Add synapse federation Ingress for serverName path routing

akaunting/versions/3/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: akaunting
   namespace: akaunting
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: akaunting
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

akaunting/versions/3/manifest.yaml

@@ -1,12 +1,10 @@
-version: 3.1.21-1
+version: 3.1.21-2
 requires:
-  - name: mysql
+- name: mysql
-  - name: smtp
+- name: smtp
 defaultConfig:
   namespace: akaunting
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: akaunting.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   locale: en-US
   dbPrefix: aka_
@@ -15,7 +13,7 @@ defaultConfig:
   adminEmail: '{{ .operator.email }}'
   db:
     host: '{{ .apps.mysql.host }}'
-    port: "3306"
+    port: '3306'
     name: akaunting
     user: akaunting
   smtp:
@@ -24,8 +22,8 @@ defaultConfig:
     from: '{{ .apps.smtp.from }}'
     user: '{{ .apps.smtp.user }}'
 defaultSecrets:
-  - key: dbPassword
+- key: dbPassword
-  - key: adminPassword
+- key: adminPassword
-  - key: smtpPassword
+- key: smtpPassword
 requiredSecrets:
-  - mysql.rootPassword
+- mysql.rootPassword

aptly/versions/1/ingress.yaml

@@ -2,10 +2,6 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: aptly
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -19,7 +15,3 @@ spec:
                 name: aptly
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

aptly/versions/1/manifest.yaml

@@ -1,11 +1,9 @@
-version: 1.6.2-3
+version: 1.6.2-4
 defaultConfig:
   namespace: aptly
-  externalDnsDomain: "{{ .cloud.domain }}"
+  domain: aptly.{{ .cloud.domain }}
-  domain: "aptly.{{ .cloud.domain }}"
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 5Gi
   apiUser: aptly
-  operatorEmail: "{{ .operator.email }}"
+  operatorEmail: '{{ .operator.email }}'
 defaultSecrets:
-  - key: apiPassword
+- key: apiPassword

baserow/versions/2/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: baserow
   namespace: {{ .namespace }}
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: baserow
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

baserow/versions/2/manifest.yaml

@@ -1,23 +1,21 @@
-version: 2.2.2-2
+version: 2.2.2-3
 requires:
-  - name: postgres
+- name: postgres
-  - name: redis
+- name: redis
 defaultConfig:
   namespace: baserow
-  externalDnsDomain: "{{ .cloud.domain }}"
   domain: baserow.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   db:
-    host: "{{ .apps.postgres.host }}"
+    host: '{{ .apps.postgres.host }}'
-    port: "5432"
+    port: '5432'
     name: baserow
     user: baserow
   redis:
-    host: "{{ .apps.redis.host }}"
+    host: '{{ .apps.redis.host }}'
 defaultSecrets:
-  - key: dbPassword
+- key: dbPassword
-  - key: secretKey
+- key: secretKey
 requiredSecrets:
-  - postgres.password
+- postgres.password
-  - redis.password
+- redis.password

bookstack/versions/26/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: bookstack
   namespace: {{ .namespace }}
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: bookstack
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

bookstack/versions/26/manifest.yaml

@@ -1,12 +1,10 @@
-version: 26.05.1-2
+version: 26.05.1-3
 requires:
-  - name: mysql
+- name: mysql
-  - name: smtp
+- name: smtp
 defaultConfig:
   namespace: bookstack
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: bookstack.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   db:
     host: '{{ .apps.mysql.host }}'
@@ -19,8 +17,8 @@ defaultConfig:
     from: '{{ .apps.smtp.from }}'
     user: '{{ .apps.smtp.user }}'
 defaultSecrets:
-  - key: appKey
+- key: appKey
-  - key: dbPassword
+- key: dbPassword
-  - key: smtpPassword
+- key: smtpPassword
 requiredSecrets:
-  - mysql.rootPassword
+- mysql.rootPassword

bookwyrm/versions/0/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: bookwyrm
   namespace: bookwyrm
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: bookwyrm
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

bookwyrm/versions/0/manifest.yaml

@@ -1,13 +1,11 @@
-version: 0.8.7-1
+version: 0.8.7-2
 requires:
-  - name: postgres
+- name: postgres
-  - name: redis
+- name: redis
-  - name: smtp
+- name: smtp
 defaultConfig:
   namespace: bookwyrm
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: bookwyrm.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   db:
     host: '{{ .apps.postgres.host }}'
@@ -22,9 +20,9 @@ defaultConfig:
     from: '{{ .apps.smtp.from }}'
     user: '{{ .apps.smtp.user }}'
 defaultSecrets:
-  - key: secretKey
+- key: secretKey
-  - key: dbPassword
+- key: dbPassword
-  - key: smtpPassword
+- key: smtpPassword
 requiredSecrets:
-  - postgres.password
+- postgres.password
-  - redis.password
+- redis.password

chamilo/versions/1/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: chamilo
   namespace: {{ .namespace }}
-  annotations:
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: chamilo
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

