"
+              memory: "64Mi"
-            cpu: "100m"
+              cpu: "100m"
-        envFrom:
+          envFrom:
-        - secretRef:
+            - secretRef:
-            name: cfddns-secrets
+                name: cfddns-secrets

checkmk/k8s/checkmk.yaml

@@ -7,8 +7,8 @@ spec:
   selector:
     app: checkmk
   ports:
-  - port: 5000
+    - port: 5000
-    targetPort: 5000
+      targetPort: 5000
 ---
 apiVersion: apps/v1
 kind: Deployment
@@ -26,34 +26,34 @@ spec:
         app: checkmk
     spec:
       containers:
-      - name: checkmk
+        - name: checkmk
-        image: checkmk/check-mk-raw:2.4.0-latest
+          image: checkmk/check-mk-raw:2.4.0-latest
-        envFrom:
+          envFrom:
-        - secretRef:
+            - secretRef:
-            name: checkmk-secrets
+                name: checkmk-secrets
-        - configMapRef: 
+            - configMapRef:
-            name: checkmk-config
+                name: checkmk-config
-        ports:
+          ports:
-        - containerPort: 5000
+            - containerPort: 5000
-        volumeMounts:
+          volumeMounts:
-        - name: sites
+            - name: sites
-          mountPath: /omd/sites
+              mountPath: /omd/sites
-        - name: tmp
+            - name: tmp
-          mountPath: /opt/omd/sites/cmk/tmp
+              mountPath: /opt/omd/sites/cmk/tmp
-        resources:
+          resources:
-          requests:
+            requests:
-            memory: "1Gi"
+              memory: "1Gi"
-            cpu: "1"
+              cpu: "1"
-          limits:
+            limits:
-            memory: "5Gi"
+              memory: "5Gi"
-            cpu: "4"
+              cpu: "4"
       volumes:
-      - name: sites
+        - name: sites
-        persistentVolumeClaim:
+          persistentVolumeClaim:
-          claimName: checkmk-sites-pvc
+            claimName: checkmk-sites-pvc
-      - name: tmp
+        - name: tmp
-        emptyDir:
+          emptyDir:
-          medium: Memory
+            medium: Memory
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
@@ -62,7 +62,7 @@ metadata:
   namespace: checkmk
 spec:
   accessModes:
-  - ReadWriteOnce
+    - ReadWriteOnce
   resources:
     requests:
       storage: 5Gi

checkmk/k8s/config.yaml

@@ -5,4 +5,4 @@ metadata:
   namespace: checkmk
 data:
   TZ: Europe/Bratislava
-  CMK_SITE_ID: cmk
+  CMK_SITE_ID: cmk

checkmk/k8s/ingress.yaml

@@ -7,11 +7,11 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`cmk.forust.xyz`)
+    - match: Host(`cmk.forust.xyz`)
-    kind: Rule
+      kind: Rule
-    services:
+      services:
-    - name: checkmk-service
+        - name: checkmk-service
-      port: 5000
+          port: 5000
   tls:
     certResolver: letsencrypt
 ---
@@ -24,11 +24,11 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`cmk.workstation.internal`)
+    - match: Host(`cmk.workstation.internal`)
-    kind: Rule
+      kind: Rule
-    services:
+      services:
-    - name: checkmk-service
+        - name: checkmk-service
-      port: 5000
+          port: 5000
   tls:
     secretName: local-tls
 ---
@@ -41,10 +41,10 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`cmk.gigaforust.internal`)
+    - match: Host(`cmk.gigaforust.internal`)
-    kind: Rule
+      kind: Rule
-    services:
+      services:
-    - name: checkmk-service
+        - name: checkmk-service
-      port: 5000
+          port: 5000
   tls:
     secretName: local-tls

