Externalize networking (welcome Wild Central!)

akaunting/versions/3/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: akaunting
   namespace: akaunting
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: akaunting
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

akaunting/versions/3/manifest.yaml

@@ -1,12 +1,10 @@
-version: 3.1.21-1
+version: 3.1.21-2
 requires:
-  - name: mysql
-  - name: smtp
+- name: mysql
+- name: smtp
 defaultConfig:
   namespace: akaunting
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: akaunting.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   locale: en-US
   dbPrefix: aka_
@@ -15,7 +13,7 @@ defaultConfig:
   adminEmail: '{{ .operator.email }}'
   db:
     host: '{{ .apps.mysql.host }}'
-    port: "3306"
+    port: '3306'
     name: akaunting
     user: akaunting
   smtp:
@@ -24,8 +22,8 @@ defaultConfig:
     from: '{{ .apps.smtp.from }}'
     user: '{{ .apps.smtp.user }}'
 defaultSecrets:
-  - key: dbPassword
-  - key: adminPassword
-  - key: smtpPassword
+- key: dbPassword
+- key: adminPassword
+- key: smtpPassword
 requiredSecrets:
-  - mysql.rootPassword
+- mysql.rootPassword

aptly/versions/1/ingress.yaml

@@ -2,10 +2,6 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: aptly
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -19,7 +15,3 @@ spec:
                 name: aptly
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

aptly/versions/1/manifest.yaml

@@ -1,11 +1,9 @@
-version: 1.6.2-3
+version: 1.6.2-4
 defaultConfig:
   namespace: aptly
-  externalDnsDomain: "{{ .cloud.domain }}"
-  domain: "aptly.{{ .cloud.domain }}"
-  tlsSecretName: wildcard-wild-cloud-tls
+  domain: aptly.{{ .cloud.domain }}
   storage: 5Gi
   apiUser: aptly
-  operatorEmail: "{{ .operator.email }}"
+  operatorEmail: '{{ .operator.email }}'
 defaultSecrets:
-  - key: apiPassword
+- key: apiPassword

baserow/versions/2/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: baserow
   namespace: {{ .namespace }}
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: baserow
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

baserow/versions/2/manifest.yaml

@@ -1,23 +1,21 @@
-version: 2.2.2-2
+version: 2.2.2-3
 requires:
-  - name: postgres
-  - name: redis
+- name: postgres
+- name: redis
 defaultConfig:
   namespace: baserow
-  externalDnsDomain: "{{ .cloud.domain }}"
   domain: baserow.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   db:
-    host: "{{ .apps.postgres.host }}"
-    port: "5432"
+    host: '{{ .apps.postgres.host }}'
+    port: '5432'
     name: baserow
     user: baserow
   redis:
-    host: "{{ .apps.redis.host }}"
+    host: '{{ .apps.redis.host }}'
 defaultSecrets:
-  - key: dbPassword
-  - key: secretKey
+- key: dbPassword
+- key: secretKey
 requiredSecrets:
-  - postgres.password
-  - redis.password
+- postgres.password
+- redis.password

bookstack/versions/26/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: bookstack
   namespace: {{ .namespace }}
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: bookstack
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

bookstack/versions/26/manifest.yaml

@@ -1,12 +1,10 @@
-version: 26.05.1-2
+version: 26.05.1-3
 requires:
-  - name: mysql
-  - name: smtp
+- name: mysql
+- name: smtp
 defaultConfig:
   namespace: bookstack
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: bookstack.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   db:
     host: '{{ .apps.mysql.host }}'
@@ -19,8 +17,8 @@ defaultConfig:
     from: '{{ .apps.smtp.from }}'
     user: '{{ .apps.smtp.user }}'
 defaultSecrets:
-  - key: appKey
-  - key: dbPassword
-  - key: smtpPassword
+- key: appKey
+- key: dbPassword
+- key: smtpPassword
 requiredSecrets:
-  - mysql.rootPassword
+- mysql.rootPassword

bookwyrm/versions/0/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: bookwyrm
   namespace: bookwyrm
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: bookwyrm
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

bookwyrm/versions/0/manifest.yaml

@@ -1,13 +1,11 @@
-version: 0.8.7-1
+version: 0.8.7-2
 requires:
-  - name: postgres
-  - name: redis
-  - name: smtp
+- name: postgres
+- name: redis
+- name: smtp
 defaultConfig:
   namespace: bookwyrm
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: bookwyrm.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   db:
     host: '{{ .apps.postgres.host }}'
@@ -22,9 +20,9 @@ defaultConfig:
     from: '{{ .apps.smtp.from }}'
     user: '{{ .apps.smtp.user }}'
 defaultSecrets:
-  - key: secretKey
-  - key: dbPassword
-  - key: smtpPassword
+- key: secretKey
+- key: dbPassword
+- key: smtpPassword
 requiredSecrets:
-  - postgres.password
-  - redis.password
+- postgres.password
+- redis.password

chamilo/versions/1/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: chamilo
   namespace: {{ .namespace }}
-  annotations:
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: chamilo
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

chamilo/versions/1/manifest.yaml

@@ -1,19 +1,17 @@
-version: 1.11.28-1
+version: 1.11.28-2
 requires:
-  - name: mysql
-  - name: smtp
+- name: mysql
+- name: smtp
 defaultConfig:
   namespace: chamilo
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: chamilo.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   siteName: Chamilo LMS
   adminUser: admin
   adminEmail: '{{ .operator.email }}'
   db:
     host: '{{ .apps.mysql.host }}'
-    port: "3306"
+    port: '3306'
     name: chamilo
     user: chamilo
   smtp:
@@ -22,8 +20,8 @@ defaultConfig:
     from: '{{ .apps.smtp.from }}'
     user: '{{ .apps.smtp.user }}'
 defaultSecrets:
-  - key: adminPassword
-  - key: dbPassword
-  - key: smtpPassword
+- key: adminPassword
+- key: dbPassword
+- key: smtpPassword
 requiredSecrets:
-  - mysql.rootPassword
+- mysql.rootPassword

community-search/versions/0/ingress.yaml

@@ -2,10 +2,6 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: community-search
-  annotations:
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -19,7 +15,3 @@ spec:
             name: community-search
             port:
               number: 80
-  tls:
-  - hosts:
-    - {{ .domain }}
-    secretName: {{ .tlsSecretName }}

community-search/versions/0/manifest.yaml

@@ -1,12 +1,9 @@
-version: 0.1.2_1
-requires: []
+version: 0.1.2_1-1
 defaultConfig:
   namespace: community-search
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: search.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
-  selfUrl: 'https://search.{{ .cloud.domain }}'
-  selfName: 'Community Search'
+  selfUrl: https://search.{{ .cloud.domain }}
+  selfName: Community Search
 defaultSecrets:
-  - key: adminToken
+- key: adminToken

cryptpad/versions/2024/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: cryptpad
   namespace: cryptpad
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -30,8 +26,3 @@ spec:
                 name: cryptpad
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-        - {{ .sandboxDomain }}
-      secretName: {{ .tlsSecretName }}

cryptpad/versions/2024/manifest.yaml

@@ -1,10 +1,8 @@
-version: 2026.5.1-2
+version: 2026.5.1-3
 defaultConfig:
   namespace: cryptpad
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: cryptpad.{{ .cloud.domain }}
   sandboxDomain: cryptpad-sandbox.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
 defaultSecrets:
-  - key: adminKey
+- key: adminKey

decidim/versions/0/ingress.yaml

@@ -4,15 +4,8 @@ kind: Ingress
 metadata:
   name: decidim
   namespace: decidim
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
 spec:
   ingressClassName: traefik
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}
   rules:
     - host: {{ .domain }}
       http:

decidim/versions/0/manifest.yaml

@@ -1,16 +1,14 @@
-version: 0.31.0-3
+version: 0.31.0-4
 requires:
-  - name: postgres
-  - name: redis
-  - name: smtp
+- name: postgres
+- name: redis
+- name: smtp
 defaultConfig:
   namespace: decidim
-  externalDnsDomain: '{{ .cloud.domain }}'
   storage: 2Gi
   systemAdminEmail: '{{ .operator.email }}'
-  siteName: 'Decidim'
+  siteName: Decidim
   domain: decidim.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   db:
     host: '{{ .apps.postgres.host }}'
     port: '{{ .apps.postgres.port }}'
@@ -27,13 +25,14 @@ defaultConfig:
     tls: '{{ .apps.smtp.tls }}'
     startTls: '{{ .apps.smtp.startTls }}'
 defaultSecrets:
-  - key: systemAdminPassword
-  - key: secretKeyBase
-    default: "{{ random.AlphaNum 128 }}"
-  - key: dbPassword
-  - key: dbUrl
-    default: "postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable"
+- key: systemAdminPassword
+- key: secretKeyBase
+  default: '{{ random.AlphaNum 128 }}'
+- key: dbPassword
+- key: dbUrl
+  default: postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host
+    }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable
 requiredSecrets:
-  - postgres.password
-  - redis.password
-  - smtp.password
+- postgres.password
+- redis.password
+- smtp.password

discourse/versions/3/ingress.yaml

@@ -5,9 +5,6 @@ kind: Ingress
 metadata:
   name: discourse
   namespace: "{{ .namespace }}"
-  annotations:
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/target: "{{ .externalDnsDomain }}"
 spec:
   ingressClassName: traefik
   rules:
@@ -21,7 +18,3 @@ spec:
                 name: discourse
                 port:
                   name: http
-  tls:
-    - hosts:
-        - "{{ .domain }}"
-      secretName: wildcard-external-wild-cloud-tls

discourse/versions/3/manifest.yaml

@@ -1,17 +1,15 @@
-version: 3.5.3-4
+version: 3.5.3-5
 requires:
-  - name: postgres
-  - name: redis
-  - name: smtp
+- name: postgres
+- name: redis
+- name: smtp
 defaultConfig:
   namespace: discourse
-  externalDnsDomain: '{{ .cloud.domain }}'
   storage: 2Gi
   adminEmail: '{{ .operator.email }}'
   adminUsername: admin
-  siteName: 'Community'
+  siteName: Community
   domain: discourse.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   db:
     host: '{{ .apps.postgres.host }}'
     port: '{{ .apps.postgres.port }}'
@@ -28,13 +26,14 @@ defaultConfig:
     tls: '{{ .apps.smtp.tls }}'
     startTls: '{{ .apps.smtp.startTls }}'
 defaultSecrets:
-  - key: adminPassword
-  - key: secretKeyBase
-    default: "{{ random.Hex 32 }}"
-  - key: smtpPassword
-  - key: dbPassword
-  - key: dbUrl
-    default: "postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable"
+- key: adminPassword
+- key: secretKeyBase
+  default: '{{ random.Hex 32 }}'
+- key: smtpPassword
+- key: dbPassword
+- key: dbUrl
+  default: postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host
+    }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable
 requiredSecrets:
-  - postgres.password
-  - redis.password
+- postgres.password
+- redis.password

docker-registry/versions/3/ingress.yaml

@@ -15,7 +15,3 @@ spec:
                 name: docker-registry
                 port:
                   number: 5000
-  tls:
-    - hosts:
-        - {{ .host }}
-      secretName: wildcard-internal-wild-cloud-tls

docker-registry/versions/3/manifest.yaml

@@ -1,8 +1,5 @@
-version: "3.0.0-1"
-requires:
-  - name: traefik
-  - name: cert-manager
+version: 3.0.0-2
 defaultConfig:
   namespace: docker-registry
-  host: "registry.{{ .cloud.internalDomain }}"
+  host: registry.{{ .cloud.internalDomain }}
   storage: 5Gi

e2e-test-app/versions/1/manifest.yaml

@@ -1,11 +1,9 @@
-version: 1.0.0-1
+version: 1.0.0-2
 requires:
-  - name: postgres
+- name: postgres
 defaultConfig:
   namespace: e2e-test-app
   domain: e2e-test-app.{{ .cloud.domain }}
-  externalDnsDomain: '{{ .cloud.domain }}'
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 1Gi
   db:
     host: '{{ .apps.postgres.host }}'
@@ -13,8 +11,9 @@ defaultConfig:
     name: e2e_test_app
     user: e2e_test_app
 defaultSecrets:
-  - key: dbPassword
-  - key: dbUrl
-    default: "postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable"
+- key: dbPassword
+- key: dbUrl
+  default: postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host
+    }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable
 requiredSecrets:
-  - postgres.password
+- postgres.password

e2e-test-app/versions/2/manifest.yaml

@@ -1,12 +1,10 @@
-version: 2.0.0-1
+version: 2.0.0-2
 requires:
-  - name: postgres
-  - name: mysql
+- name: postgres
+- name: mysql
 defaultConfig:
   namespace: e2e-test-app
   domain: e2e-test-app.{{ .cloud.domain }}
-  externalDnsDomain: '{{ .cloud.domain }}'
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 1Gi
   db:
     host: '{{ .apps.postgres.host }}'
@@ -19,10 +17,11 @@ defaultConfig:
     name: e2e_test_app
     user: e2e_test_app
 defaultSecrets:
-  - key: dbPassword
-  - key: dbUrl
-    default: "postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable"
-  - key: mysqlPassword
+- key: dbPassword
+- key: dbUrl
+  default: postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host
+    }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable
+- key: mysqlPassword
 requiredSecrets:
-  - postgres.password
-  - mysql.rootPassword
+- postgres.password
+- mysql.rootPassword

etherpad/versions/2/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: etherpad
   namespace: etherpad
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: etherpad
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

etherpad/versions/2/manifest.yaml

@@ -1,11 +1,9 @@
-version: 2.2.7-1
+version: 2.2.7-2
 requires:
-  - name: postgres
+- name: postgres
 defaultConfig:
   namespace: etherpad
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: etherpad.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   title: Etherpad
   db:
@@ -14,9 +12,10 @@ defaultConfig:
     name: etherpad
     user: etherpad
 defaultSecrets:
-  - key: adminPassword
-  - key: dbPassword
-  - key: dbUrl
-    default: 'postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable'
+- key: adminPassword
+- key: dbPassword
+- key: dbUrl
+  default: postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host
+    }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable
 requiredSecrets:
-  - postgres.password
+- postgres.password

eventyay/versions/1/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: eventyay
   namespace: {{ .namespace }}
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: eventyay
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

eventyay/versions/1/manifest.yaml

@@ -1,13 +1,11 @@
-version: main-5
+version: main-6
 requires:
-  - name: postgres
-  - name: redis
-  - name: smtp
+- name: postgres
+- name: redis
+- name: smtp
 defaultConfig:
   namespace: eventyay
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: eventyay.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   timezone: UTC
   db:
@@ -24,19 +22,19 @@ defaultConfig:
     from: '{{ .apps.smtp.from }}'
     user: '{{ .apps.smtp.user }}'
 scripts:
-  - name: create-superuser
-    path: scripts/create-superuser.sh
-    description: "Create an Eventyay superuser account for first-time setup."
-    params:
-      - name: EMAIL
-        description: Email address for the superuser account
-        required: true
-      - name: PASSWORD
-        description: Password (leave blank to generate a random one)
+- name: create-superuser
+  path: scripts/create-superuser.sh
+  description: Create an Eventyay superuser account for first-time setup.
+  params:
+  - name: EMAIL
+    description: Email address for the superuser account
+    required: true
+  - name: PASSWORD
+    description: Password (leave blank to generate a random one)
 defaultSecrets:
-  - key: dbPassword
-  - key: djangoSecret
+- key: dbPassword
+- key: djangoSecret
 requiredSecrets:
-  - postgres.password
-  - redis.password
-  - smtp.password
+- postgres.password
+- redis.password
+- smtp.password