chamilo/versions/1/manifest.yaml

@@ -1,19 +1,17 @@
-version: 1.11.28-1
+version: 1.11.28-2
 requires:
-  - name: mysql
+- name: mysql
-  - name: smtp
+- name: smtp
 defaultConfig:
   namespace: chamilo
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: chamilo.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   siteName: Chamilo LMS
   adminUser: admin
   adminEmail: '{{ .operator.email }}'
   db:
     host: '{{ .apps.mysql.host }}'
-    port: "3306"
+    port: '3306'
     name: chamilo
     user: chamilo
   smtp:
@@ -22,8 +20,8 @@ defaultConfig:
     from: '{{ .apps.smtp.from }}'
     user: '{{ .apps.smtp.user }}'
 defaultSecrets:
-  - key: adminPassword
+- key: adminPassword
-  - key: dbPassword
+- key: dbPassword
-  - key: smtpPassword
+- key: smtpPassword
 requiredSecrets:
-  - mysql.rootPassword
+- mysql.rootPassword

community-search/versions/0/ingress.yaml

@@ -2,10 +2,6 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: community-search
-  annotations:
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -19,7 +15,3 @@ spec:
             name: community-search
             port:
               number: 80
-  tls:
-  - hosts:
-    - {{ .domain }}
-    secretName: {{ .tlsSecretName }}

community-search/versions/0/manifest.yaml

@@ -1,12 +1,9 @@
-version: 0.1.2_1
+version: 0.1.2_1-1
-requires: []
 defaultConfig:
   namespace: community-search
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: search.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
-  selfUrl: 'https://search.{{ .cloud.domain }}'
+  selfUrl: https://search.{{ .cloud.domain }}
-  selfName: 'Community Search'
+  selfName: Community Search
 defaultSecrets:
-  - key: adminToken
+- key: adminToken

crowdsec/versions/v1/crowdsec-deployment.yaml

@@ -60,7 +60,7 @@ spec:
         - name: LEVEL_INFO
           value: "true"
         - name: AGENT_USERNAME
-          value: "kubernetes-cluster"
+          value: "{{ if .agentUsername }}{{ .agentUsername }}{{ else }}kubernetes-cluster{{ end }}"
         - name: AGENT_PASSWORD
           valueFrom:
             secretKeyRef:
@@ -72,6 +72,12 @@ spec:
               name: crowdsec-secrets
               key: bouncerApiKey
               optional: true
+        {{ if .centralLapiUrl }}
+        - name: DISABLE_LOCAL_API
+          value: "true"
+        - name: LOCAL_API_URL
+          value: "{{ .centralLapiUrl }}"
+        {{ end }}
         ports:
         - name: lapi
           containerPort: 8080
@@ -79,6 +85,7 @@ spec:
         - name: prometheus
           containerPort: 6060
           protocol: TCP
+        {{ if not .centralLapiUrl }}
         livenessProbe:
           httpGet:
             path: /health
@@ -91,6 +98,7 @@ spec:
             port: 8080
           initialDelaySeconds: 10
           periodSeconds: 10
+        {{ end }}
         resources:
           requests:
             cpu: 50m

crowdsec/versions/v1/manifest.yaml

@@ -1,4 +1,4 @@
-version: v1.7.8-1
+version: v1.7.8-4
 requires:
   - name: longhorn
   - name: traefik
@@ -6,6 +6,8 @@ defaultConfig:
   namespace: crowdsec
   rateLimitAverage: "100"
   rateLimitBurst: "100"
+  centralLapiUrl: ""
+  agentUsername: ""
 defaultSecrets:
   - key: agentPassword
   - key: bouncerApiKey

crowdsec/versions/v1/middleware.yaml

@@ -12,7 +12,7 @@ spec:
   plugin:
     bouncer:
       crowdsecLapiScheme: http
-      crowdsecLapiHost: crowdsec-lapi.crowdsec.svc.cluster.local:8080
+      crowdsecLapiHost: {{ if .centralLapiUrl }}{{ strings.TrimPrefix "http://" .centralLapiUrl }}{{ else }}crowdsec-lapi.crowdsec.svc.cluster.local:8080{{ end }}
       crowdsecLapiKeyFile: /etc/traefik/crowdsec/api-key
       crowdsecMode: stream
       updateIntervalSeconds: 15

cryptpad/versions/2024/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: cryptpad
   namespace: cryptpad
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -30,8 +26,3 @@ spec:
                 name: cryptpad
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-        - {{ .sandboxDomain }}
-      secretName: {{ .tlsSecretName }}

cryptpad/versions/2024/manifest.yaml

@@ -1,10 +1,8 @@
-version: 2026.5.1-2
+version: 2026.5.1-3
 defaultConfig:
   namespace: cryptpad
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: cryptpad.{{ .cloud.domain }}
   sandboxDomain: cryptpad-sandbox.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
 defaultSecrets:
-  - key: adminKey
+- key: adminKey

decidim/versions/0/ingress.yaml

@@ -4,15 +4,8 @@ kind: Ingress
 metadata:
   name: decidim
   namespace: decidim
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
 spec:
   ingressClassName: traefik
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}
   rules:
     - host: {{ .domain }}
       http:

decidim/versions/0/manifest.yaml

@@ -1,16 +1,14 @@
-version: 0.31.0-3
+version: 0.31.0-4
 requires:
-  - name: postgres
+- name: postgres
-  - name: redis
+- name: redis
-  - name: smtp
+- name: smtp
 defaultConfig:
   namespace: decidim
-  externalDnsDomain: '{{ .cloud.domain }}'
   storage: 2Gi
   systemAdminEmail: '{{ .operator.email }}'
-  siteName: 'Decidim'
+  siteName: Decidim
   domain: decidim.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   db:
     host: '{{ .apps.postgres.host }}'
     port: '{{ .apps.postgres.port }}'
@@ -27,13 +25,14 @@ defaultConfig:
     tls: '{{ .apps.smtp.tls }}'
     startTls: '{{ .apps.smtp.startTls }}'
 defaultSecrets:
-  - key: systemAdminPassword
+- key: systemAdminPassword
-  - key: secretKeyBase
+- key: secretKeyBase
-    default: "{{ random.AlphaNum 128 }}"
+  default: '{{ random.AlphaNum 128 }}'
-  - key: dbPassword
+- key: dbPassword
-  - key: dbUrl
+- key: dbUrl
-    default: "postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable"
+  default: postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host
+    }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable
 requiredSecrets:
-  - postgres.password
+- postgres.password
-  - redis.password
+- redis.password
-  - smtp.password
+- smtp.password