dockmon/k8s/ingress.yaml

@@ -15,14 +15,14 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`dockmon.forust.xyz`)
+    - match: Host(`dockmon.forust.xyz`)
-    kind: Rule
+      kind: Rule
-    middlewares:
+      middlewares:
-    - name: security-headers@file
+        - name: security-headers@file
-    services:
+      services:
-    - name: dockmon-service
+        - name: dockmon-service
-      port: 443
+          port: 443
-      serversTransport: dockmon-transport
+          serversTransport: dockmon-transport
   tls:
     certResolver: letsencrypt
 ---
@@ -35,12 +35,12 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`dockmon.workstation.internal`)
+    - match: Host(`dockmon.workstation.internal`)
-    kind: Rule
+      kind: Rule
-    services:
+      services:
-    - name: dockmon-service
+        - name: dockmon-service
-      port: 443
+          port: 443
-      serversTransport: dockmon-transport
+          serversTransport: dockmon-transport
   tls:
     secretName: local-tls
 ---
@@ -53,11 +53,11 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`dockmon.gigaforust.internal`)
+    - match: Host(`dockmon.gigaforust.internal`)
-    kind: Rule
+      kind: Rule
-    services:
+      services:
-    - name: dockmon-service
+        - name: dockmon-service
-      port: 443
+          port: 443
-      serversTransport: dockmon-transport
+          serversTransport: dockmon-transport
   tls:
     secretName: local-tls

downtify/k8s/downtify.yaml

@@ -7,8 +7,8 @@ spec:
   selector:
     app: downtify
   ports:
-  - port: 8000
+    - port: 8000
-    targetPort: 8000
+      targetPort: 8000
 ---
 apiVersion: apps/v1
 kind: Deployment
@@ -26,24 +26,24 @@ spec:
         app: downtify
     spec:
       containers:
-      - name: downtify
+        - name: downtify
-        image: ghcr.io/henriquesebastiao/downtify:latest
+          image: ghcr.io/henriquesebastiao/downtify:latest
-        ports:
+          ports:
-        - containerPort: 8000
+            - containerPort: 8000
-        volumeMounts:
+          volumeMounts:
-        - name: downloads
+            - name: downloads
-          mountPath: /downloads
+              mountPath: /downloads
-        resources:
+          resources:
-          requests:
+            requests:
-            memory: "128Mi"
+              memory: "128Mi"
-            cpu: "200m"
+              cpu: "200m"
-          limits:
+            limits:
-            memory: "1Gi"
+              memory: "1Gi"
-            cpu: "1"
+              cpu: "1"
       volumes:
-      - name: downloads
+        - name: downloads
-        persistentVolumeClaim:
+          persistentVolumeClaim:
-          claimName: downtify-downloads-pvc
+            claimName: downtify-downloads-pvc
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
@@ -52,7 +52,7 @@ metadata:
   namespace: downtify
 spec:
   accessModes:
-  - ReadWriteOnce
+    - ReadWriteOnce
   resources:
     requests:
       storage: 10Gi

downtify/k8s/ingress.yaml

@@ -7,13 +7,13 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`downtify.forust.xyz`)
+    - match: Host(`downtify.forust.xyz`)
-    kind: Rule
+      kind: Rule
-    middlewares:
+      middlewares:
-    - name: security-chain@file
+        - name: security-chain@file
-    services:
+      services:
-    - name: downtify-service
+        - name: downtify-service
-      port: 8000
+          port: 8000
   tls:
     certResolver: letsencrypt
 ---
@@ -26,11 +26,11 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`downtify.workstation.internal`)
+    - match: Host(`downtify.workstation.internal`)
-    kind: Rule
+      kind: Rule
-    services:
+      services:
-    - name: downtify-service
+        - name: downtify-service
-      port: 8000
+          port: 8000
   tls:
     secretName: local-tls
 ---
@@ -43,10 +43,10 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`downtify.gigaforust.internal`)
+    - match: Host(`downtify.gigaforust.internal`)
-    kind: Rule
+      kind: Rule
-    services:
+      services:
-    - name: downtify-service
+        - name: downtify-service
-      port: 8000
+          port: 8000
   tls:
     secretName: local-tls

errorpages/k8s/error-pages.yaml

@@ -7,8 +7,8 @@ spec:
   selector:
     app: error-pages
   ports:
-  - port: 80
+    - port: 80
-    targetPort: 80
+      targetPort: 80
 ---
 apiVersion: apps/v1
 kind: Deployment
@@ -26,9 +26,8 @@ spec:
         app: error-pages
     spec:
       containers:
-      - name: error-pages
+        - name: error-pages
-        image: gcr.forust.xyz/forust/error-pages:latest
+          image: gcr.forust.xyz/forust/error-pages:latest
-        ports:
+          ports:
-        - containerPort: 80
+            - containerPort: 80
 ---
-