example-admin/versions/1/ingress.yaml

@@ -3,8 +3,6 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: example-admin
-  annotations:
-    external-dns.alpha.kubernetes.io/target: '{{ .externalDnsDomain }}'
 spec:
   ingressClassName: traefik
   rules:
@@ -18,7 +16,3 @@ spec:
                 name: example-admin
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - "{{ .host }}"
-      secretName: wildcard-internal-wild-cloud-tls

example-admin/versions/1/manifest.yaml

@@ -1,6 +1,4 @@
-version: 1.0.0-2
+version: 1.0.0-3
 defaultConfig:
   namespace: example-admin
-  externalDnsDomain: '{{ .cloud.domain }}'
   host: '{{ .host }}'
-  tlsSecretName: wildcard-internal-wild-cloud-tls

example-app/versions/1/ingress.yaml

@@ -4,8 +4,6 @@ kind: Ingress
 metadata:
   name: example-app
   annotations:
-    external-dns.alpha.kubernetes.io/target: "{{ .cloud.externalDnsTarget }}"
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
     # Optional: Enable basic auth
     # traefik.ingress.kubernetes.io/auth-type: basic
     # traefik.ingress.kubernetes.io/auth-secret: basic-auth
@@ -22,7 +20,3 @@ spec:
                 name: example-app
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - "{{ .host }}"
-      secretName: wildcard-wild-cloud-tls

example-app/versions/1/manifest.yaml

@@ -1,6 +1,4 @@
-version: 1.0.0-1
+version: 1.0.0-2
 defaultConfig:
   namespace: example-app
-  externalDnsDomain: '{{ .cloud.domain }}'
   host: example-app.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls

externaldns/versions/v0/externaldns-cloudflare.yaml

@@ -28,8 +28,12 @@ spec:
             - --source=ingress
             - --txt-owner-id={{ .ownerId }}
             - --provider=cloudflare
-            - --domain-filter=payne.io
-            #- --exclude-domains=internal.${DOMAIN}
+            {{- with (index . "domainFilter") }}
+            - --domain-filter={{ . }}
+            {{- end }}
+            {{- with (index . "internalDomain") }}
+            - --exclude-domains={{ . }}
+            {{- end }}
             - --cloudflare-dns-records-per-page=5000
             - --publish-internal-services
             - --no-cloudflare-proxied

externaldns/versions/v0/manifest.yaml

@@ -1,10 +1,11 @@
-version: v0.13.4-2
+version: v0.13.4-6
 deploymentName: external-dns
 requires:
   - name: cert-manager
 defaultConfig:
   namespace: externaldns
   ownerId: "wild-cloud-{{ .cluster.name }}"
+  internalDomain: "{{ .cloud.internalDomain }}"
 defaultSecrets:
   - key: cloudflareToken
 requiredSecrets:

firefly-iii/versions/6/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: firefly-iii
   namespace: firefly-iii
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: firefly-iii
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

firefly-iii/versions/6/manifest.yaml

@@ -1,11 +1,9 @@
-version: 6.6.3-1
+version: 6.6.3-2
 requires:
-  - name: postgres
+- name: postgres
 defaultConfig:
   namespace: firefly-iii
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: firefly-iii.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 1Gi
   timezone: UTC
   adminEmail: '{{ .operator.email }}'
@@ -15,7 +13,7 @@ defaultConfig:
     name: fireflyiii
     user: fireflyiii
 defaultSecrets:
-  - key: appKey
-  - key: dbPassword
+- key: appKey
+- key: dbPassword
 requiredSecrets:
-  - postgres.password
+- postgres.password

formbricks/versions/3/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: formbricks
   namespace: {{ .namespace }}
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: formbricks
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

formbricks/versions/3/manifest.yaml

@@ -1,27 +1,26 @@
-version: 3.6.0-1
+version: 3.6.0-2
 requires:
-  - name: postgres
-  - name: redis
+- name: postgres
+- name: redis
 defaultConfig:
   namespace: formbricks
-  externalDnsDomain: "{{ .cloud.domain }}"
   domain: formbricks.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   db:
-    host: "{{ .apps.postgres.host }}"
-    port: "{{ .apps.postgres.port }}"
+    host: '{{ .apps.postgres.host }}'
+    port: '{{ .apps.postgres.port }}'
     name: formbricks
     user: formbricks
   redis:
-    host: "{{ .apps.redis.host }}"
+    host: '{{ .apps.redis.host }}'
 defaultSecrets:
-  - key: dbPassword
-  - key: dbUrl
-    default: "postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable"
-  - key: nextauthSecret
-  - key: encryptionKey
-  - key: cronSecret
+- key: dbPassword
+- key: dbUrl
+  default: postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host
+    }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable
+- key: nextauthSecret
+- key: encryptionKey
+- key: cronSecret
 requiredSecrets:
-  - postgres.password
-  - redis.password
+- postgres.password
+- redis.password

gancio/versions/1/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: gancio
   namespace: gancio
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: gancio
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

gancio/versions/1/manifest.yaml

@@ -1,11 +1,9 @@
-version: 1.28.2-1
+version: 1.28.2-2
 requires:
-  - name: postgres
+- name: postgres
 defaultConfig:
   namespace: gancio
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: gancio.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   db:
     host: '{{ .apps.postgres.host }}'
@@ -13,8 +11,9 @@ defaultConfig:
     name: gancio
     user: gancio
 defaultSecrets:
-  - key: dbPassword
-  - key: dbUrl
-    default: 'postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable'
+- key: dbPassword
+- key: dbUrl
+  default: postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host
+    }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable
 requiredSecrets:
-  - postgres.password
+- postgres.password

ghost/versions/5/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: ghost
   namespace: ghost
-  annotations:
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: ghost
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

ghost/versions/5/manifest.yaml

@@ -1,12 +1,10 @@
-version: 5.130.6-1
+version: 5.130.6-2
 requires:
-  - name: mysql
-  - name: smtp
+- name: mysql
+- name: smtp
 defaultConfig:
   namespace: ghost
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: ghost.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   db:
     host: '{{ .apps.mysql.host }}'
@@ -19,7 +17,7 @@ defaultConfig:
     from: '{{ .apps.smtp.from }}'
     user: '{{ .apps.smtp.user }}'
 defaultSecrets:
-  - key: dbPassword
-  - key: smtpPassword
+- key: dbPassword
+- key: smtpPassword
 requiredSecrets:
-  - mysql.rootPassword
+- mysql.rootPassword

gitea/versions/1/ingress.yaml

@@ -3,9 +3,6 @@ kind: Ingress
 metadata:
   name: gitea-public
   namespace: gitea
-  annotations:
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/target: "{{ .externalDnsDomain }}"
 spec:
   ingressClassName: traefik
   rules:
@@ -19,7 +16,3 @@ spec:
                 name: gitea-http
                 port:
                   number: 3000
-  tls:
-    - secretName: "{{ .tlsSecretName }}"
-      hosts:
-        - "{{ .domain }}"