discourse/versions/3/db-init-job.yaml

@@ -69,6 +69,7 @@ spec:
               END IF;
             END
             \$\$;
+            ALTER USER $DISCOURSE_DB_USER WITH PASSWORD '$DISCOURSE_DB_PASSWORD';
             GRANT ALL PRIVILEGES ON DATABASE $DISCOURSE_DB_NAME TO $DISCOURSE_DB_USER;
             GRANT ALL ON SCHEMA public TO $DISCOURSE_DB_USER;
             GRANT USAGE ON SCHEMA public TO $DISCOURSE_DB_USER;

discourse/versions/3/ingress.yaml

@@ -5,9 +5,6 @@ kind: Ingress
 metadata:
   name: discourse
   namespace: "{{ .namespace }}"
-  annotations:
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/target: "{{ .externalDnsDomain }}"
 spec:
   ingressClassName: traefik
   rules:
@@ -21,7 +18,3 @@ spec:
                 name: discourse
                 port:
                   name: http
-  tls:
-    - hosts:
-        - "{{ .domain }}"
-      secretName: wildcard-external-wild-cloud-tls

discourse/versions/3/manifest.yaml

@@ -1,17 +1,15 @@
-version: 3.5.3-4
+version: 3.5.3-5
 requires:
-  - name: postgres
+- name: postgres
-  - name: redis
+- name: redis
-  - name: smtp
+- name: smtp
 defaultConfig:
   namespace: discourse
-  externalDnsDomain: '{{ .cloud.domain }}'
   storage: 2Gi
   adminEmail: '{{ .operator.email }}'
   adminUsername: admin
-  siteName: 'Community'
+  siteName: Community
   domain: discourse.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   db:
     host: '{{ .apps.postgres.host }}'
     port: '{{ .apps.postgres.port }}'
@@ -28,13 +26,14 @@ defaultConfig:
     tls: '{{ .apps.smtp.tls }}'
     startTls: '{{ .apps.smtp.startTls }}'
 defaultSecrets:
-  - key: adminPassword
+- key: adminPassword
-  - key: secretKeyBase
+- key: secretKeyBase
-    default: "{{ random.Hex 32 }}"
+  default: '{{ random.Hex 32 }}'
-  - key: smtpPassword
+- key: smtpPassword
-  - key: dbPassword
+- key: dbPassword
-  - key: dbUrl
+- key: dbUrl
-    default: "postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable"
+  default: postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host
+    }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable
 requiredSecrets:
-  - postgres.password
+- postgres.password
-  - redis.password
+- redis.password

docker-registry/versions/3/ingress.yaml

@@ -15,7 +15,3 @@ spec:
                 name: docker-registry
                 port:
                   number: 5000
-  tls:
-    - hosts:
-        - {{ .host }}
-      secretName: wildcard-internal-wild-cloud-tls

docker-registry/versions/3/manifest.yaml

@@ -1,8 +1,5 @@
-version: "3.0.0-1"
+version: 3.0.0-2
-requires:
-  - name: traefik
-  - name: cert-manager
 defaultConfig:
   namespace: docker-registry
-  host: "registry.{{ .cloud.internalDomain }}"
+  host: registry.{{ .cloud.internalDomain }}
   storage: 5Gi

e2e-test-app/versions/1/manifest.yaml

@@ -1,11 +1,9 @@
-version: 1.0.0-1
+version: 1.0.0-2
 requires:
-  - name: postgres
+- name: postgres
 defaultConfig:
   namespace: e2e-test-app
   domain: e2e-test-app.{{ .cloud.domain }}
-  externalDnsDomain: '{{ .cloud.domain }}'
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 1Gi
   db:
     host: '{{ .apps.postgres.host }}'
@@ -13,8 +11,9 @@ defaultConfig:
     name: e2e_test_app
     user: e2e_test_app
 defaultSecrets:
-  - key: dbPassword
+- key: dbPassword
-  - key: dbUrl
+- key: dbUrl
-    default: "postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable"
+  default: postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host
+    }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable
 requiredSecrets:
-  - postgres.password
+- postgres.password

e2e-test-app/versions/2/manifest.yaml

@@ -1,12 +1,10 @@
-version: 2.0.0-1
+version: 2.0.0-2
 requires:
-  - name: postgres
+- name: postgres
-  - name: mysql
+- name: mysql
 defaultConfig:
   namespace: e2e-test-app
   domain: e2e-test-app.{{ .cloud.domain }}
-  externalDnsDomain: '{{ .cloud.domain }}'
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 1Gi
   db:
     host: '{{ .apps.postgres.host }}'
@@ -19,10 +17,11 @@ defaultConfig:
     name: e2e_test_app
     user: e2e_test_app
 defaultSecrets:
-  - key: dbPassword
+- key: dbPassword
-  - key: dbUrl
+- key: dbUrl
-    default: "postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable"
+  default: postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host
-  - key: mysqlPassword
+    }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable
+- key: mysqlPassword
 requiredSecrets:
-  - postgres.password
+- postgres.password
-  - mysql.rootPassword
+- mysql.rootPassword