gitea/k8s/namespace.yaml

@@ -1,4 +1,4 @@
 apiVersion: v1
 kind: Namespace
 metadata:
-  name: gitea
+  name: gitea

gitea/k8s/postgres.yaml

@@ -8,8 +8,8 @@ spec:
   selector:
     app: gitea-postgres
   ports:
-  - port: 5432
+    - port: 5432
-    targetPort: 5432
+      targetPort: 5432
 ---
 apiVersion: apps/v1
 kind: StatefulSet
@@ -28,35 +28,35 @@ spec:
         app: gitea-postgres
     spec:
       containers:
-      - name: gitea-postgres
+        - name: gitea-postgres
-        image: postgres:14
+          image: postgres:14
-        env:
+          env:
-        - name: POSTGRES_USER
+            - name: POSTGRES_USER
-          valueFrom:
+              valueFrom:
-            secretKeyRef:
+                secretKeyRef:
-              name: gitea-secrets
+                  name: gitea-secrets
-              key: GITEA__database__USER
+                  key: GITEA__database__USER
-        - name: POSTGRES_PASSWORD
+            - name: POSTGRES_PASSWORD
-          valueFrom:
+              valueFrom:
-            secretKeyRef:
+                secretKeyRef:
-              name: gitea-secrets
+                  name: gitea-secrets
-              key: GITEA__database__PASSWD
+                  key: GITEA__database__PASSWD
-        - name: POSTGRES_DB
+            - name: POSTGRES_DB
-          valueFrom:
+              valueFrom:
-            secretKeyRef:
+                secretKeyRef:
-              name: gitea-secrets
+                  name: gitea-secrets
-              key: GITEA__database__USER
+                  key: GITEA__database__USER
-        ports:
+          ports:
-        - containerPort: 5432
+            - containerPort: 5432
-          name: postgres
+              name: postgres
-        volumeMounts:
+          volumeMounts:
-        - name: postgres-data
+            - name: postgres-data
-          mountPath: /var/lib/postgresql/data
+              mountPath: /var/lib/postgresql/data
   volumeClaimTemplates:
-  - metadata:
+    - metadata:
-      name: postgres-data
+        name: postgres-data
-    spec:
+      spec:
-      accessModes: [ "ReadWriteOnce" ]
+        accessModes: ["ReadWriteOnce"]
-      resources:
+        resources:
-        requests:
+          requests:
-          storage: 1Gi
+            storage: 1Gi

homepages/k8s/homepages.yaml

@@ -7,8 +7,8 @@ spec:
   selector:
     app: forust-homepage
   ports:
-  - port: 80
+    - port: 80
-    targetPort: 80
+      targetPort: 80
 ---
 apiVersion: apps/v1
 kind: Deployment
@@ -26,10 +26,10 @@ spec:
         app: forust-homepage
     spec:
       containers:
-      - name: forust-homepage
+        - name: forust-homepage
-        image: gcr.forust.xyz/forust/forust-homepage:latest
+          image: gcr.forust.xyz/forust/forust-homepage:latest
-        ports:
+          ports:
-        - containerPort: 80
+            - containerPort: 80
 ---
 apiVersion: v1
 kind: Service
@@ -40,8 +40,8 @@ spec:
   selector:
     app: xdfnx-homepage
   ports:
-  - port: 80
+    - port: 80
-    targetPort: 80
+      targetPort: 80
 ---
 apiVersion: apps/v1
 kind: Deployment
@@ -59,7 +59,7 @@ spec:
         app: xdfnx-homepage
     spec:
       containers:
-      - name: xdfnx-homepage
+        - name: xdfnx-homepage
-        image: gcr.forust.xyz/forust/xdfnx-homepage:latest
+          image: gcr.forust.xyz/forust/xdfnx-homepage:latest
-        ports:
+          ports:
-        - containerPort: 80
+            - containerPort: 80

