chore(deps): update docker docker tag to v29

services/Argus/_namespace-argus.yml

@@ -1,4 +1,4 @@
 apiVersion: v1
 kind: Namespace
 metadata:
-  name: bedrockservermanager
+  name: argus

services/Argus/application-argus.yaml

@@ -1,11 +1,11 @@
 apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
-  name: bedrockservermanager
+  name: argus
   namespace: argo-cd
 spec:
   destination:
-    namespace: bedrockservermanager
+    namespace: argus
     server: https://kubernetes.default.svc
   project: default
   syncPolicy:
@@ -14,5 +14,5 @@ spec:
       - CreateNamespace=true
   sources:
   - repoURL: https://code.spamasaurus.com/djpbessems/Kubernetes.K3s.installLog
-    path: services/BedrockServerManager
+    path: services/Argus
     targetRevision: HEAD

services/Argus/deployment-argus.yml

@@ -0,0 +1,38 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: argus
+  namespace: argus
+  labels:
+    app: argus
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: argus
+  template:
+    metadata:
+      labels:
+        app: argus
+    spec:
+      serviceAccountName: argus
+      containers:
+      - name: argus
+        image: releaseargus/argus:0.21.0
+        args:
+        - -config.file=/app/config/config.yml
+        ports:
+          - name: web
+            containerPort: 8080
+        volumeMounts:
+        - name: csismb-argus-config
+          mountPath: /app/config
+        - name: csismb-argus-data
+          mountPath: /app/data
+      volumes:
+      - name: csismb-argus-config
+        persistentVolumeClaim:
+          claimName: csismb-argus-config
+      - name: csismb-argus-data
+        persistentVolumeClaim:
+          claimName: csismb-argus-data

services/Argus/ingressroute-argus.yml

@@ -1,17 +1,18 @@
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: bedrockservermanager
+  name: argus
-  namespace: bedrockservermanager
+  namespace: argus
 spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`mc.spamasaurus.com`)
+  - match: Host(`release.spamasaurus.com`)
     kind: Rule
     services:
-    - name: bedrockservermanager
+    - name: argus
-      port: 11325
+      port: 8080
     middlewares:
+      - name: 2fa-authentication@file
       - name: security-headers@file
       # - name: compression@file

services/Argus/persistentvolume-csismb-argus-config.yaml

@@ -3,14 +3,14 @@ kind: PersistentVolume
 metadata:
   annotations:
     pv.kubernetes.io/provisioned-by: smb.csi.k8s.io
-  name: csismb-bedrockservermanager-data
+  name: csismb-argus-config
 spec:
   capacity:
     storage: 1Gi
   accessModes:
     - ReadWriteMany
   persistentVolumeReclaimPolicy: Retain
-  storageClassName: csismb-bedrockservermanager-data
+  storageClassName: csismb-argus-config
   mountOptions:
     - dir_mode=0777
     - file_mode=0777
@@ -22,10 +22,10 @@ spec:
     driver: smb.csi.k8s.io
     # volumeHandle format: {smb-server-address}#{sub-dir-name}#{share-name}
     # make sure this value is unique for every share in the cluster
-    volumeHandle: 192.168.154.195#bedrockservermanager#data
+    volumeHandle: 192.168.154.195#argus#config
     volumeAttributes:
       source: //192.168.154.195/K3s.Volumes
-      subDir: bedrockservermanager/data
+      subDir: argus/config
     nodeStageSecretRef:
       name: smb-credentials
-      namespace: bedrockservermanager
+      namespace: argus

services/Argus/persistentvolume-csismb-argus-data.yaml

@@ -3,14 +3,14 @@ kind: PersistentVolume
 metadata:
   annotations:
     pv.kubernetes.io/provisioned-by: smb.csi.k8s.io
-  name: csismb-bedrockservermanager-config
+  name: csismb-argus-data
 spec:
   capacity:
     storage: 1Gi
   accessModes:
     - ReadWriteMany
   persistentVolumeReclaimPolicy: Retain
-  storageClassName: csismb-bedrockservermanager-config
+  storageClassName: csismb-argus-data
   mountOptions:
     - dir_mode=0777
     - file_mode=0777
@@ -22,10 +22,10 @@ spec:
     driver: smb.csi.k8s.io
     # volumeHandle format: {smb-server-address}#{sub-dir-name}#{share-name}
     # make sure this value is unique for every share in the cluster
-    volumeHandle: 192.168.154.195#bedrockservermanager#config
+    volumeHandle: 192.168.154.195#argus#data
     volumeAttributes:
       source: //192.168.154.195/K3s.Volumes
-      subDir: bedrockservermanager/config
+      subDir: argus/data
     nodeStageSecretRef:
       name: smb-credentials
-      namespace: bedrockservermanager
+      namespace: argus