etherpad/versions/2/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: etherpad
   namespace: etherpad
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: etherpad
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

etherpad/versions/2/manifest.yaml

@@ -1,11 +1,9 @@
-version: 2.2.7-1
+version: 2.2.7-2
 requires:
-  - name: postgres
+- name: postgres
 defaultConfig:
   namespace: etherpad
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: etherpad.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   title: Etherpad
   db:
@@ -14,9 +12,10 @@ defaultConfig:
     name: etherpad
     user: etherpad
 defaultSecrets:
-  - key: adminPassword
+- key: adminPassword
-  - key: dbPassword
+- key: dbPassword
-  - key: dbUrl
+- key: dbUrl
-    default: 'postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable'
+  default: postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host
+    }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable
 requiredSecrets:
-  - postgres.password
+- postgres.password

eventyay/versions/1/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: eventyay
   namespace: {{ .namespace }}
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: eventyay
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

eventyay/versions/1/manifest.yaml

@@ -1,13 +1,11 @@
-version: main-5
+version: main-6
 requires:
-  - name: postgres
+- name: postgres
-  - name: redis
+- name: redis
-  - name: smtp
+- name: smtp
 defaultConfig:
   namespace: eventyay
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: eventyay.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   timezone: UTC
   db:
@@ -24,19 +22,19 @@ defaultConfig:
     from: '{{ .apps.smtp.from }}'
     user: '{{ .apps.smtp.user }}'
 scripts:
-  - name: create-superuser
+- name: create-superuser
-    path: scripts/create-superuser.sh
+  path: scripts/create-superuser.sh
-    description: "Create an Eventyay superuser account for first-time setup."
+  description: Create an Eventyay superuser account for first-time setup.
-    params:
+  params:
-      - name: EMAIL
+  - name: EMAIL
-        description: Email address for the superuser account
+    description: Email address for the superuser account
-        required: true
+    required: true
-      - name: PASSWORD
+  - name: PASSWORD
-        description: Password (leave blank to generate a random one)
+    description: Password (leave blank to generate a random one)
 defaultSecrets:
-  - key: dbPassword
+- key: dbPassword
-  - key: djangoSecret
+- key: djangoSecret
 requiredSecrets:
-  - postgres.password
+- postgres.password
-  - redis.password
+- redis.password
-  - smtp.password
+- smtp.password

example-admin/versions/1/ingress.yaml

@@ -3,8 +3,6 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: example-admin
-  annotations:
-    external-dns.alpha.kubernetes.io/target: '{{ .externalDnsDomain }}'
 spec:
   ingressClassName: traefik
   rules:
@@ -18,7 +16,3 @@ spec:
                 name: example-admin
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - "{{ .host }}"
-      secretName: wildcard-internal-wild-cloud-tls

example-admin/versions/1/manifest.yaml

@@ -1,6 +1,4 @@
-version: 1.0.0-2
+version: 1.0.0-3
 defaultConfig:
   namespace: example-admin
-  externalDnsDomain: '{{ .cloud.domain }}'
   host: '{{ .host }}'
-  tlsSecretName: wildcard-internal-wild-cloud-tls

example-app/versions/1/ingress.yaml

@@ -4,8 +4,6 @@ kind: Ingress
 metadata:
   name: example-app
   annotations:
-    external-dns.alpha.kubernetes.io/target: "{{ .cloud.externalDnsTarget }}"
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
     # Optional: Enable basic auth
     # traefik.ingress.kubernetes.io/auth-type: basic
     # traefik.ingress.kubernetes.io/auth-secret: basic-auth
@@ -22,7 +20,3 @@ spec:
                 name: example-app
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - "{{ .host }}"
-      secretName: wildcard-wild-cloud-tls

example-app/versions/1/manifest.yaml

@@ -1,6 +1,4 @@
-version: 1.0.0-1
+version: 1.0.0-2
 defaultConfig:
   namespace: example-app
-  externalDnsDomain: '{{ .cloud.domain }}'
   host: example-app.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls

externaldns/versions/v0/externaldns-cloudflare.yaml

@@ -28,8 +28,12 @@ spec:
             - --source=ingress
             - --txt-owner-id={{ .ownerId }}
             - --provider=cloudflare
-            - --domain-filter=payne.io
+            {{- with (index . "domainFilter") }}
-            #- --exclude-domains=internal.${DOMAIN}
+            - --domain-filter={{ . }}
+            {{- end }}
+            {{- with (index . "internalDomain") }}
+            - --exclude-domains={{ . }}
+            {{- end }}
             - --cloudflare-dns-records-per-page=5000
             - --publish-internal-services
             - --no-cloudflare-proxied

externaldns/versions/v0/manifest.yaml

@@ -1,10 +1,11 @@
-version: v0.13.4-2
+version: v0.13.4-6
 deploymentName: external-dns
 requires:
   - name: cert-manager
 defaultConfig:
   namespace: externaldns
   ownerId: "wild-cloud-{{ .cluster.name }}"
+  internalDomain: "{{ .cloud.internalDomain }}"
 defaultSecrets:
   - key: cloudflareToken
 requiredSecrets:

firefly-iii/versions/6/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: firefly-iii
   namespace: firefly-iii
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: firefly-iii
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