gitea/versions/1/manifest.yaml

@@ -1,16 +1,14 @@
-version: 1.24.3-4
+version: 1.24.3-5
 requires:
-  - name: postgres
-  - name: smtp
+- name: postgres
+- name: smtp
 defaultConfig:
   namespace: gitea
-  externalDnsDomain: '{{ .cloud.domain }}'
   appName: Gitea
   domain: gitea.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   adminUser: admin
-  adminEmail: "{{ .operator.email }}"
+  adminEmail: '{{ .operator.email }}'
   db:
     name: gitea
     user: gitea
@@ -22,10 +20,10 @@ defaultConfig:
     user: '{{ .apps.smtp.user }}'
     from: '{{ .apps.smtp.from }}'
 defaultSecrets:
-  - key: adminPassword
-  - key: dbPassword
-  - key: secretKey
-  - key: jwtSecret
-  - key: smtpPassword
+- key: adminPassword
+- key: dbPassword
+- key: secretKey
+- key: jwtSecret
+- key: smtpPassword
 requiredSecrets:
-  - postgres.password
+- postgres.password

headlamp/versions/v0/ingress.yaml

@@ -1,64 +1,18 @@
----
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
+apiVersion: networking.k8s.io/v1
+kind: Ingress
 metadata:
-  name: internal-only
+  name: headlamp
   namespace: headlamp
 spec:
-  ipWhiteList:
-    sourceRange:
-      - 127.0.0.1/32
-      - 10.0.0.0/8
-      - 172.16.0.0/12
-      - 192.168.0.0/16
-
----
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
-  name: headlamp-redirect-scheme
-  namespace: headlamp
-spec:
-  redirectScheme:
-    scheme: https
-    permanent: true
-
----
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
-  name: headlamp-https
-  namespace: headlamp
-spec:
-  entryPoints:
-    - websecure
-  routes:
-    - match: Host(`headlamp.{{ .internalDomain }}`)
-      kind: Rule
-      middlewares:
-        - name: internal-only
-          namespace: headlamp
-      services:
-        - name: headlamp
-          port: 80
-  tls:
-    secretName: wildcard-internal-wild-cloud-tls
-
----
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
-  name: headlamp-http
-  namespace: headlamp
-spec:
-  entryPoints:
-    - web
-  routes:
-    - match: Host(`headlamp.{{ .internalDomain }}`)
-      kind: Rule
-      middlewares:
-        - name: headlamp-redirect-scheme
-          namespace: headlamp
-      services:
-        - name: headlamp
-          port: 80
+  ingressClassName: traefik
+  rules:
+    - host: headlamp.{{ .internalDomain }}
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: headlamp
+                port:
+                  number: 80

headlamp/versions/v0/manifest.yaml

@@ -1,11 +1,13 @@
-version: v0.42.0
-requires:
-  - name: traefik
-  - name: cert-manager
+version: v0.42.0-1
 defaultConfig:
   namespace: headlamp
-  internalDomain: "{{ .cloud.internalDomain }}"
+  internalDomain: '{{ .cloud.internalDomain }}'
+  central:
+    ipAllow:
+    - 10.0.0.0/8
+    - 172.16.0.0/12
+    - 192.168.0.0/16
 deploy:
   waitForRollout:
     name: headlamp
-    timeout: "120s"
+    timeout: 120s

headscale/versions/1/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: headscale
   namespace: headscale
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: headscale
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

headscale/versions/1/manifest.yaml

@@ -1,19 +1,18 @@
-version: 0.29.1-1
+version: 0.29.1-2
 scripts:
-  - name: register-node
-    description: Register a Tailscale node using the auth ID shown in the Tailscale app.
-    path: scripts/register-node.sh
-    params:
-      - name: AUTH_ID
-        description: The auth ID shown by the Tailscale app (e.g. hskey-authreq-...)
-        required: true
-      - name: USER
-        description: Headscale username to register the node under
-        required: true
+- name: register-node
+  description: Register a Tailscale node using the auth ID shown in the Tailscale
+    app.
+  path: scripts/register-node.sh
+  params:
+  - name: AUTH_ID
+    description: The auth ID shown by the Tailscale app (e.g. hskey-authreq-...)
+    required: true
+  - name: USER
+    description: Headscale username to register the node under
+    required: true
 defaultConfig:
   namespace: headscale
   domain: headscale.{{ .cloud.domain }}
-  externalDnsDomain: "{{ .cloud.domain }}"
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   vpnBaseDomain: vpn.{{ .cloud.domain }}

immich/versions/1/ingress.yaml

@@ -3,9 +3,6 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: immich-public
-  annotations:
-    external-dns.alpha.kubernetes.io/target: "{{ .externalDnsDomain }}"
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
 spec:
   ingressClassName: traefik
   rules:
@@ -19,7 +16,3 @@ spec:
                 name: immich-server
                 port:
                   number: 3001
-  tls:
-    - secretName: wildcard-wild-cloud-tls
-      hosts:
-        - "{{ .domain }}"

immich/versions/1/manifest.yaml

@@ -1,14 +1,12 @@
-version: 1.135.3-4
+version: 1.135.3-5
 requires:
-  - name: redis
-  - name: postgres
+- name: redis
+- name: postgres
 defaultConfig:
   namespace: immich
-  externalDnsDomain: '{{ .cloud.domain }}'
   storage: 5Gi
   cacheStorage: 5Gi
   domain: immich.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   db:
     host: '{{ .apps.postgres.host }}'
     name: immich
@@ -16,7 +14,7 @@ defaultConfig:
   redis:
     host: '{{ .apps.redis.host }}'
 defaultSecrets:
-  - key: dbPassword
+- key: dbPassword
 requiredSecrets:
-  - redis.password
-  - postgres.password
+- redis.password
+- postgres.password

indico/versions/3/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: indico
   namespace: {{ .namespace }}
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: indico
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

indico/versions/3/manifest.yaml

@@ -1,32 +1,30 @@
-version: 3.3.12-1
+version: 3.3.12-2
 requires:
-  - name: postgres
-  - name: redis
-  - name: smtp
+- name: postgres
+- name: redis
+- name: smtp
 defaultConfig:
   namespace: indico
-  externalDnsDomain: "{{ .cloud.domain }}"
-  domain: "indico.{{ .cloud.domain }}"
-  tlsSecretName: wildcard-wild-cloud-tls
+  domain: indico.{{ .cloud.domain }}
   storage: 2Gi
   timezone: UTC
   db:
-    host: "{{ .apps.postgres.host }}"
-    port: "{{ .apps.postgres.port }}"
+    host: '{{ .apps.postgres.host }}'
+    port: '{{ .apps.postgres.port }}'
     name: indico
     user: indico
   redis:
-    host: "{{ .apps.redis.host }}"
-    port: "6379"
+    host: '{{ .apps.redis.host }}'
+    port: '6379'
   smtp:
-    host: "{{ .apps.smtp.host }}"
-    port: "{{ .apps.smtp.port }}"
-    from: "{{ .apps.smtp.from }}"
-    user: "{{ .apps.smtp.user }}"
+    host: '{{ .apps.smtp.host }}'
+    port: '{{ .apps.smtp.port }}'
+    from: '{{ .apps.smtp.from }}'
+    user: '{{ .apps.smtp.user }}'
 defaultSecrets:
-  - key: dbPassword
-  - key: secretKey
+- key: dbPassword
+- key: secretKey
 requiredSecrets:
-  - postgres.password
-  - redis.password
-  - smtp.password
+- postgres.password
+- redis.password
+- smtp.password

jitsi/versions/stable/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: jitsi
   namespace: {{ .namespace }}
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: jitsi-web
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