homepages/k8s/ingress.yaml

@@ -7,11 +7,11 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`forust.xyz`)
+    - match: Host(`forust.xyz`)
-    kind: Rule
+      kind: Rule
-    services:
+      services:
-    - name: forust-homepage-service
+        - name: forust-homepage-service
-      port: 80
+          port: 80
   tls:
     certResolver: letsencrypt
 ---
@@ -24,11 +24,11 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`landing.workstation.internal`)
+    - match: Host(`landing.workstation.internal`)
-    kind: Rule
+      kind: Rule
-    services:
+      services:
-    - name: forust-homepage-service
+        - name: forust-homepage-service
-      port: 80
+          port: 80
   tls:
     secretName: local-tls
 ---
@@ -41,11 +41,11 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`landing.gigaforust.internal`)
+    - match: Host(`landing.gigaforust.internal`)
-    kind: Rule
+      kind: Rule
-    services:
+      services:
-    - name: forust-homepage-service
+        - name: forust-homepage-service
-      port: 80
+          port: 80
   tls:
     secretName: local-tls
 ---
@@ -58,11 +58,11 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`xdfnx.cfd`)
+    - match: Host(`xdfnx.cfd`)
-    kind: Rule
+      kind: Rule
-    services:
+      services:
-    - name: xdfnx-homepage-service
+        - name: xdfnx-homepage-service
-      port: 80
+          port: 80
   tls:
     certResolver: letsencrypt
 ---
@@ -75,11 +75,11 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`xdfnx.workstation.internal`)
+    - match: Host(`xdfnx.workstation.internal`)
-    kind: Rule
+      kind: Rule
-    services:
+      services:
-    - name: xdfnx-homepage-service
+        - name: xdfnx-homepage-service
-      port: 80
+          port: 80
   tls:
     secretName: local-tls
 ---
@@ -92,10 +92,10 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`xdfnx.gigaforust.internal`)
+    - match: Host(`xdfnx.gigaforust.internal`)
-    kind: Rule
+      kind: Rule
-    services:
+      services:
-    - name: xdfnx-homepage-service
+        - name: xdfnx-homepage-service
-      port: 80
+          port: 80
   tls:
     secretName: local-tls

kener/k8s/ingress.yaml

@@ -7,11 +7,11 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`status.forust.xyz`)
+    - match: Host(`status.forust.xyz`)
-    kind: Rule
+      kind: Rule
-    services:
+      services:
-    - name: kener-service
+        - name: kener-service
-      port: 3000
+          port: 3000
   tls:
     certResolver: letsencrypt
 ---
@@ -24,11 +24,11 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`status.workstation.internal`)
+    - match: Host(`status.workstation.internal`)
-    kind: Rule
+      kind: Rule
-    services:
+      services:
-    - name: kener-service
+        - name: kener-service
-      port: 3000
+          port: 3000
   tls:
     secretName: local-tls
 ---
@@ -41,10 +41,10 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`status.gigaforust.internal`)
+    - match: Host(`status.gigaforust.internal`)
-    kind: Rule
+      kind: Rule
-    services:
+      services:
-    - name: kener-service
+        - name: kener-service
-      port: 3000
+          port: 3000
   tls:
     secretName: local-tls

kener/k8s/kener.yaml

@@ -7,8 +7,8 @@ spec:
   selector:
     app: kener
   ports:
-  - port: 3000
+    - port: 3000
-    targetPort: 3000
+      targetPort: 3000
 ---
 apiVersion: apps/v1
 kind: Deployment
@@ -26,27 +26,27 @@ spec:
         app: kener
     spec:
       containers:
-      - name: kener
+        - name: kener
-        image: rajnandan1/kener:4.0.23
+          image: rajnandan1/kener:4.0.23
-        envFrom:
+          envFrom:
-        - configMapRef:
+            - configMapRef:
-            name: kener-config
+                name: kener-config
-        - secretRef:
+            - secretRef:
-            name: kener-secrets
+                name: kener-secrets
-        ports:
+          ports:
-        - containerPort: 3000
+            - containerPort: 3000
-        volumeMounts:
+          volumeMounts:
-        - name: kener-db
+            - name: kener-db
-          mountPath: /app/database
+              mountPath: /app/database
-        - name: kener-uploads
+            - name: kener-uploads
-          mountPath: /app/uploads
+              mountPath: /app/uploads
       volumes:
-      - name: kener-db
+        - name: kener-db
-        persistentVolumeClaim:
+          persistentVolumeClaim:
-          claimName: kener-db-pvc
+            claimName: kener-db-pvc
-      - name: kener-uploads
+        - name: kener-uploads
-        persistentVolumeClaim:
+          persistentVolumeClaim:
-          claimName: kener-uploads-pvc
+            claimName: kener-uploads-pvc
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
@@ -55,7 +55,7 @@ metadata:
   namespace: kener
 spec:
   accessModes:
-  - ReadWriteOnce
+    - ReadWriteOnce
   resources:
     requests:
       storage: 2Gi
@@ -67,7 +67,7 @@ metadata:
   namespace: kener
 spec:
   accessModes:
-  - ReadWriteOnce
+    - ReadWriteOnce
   resources:
     requests:
       storage: 1Gi