firefly-iii/versions/6/manifest.yaml

@@ -1,11 +1,9 @@
-version: 6.6.3-1
+version: 6.6.3-2
 requires:
-  - name: postgres
+- name: postgres
 defaultConfig:
   namespace: firefly-iii
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: firefly-iii.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 1Gi
   timezone: UTC
   adminEmail: '{{ .operator.email }}'
@@ -15,7 +13,7 @@ defaultConfig:
     name: fireflyiii
     user: fireflyiii
 defaultSecrets:
-  - key: appKey
+- key: appKey
-  - key: dbPassword
+- key: dbPassword
 requiredSecrets:
-  - postgres.password
+- postgres.password

formbricks/versions/3/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: formbricks
   namespace: {{ .namespace }}
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: formbricks
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

formbricks/versions/3/manifest.yaml

@@ -1,27 +1,26 @@
-version: 3.6.0-1
+version: 3.6.0-2
 requires:
-  - name: postgres
+- name: postgres
-  - name: redis
+- name: redis
 defaultConfig:
   namespace: formbricks
-  externalDnsDomain: "{{ .cloud.domain }}"
   domain: formbricks.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   db:
-    host: "{{ .apps.postgres.host }}"
+    host: '{{ .apps.postgres.host }}'
-    port: "{{ .apps.postgres.port }}"
+    port: '{{ .apps.postgres.port }}'
     name: formbricks
     user: formbricks
   redis:
-    host: "{{ .apps.redis.host }}"
+    host: '{{ .apps.redis.host }}'
 defaultSecrets:
-  - key: dbPassword
+- key: dbPassword
-  - key: dbUrl
+- key: dbUrl
-    default: "postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable"
+  default: postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host
-  - key: nextauthSecret
+    }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable
-  - key: encryptionKey
+- key: nextauthSecret
-  - key: cronSecret
+- key: encryptionKey
+- key: cronSecret
 requiredSecrets:
-  - postgres.password
+- postgres.password
-  - redis.password
+- redis.password

gancio/versions/1/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: gancio
   namespace: gancio
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: gancio
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

gancio/versions/1/manifest.yaml

@@ -1,11 +1,9 @@
-version: 1.28.2-1
+version: 1.28.2-2
 requires:
-  - name: postgres
+- name: postgres
 defaultConfig:
   namespace: gancio
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: gancio.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   db:
     host: '{{ .apps.postgres.host }}'
@@ -13,8 +11,9 @@ defaultConfig:
     name: gancio
     user: gancio
 defaultSecrets:
-  - key: dbPassword
+- key: dbPassword
-  - key: dbUrl
+- key: dbUrl
-    default: 'postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable'
+  default: postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host
+    }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable
 requiredSecrets:
-  - postgres.password
+- postgres.password

ghost/versions/5/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: ghost
   namespace: ghost
-  annotations:
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: ghost
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

ghost/versions/5/manifest.yaml

@@ -1,12 +1,10 @@
-version: 5.130.6-1
+version: 5.130.6-2
 requires:
-  - name: mysql
+- name: mysql
-  - name: smtp
+- name: smtp
 defaultConfig:
   namespace: ghost
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: ghost.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   db:
     host: '{{ .apps.mysql.host }}'
@@ -19,7 +17,7 @@ defaultConfig:
     from: '{{ .apps.smtp.from }}'
     user: '{{ .apps.smtp.user }}'
 defaultSecrets:
-  - key: dbPassword
+- key: dbPassword
-  - key: smtpPassword
+- key: smtpPassword
 requiredSecrets:
-  - mysql.rootPassword
+- mysql.rootPassword

gitea/versions/1/ingress.yaml

@@ -3,9 +3,6 @@ kind: Ingress
 metadata:
   name: gitea-public
   namespace: gitea
-  annotations:
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/target: "{{ .externalDnsDomain }}"
 spec:
   ingressClassName: traefik
   rules:
@@ -19,7 +16,3 @@ spec:
                 name: gitea-http
                 port:
                   number: 3000
-  tls:
-    - secretName: "{{ .tlsSecretName }}"
-      hosts:
-        - "{{ .domain }}"

gitea/versions/1/manifest.yaml

@@ -1,16 +1,14 @@
-version: 1.24.3-4
+version: 1.24.3-5
 requires:
-  - name: postgres
+- name: postgres
-  - name: smtp
+- name: smtp
 defaultConfig:
   namespace: gitea
-  externalDnsDomain: '{{ .cloud.domain }}'
   appName: Gitea
   domain: gitea.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   adminUser: admin
-  adminEmail: "{{ .operator.email }}"
+  adminEmail: '{{ .operator.email }}'
   db:
     name: gitea
     user: gitea
@@ -22,10 +20,10 @@ defaultConfig:
     user: '{{ .apps.smtp.user }}'
     from: '{{ .apps.smtp.from }}'
 defaultSecrets:
-  - key: adminPassword
+- key: adminPassword
-  - key: dbPassword
+- key: dbPassword
-  - key: secretKey
+- key: secretKey
-  - key: jwtSecret
+- key: jwtSecret
-  - key: smtpPassword
+- key: smtpPassword
 requiredSecrets:
-  - postgres.password
+- postgres.password