jitsi/versions/stable/manifest.yaml

@@ -1,16 +1,14 @@
-version: web-1.0.9282-2
+version: web-1.0.9282-3
 defaultConfig:
   namespace: jitsi
-  domain: "jitsi.{{ .cloud.domain }}"
-  externalDnsDomain: "{{ .cloud.domain }}"
-  tlsSecretName: wildcard-wild-cloud-tls
+  domain: jitsi.{{ .cloud.domain }}
   xmppDomain: meet.jitsi
   xmppAuthDomain: auth.meet.jitsi
   xmppMucDomain: muc.meet.jitsi
   xmppInternalMucDomain: internal-muc.meet.jitsi
   xmppGuestDomain: guest.meet.jitsi
-  jvbStunServers: "stun.l.google.com:19302,stun1.l.google.com:19302"
+  jvbStunServers: stun.l.google.com:19302,stun1.l.google.com:19302
 defaultSecrets:
-  - key: jicofoAuthPassword
-  - key: jvbAuthPassword
-  - key: jicofoComponentSecret
+- key: jicofoAuthPassword
+- key: jvbAuthPassword
+- key: jicofoComponentSecret

karrot/versions/1/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: karrot
   namespace: {{ .namespace }}
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: karrot-frontend
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

karrot/versions/1/manifest.yaml

@@ -1,12 +1,10 @@
-version: v17.4.1
+version: v17.4.1-1
 requires:
-  - name: postgres
-  - name: smtp
+- name: postgres
+- name: smtp
 defaultConfig:
   namespace: karrot
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: karrot.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   db:
     host: '{{ .apps.postgres.host }}'
@@ -21,8 +19,8 @@ defaultConfig:
     from: '{{ .apps.smtp.from }}'
     user: '{{ .apps.smtp.user }}'
 defaultSecrets:
-  - key: secretKey
-  - key: dbPassword
+- key: secretKey
+- key: dbPassword
 requiredSecrets:
-  - postgres.password
-  - smtp.password
+- postgres.password
+- smtp.password

keila/versions/0/ingress.yaml

@@ -2,12 +2,6 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: keila
-  annotations:
-    traefik.ingress.kubernetes.io/router.tls: "true"
-    traefik.ingress.kubernetes.io/router.tls.certresolver: letsencrypt
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    traefik.ingress.kubernetes.io/router.middlewares: keila-cors@kubernetescrd
 spec:
   ingressClassName: traefik
   rules:
@@ -21,7 +15,3 @@ spec:
             name: keila
             port:
               number: 80
-  tls:
-    - secretName: "wildcard-wild-cloud-tls"
-      hosts:
-        - "{{ .domain }}"

keila/versions/0/kustomization.yaml

@@ -13,5 +13,4 @@ resources:
   - service.yaml
   - ingress.yaml
   - pvc.yaml
-  - db-init-job.yaml
-  - middleware-cors.yaml
+  - db-init-job.yaml

keila/versions/0/manifest.yaml

@@ -1,15 +1,13 @@
-version: 0.17.1-4
+version: 0.17.1-5
 requires:
-  - name: postgres
-  - name: smtp
+- name: postgres
+- name: smtp
 defaultConfig:
   namespace: keila
-  externalDnsDomain: '{{ .cloud.domain }}'
   storage: 1Gi
   domain: keila.{{ .cloud.domain }}
   disableRegistration: 'true'
   adminUser: admin@{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   db:
     host: '{{ .apps.postgres.host }}'
     port: '{{ .apps.postgres.port }}'
@@ -22,13 +20,23 @@ defaultConfig:
     user: '{{ .apps.smtp.user }}'
     tls: '{{ .apps.smtp.tls }}'
     startTls: '{{ .apps.smtp.startTls }}'
+  central:
+    headers:
+      response:
+        Access-Control-Allow-Origin: https://{{ .cloud.domain }}
+        Access-Control-Allow-Credentials: 'true'
+        Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS
+        Access-Control-Allow-Headers: Content-Type, Authorization, X-Requested-With,
+          Accept, Origin, Cache-Control, X-File-Name
+        Access-Control-Max-Age: '86400'
 defaultSecrets:
-  - key: secretKeyBase
-    default: "{{ random.AlphaNum 64 }}"
-  - key: dbPassword
-  - key: dbUrl
-    default: "postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable"
-  - key: adminPassword
-  - key: smtpPassword
+- key: secretKeyBase
+  default: '{{ random.AlphaNum 64 }}'
+- key: dbPassword
+- key: dbUrl
+  default: postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host
+    }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable
+- key: adminPassword
+- key: smtpPassword
 requiredSecrets:
-  - postgres.password
+- postgres.password

keila/versions/0/middleware-cors.yaml

@@ -1,28 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
-  name: cors
-spec:
-  headers:
-    accessControlAllowCredentials: true
-    accessControlAllowHeaders:
-      - "Content-Type"
-      - "Authorization" 
-      - "X-Requested-With"
-      - "Accept"
-      - "Origin"
-      - "Cache-Control"
-      - "X-File-Name"
-    accessControlAllowMethods:
-      - "GET"
-      - "POST" 
-      - "PUT"
-      - "DELETE"
-      - "OPTIONS"
-    accessControlAllowOriginList:
-      - "http://localhost:1313"
-      - "https://*.{{ .externalDnsDomain }}"
-      - "https://{{ .externalDnsDomain }}"
-    accessControlExposeHeaders:
-      - "*"
-    accessControlMaxAge: 86400

lemmy/versions/0/ingress.yaml

@@ -3,15 +3,8 @@ kind: Ingress
 metadata:
   name: lemmy-ingress
   namespace: {{ .namespace }}
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
 spec:
   ingressClassName: traefik
-  tls:
-  - hosts:
-    - {{ .domain }}
-    secretName: {{ .tlsSecretName }}
   rules:
   - host: {{ .domain }}
     http:

lemmy/versions/0/manifest.yaml

@@ -1,12 +1,10 @@
-version: 0.19.15-3
+version: 0.19.15-4
 requires:
-  - name: postgres
-  - name: smtp
+- name: postgres
+- name: smtp
 defaultConfig:
   namespace: lemmy
-  externalDnsDomain: lemmy.{{ .cloud.baseDomain }}
   domain: lemmy.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   pictrsStorage: 2Gi
   db:
@@ -18,12 +16,12 @@ defaultConfig:
     host: '{{ .apps.smtp.host }}'
     port: '{{ .apps.smtp.port }}'
     user: '{{ .apps.smtp.user }}'
-    from: 'noreply@{{ .cloud.baseDomain }}'
+    from: noreply@{{ .cloud.baseDomain }}
     tls: '{{ .apps.smtp.tls }}'
 defaultSecrets:
-  - key: dbPassword
-  - key: adminPassword
-  - key: jwtSecret
+- key: dbPassword
+- key: adminPassword
+- key: jwtSecret
 requiredSecrets:
-  - postgres.password
-  - smtp.password
+- postgres.password
+- smtp.password

librebooking/versions/3/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: librebooking
   namespace: {{ .namespace }}
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: librebooking
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

librebooking/versions/3/manifest.yaml

@@ -1,20 +1,18 @@
-version: 3.3.7-1
+version: 3.3.7-2
 requires:
-  - name: mysql
+- name: mysql
 defaultConfig:
   namespace: librebooking
-  externalDnsDomain: "{{ .cloud.domain }}"
   domain: booking.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   timezone: UTC
   db:
-    host: "{{ .apps.mysql.host }}"
-    port: "3306"
+    host: '{{ .apps.mysql.host }}'
+    port: '3306'
     name: librebooking
     user: librebooking
 defaultSecrets:
-  - key: dbPassword
-  - key: installPassword
+- key: dbPassword
+- key: installPassword
 requiredSecrets:
-  - mysql.rootPassword
+- mysql.rootPassword

