Update rancher/mirrored-library-traefik Docker tag to v3

manifests/_apps/trek.yaml

@@ -1,25 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: trek
-  namespace: argocd
-  finalizers:
-  - resources-finalizer.argocd.argoproj.io
-spec:
-  project: cluster.fun
-  destination:
-    namespace: trek
-    name: cluster-fun (v2)
-  source:
-    path: manifests/trek
-    repoURL: "https://git.cluster.fun/AverageMarcus/cluster.fun.git"
-    targetRevision: HEAD
-  syncPolicy:
-    automated: {}
-    syncOptions:
-      - CreateNamespace=true
-  ignoreDifferences:
-  - kind: Secret
-    jsonPointers:
-    - /data
-

manifests/auth-proxy/internal-services.yaml

@@ -83,20 +83,3 @@ spec:
     app: internal-proxy
   type: ClusterIP
 ---
-apiVersion: v1
-kind: Service
-metadata:
-  name: hermes
-  namespace: auth-proxy
-  labels:
-    app: internal-proxy
-spec:
-  ports:
-  - name: http
-    port: 80
-    protocol: TCP
-    targetPort: 8080
-  selector:
-    app: internal-proxy
-  type: ClusterIP
----

manifests/auth-proxy/non-auth-ingress.yaml

@@ -19,6 +19,7 @@ spec:
     - bsky-feeds.cluster.fun
     - ai.cluster.fun
     - penpot.cluster.fun
+    - trek.cluster.fun
     secretName: non-auth-proxy-ingress
   rules:
   - host: hello-world.cluster.fun
@@ -71,3 +72,13 @@ spec:
             name: tailscale-proxy
             port:
               name: non-auth
+  - host: trek.cluster.fun
+    http:
+      paths:
+      - path: /
+        pathType: ImplementationSpecific
+        backend:
+          service:
+            name: tailscale-proxy
+            port:
+              name: non-auth

manifests/auth-proxy/proxy.yaml

@@ -13,9 +13,7 @@ data:
       "loki.auth-proxy.svc": "loki-write.cluster.local",
       "loki.auth-proxy.svc:80": "loki-write.cluster.local",
       "loki-distributed.auth-proxy.svc": "loki-loki.cluster.local",
-      "loki-distributed.auth-proxy.svc:80": "loki-loki.cluster.local",
+      "loki-distributed.auth-proxy.svc:80": "loki-loki.cluster.local"
-      "hermes.auth-proxy.svc": "hermes.cluster.local",
-      "hermes.auth-proxy.svc:80": "hermes.cluster.local"
     }
 ---
 apiVersion: apps/v1

manifests/grist/grist.yaml

@@ -75,7 +75,7 @@ spec:
       priorityClassName: critical
       containers:
         - name: grist
-          image: gristlabs/grist-oss:1.7.14
+          image: gristlabs/grist-oss:1.7.13
           imagePullPolicy: IfNotPresent
           ports:
             - name: http

manifests/mealie/mealie.yaml

@@ -31,7 +31,7 @@ spec:
       priorityClassName: critical
       containers:
       - name: frontend
-        image: ghcr.io/mealie-recipes/mealie:v3.19.2
+        image: ghcr.io/mealie-recipes/mealie:v3.18.0
         imagePullPolicy: Always
         envFrom:
         - secretRef:

manifests/monitoring/kube-state-metrics.yaml

@@ -238,7 +238,7 @@ spec:
         - --resources=validatingwebhookconfigurations
         #- --resources=volumeattachments
         imagePullPolicy: IfNotPresent
-        image: "registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.0"
+        image: "registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.0"
         ports:
         - containerPort: 8080
         livenessProbe:

manifests/monitoring/vmagent.yaml

@@ -217,7 +217,7 @@ spec:
       serviceAccountName: prometheus-server
       containers:
         - name: vmagent
-          image: "victoriametrics/vmagent:v1.144.0"
+          image: "victoriametrics/vmagent:v1.143.0"
           imagePullPolicy: "IfNotPresent"
           args:
             - -remoteWrite.url=http://vmcluster.auth-proxy.svc/insert/0/prometheus/

manifests/nextcloud_chart/manifest.yaml

@@ -206,7 +206,7 @@ spec:
       priorityClassName: critical
       containers:
       - name: nextcloud
-        image: "nextcloud:33.0.5-apache"
+        image: "nextcloud:33.0.3-apache"
         imagePullPolicy: IfNotPresent
         env:
         - name: SQLITE_DATABASE
@@ -340,7 +340,7 @@ spec:
           mountPath: /var/www/html/config/smtp.config.php
           subPath: smtp.config.php
       - name: cron
-        image: "nextcloud:33.0.5-apache"
+        image: "nextcloud:33.0.3-apache"
         imagePullPolicy: IfNotPresent
         command:
           - /cron.sh

manifests/nodered/nodered.yaml

@@ -57,7 +57,7 @@ spec:
           - name: data
             mountPath: /data
       - name: update-native-modules
-        image: nodered/node-red:4.1.11-18
+        image: nodered/node-red:4.1.10-18
         imagePullPolicy: IfNotPresent
         command:
           - bash
@@ -73,7 +73,7 @@ spec:
             mountPath: /data
       containers:
       - name: web
-        image: nodered/node-red:4.1.11-18
+        image: nodered/node-red:4.1.10-18
         imagePullPolicy: Always
         ports:
         - containerPort: 1880

manifests/outline/outline.yaml

@@ -46,7 +46,7 @@ spec:
       priorityClassName: critical
       containers:
       - name: outline
-        image: outlinewiki/outline:1.8.0
+        image: outlinewiki/outline:1.7.1
         imagePullPolicy: IfNotPresent
         env:
         - name: ALLOWED_DOMAINS

