feat(supabase): add services and statefulset for database management

feat(synapse): update ingress to use traefik ingress class and bump version

feat(syncthing-discovery): introduce syncthing discovery service with deployment and ingress

feat(syncthing-relay): add syncthing relay server with deployment and ingress configuration

fix(taiga): update liveness and readiness probes to use tcpSocket for health checks

fix(taiga): change PVC access mode to ReadWriteMany for media and static storage

feat(traefik): add icon and ignore rules for traefik service

docs(ushahidi): add notes for Redis configuration and Laravel startup probe adjustments

feat(ushahidi): implement dedicated Redis deployment for Ushahidi

fix(vllm): update deployment strategy and readiness/liveness probes for improved stability

fix(writefreely): pin writefreely image version to v0.15.1 for consistency

docs(zulip): add notes for TLS-terminating reverse proxy configuration and expected behavior

keila/versions/0/deployment.yaml

@@ -14,6 +14,9 @@ spec:
       labels:
         component: web
     spec:
+      securityContext:
+        seccompProfile:
+          type: RuntimeDefault
       containers:
       - name: keila
         image: "pentacent/keila:0.17.1"
@@ -69,6 +72,11 @@ spec:
         volumeMounts:
         - name: uploads
           mountPath: /var/lib/keila/uploads
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop: [ALL]
+          readOnlyRootFilesystem: false
         livenessProbe:
           httpGet:
             path: /

keila/versions/0/ingress.yaml

@@ -9,6 +9,7 @@ metadata:
     external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
     traefik.ingress.kubernetes.io/router.middlewares: keila-cors@kubernetescrd
 spec:
+  ingressClassName: traefik
   rules:
   - host: {{ .domain }}
     http:

keila/versions/0/manifest.yaml

@@ -1,4 +1,4 @@
-version: 0.17.1-2
+version: 0.17.1-4
 requires:
   - name: postgres
   - name: smtp