fix(authentik): try to fix authentik redirect issue

Reviewed-on: #506

kubernetes/common/apps/cert-manager/app/files/helm-release.yaml

@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: cert-manager
-      version: v1.16.1
+      version: v1.16.2
       sourceRef:
         kind: HelmRepository
         name: jetstack-charts

kubernetes/main/apps/authentik/app/helm-release.yaml

@@ -11,7 +11,7 @@ spec:
   chart:
     spec:
       chart: authentik
-      version: 2024.10.1
+      version: 2024.10.4
       sourceRef:
         kind: HelmRepository
         name: authentik-charts
@@ -23,9 +23,9 @@ spec:
     global:
       env:
         - name: AUTHENTIK_HOST
-          value: &host "auth.${SECRET_NEW_DOMAIN}"
+          value: "0.0.0.0:9000"
         - name: AUTHENTIK_HOST_BROWSER
-          value: *host
+          value: &host "auth.${SECRET_NEW_DOMAIN}"
         - name: AUTHENTIK_SECRET_KEY
           valueFrom:
             secretKeyRef:

kubernetes/main/apps/database/mysql/helm-release.yaml

@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: mysql
-      version: 12.0.0
+      version: 11.1.20
       sourceRef:
         kind: HelmRepository
         name: bitnami-charts

kubernetes/main/apps/database/redis/helm-release.yaml

@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: redis
-      version: 20.2.x
+      version: 20.3.x
       sourceRef:
         kind: HelmRepository
         name: bitnami-charts

kubernetes/main/apps/default/ganymede/helm-release.yaml

@@ -30,7 +30,7 @@ spec:
           api:
             image:
               repository: ghcr.io/zibbp/ganymede
-              tag: 3.0.2
+              tag: 3.1.0
 
             securityContext:
               #allowPrivilegeEscalation: false
@@ -103,7 +103,7 @@ spec:
           frontend:
             image:
               repository: ghcr.io/zibbp/ganymede-frontend
-              tag: 3.0.1
+              tag: 3.1.0
 
             env:
             - name: API_URL

kubernetes/main/apps/default/mealie/app/helm-release.yaml

@@ -30,7 +30,7 @@ spec:
           main:
             image:
               repository: ghcr.io/mealie-recipes/mealie
-              tag: v2.1.0
+              tag: v2.2.0
 
             env:
               ALLOW_SIGNUP: true

kubernetes/main/apps/default/piwigo/app/helm-release.yaml

@@ -30,7 +30,7 @@ spec:
           main:
             image:
               repository: lscr.io/linuxserver/piwigo
-              tag: 15.0.0
+              tag: 15.1.0
 
             env:
               PUID: 9000

kubernetes/main/apps/dev/woodpecker/helm-release.yaml

@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: woodpecker
-      version: "1.6.0"
+      version: "1.6.2"
       sourceRef:
         kind: HelmRepository
         name: woodpecker-charts

kubernetes/main/apps/download/kapowarr/app/helm-release.yaml

@@ -1,4 +1,4 @@
-# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2beta2.schema.json
+# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2.schema.json
 apiVersion: helm.toolkit.fluxcd.io/v2
 kind: HelmRelease
 metadata:
@@ -9,15 +9,14 @@ spec:
   chart:
     spec:
       chart: app-template
-      version: 3.1.0
+      version: 3.5.1
       sourceRef:
         kind: HelmRepository
         name: bjws-charts
         namespace: flux-system
-
   values:
     controllers:
-      main:
+      kapowarr:
         pod:
           securityContext:
             runAsNonRoot: true
@@ -25,29 +24,26 @@ spec:
             runAsGroup: 10000
             fsGroup: 10000
             fsGroupChangePolicy: OnRootMismatch
-
         containers:
-          main:
+          app:
             image:
               repository: git.seanomik.net/seanomik/kapowarr
-              tag: rolling-e74ec0e4
+              tag: v1.0.0
               pullPolicy: Always
 
     service:
       app:
-        controller: main
+        controller: kapowarr
-
         ports:
           http:
             port: 5656
 
     ingress:
-      main:
+      app:
         annotations:
           cert-manager.io/cluster-issuer: letsencrypt-production
           traefik.ingress.kubernetes.io/router.entrypoints: websecure
           traefik.ingress.kubernetes.io/router.middlewares: traefik-authentik@kubernetescrd
-
         hosts:
         - host: "kapowarr.${SECRET_NEW_DOMAIN}"
           paths:
@@ -57,14 +53,12 @@ spec:
               port: http
 