manifests/rss/miniflux.yaml

@@ -68,7 +68,7 @@ spec:
     spec:
       containers:
       - name: web
-        image: ghcr.io/miniflux/miniflux:2.3.1
+        image: ghcr.io/miniflux/miniflux:2.3.0
         imagePullPolicy: IfNotPresent
         envFrom:
         - configMapRef:

manifests/traefik/traefik.yaml

@@ -45,7 +45,7 @@ spec:
         - --entrypoints.websecure.http.tls=true
         - --entrypoints.web.http.redirections.entrypoint.to=websecure
         - --entrypoints.web.http.redirections.entrypoint.scheme=https
-        image: rancher/mirrored-library-traefik:3.7.1
+        image: rancher/mirrored-library-traefik:3.6.13
         imagePullPolicy: IfNotPresent
         livenessProbe:
           failureThreshold: 3

manifests/trek/pvs.yaml

@@ -1,26 +0,0 @@
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: trek-data
-  namespace: trek
-spec:
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 2Gi
-  storageClassName: sbs-default-retain
----
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: trek-uploads
-  namespace: trek
-spec:
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 2Gi
-  storageClassName: sbs-default-retain
----

manifests/trek/trek.yaml

@@ -1,157 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-  name: trek
-  namespace: trek
-  labels:
-    app: trek
-    app.kubernetes.io/name: trek
-  annotations:
-    kube-1password: irpjqi7ppvbvldfni7ywgorpgi
-    kube-1password/vault: Kubernetes
-    kube-1password/secret-text-parse: "true"
-type: Opaque
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: trek
-  namespace: trek
-  labels:
-    app: trek
-    app.kubernetes.io/name: trek
-  annotations:
-    reloader.stakater.com/match: "true"
-data:
-  NODE_ENV: "production"
-  PORT: "3000"
-  TZ: "UTC"
-  LOG_LEVEL: "info"
-  DEFAULT_LANGUAGE: "en"
-  ALLOWED_ORIGINS: "https://trek.cluster.fun"
-  APP_URL: "https://trek.cluster.fun"
-  FORCE_HTTPS: "false"
-  COOKIE_SECURE: "true"
-
----
-
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: trek
-  namespace: trek
-  labels:
-    app: trek
-    app.kubernetes.io/name: trek
-spec:
-  replicas: 1
-  strategy:
-    type: Recreate
-  selector:
-    matchLabels:
-      app: trek
-  template:
-    metadata:
-      labels:
-        app: trek
-        app.kubernetes.io/name: trek
-    spec:
-      containers:
-      - name: trek
-        image: mauriceboe/trek:3.0.22
-        imagePullPolicy: IfNotPresent
-        envFrom:
-        - configMapRef:
-            name: trek
-        - secretRef:
-            name: trek
-        ports:
-        - containerPort: 3000
-          name: web
-        volumeMounts:
-          - mountPath: /app/data
-            name: data
-          - mountPath: /app/uploads
-            name: uploads
-        livenessProbe:
-          httpGet:
-            path: /api/health
-            port: 3000
-          initialDelaySeconds: 5
-          periodSeconds: 30
-        readinessProbe:
-          httpGet:
-            path: /api/health
-            port: 3000
-          initialDelaySeconds: 5
-          periodSeconds: 10
-        resources:
-          requests:
-            cpu: 100m
-            memory: 256Mi
-          limits:
-            cpu: 500m
-            memory: 512Mi
-      volumes:
-      - name: data
-        persistentVolumeClaim:
-          claimName: trek-data
-      - name: uploads
-        persistentVolumeClaim:
-          claimName: trek-uploads
-
----
-
-apiVersion: v1
-kind: Service
-metadata:
-  name: trek
-  namespace: trek
-  labels:
-    app: trek
-    app.kubernetes.io/name: trek
-spec:
-  type: ClusterIP
-  ports:
-  - port: 80
-    targetPort: web
-    name: web
-  selector:
-    app: trek
----
-
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: trek
-  namespace: trek
-  labels:
-    app: trek
-    app.kubernetes.io/name: trek
-  annotations:
-    cert-manager.io/cluster-issuer: letsencrypt
-    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
-    nginx.ingress.kubernetes.io/proxy-body-size: "0"
-    nginx.ingress.kubernetes.io/client-body-buffer-size: 25m
-    nginx.ingress.kubernetes.io/proxy-connect-timeout: "300"
-    nginx.ingress.kubernetes.io/proxy-send-timeout: "300"
-    nginx.ingress.kubernetes.io/proxy-read-timeout: "300"
-    nginx.ingress.kubernetes.io/proxy-next-upstream: "300"
-    nginx.ingress.kubernetes.io/proxy-next-upstream-timeout: "300"
-spec:
-  ingressClassName: nginx
-  tls:
-  - hosts:
-    - trek.cluster.fun
-    secretName: trek-ingress
-  rules:
-  - host: trek.cluster.fun
-    http:
-      paths:
-      - path: /
-        pathType: ImplementationSpecific
-        backend:
-          service:
-            name: trek
-            port:
-              name: web

manifests/url-to-grist/url-to-grist.yaml

@@ -52,7 +52,7 @@ spec:
     spec:
       containers:
       - name: url-to-grist
-        image: ghcr.io/namelessplanet/url-to-grist:v1.6.1
+        image: ghcr.io/namelessplanet/url-to-grist:v1.6.0
         imagePullPolicy: IfNotPresent
         env:
         - name: PORT