limesurvey/versions/6/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: limesurvey
   namespace: limesurvey
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: limesurvey
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

limesurvey/versions/6/manifest.yaml

@@ -1,28 +1,26 @@
-version: 6.17.5-1
+version: 6.17.5-2
 requires:
-  - name: postgres
-  - name: smtp
+- name: postgres
+- name: smtp
 defaultConfig:
   namespace: limesurvey
-  externalDnsDomain: "{{ .cloud.domain }}"
   domain: limesurvey.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   adminUser: admin
-  adminEmail: "{{ .operator.email }}"
+  adminEmail: '{{ .operator.email }}'
   db:
-    host: "{{ .apps.postgres.host }}"
-    port: "{{ .apps.postgres.port }}"
+    host: '{{ .apps.postgres.host }}'
+    port: '{{ .apps.postgres.port }}'
     name: limesurvey
     user: limesurvey
   smtp:
-    host: "{{ .apps.smtp.host }}"
-    port: "{{ .apps.smtp.port }}"
-    from: "{{ .apps.smtp.from }}"
-    user: "{{ .apps.smtp.user }}"
+    host: '{{ .apps.smtp.host }}'
+    port: '{{ .apps.smtp.port }}'
+    from: '{{ .apps.smtp.from }}'
+    user: '{{ .apps.smtp.user }}'
 defaultSecrets:
-  - key: adminPassword
-  - key: dbPassword
-  - key: smtpPassword
+- key: adminPassword
+- key: dbPassword
+- key: smtpPassword
 requiredSecrets:
-  - postgres.password
+- postgres.password

listmonk/versions/5/ingress.yaml

@@ -3,17 +3,8 @@ kind: Ingress
 metadata:
   name: listmonk
   namespace: listmonk
-  annotations:
-    traefik.ingress.kubernetes.io/router.entrypoints: websecure
-    traefik.ingress.kubernetes.io/router.tls: "true"
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
 spec:
   ingressClassName: traefik
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}
   rules:
     - host: {{ .domain }}
       http:
@@ -24,4 +15,4 @@ spec:
               service:
                 name: listmonk
                 port:
-                  number: 80
+                  number: 80

listmonk/versions/5/manifest.yaml

@@ -1,11 +1,9 @@
-version: 5.0.3-2
+version: 5.0.3-3
 requires:
-  - name: postgres
+- name: postgres
 defaultConfig:
   namespace: listmonk
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: listmonk.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 1Gi
   db:
     host: '{{ .apps.postgres.host }}'
@@ -13,8 +11,9 @@ defaultConfig:
     name: listmonk
     user: listmonk
 defaultSecrets:
-  - key: dbPassword
-  - key: dbUrl
-    default: 'postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable'
+- key: dbPassword
+- key: dbUrl
+  default: postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host
+    }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable
 requiredSecrets:
-  - postgres.password
+- postgres.password

longhorn/versions/v1/ingress.yaml

@@ -16,7 +16,3 @@ spec:
                 name: longhorn-frontend
                 port:
                   number: 80
-  tls:
-    - secretName: wildcard-internal-wild-cloud-tls
-      hosts:
-        - "longhorn.{{ .internalDomain }}"

longhorn/versions/v1/manifest.yaml

@@ -1,10 +1,9 @@
-version: v1.8.1-4
+version: v1.8.1-5
 deploymentName: longhorn-ui
 requires:
-  - name: traefik
-  - name: nfs
-  - name: snapshot-controller
+- name: nfs
+- name: snapshot-controller
 defaultConfig:
   namespace: longhorn-system
-  internalDomain: "{{ .cloud.internalDomain }}"
-  backupTarget: "nfs://{{ .apps.nfs.host }}:/data/{{ .cluster.name }}/backups"
+  internalDomain: '{{ .cloud.internalDomain }}'
+  backupTarget: nfs://{{ .apps.nfs.host }}:/data/{{ .cluster.name }}/backups

loomio/versions/3/ingress.yaml

@@ -2,15 +2,8 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: loomio
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
 spec:
   ingressClassName: traefik
-  tls:
-  - hosts:
-    - {{ .domain }}
-    secretName: {{ .tlsSecretName }}
   rules:
   - host: {{ .domain }}
     http:
@@ -21,4 +14,4 @@ spec:
           service:
             name: loomio
             port:
-              number: 80
+              number: 80

loomio/versions/3/manifest.yaml

@@ -1,15 +1,13 @@
-version: 3.0.24-2
+version: 3.0.24-3
 requires:
-  - name: postgres
-    installed_as: postgres
-  - name: redis
-  - name: smtp
+- name: postgres
+  installed_as: postgres
+- name: redis
+- name: smtp
 defaultConfig:
   namespace: loomio
-  externalDnsDomain: '{{ .cloud.domain }}'
   appName: Loomio
-  domain: 'loomio.{{ .cloud.domain }}'
-  tlsSecretName: wildcard-wild-cloud-tls
+  domain: loomio.{{ .cloud.domain }}
   storage:
     uploads: 5Gi
     files: 5Gi
@@ -31,15 +29,16 @@ defaultConfig:
     tls: '{{ .apps.smtp.tls }}'
     from: '{{ .apps.smtp.from }}'
 defaultSecrets:
-  - key: dbPassword
-    default: "{{ random.AlphaNum 32 }}"
-  - key: dbUrl
-    default: "postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?pool=30&sslmode=disable"
-  - key: deviseSecret
-    default: "{{ random.AlphaNum 32 }}"
-  - key: secretCookieToken
-    default: "{{ random.AlphaNum 32 }}"
-  - key: smtpPassword
-    default: "{{ .secrets.smtp.password }}"
+- key: dbPassword
+  default: '{{ random.AlphaNum 32 }}'
+- key: dbUrl
+  default: postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host
+    }}:{{ .app.db.port }}/{{ .app.db.name }}?pool=30&sslmode=disable
+- key: deviseSecret
+  default: '{{ random.AlphaNum 32 }}'
+- key: secretCookieToken
+  default: '{{ random.AlphaNum 32 }}'
+- key: smtpPassword
+  default: '{{ .secrets.smtp.password }}'
 requiredSecrets:
-  - postgres.password
+- postgres.password

mastodon/versions/4/ingress.yaml

@@ -3,16 +3,8 @@ kind: Ingress
 metadata:
   name: mastodon
   namespace: {{ .namespace }}
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    traefik.ingress.kubernetes.io/router.entrypoints: websecure
 spec:
   ingressClassName: traefik
-  tls:
-  - hosts:
-    - {{ .domain }}
-    secretName: {{ .tlsSecretName }}
   rules:
   - host: {{ .domain }}
     http:

mastodon/versions/4/manifest.yaml

@@ -1,17 +1,15 @@
-version: 4.5.3-3
+version: 4.5.3-4
 requires:
-  - name: postgres
-  - name: redis
-  - name: smtp
+- name: postgres
+- name: redis
+- name: smtp
 defaultConfig:
   namespace: mastodon
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: mastodon.{{ .cloud.domain }}
   locale: en
   singleUserMode: false
   assetsStorage: 5Gi
   systemStorage: 5Gi
-  tlsSecretName: wildcard-wild-cloud-tls
   sidekiq:
     replicas: 1
   db:
@@ -30,22 +28,20 @@ defaultConfig:
     user: '{{ .apps.smtp.user }}'
     tls: '{{ .apps.smtp.tls }}'
 defaultSecrets:
-  - key: secretKeyBase
-    default: "{{ random.AlphaNum 128 }}"
-  - key: otpSecret
-    default: "{{ random.AlphaNum 128 }}"
-  - key: vapidPrivateKey
-    # Generated by vapid-init-job.yaml on first deploy
-  - key: vapidPublicKey
-    # Generated by vapid-init-job.yaml on first deploy
-  - key: activeRecordPrimaryKey
-    default: "{{ random.AlphaNum 32 }}"
-  - key: activeRecordDeterministicKey
-    default: "{{ random.AlphaNum 32 }}"
-  - key: activeRecordKeyDerivationSalt
-    default: "{{ random.AlphaNum 32 }}"
-  - key: dbPassword
-  - key: smtpPassword
+- key: secretKeyBase
+  default: '{{ random.AlphaNum 128 }}'
+- key: otpSecret
+  default: '{{ random.AlphaNum 128 }}'
+- key: vapidPrivateKey
+- key: vapidPublicKey
+- key: activeRecordPrimaryKey
+  default: '{{ random.AlphaNum 32 }}'
+- key: activeRecordDeterministicKey
+  default: '{{ random.AlphaNum 32 }}'
+- key: activeRecordKeyDerivationSalt
+  default: '{{ random.AlphaNum 32 }}'
+- key: dbPassword
+- key: smtpPassword
 requiredSecrets:
-  - postgres.password
-  - redis.password
+- postgres.password
+- redis.password

mattermost/versions/10/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: mattermost
   namespace: mattermost
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: mattermost
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

mattermost/versions/10/manifest.yaml

@@ -1,11 +1,9 @@
-version: 10.8.1-1
+version: 10.8.1-2
 requires:
-  - name: postgres
+- name: postgres
 defaultConfig:
   namespace: mattermost
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: mattermost.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   db:
     host: '{{ .apps.postgres.host }}'
@@ -13,8 +11,9 @@ defaultConfig:
     name: mattermost
     user: mattermost
 defaultSecrets:
-  - key: dbPassword
-  - key: dbUrl
-    default: 'postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable&connect_timeout=10'
+- key: dbPassword
+- key: dbUrl
+  default: postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host
+    }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable&connect_timeout=10
 requiredSecrets:
-  - postgres.password
+- postgres.password

mautic/versions/7/ingress.yaml

@@ -2,10 +2,6 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: mautic
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -19,7 +15,3 @@ spec:
                 name: mautic
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

mautic/versions/7/manifest.yaml

@@ -1,18 +1,16 @@
-version: 7.1.2-2
+version: 7.1.2-3
 requires:
-  - name: mysql
-  - name: smtp
+- name: mysql
+- name: smtp
 defaultConfig:
   namespace: mautic
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: mautic.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   siteUrl: https://mautic.{{ .cloud.domain }}
   adminEmail: '{{ .operator.email }}'
   db:
     host: '{{ .apps.mysql.host }}'
-    port: "3306"
+    port: '3306'
     name: mautic
     user: mautic
   smtp:
@@ -21,8 +19,8 @@ defaultConfig:
     user: '{{ .apps.smtp.user }}'
     from: '{{ .apps.smtp.from }}'
 defaultSecrets:
-  - key: dbPassword
-  - key: adminPassword
+- key: dbPassword
+- key: adminPassword
 requiredSecrets:
-  - mysql.rootPassword
-  - smtp.password
+- mysql.rootPassword
+- smtp.password

mediawiki/versions/1/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: mediawiki
   namespace: mediawiki
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: mediawiki
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

mediawiki/versions/1/manifest.yaml

@@ -1,18 +1,16 @@
-version: 1.43.1-1
+version: 1.43.1-2
 requires:
-  - name: mysql
-  - name: smtp
+- name: mysql
+- name: smtp
 defaultConfig:
   namespace: mediawiki
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: wiki.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   siteName: My Wiki
   adminUser: admin
   db:
     host: '{{ .apps.mysql.host }}'
-    port: "3306"
+    port: '3306'
     name: mediawiki
     user: mediawiki
   smtp:
@@ -21,10 +19,10 @@ defaultConfig:
     from: '{{ .apps.smtp.from }}'
     user: '{{ .apps.smtp.user }}'
 defaultSecrets:
-  - key: adminPassword
-  - key: secretKey
-  - key: upgradeKey
-  - key: dbPassword
-  - key: smtpPassword
+- key: adminPassword
+- key: secretKey
+- key: upgradeKey
+- key: dbPassword
+- key: smtpPassword
 requiredSecrets:
-  - mysql.rootPassword
+- mysql.rootPassword

memcached/versions/1/manifest.yaml

@@ -1,5 +1,4 @@
-version: 1.6.32-3
-requires: []
+version: 1.6.32-4
 defaultConfig:
   namespace: memcached
   host: memcached.memcached.svc.cluster.local

mobilizon/versions/5/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: mobilizon
   namespace: {{ .namespace }}
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: mobilizon
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

mobilizon/versions/5/manifest.yaml

@@ -1,12 +1,10 @@
-version: 5.2.3-3
+version: 5.2.3-4
 requires:
-  - name: postgres
-  - name: smtp
+- name: postgres
+- name: smtp
 defaultConfig:
   namespace: mobilizon
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: mobilizon.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   instanceName: Mobilizon
   instanceEmail: '{{ .operator.email }}'
@@ -21,10 +19,10 @@ defaultConfig:
     user: '{{ .apps.smtp.user }}'
     from: '{{ .apps.smtp.from }}'
 defaultSecrets:
-  - key: dbPassword
-  - key: secretKeyBase
-  - key: secretKey
-  - key: smtpPassword
+- key: dbPassword
+- key: secretKeyBase
+- key: secretKey
+- key: smtpPassword
 requiredSecrets:
-  - postgres.password
-  - smtp.password
+- postgres.password
+- smtp.password

moodle/versions/4/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: moodle
   namespace: {{ .namespace }}
-  annotations:
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: moodle
                 port:
                   number: 8080
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

moodle/versions/4/manifest.yaml

@@ -1,19 +1,17 @@
-version: 4.5.2-3
+version: 4.5.2-4
 requires:
-  - name: mysql
+- name: mysql
 defaultConfig:
   namespace: moodle
   domain: moodle.{{ .cloud.domain }}
-  externalDnsDomain: "{{ .cloud.domain }}"
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   db:
-    host: "{{ .apps.mysql.host }}"
-    port: "3306"
+    host: '{{ .apps.mysql.host }}'
+    port: '3306'
     name: moodle
     user: moodle
 defaultSecrets:
-  - key: dbPassword
-  - key: adminPassword
+- key: dbPassword
+- key: adminPassword
 requiredSecrets:
-  - mysql.rootPassword
+- mysql.rootPassword

mysql/versions/9/manifest.yaml

@@ -1,5 +1,4 @@
-version: 9.1.0-3
-requires: []
+version: 9.1.0-4
 defaultConfig:
   namespace: mysql
   host: mysql.mysql.svc.cluster.local
@@ -7,5 +6,5 @@ defaultConfig:
   dbName: mysql
   user: mysql
 defaultSecrets:
-  - key: rootPassword
-  - key: password
+- key: rootPassword
+- key: password

nextcloud/versions/34/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: nextcloud
   namespace: {{ .namespace }}
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: nextcloud
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