services/Argus/persistentvolumeclaim-csismb-argus-config.yaml

@@ -1,12 +1,12 @@
 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
-  name: csismb-bedrockservermanager-data
+  name: csismb-argus-config
-  namespace: bedrockservermanager
+  namespace: argus
 spec:
   accessModes:
     - ReadWriteMany
-  storageClassName: csismb-bedrockservermanager-data
+  storageClassName: csismb-argus-config
   resources:
     requests:
       storage: 1Gi

services/Argus/persistentvolumeclaim-csismb-argus-data.yaml

@@ -1,12 +1,12 @@
 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
-  name: csismb-bedrockservermanager-config
+  name: csismb-argus-data
-  namespace: bedrockservermanager
+  namespace: argus
 spec:
   accessModes:
     - ReadWriteMany
-  storageClassName: csismb-bedrockservermanager-config
+  storageClassName: csismb-argus-data
   resources:
     requests:
       storage: 1Gi

services/Argus/sealedsecret-smb-credentials.yaml

@@ -0,0 +1,16 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: smb-credentials
+  namespace: argus
+spec:
+  encryptedData:
+    password: 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
+    username: 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
+  template:
+    metadata:
+      creationTimestamp: null
+      name: smb-credentials
+      namespace: argus
+    type: Opaque

services/Argus/service-argus.yml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: argus
+  namespace: argus
+spec:
+  ports:
+    - protocol: TCP
+      name: web
+      port: 8080
+  selector:
+    app: argus

services/Argus/serviceAccount-argus.yml

@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: argus
+  namespace: argus
+  labels:
+    app: argus

services/BedrockServerManager/deployment-bedrockservermanager.yaml

@@ -1,42 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: bedrockservermanager
-  namespace: bedrockservermanager
-  labels:
-    app: bedrockservermanager
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: bedrockservermanager
-  strategy:
-    type: Recreate
-  template:
-    metadata:
-      labels:
-        app: bedrockservermanager
-    spec:
-      containers:
-      - name: bedrockservermanager
-        # image: ghcr.io/dmedina559/bedrock-server-manager:stable
-        image: ghcr.io/dmedina559/bedrock-server-manager:3.7.2
-        ports:
-          - name: web
-            containerPort: 11325
-          - name: mc
-            containerPort: 19132
-          - name: mc-creative
-            containerPort: 19134
-        volumeMounts:
-        - mountPath: /root/.config/bedrock-server-manager
-          name: csismb-bedrockservermanager-config
-        - mountPath: /root/bedrock-server-manager
-          name: csismb-bedrockservermanager-data
-      volumes:
-      - name: csismb-bedrockservermanager-config
-        persistentVolumeClaim:
-          claimName: csismb-bedrockservermanager-config
-      - name: csismb-bedrockservermanager-data
-        persistentVolumeClaim:
-          claimName: csismb-bedrockservermanager-data

services/BedrockServerManager/sealedsecret-smb-credentials.yaml

@@ -1,14 +0,0 @@
-apiVersion: bitnami.com/v1alpha1
-kind: SealedSecret
-metadata:
-  name: smb-credentials
-  namespace: bedrockservermanager
-spec:
-  encryptedData:
-    password: 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
-    username: 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
-  template:
-    metadata:
-      name: smb-credentials
-      namespace: bedrockservermanager
-    type: Opaque

services/BedrockServerManager/service-bedrockservermanager-mc.yaml

@@ -1,16 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: bedrockservermanager-mc
-  namespace: bedrockservermanager
-spec:
-  type: LoadBalancer
-  ports:
-    - protocol: UDP
-      name: mc
-      port: 19132
-    - protocol: UDP
-      name: mc-creative
-      port: 19134
-  selector:
-    app: bedrockservermanager

services/BedrockServerManager/service-bedrockservermanager.yaml

@@ -1,12 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: bedrockservermanager
-  namespace: bedrockservermanager
-spec:
-  ports:
-    - protocol: TCP
-      name: web
-      port: 11325
-  selector:
-    app: bedrockservermanager