metube/k8s/ingress.yaml

@@ -7,13 +7,13 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`metube.forust.xyz`)
+    - match: Host(`metube.forust.xyz`)
-    kind: Rule
+      kind: Rule
-    middlewares:
+      middlewares:
-    - name: security-chain@file
+        - name: security-chain@file
-    services:
+      services:
-    - name: metube-service
+        - name: metube-service
-      port: 8081
+          port: 8081
   tls:
     certResolver: letsencrypt
 ---
@@ -26,11 +26,11 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`metube.workstation.internal`)
+    - match: Host(`metube.workstation.internal`)
-    kind: Rule
+      kind: Rule
-    services:
+      services:
-    - name: metube-service
+        - name: metube-service
-      port: 8081
+          port: 8081
   tls:
     secretName: local-tls
 ---
@@ -43,10 +43,10 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`metube.gigaforust.internal`)
+    - match: Host(`metube.gigaforust.internal`)
-    kind: Rule
+      kind: Rule
-    services:
+      services:
-    - name: metube-service
+        - name: metube-service
-      port: 8081
+          port: 8081
   tls:
     secretName: local-tls

metube/k8s/metube.yaml

@@ -7,8 +7,8 @@ spec:
   selector:
     app: metube
   ports:
-  - port: 8081
+    - port: 8081
-    targetPort: 8081
+      targetPort: 8081
 ---
 apiVersion: apps/v1
 kind: Deployment
@@ -26,20 +26,20 @@ spec:
         app: metube
     spec:
       containers:
-      - name: metube
+        - name: metube
-        image: ghcr.io/alexta69/metube
+          image: ghcr.io/alexta69/metube
-        envFrom:
+          envFrom:
-        - configMapRef:
+            - configMapRef:
-            name: metube-config
+                name: metube-config
-        ports:
+          ports:
-        - containerPort: 8081
+            - containerPort: 8081
-        volumeMounts:
+          volumeMounts:
-        - name: downloads
+            - name: downloads
-          mountPath: /downloads
+              mountPath: /downloads
       volumes:
-      - name: downloads
+        - name: downloads
-        persistentVolumeClaim:
+          persistentVolumeClaim:
-          claimName: metube-downloads-pvc
+            claimName: metube-downloads-pvc
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
@@ -48,7 +48,7 @@ metadata:
   namespace: metube
 spec:
   accessModes:
-  - ReadWriteOnce
+    - ReadWriteOnce
   resources:
     requests:
       storage: 10Gi

netronome/k8s/ingress.yaml

@@ -7,11 +7,11 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`nm.forust.xyz`)
+    - match: Host(`nm.forust.xyz`)
-    kind: Rule
+      kind: Rule
-    services:
+      services:
-    - name: netronome-service
+        - name: netronome-service
-      port: 7575
+          port: 7575
   tls:
     certResolver: letsencrypt
 ---
@@ -24,11 +24,11 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`nm.workstation.internal`)
+    - match: Host(`nm.workstation.internal`)
-    kind: Rule
+      kind: Rule
-    services:
+      services:
-    - name: netronome-service
+        - name: netronome-service
-      port: 7575
+          port: 7575
   tls:
     secretName: local-tls
 ---
@@ -41,10 +41,10 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`nm.gigaforust.internal`)
+    - match: Host(`nm.gigaforust.internal`)
-    kind: Rule
+      kind: Rule
-    services:
+      services:
-    - name: netronome-service
+        - name: netronome-service
-      port: 7575
+          port: 7575
   tls:
     secretName: local-tls