headlamp/versions/v0/ingress.yaml

@@ -1,64 +1,18 @@
----
+apiVersion: networking.k8s.io/v1
-apiVersion: traefik.io/v1alpha1
+kind: Ingress
-kind: Middleware
 metadata:
-  name: internal-only
+  name: headlamp
   namespace: headlamp
 spec:
-  ipWhiteList:
+  ingressClassName: traefik
-    sourceRange:
+  rules:
-      - 127.0.0.1/32
+    - host: headlamp.{{ .internalDomain }}
-      - 10.0.0.0/8
+      http:
-      - 172.16.0.0/12
+        paths:
-      - 192.168.0.0/16
+          - path: /
-
+            pathType: Prefix
----
+            backend:
-apiVersion: traefik.io/v1alpha1
+              service:
-kind: Middleware
+                name: headlamp
-metadata:
+                port:
-  name: headlamp-redirect-scheme
+                  number: 80
-  namespace: headlamp
-spec:
-  redirectScheme:
-    scheme: https
-    permanent: true
-
----
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
-  name: headlamp-https
-  namespace: headlamp
-spec:
-  entryPoints:
-    - websecure
-  routes:
-    - match: Host(`headlamp.{{ .internalDomain }}`)
-      kind: Rule
-      middlewares:
-        - name: internal-only
-          namespace: headlamp
-      services:
-        - name: headlamp
-          port: 80
-  tls:
-    secretName: wildcard-internal-wild-cloud-tls
-
----
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
-  name: headlamp-http
-  namespace: headlamp
-spec:
-  entryPoints:
-    - web
-  routes:
-    - match: Host(`headlamp.{{ .internalDomain }}`)
-      kind: Rule
-      middlewares:
-        - name: headlamp-redirect-scheme
-          namespace: headlamp
-      services:
-        - name: headlamp
-          port: 80

headlamp/versions/v0/manifest.yaml

@@ -1,11 +1,13 @@
-version: v0.42.0
+version: v0.42.0-1
-requires:
-  - name: traefik
-  - name: cert-manager
 defaultConfig:
   namespace: headlamp
-  internalDomain: "{{ .cloud.internalDomain }}"
+  internalDomain: '{{ .cloud.internalDomain }}'
+  central:
+    ipAllow:
+    - 10.0.0.0/8
+    - 172.16.0.0/12
+    - 192.168.0.0/16
 deploy:
   waitForRollout:
     name: headlamp
-    timeout: "120s"
+    timeout: 120s

headscale/versions/1/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: headscale
   namespace: headscale
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: headscale
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

headscale/versions/1/manifest.yaml

@@ -1,19 +1,18 @@
-version: 0.29.1-1
+version: 0.29.1-2
 scripts:
-  - name: register-node
+- name: register-node
-    description: Register a Tailscale node using the auth ID shown in the Tailscale app.
+  description: Register a Tailscale node using the auth ID shown in the Tailscale
-    path: scripts/register-node.sh
+    app.
-    params:
+  path: scripts/register-node.sh
-      - name: AUTH_ID
+  params:
-        description: The auth ID shown by the Tailscale app (e.g. hskey-authreq-...)
+  - name: AUTH_ID
-        required: true
+    description: The auth ID shown by the Tailscale app (e.g. hskey-authreq-...)
-      - name: USER
+    required: true
-        description: Headscale username to register the node under
+  - name: USER
-        required: true
+    description: Headscale username to register the node under
+    required: true
 defaultConfig:
   namespace: headscale
   domain: headscale.{{ .cloud.domain }}
-  externalDnsDomain: "{{ .cloud.domain }}"
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   vpnBaseDomain: vpn.{{ .cloud.domain }}

immich/versions/1/ingress.yaml

@@ -3,9 +3,6 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: immich-public
-  annotations:
-    external-dns.alpha.kubernetes.io/target: "{{ .externalDnsDomain }}"
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
 spec:
   ingressClassName: traefik
   rules:
@@ -19,7 +16,3 @@ spec:
                 name: immich-server
                 port:
                   number: 3001
-  tls:
-    - secretName: wildcard-wild-cloud-tls
-      hosts:
-        - "{{ .domain }}"

immich/versions/1/manifest.yaml

@@ -1,14 +1,12 @@
-version: 1.135.3-4
+version: 1.135.3-5
 requires:
-  - name: redis
+- name: redis
-  - name: postgres
+- name: postgres
 defaultConfig:
   namespace: immich
-  externalDnsDomain: '{{ .cloud.domain }}'
   storage: 5Gi
   cacheStorage: 5Gi
   domain: immich.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   db:
     host: '{{ .apps.postgres.host }}'
     name: immich
@@ -16,7 +14,7 @@ defaultConfig:
   redis:
     host: '{{ .apps.redis.host }}'
 defaultSecrets:
-  - key: dbPassword
+- key: dbPassword
 requiredSecrets:
-  - redis.password
+- redis.password
-  - postgres.password
+- postgres.password

indico/versions/3/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: indico
   namespace: {{ .namespace }}
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: indico
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