services/DDclient/persistentvolume-csismb-ddclient-config.yaml

@@ -28,4 +28,4 @@ spec:
       subDir: ddclient/config
     nodeStageSecretRef:
       name: smb-credentials
-      namespace: ddclient
+      namespace: argus

services/Gitea/application-gitea.yaml

@@ -22,7 +22,7 @@ spec:
   - repoURL: https://dl.gitea.com/charts/
     chart: gitea
     # targetRevision: 11.0.0
-    targetRevision: 12.5.0
+    targetRevision: 12.4.0
     helm:
       valueFiles:
       - $values/services/Gitea/values.yaml

services/Gitea/supportingfiles/statefulset-gitea-actions-act-runner.yaml

@@ -70,7 +70,7 @@ spec:
             - mountPath: /data
               name: data-act-runner
         - name: dind
-          image: "docker:28.3.2-dind"
+          image: "docker:29.1.4-dind"
           imagePullPolicy: IfNotPresent
           args:
             - dockerd

services/Lighttpd/ingressroute-lighttpd.yaml

@@ -7,7 +7,7 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`bessems.com`) || Host(`bessems.eu`) || Host(`gabaldon.eu`) || Host(`gabaldon.nl`) || Host(`spamasaurus.com`)
+  - match: Host(`bessems.com`) || Host(`bessems.eu`) || Host(`gabaldon.eu`) || Host(`gabaldon.nl`) || Host(`sn.itch.fyi`) || Host(`spamasaurus.com`)
     kind: Rule
     services:
     - name: lighttpd

services/Memos/deployment-memos.yaml

@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
       - name: app
-        image: neosmemo/memos:0.26
+        image: neosmemo/memos:0.25
         imagePullPolicy: Always
         env:
           - name: MEMOS_PORT

services/PVR/cronjob-RolloutRestart.yml

@@ -0,0 +1,57 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: kubectl-rolloutrestart
+  namespace: pvr
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: kubectl-rolloutrestart
+  namespace: pvr
+rules:
+  - apiGroups: ["apps", "extensions"]
+    resources: ["deployments", "statefulsets"]
+    verbs: ["get", "list", "patch"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: kubectl-rolloutrestart-pvr
+  namespace: pvr
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: kubectl-rolloutrestart
+subjects:
+  - kind: ServiceAccount
+    name: kubectl-rolloutrestart
+    namespace: pvr
+---
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: kubectl-rolloutrestart
+  namespace: pvr
+spec:
+  concurrencyPolicy: Forbid
+  failedJobsHistoryLimit: 1
+  successfulJobsHistoryLimit: 1
+  schedule: '30 2 * * *'
+  jobTemplate:
+    spec:
+      backoffLimit: 2
+      activeDeadlineSeconds: 600
+      template:
+        spec:
+          serviceAccountName: kubectl-rolloutrestart
+          restartPolicy: Never
+          containers:
+            - name: kubectl
+              image: bitnami/kubectl
+              command:
+                - '/bin/bash'
+                - '-c'
+              args:
+                - for workload in `kubectl get deployments -n pvr --no-headers | cut -d " " -f 1`; do kubectl rollout restart deployment -n pvr $workload; done;
+                  for workload in `kubectl get statefulsets -n pvr --no-headers | cut -d " " -f 1`; do kubectl rollout restart statefulsets -n pvr $workload; done;

services/Vaultwarden/deployment-vaultwarden.yaml

@@ -18,8 +18,7 @@ spec:
       serviceAccountName: vaultwarden
       containers:
       - name: vaultwarden
-        # image: vaultwarden/server:1.34.3
+        image: vaultwarden/server:1.34.3
-        image: vaultwarden/server:1.35.2
         env:
         - name: ENABLE_DB_WAL
           value: "false"

storage/csi-driver-smb/application-csi-driver-smb.yaml

@@ -13,7 +13,7 @@ spec:
   sources:
   - repoURL: https://raw.githubusercontent.com/kubernetes-csi/csi-driver-smb/master/charts
     chart: csi-driver-smb
-    targetRevision: 1.20.0
+    targetRevision: 1.19.1
     helm:
       valueFiles:
       - $values/storage/csi-driver-smb/values.yaml

system/ArgoCD/application-argo-cd.yaml

@@ -14,7 +14,7 @@ spec:
     targetRevision: HEAD
   - repoURL: https://argoproj.github.io/argo-helm
     chart: argo-cd
-    targetRevision: 9.3.7
+    targetRevision: 9.1.9
     helm:
       valueFiles:
       - $values/system/ArgoCD/values.yaml