     persistence:
+      data:
+        existingClaim: kapowarr
+        globalMounts:
+        - path: /data
       storage:
         type: hostPath
         hostPath: /mnt/MainPool/Media
         globalMounts:
         - path: /storage
-
-      config:
-        type: hostPath
-        hostPath: /mnt/MainPool/Kubernetes/kapowarr
-        globalMounts:
-        - path: /app/db

kubernetes/main/apps/download/kapowarr/app/kustomization.yaml

@@ -1,4 +1,5 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
+- ../../../../../common/templates/volsync
 - ./helm-release.yaml

kubernetes/main/apps/download/kapowarr/ks.yaml

@@ -0,0 +1,32 @@
+# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/kustomize.toolkit.fluxcd.io/kustomization_v1.json
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: &app kapowarr
+  namespace: flux-system
+spec:
+  timeout: 5m
+  interval: 10m
+  targetNamespace: download
+  path: ./kubernetes/main/apps/download/kapowarr/app
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: home-cluster
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-gpg
+  dependsOn:
+    - name: openebs
+    - name: openebs-sc
+    - name: volsync
+  postBuild:
+    substituteFrom:
+      - kind: ConfigMap
+        name: cluster-settings
+      - kind: Secret
+        name: cluster-secrets
+    substitute:
+      APP: *app
+      VOLSYNC_CAPACITY: 5Gi

kubernetes/main/apps/download/kustomization.yaml

@@ -14,5 +14,5 @@ resources:
 - ./unpackerr
 - ./media-dashboard.yaml
 - ./flaresolverr
-- ./kapowarr
+- ./kapowarr/ks.yaml
 - ./sabnzbd

kubernetes/main/apps/download/prowlarr/helm-release.yaml

@@ -17,7 +17,7 @@ spec:
   values:
     image:
       repository: ghcr.io/onedr0p/prowlarr-develop
-      tag: "1.26.0.4833"
+      tag: "1.26.1.4844"
 
     # Metrics sidecar
     sidecars:

kubernetes/main/apps/download/qbit-manage/helm-release.yaml

@@ -35,7 +35,7 @@ spec:
 
     image:
       repository: bobokun/qbit_manage
-      tag: "v4.1.12"
+      tag: "v4.1.13"
 
     env:
       QBT_STARTUP_DELAY: 45 # seconds

kubernetes/main/apps/download/radarr/app/helm-release.yaml

@@ -35,7 +35,7 @@ spec:
           app:
             image:
               repository: ghcr.io/onedr0p/radarr-develop
-              tag: 5.15.0.9412
+              tag: 5.15.1.9463
             envFrom: *envFrom
             env:
               TZ: America/New_York

kubernetes/main/apps/download/sabnzbd/helm-release.yaml

@@ -39,7 +39,7 @@ spec:
           metrics:
             image:
               repository: msroest/sabnzbd_exporter
-              tag: 0.1.73
+              tag: 0.1.78
 
             env:
             - name: SABNZBD_BASEURLS

kubernetes/main/apps/download/sonarr/app/helm-release.yaml

@@ -35,7 +35,7 @@ spec:
           app:
             image:
               repository: ghcr.io/onedr0p/sonarr-develop
-              tag: 4.0.10.2624
+              tag: 4.0.10.2656
             envFrom: *envFrom
             env:
               TZ: America/New_York

kubernetes/main/apps/game-servers/factorio/helm-release.yaml

@@ -17,7 +17,7 @@ spec:
   values:
     image:
       repository: goofball222/factorio
-      tag: "2.0.15"
+      tag: "2.0.20"
 
     service:
       main:

kubernetes/main/apps/media/audiobookshelf/helm-release.yaml

@@ -23,7 +23,7 @@ spec:
           main:
             image:
               repository: ghcr.io/advplyr/audiobookshelf
-              tag: 2.16.2
+              tag: 2.17.2
 
     service:
       app:

kubernetes/main/apps/media/jellyfin/helm-release.yaml

@@ -22,7 +22,7 @@ spec:
           app:
             image:
               repository: linuxserver/jellyfin
-              tag: 10.10.1
+              tag: 10.10.3
             