indico/versions/3/manifest.yaml

@@ -1,32 +1,30 @@
-version: 3.3.12-1
+version: 3.3.12-2
 requires:
-  - name: postgres
+- name: postgres
-  - name: redis
+- name: redis
-  - name: smtp
+- name: smtp
 defaultConfig:
   namespace: indico
-  externalDnsDomain: "{{ .cloud.domain }}"
+  domain: indico.{{ .cloud.domain }}
-  domain: "indico.{{ .cloud.domain }}"
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   timezone: UTC
   db:
-    host: "{{ .apps.postgres.host }}"
+    host: '{{ .apps.postgres.host }}'
-    port: "{{ .apps.postgres.port }}"
+    port: '{{ .apps.postgres.port }}'
     name: indico
     user: indico
   redis:
-    host: "{{ .apps.redis.host }}"
+    host: '{{ .apps.redis.host }}'
-    port: "6379"
+    port: '6379'
   smtp:
-    host: "{{ .apps.smtp.host }}"
+    host: '{{ .apps.smtp.host }}'
-    port: "{{ .apps.smtp.port }}"
+    port: '{{ .apps.smtp.port }}'
-    from: "{{ .apps.smtp.from }}"
+    from: '{{ .apps.smtp.from }}'
-    user: "{{ .apps.smtp.user }}"
+    user: '{{ .apps.smtp.user }}'
 defaultSecrets:
-  - key: dbPassword
+- key: dbPassword
-  - key: secretKey
+- key: secretKey
 requiredSecrets:
-  - postgres.password
+- postgres.password
-  - redis.password
+- redis.password
-  - smtp.password
+- smtp.password

jitsi/versions/stable/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: jitsi
   namespace: {{ .namespace }}
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: jitsi-web
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

jitsi/versions/stable/manifest.yaml

@@ -1,16 +1,14 @@
-version: web-1.0.9282-2
+version: web-1.0.9282-3
 defaultConfig:
   namespace: jitsi
-  domain: "jitsi.{{ .cloud.domain }}"
+  domain: jitsi.{{ .cloud.domain }}
-  externalDnsDomain: "{{ .cloud.domain }}"
-  tlsSecretName: wildcard-wild-cloud-tls
   xmppDomain: meet.jitsi
   xmppAuthDomain: auth.meet.jitsi
   xmppMucDomain: muc.meet.jitsi
   xmppInternalMucDomain: internal-muc.meet.jitsi
   xmppGuestDomain: guest.meet.jitsi
-  jvbStunServers: "stun.l.google.com:19302,stun1.l.google.com:19302"
+  jvbStunServers: stun.l.google.com:19302,stun1.l.google.com:19302
 defaultSecrets:
-  - key: jicofoAuthPassword
+- key: jicofoAuthPassword
-  - key: jvbAuthPassword
+- key: jvbAuthPassword
-  - key: jicofoComponentSecret
+- key: jicofoComponentSecret

karrot/versions/1/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: karrot
   namespace: {{ .namespace }}
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: karrot-frontend
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

karrot/versions/1/manifest.yaml

@@ -1,12 +1,10 @@
-version: v17.4.1
+version: v17.4.1-1
 requires:
-  - name: postgres
+- name: postgres
-  - name: smtp
+- name: smtp
 defaultConfig:
   namespace: karrot
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: karrot.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   db:
     host: '{{ .apps.postgres.host }}'
@@ -21,8 +19,8 @@ defaultConfig:
     from: '{{ .apps.smtp.from }}'
     user: '{{ .apps.smtp.user }}'
 defaultSecrets:
-  - key: secretKey
+- key: secretKey
-  - key: dbPassword
+- key: dbPassword
 requiredSecrets:
-  - postgres.password
+- postgres.password
-  - smtp.password
+- smtp.password

keila/versions/0/db-init-job.yaml

@@ -58,6 +58,7 @@ spec:
           echo "Creating database and user for Keila..."
           psql -c "CREATE DATABASE ${DB_NAME};" || echo "Database ${DB_NAME} already exists"
           psql -c "CREATE USER ${DB_USER} WITH PASSWORD '${DB_PASSWORD}';" || echo "User ${DB_USER} already exists"
+          psql -c "ALTER USER ${DB_USER} WITH PASSWORD '${DB_PASSWORD}';"
           psql -c "GRANT ALL PRIVILEGES ON DATABASE ${DB_NAME} TO ${DB_USER};"
           psql -d ${DB_NAME} -c "GRANT ALL ON SCHEMA public TO ${DB_USER};"
           echo "Database initialization complete"

keila/versions/0/ingress.yaml

@@ -2,12 +2,6 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: keila
-  annotations:
-    traefik.ingress.kubernetes.io/router.tls: "true"
-    traefik.ingress.kubernetes.io/router.tls.certresolver: letsencrypt
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    traefik.ingress.kubernetes.io/router.middlewares: keila-cors@kubernetescrd
 spec:
   ingressClassName: traefik
   rules:
@@ -21,7 +15,3 @@ spec:
             name: keila
             port:
               number: 80
-  tls:
-    - secretName: "wildcard-wild-cloud-tls"
-      hosts:
-        - "{{ .domain }}"

keila/versions/0/kustomization.yaml

@@ -14,4 +14,3 @@ resources:
   - ingress.yaml
   - pvc.yaml
   - db-init-job.yaml
-  - middleware-cors.yaml