portainer/k8s/ingress.yaml

@@ -7,11 +7,11 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`portainer.forust.xyz`)
+    - match: Host(`portainer.forust.xyz`)
-    kind: Rule
+      kind: Rule
-    services:
+      services:
-    - name: portainer-service
+        - name: portainer-service
-      port: 9000
+          port: 9000
   tls:
     certResolver: letsencrypt
 ---
@@ -24,11 +24,11 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`portainer.workstation.internal`)
+    - match: Host(`portainer.workstation.internal`)
-    kind: Rule
+      kind: Rule
-    services:
+      services:
-    - name: portainer-service
+        - name: portainer-service
-      port: 9000
+          port: 9000
   tls:
     secretName: local-tls
 ---
@@ -41,10 +41,10 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`portainer.gigaforust.internal`)
+    - match: Host(`portainer.gigaforust.internal`)
-    kind: Rule
+      kind: Rule
-    services:
+      services:
-    - name: portainer-service
+        - name: portainer-service
-      port: 9000
+          port: 9000
   tls:
     secretName: local-tls

portainer/k8s/portainer.yaml

@@ -7,8 +7,8 @@ spec:
   selector:
     app: portainer
   ports:
-  - port: 9000
+    - port: 9000
-    targetPort: 9000
+      targetPort: 9000
 ---
 apiVersion: apps/v1
 kind: Deployment
@@ -26,23 +26,23 @@ spec:
         app: portainer
     spec:
       containers:
-      - name: portainer
+        - name: portainer
-        image: portainer/portainer-ce:2.41.0
+          image: portainer/portainer-ce:2.41.0
-        ports:
+          ports:
-        - containerPort: 9000
+            - containerPort: 9000
-        volumeMounts:
+          volumeMounts:
-        - name: data
+            - name: data
-          mountPath: /data
+              mountPath: /data
-        - name: docker-sock
+            - name: docker-sock
-          mountPath: /var/run/docker.sock
+              mountPath: /var/run/docker.sock
       volumes:
-      - name: data
+        - name: data
-        persistentVolumeClaim:
+          persistentVolumeClaim:
-          claimName: portainer-data-pvc
+            claimName: portainer-data-pvc
-      - name: docker-sock
+        - name: docker-sock
-        hostPath:
+          hostPath:
-          path: /var/run/docker.sock
+            path: /var/run/docker.sock
-          type: Socket
+            type: Socket
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
@@ -51,7 +51,7 @@ metadata:
   namespace: portainer
 spec:
   accessModes:
-  - ReadWriteOnce
+    - ReadWriteOnce
   resources:
     requests:
       storage: 2Gi

uptime-kuma/k8s/ingress.yaml

@@ -7,11 +7,11 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`uptime.forust.xyz`)
+    - match: Host(`uptime.forust.xyz`)
-    kind: Rule
+      kind: Rule
-    services:
+      services:
-    - name: uptime-kuma-service
+        - name: uptime-kuma-service
-      port: 3001
+          port: 3001
   tls:
     certResolver: letsencrypt
 ---
@@ -24,11 +24,11 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`uptime.workstation.internal`)
+    - match: Host(`uptime.workstation.internal`)
-    kind: Rule
+      kind: Rule
-    services:
+      services:
-    - name: uptime-kuma-service
+        - name: uptime-kuma-service
-      port: 3001
+          port: 3001
   tls:
     secretName: local-tls
 ---
@@ -41,10 +41,10 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`uptime.gigaforust.internal`)
+    - match: Host(`uptime.gigaforust.internal`)
-    kind: Rule
+      kind: Rule
-    services:
+      services:
-    - name: uptime-kuma-service
+        - name: uptime-kuma-service
-      port: 3001
+          port: 3001
   tls:
     secretName: local-tls

uptime-kuma/k8s/namespace.yaml

@@ -1,4 +1,4 @@
 apiVersion: v1
 kind: Namespace
 metadata:
-  name: uptime-kuma
+  name: uptime-kuma