             env:
               PUID: 10000

kubernetes/main/apps/media/komga/app/helm-release.yaml

@@ -0,0 +1,93 @@
+# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2.schema.json
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: komga
+spec:
+  interval: 5m
+  chart:
+    spec:
+      chart: app-template
+      version: 3.5.1
+      sourceRef:
+        kind: HelmRepository
+        name: bjws-charts
+        namespace: flux-system
+  values:
+    controllers:
+      komga:
+        containers:
+          app:
+            image:
+              repository: gotson/komga
+              tag: 1.14.1
+            env:
+              TZ: America/New_York
+            probes:
+              liveness: &probes
+                enabled: true
+                custom: true
+                spec:
+                  httpGet:
+                    path: /
+                    port: &port 25600
+                  initialDelaySeconds: 0
+                  periodSeconds: 10
+                  timeoutSeconds: 1
+                  failureThreshold: 3
+              readiness: *probes
+              startup:
+                enabled: true
+                spec:
+                  failureThreshold: 30
+                  periodSeconds: 10
+            resources:
+              requests:
+                cpu: 2m
+                memory: 1500Mi
+              limits:
+                memory: 3200Mi
+
+#            securityContext:
+#              allowPrivilegeEscalation: false
+#              readOnlyRootFilesystem: true
+#              capabilities: { drop: ["ALL"] }
+
+#    defaultPodOptions:
+#      securityContext:
+#        runAsUser: 10000
+#        runAsGroup: 10000
+#        fsGroup: 10000
+#        fsGroupChangePolicy: OnRootMismatch
+    
+    service:
+      app:
+        controller: komga
+        ports:
+          http:
+            port: *port
+    
+    ingress:
+      app:
+        annotations:
+          cert-manager.io/cluster-issuer: letsencrypt-production
+          traefik.ingress.kubernetes.io/router.entrypoints: websecure
+        hosts:
+          - host: "comics.${SECRET_NEW_DOMAIN}"
+            paths:
+              - path: /
+                service:
+                  identifier: app
+                  port: http
+                  
+    persistence:
+      data:
+        existingClaim: komga
+        globalMounts:
+          - path: /config
+      storage:
+        type: hostPath
+        hostPath: /mnt/MainPool/Media/Media
+        globalMounts:
+          - path: /storage
+            #readOnly: true

kubernetes/main/apps/media/komga/app/kustomization.yaml

@@ -1,4 +1,5 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
+- ../../../../../common/templates/volsync
 - ./helm-release.yaml

kubernetes/main/apps/media/komga/helm-release.yaml

@@ -1,67 +0,0 @@
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: komga
-  namespace: media
-spec:
-  interval: 5m
-  chart:
-    spec:
-      chart: app-template
-      version: 1.3.x
-      sourceRef:
-        kind: HelmRepository
-        name: bjws-charts
-        namespace: flux-system
-
-  values:
-    image:
-      repository: gotson/komga
-      tag: "1.14.1"
-
-    env:
-      TZ: America/New_York
-
-    service:
-      main:
-        ports:
-          http:
-            port: 25600
-
-    probes:
-      liveness:
-        enabled: false
-
-    ingress:
-      main:
-        enabled: true
-        annotations:
-          cert-manager.io/cluster-issuer: letsencrypt-production
-          traefik.ingress.kubernetes.io/router.entrypoints: websecure
-        hosts:
-          - host: &host "comics.${SECRET_NEW_DOMAIN}"
-            paths:
-              - path: /
-                pathType: Prefix
-        tls:
-          - hosts:
-              - *host
-
-    persistence:
-      config:
-        enabled: true
-        type: hostPath
-        hostPath: /mnt/MainPool/Kubernetes/komga
-        mountPath: /config
-      storage:
-        enabled: true
-        type: hostPath
-        hostPath: /mnt/MainPool/Media/Media
-        mountPath: /storage
-
-    resources:
-      requests:
-        cpu: 2m
-        memory: 1500Mi
-      limits:
-        memory: 3200Mi

kubernetes/main/apps/media/komga/ks.yaml

@@ -0,0 +1,31 @@
+# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/kustomize.toolkit.fluxcd.io/kustomization_v1.json
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: &app komga
+  namespace: flux-system
+spec:
+  timeout: 5m
+  interval: 10m
+  targetNamespace: media
+  path: ./kubernetes/main/apps/media/komga/app
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: home-cluster
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-gpg
+  dependsOn:
+    - name: openebs
+    - name: openebs-sc
+  postBuild:
+    substituteFrom:
+      - kind: ConfigMap
+        name: cluster-settings
+      - kind: Secret
+        name: cluster-secrets
+    substitute:
+      APP: *app
+      VOLSYNC_CAPACITY: 5Gi