nextcloud/versions/34/manifest.yaml

@@ -1,12 +1,10 @@
-version: 34.0.0-1
+version: 34.0.0-2
 requires:
-  - name: postgres
-  - name: redis
+- name: postgres
+- name: redis
 defaultConfig:
   namespace: nextcloud
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: nextcloud.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 5Gi
   adminUser: admin
   db:
@@ -17,10 +15,11 @@ defaultConfig:
   redis:
     host: '{{ .apps.redis.host }}'
 defaultSecrets:
-  - key: adminPassword
-  - key: dbPassword
-  - key: dbUrl
-    default: 'postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable'
+- key: adminPassword
+- key: dbPassword
+- key: dbUrl
+  default: postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host
+    }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable
 requiredSecrets:
-  - postgres.password
-  - redis.password
+- postgres.password
+- redis.password

nocodb/versions/2026/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: nocodb
   namespace: nocodb
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: nocodb
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

nocodb/versions/2026/manifest.yaml

@@ -1,11 +1,9 @@
-version: 2026.04.1-1
+version: 2026.04.1-2
 requires:
-  - name: postgres
+- name: postgres
 defaultConfig:
   namespace: nocodb
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: nocodb.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 1Gi
   db:
     host: '{{ .apps.postgres.host }}'
@@ -13,9 +11,10 @@ defaultConfig:
     name: nocodb
     user: nocodb
 defaultSecrets:
-  - key: dbPassword
-  - key: ncAuthJwtSecret
-  - key: dbUrl
-    default: 'pg://{{ .app.db.host }}:{{ .app.db.port }}?u={{ .app.db.user }}&p={{ .secrets.dbPassword }}&d={{ .app.db.name }}'
+- key: dbPassword
+- key: ncAuthJwtSecret
+- key: dbUrl
+  default: pg://{{ .app.db.host }}:{{ .app.db.port }}?u={{ .app.db.user }}&p={{ .secrets.dbPassword
+    }}&d={{ .app.db.name }}
 requiredSecrets:
-  - postgres.password
+- postgres.password

odoo/versions/18/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: odoo
   namespace: {{ .namespace }}
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: odoo
                 port:
                   number: 8069
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

odoo/versions/18/manifest.yaml

@@ -1,19 +1,17 @@
-version: 18.0-2
+version: 18.0-3
 requires:
-  - name: postgres
+- name: postgres
 defaultConfig:
   namespace: odoo
-  externalDnsDomain: "{{ .cloud.domain }}"
   domain: odoo.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   db:
-    host: "{{ .apps.postgres.host }}"
-    port: "{{ .apps.postgres.port }}"
+    host: '{{ .apps.postgres.host }}'
+    port: '{{ .apps.postgres.port }}'
     name: odoo
     user: odoo
 defaultSecrets:
-  - key: dbPassword
-  - key: adminPassword
+- key: dbPassword
+- key: adminPassword
 requiredSecrets:
-  - postgres.password
+- postgres.password

ohmyform/versions/1/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: ohmyform
   namespace: {{ .namespace }}
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -27,7 +23,3 @@ spec:
                 name: ohmyform-ui
                 port:
                   number: 4000
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

ohmyform/versions/1/manifest.yaml

@@ -1,26 +1,25 @@
-version: 1.0.3-2
+version: 1.0.3-3
 requires:
-  - name: postgres
-  - name: redis
+- name: postgres
+- name: redis
 defaultConfig:
   namespace: ohmyform
-  externalDnsDomain: "{{ .cloud.domain }}"
   domain: ohmyform.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
-  adminEmail: "{{ .operator.email }}"
+  adminEmail: '{{ .operator.email }}'
   db:
-    host: "{{ .apps.postgres.host }}"
-    port: "{{ .apps.postgres.port }}"
+    host: '{{ .apps.postgres.host }}'
+    port: '{{ .apps.postgres.port }}'
     name: ohmyform
     user: ohmyform
   redis:
-    host: "{{ .apps.redis.host }}"
+    host: '{{ .apps.redis.host }}'
 defaultSecrets:
-  - key: dbPassword
-  - key: dbUrl
-    default: "postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable"
-  - key: secretKey
-  - key: adminPassword
+- key: dbPassword
+- key: dbUrl
+  default: postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host
+    }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable
+- key: secretKey
+- key: adminPassword
 requiredSecrets:
-  - postgres.password
-  - redis.password
+- postgres.password
+- redis.password

open-webui/versions/0/ingress.yaml

@@ -3,10 +3,6 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: open-webui
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    traefik.ingress.kubernetes.io/router.middlewares: crowdsec-crowdsec-bouncer@kubernetescrd,crowdsec-rate-limit@kubernetescrd
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: open-webui
                 port:
                   number: 80
-  tls:
-    - secretName: wildcard-wild-cloud-tls
-      hosts:
-        - {{ .domain }}

open-webui/versions/0/manifest.yaml

@@ -1,13 +1,11 @@
-version: 0.9.5-4
-requires: []
+version: 0.9.5-5
 defaultConfig:
   namespace: open-webui
-  externalDnsDomain: '{{ .cloud.domain }}'
   storage: 2Gi
   domain: chat.{{ .cloud.domain }}
   vllmApiUrl: http://vllm-service.llm.svc.cluster.local:8000/v1
   adminEmail: '{{ .operator.email }}'
 defaultSecrets:
-  - key: secretKey
-  - key: adminPassword
-  - key: vllmApiKey
+- key: secretKey
+- key: adminPassword
+- key: vllmApiKey

openproject/versions/16/ingress.yaml

@@ -4,15 +4,8 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: openproject
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
 spec:
   ingressClassName: traefik
-  tls:
-    - hosts:
-        - "{{ .domain }}"
-      secretName: "wildcard-wild-cloud-tls"
   rules:
     - host: "{{ .domain }}"
       http:

openproject/versions/16/manifest.yaml

@@ -1,15 +1,13 @@
-version: 16.1.1-4
+version: 16.1.1-5
 requires:
-  - name: postgres
-  - name: memcached
+- name: postgres
+- name: memcached
 defaultConfig:
   namespace: openproject
-  externalDnsDomain: '{{ .cloud.domain }}'
   storage: 2Gi
   adminUserName: OpenProject Admin
   adminUserEmail: '{{ .operator.email }}'
   domain: openproject.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   db:
     host: '{{ .apps.postgres.host }}'
     port: '{{ .apps.postgres.port }}'
@@ -19,7 +17,7 @@ defaultConfig:
     host: '{{ .apps.memcached.host }}'
     port: '{{ .apps.memcached.port }}'
 defaultSecrets:
-  - key: dbPassword
-  - key: adminPassword
+- key: dbPassword
+- key: adminPassword
 requiredSecrets:
-  - postgres.password
+- postgres.password

outline/versions/1/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: outline
   namespace: outline
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: outline
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

outline/versions/1/manifest.yaml

@@ -1,13 +1,11 @@
-version: 1.8.1-1
+version: 1.8.1-2
 requires:
-  - name: postgres
-  - name: redis
-  - name: smtp
+- name: postgres
+- name: redis
+- name: smtp
 defaultConfig:
   namespace: outline
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: outline.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   db:
     host: '{{ .apps.postgres.host }}'
@@ -22,13 +20,14 @@ defaultConfig:
     from: '{{ .apps.smtp.from }}'
     user: '{{ .apps.smtp.user }}'
 defaultSecrets:
-  - key: utilsSecret
-  - key: secretKey
-    default: '{{ crypto.SHA256 .secrets.utilsSecret }}'
-  - key: dbPassword
-  - key: dbUrl
-    default: 'postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable'
-  - key: smtpPassword
+- key: utilsSecret
+- key: secretKey
+  default: '{{ crypto.SHA256 .secrets.utilsSecret }}'
+- key: dbPassword
+- key: dbUrl
+  default: postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host
+    }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable
+- key: smtpPassword
 requiredSecrets:
-  - postgres.password
-  - redis.password
+- postgres.password
+- redis.password