uptime-kuma/k8s/uptime-kuma.yaml

@@ -7,8 +7,8 @@ spec:
   selector:
     app: uptime-kuma
   ports:
-  - port: 3001
+    - port: 3001
-    targetPort: 3001
+      targetPort: 3001
 ---
 apiVersion: apps/v1
 kind: Deployment
@@ -26,24 +26,24 @@ spec:
         app: uptime-kuma
     spec:
       containers:
-      - name: uptime-kuma
+        - name: uptime-kuma
-        image: louislam/uptime-kuma:2
+          image: louislam/uptime-kuma:2
-        resources:
+          resources:
-          limits:
+            limits:
-            memory: "3Gi"
+              memory: "3Gi"
-            cpu: "1"
+              cpu: "1"
-          requests:
+            requests:
-            memory: "512Mi"
+              memory: "512Mi"
-            cpu: "100m"
+              cpu: "100m"
-        ports:
+          ports:
-        - containerPort: 3001
+            - containerPort: 3001
-        volumeMounts:
+          volumeMounts:
-        - name: uptime-kuma-data
+            - name: uptime-kuma-data
-          mountPath: /app/data
+              mountPath: /app/data
       volumes:
-      - name: uptime-kuma-data
+        - name: uptime-kuma-data
-        persistentVolumeClaim:
+          persistentVolumeClaim:
-          claimName: uptime-kuma-pvc
+            claimName: uptime-kuma-pvc
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
@@ -57,5 +57,3 @@ spec:
   volumeMode: Filesystem
   accessModes:
     - ReadWriteOnce
-
-

userbot/k8s/base/kustomization.yaml

@@ -2,8 +2,8 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
 resources:
-- userbots.yaml
+  - userbots.yaml
-- common-secret.yaml
+  - common-secret.yaml
-- common-config.yaml
+  - common-config.yaml
-- forust-secrets.yaml
+  - forust-secrets.yaml
-- anna-secrets.yaml
+  - anna-secrets.yaml

userbot/k8s/base/userbots.yaml

@@ -15,34 +15,34 @@ spec:
         app: forust-userbot
     spec:
       containers:
-      - name: forust-userbot
+        - name: forust-userbot
-        image: gcr.forust.xyz/forust/userbot:latest
+          image: gcr.forust.xyz/forust/userbot:latest
-        imagePullPolicy: Always
+          imagePullPolicy: Always
-        resources:
+          resources:
-          limits:
+            limits:
-            memory: "512Mi"
+              memory: "512Mi"
-            cpu: "500m"
+              cpu: "500m"
-          requests:
+            requests:
-            memory: "256Mi"
+              memory: "256Mi"
-            cpu: "100m"
+              cpu: "100m"
-        envFrom:
+          envFrom:
-        - secretRef:
+            - secretRef:
-            name: userbot-common-secrets
+                name: userbot-common-secrets
-        - configMapRef:
+            - configMapRef:
-            name: userbot-common-config
+                name: userbot-common-config
-        - secretRef:
+            - secretRef:
-            name: userbot-forust-secrets
+                name: userbot-forust-secrets
-        volumeMounts:
+          volumeMounts:
-        - name: forust-storage
+            - name: forust-storage
-          mountPath: /app/data
+              mountPath: /app/data
-          subPath: data
+              subPath: data
-        - name: forust-storage
+            - name: forust-storage
-          mountPath: /app/logs
+              mountPath: /app/logs
-          subPath: logs
+              subPath: logs
       volumes:
-      - name: forust-storage
+        - name: forust-storage
-        persistentVolumeClaim:
+          persistentVolumeClaim:
-          claimName: forust-pvc
+            claimName: forust-pvc
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
@@ -73,34 +73,34 @@ spec:
         app: anna-userbot
     spec:
       containers:
-      - name: anna-userbot
+        - name: anna-userbot
-        image: gcr.forust.xyz/forust/userbot:latest
+          image: gcr.forust.xyz/forust/userbot:latest
-        imagePullPolicy: Always
+          imagePullPolicy: Always
-        resources:
+          resources:
-          limits:
+            limits:
-            memory: "512Mi"
+              memory: "512Mi"
-            cpu: "500m"
+              cpu: "500m"
-          requests:
+            requests:
-            memory: "256Mi"
+              memory: "256Mi"
-            cpu: "100m"
+              cpu: "100m"
-        envFrom:
+          envFrom:
-        - secretRef:
+            - secretRef:
-            name: userbot-common-secrets
+                name: userbot-common-secrets
-        - configMapRef:
+            - configMapRef:
-            name: userbot-common-config
+                name: userbot-common-config
-        - secretRef:
+            - secretRef:
-            name: userbot-anna-secrets
+                name: userbot-anna-secrets
-        volumeMounts:
+          volumeMounts:
-        - name: anna-storage
+            - name: anna-storage
-          mountPath: /app/data
+              mountPath: /app/data
-          subPath: data
+              subPath: data
-        - name: anna-storage
+            - name: anna-storage
-          mountPath: /app/logs
+              mountPath: /app/logs
-          subPath: logs
+              subPath: logs
       volumes:
-      - name: anna-storage
+        - name: anna-storage
-        persistentVolumeClaim:
+          persistentVolumeClaim:
-          claimName: anna-pvc
+            claimName: anna-pvc
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim

userbot/k8s/overlays/dev/kustomization.yaml

@@ -2,7 +2,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
 resources:
-- ../../base
+  - ../../base
 
 patches:
-- path: patch-downloads.yaml
+  - path: patch-downloads.yaml

userbot/k8s/overlays/dev/patch-downloads.yaml

@@ -6,15 +6,15 @@ spec:
   template:
     spec:
       containers:
-      - name: forust-userbot
+        - name: forust-userbot
-        volumeMounts:
+          volumeMounts:
-        - name: downloads
+            - name: downloads
-          mountPath: /app/downloads
+              mountPath: /app/downloads
       volumes:
-      - name: downloads
+        - name: downloads
-        hostPath:
+          hostPath:
-          path: /home/user/projects/homelab/userbot/Downloads
+            path: /home/user/projects/homelab/userbot/Downloads
-          type: DirectoryOrCreate
+            type: DirectoryOrCreate
 ---
 apiVersion: apps/v1
 kind: Deployment
@@ -24,12 +24,12 @@ spec:
   template:
     spec:
       containers:
-      - name: anna-userbot
+        - name: anna-userbot
-        volumeMounts:
+          volumeMounts:
-        - name: downloads
+            - name: downloads
-          mountPath: /app/downloads
+              mountPath: /app/downloads
       volumes:
-      - name: downloads
+        - name: downloads
-        hostPath:
+          hostPath:
-          path: /home/user/projects/homelab/userbot/Downloads
+            path: /home/user/projects/homelab/userbot/Downloads
-          type: DirectoryOrCreate
+            type: DirectoryOrCreate

userbot/k8s/overlays/prod/kustomization.yaml

@@ -2,7 +2,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
 resources:
-- ../../base
+  - ../../base
 
 patches:
-- path: patch-downloads.yaml
+  - path: patch-downloads.yaml

userbot/k8s/overlays/prod/patch-downloads.yaml

@@ -6,15 +6,15 @@ spec:
   template:
     spec:
       containers:
-      - name: forust-userbot
+        - name: forust-userbot
-        volumeMounts:
+          volumeMounts:
-        - name: downloads
+            - name: downloads
-          mountPath: /app/downloads
+              mountPath: /app/downloads
       volumes:
-      - name: downloads
+        - name: downloads
-        hostPath:
+          hostPath:
-          path: /srv/homelab/userbot/Downloads
+            path: /srv/homelab/userbot/Downloads
-          type: DirectoryOrCreate
+            type: DirectoryOrCreate
 ---
 apiVersion: apps/v1
 kind: Deployment
@@ -24,12 +24,12 @@ spec:
   template:
     spec:
       containers:
-      - name: anna-userbot
+        - name: anna-userbot
-        volumeMounts:
+          volumeMounts:
-        - name: downloads
+            - name: downloads
-          mountPath: /app/downloads
+              mountPath: /app/downloads
       volumes:
-      - name: downloads
+        - name: downloads
-        hostPath:
+          hostPath:
-          path: /srv/homelab/userbot/Downloads
+            path: /srv/homelab/userbot/Downloads
-          type: DirectoryOrCreate
+            type: DirectoryOrCreate