kubernetes/main/apps/media/kustomization.yaml

@@ -3,7 +3,7 @@ kind: Kustomization
 resources:
 - ./namespace.yaml
 #- ./network_policy.yaml
-- ./komga
+- ./komga/ks.yaml
 - ./kavita
 - ./jellyfin
 - ./jellyseerr

kubernetes/main/apps/monitoring/grafana/helm-release.yaml

@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: grafana
-      version: "8.5.12"
+      version: "8.6.1"
       sourceRef:
         kind: HelmRepository
         name: grafana-charts

kubernetes/main/apps/monitoring/kube-prometheus-stack/helm-release.yaml

@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: kube-prometheus-stack
-      version: "66.0.0"
+      version: "66.2.2"
       sourceRef:
         kind: HelmRepository
         name: prometheus-community-charts

kubernetes/main/apps/monitoring/victoria-metrics/helm-release.yaml

@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: victoria-metrics-single
-      version: 0.12.6
+      version: 0.12.7
       sourceRef:
         kind: HelmRepository
         name: victoria-metrics-charts

kubernetes/main/apps/tools/gotify/helm-release.yaml

@@ -17,7 +17,7 @@ spec:
   values:
     image:
       repository: ghcr.io/gotify/server
-      tag: "2.5.0"
+      tag: "2.6.1"
 
     env:
       TZ: America/New_York

kubernetes/main/apps/tools/vaultwarden/app/helm-release.yaml

@@ -21,7 +21,7 @@ spec:
           main:
             image:
               repository: vaultwarden/server
-              tag: 1.32.3
+              tag: 1.32.5
 
     service:
       app:

kubernetes/main/core/kube-replicator/helm-release.yaml

@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: kubernetes-replicator
-      version: '2.10.x'
+      version: '2.11.x'
       sourceRef:
         kind: HelmRepository
         name: mittwald-charts

kubernetes/thin/apps/database/postgresql/app/pgadmin4/helm-release.yaml

@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: pgadmin4
-      version: "1.31.0"
+      version: "1.32.0"
       sourceRef:
         kind: HelmRepository
         name: runix-charts

kubernetes/thin/apps/database/redis/app/helm-release.yaml

@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: redis
-      version: 20.2.1
+      version: 20.3.0
       sourceRef:
         kind: HelmRepository
         name: bitnami-charts

kubernetes/thin/apps/default/home-assistant/files/helm-release.yaml

@@ -24,7 +24,7 @@ spec:
           app:
             image:
               repository: ghcr.io/onedr0p/home-assistant
-              tag: 2024.11.1
+              tag: 2024.11.3
             env:
               TZ: America/New_York #${SERVER_TIMEZONE}
               HASS_HTTP_TRUSTED_PROXY_1: 192.168.0.0/16
@@ -46,7 +46,7 @@ spec:
           code-server:
             image:
               repository: ghcr.io/coder/code-server
-              tag: 4.95.1
+              tag: 4.95.3
             args: [
               "--auth", "none",
               "--user-data-dir", "/config/.vscode",

kubernetes/thin/apps/kube-system/cilium/app/helm-release.yaml

@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: cilium
-      version: 1.16.3
+      version: 1.16.4
       sourceRef:
         kind: HelmRepository
         name: cilium

kubernetes/thin/apps/monitoring/grafana/app/helm-release.yaml

@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: grafana
-      version: "8.5.12"
+      version: "8.6.1"
       sourceRef:
         kind: HelmRepository
         name: grafana

kubernetes/thin/apps/monitoring/kube-prometheus-stack/app/helm-release.yaml

@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: kube-prometheus-stack
-      version: "66.0.0"
+      version: "66.2.2"
       sourceRef:
         kind: HelmRepository
         name: prometheus-community

kubernetes/thin/apps/monitoring/victoria-metrics/operator/helm-release.yaml

@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: victoria-metrics-operator
-      version: 0.37.0
+      version: 0.38.0
       sourceRef:
         kind: HelmRepository
         name: victoria-metrics-charts

kubernetes/thin/apps/monitoring/victoria-metrics/vm/agent.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   image:
     repository: victoriametrics/vmagent
-    tag: v1.106.0
+    tag: v1.106.1
     pullPolicy: IfNotPresent
     
   selectAllByDefault: true

kubernetes/thin/apps/monitoring/victoria-metrics/vm/single.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   image:
     repository: victoriametrics/victoria-metrics
-    tag: v1.106.0
+    tag: v1.106.1
 
   retentionPeriod: "6" # in months
   replicaCount: 1