keila/versions/0/manifest.yaml

@@ -1,15 +1,13 @@
-version: 0.17.1-4
+version: 0.17.1-5
 requires:
-  - name: postgres
+- name: postgres
-  - name: smtp
+- name: smtp
 defaultConfig:
   namespace: keila
-  externalDnsDomain: '{{ .cloud.domain }}'
   storage: 1Gi
   domain: keila.{{ .cloud.domain }}
   disableRegistration: 'true'
   adminUser: admin@{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   db:
     host: '{{ .apps.postgres.host }}'
     port: '{{ .apps.postgres.port }}'
@@ -22,13 +20,23 @@ defaultConfig:
     user: '{{ .apps.smtp.user }}'
     tls: '{{ .apps.smtp.tls }}'
     startTls: '{{ .apps.smtp.startTls }}'
+  central:
+    headers:
+      response:
+        Access-Control-Allow-Origin: https://{{ .cloud.domain }}
+        Access-Control-Allow-Credentials: 'true'
+        Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS
+        Access-Control-Allow-Headers: Content-Type, Authorization, X-Requested-With,
+          Accept, Origin, Cache-Control, X-File-Name
+        Access-Control-Max-Age: '86400'
 defaultSecrets:
-  - key: secretKeyBase
+- key: secretKeyBase
-    default: "{{ random.AlphaNum 64 }}"
+  default: '{{ random.AlphaNum 64 }}'
-  - key: dbPassword
+- key: dbPassword
-  - key: dbUrl
+- key: dbUrl
-    default: "postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable"
+  default: postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host
-  - key: adminPassword
+    }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable
-  - key: smtpPassword
+- key: adminPassword
+- key: smtpPassword
 requiredSecrets:
-  - postgres.password
+- postgres.password

keila/versions/0/middleware-cors.yaml

@@ -1,28 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
-  name: cors
-spec:
-  headers:
-    accessControlAllowCredentials: true
-    accessControlAllowHeaders:
-      - "Content-Type"
-      - "Authorization" 
-      - "X-Requested-With"
-      - "Accept"
-      - "Origin"
-      - "Cache-Control"
-      - "X-File-Name"
-    accessControlAllowMethods:
-      - "GET"
-      - "POST" 
-      - "PUT"
-      - "DELETE"
-      - "OPTIONS"
-    accessControlAllowOriginList:
-      - "http://localhost:1313"
-      - "https://*.{{ .externalDnsDomain }}"
-      - "https://{{ .externalDnsDomain }}"
-    accessControlExposeHeaders:
-      - "*"
-    accessControlMaxAge: 86400

lemmy/versions/0/ingress.yaml

@@ -3,15 +3,8 @@ kind: Ingress
 metadata:
   name: lemmy-ingress
   namespace: {{ .namespace }}
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
 spec:
   ingressClassName: traefik
-  tls:
-  - hosts:
-    - {{ .domain }}
-    secretName: {{ .tlsSecretName }}
   rules:
   - host: {{ .domain }}
     http:

lemmy/versions/0/manifest.yaml

@@ -1,12 +1,10 @@
-version: 0.19.15-3
+version: 0.19.15-4
 requires:
-  - name: postgres
+- name: postgres
-  - name: smtp
+- name: smtp
 defaultConfig:
   namespace: lemmy
-  externalDnsDomain: lemmy.{{ .cloud.baseDomain }}
   domain: lemmy.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   pictrsStorage: 2Gi
   db:
@@ -18,12 +16,12 @@ defaultConfig:
     host: '{{ .apps.smtp.host }}'
     port: '{{ .apps.smtp.port }}'
     user: '{{ .apps.smtp.user }}'
-    from: 'noreply@{{ .cloud.baseDomain }}'
+    from: noreply@{{ .cloud.baseDomain }}
     tls: '{{ .apps.smtp.tls }}'
 defaultSecrets:
-  - key: dbPassword
+- key: dbPassword
-  - key: adminPassword
+- key: adminPassword
-  - key: jwtSecret
+- key: jwtSecret
 requiredSecrets:
-  - postgres.password
+- postgres.password
-  - smtp.password
+- smtp.password

librebooking/versions/3/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: librebooking
   namespace: {{ .namespace }}
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: librebooking
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

librebooking/versions/3/manifest.yaml

@@ -1,20 +1,18 @@
-version: 3.3.7-1
+version: 3.3.7-2
 requires:
-  - name: mysql
+- name: mysql
 defaultConfig:
   namespace: librebooking
-  externalDnsDomain: "{{ .cloud.domain }}"
   domain: booking.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   timezone: UTC
   db:
-    host: "{{ .apps.mysql.host }}"
+    host: '{{ .apps.mysql.host }}'
-    port: "3306"
+    port: '3306'
     name: librebooking
     user: librebooking
 defaultSecrets:
-  - key: dbPassword
+- key: dbPassword
-  - key: installPassword
+- key: installPassword
 requiredSecrets:
-  - mysql.rootPassword
+- mysql.rootPassword

limesurvey/versions/6/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: limesurvey
   namespace: limesurvey
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: limesurvey
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

limesurvey/versions/6/manifest.yaml

@@ -1,28 +1,26 @@
-version: 6.17.5-1
+version: 6.17.5-2
 requires:
-  - name: postgres
+- name: postgres
-  - name: smtp
+- name: smtp
 defaultConfig:
   namespace: limesurvey
-  externalDnsDomain: "{{ .cloud.domain }}"
   domain: limesurvey.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   adminUser: admin
-  adminEmail: "{{ .operator.email }}"
+  adminEmail: '{{ .operator.email }}'
   db:
-    host: "{{ .apps.postgres.host }}"
+    host: '{{ .apps.postgres.host }}'
-    port: "{{ .apps.postgres.port }}"
+    port: '{{ .apps.postgres.port }}'
     name: limesurvey
     user: limesurvey
   smtp:
-    host: "{{ .apps.smtp.host }}"
+    host: '{{ .apps.smtp.host }}'
-    port: "{{ .apps.smtp.port }}"
+    port: '{{ .apps.smtp.port }}'
-    from: "{{ .apps.smtp.from }}"
+    from: '{{ .apps.smtp.from }}'
-    user: "{{ .apps.smtp.user }}"
+    user: '{{ .apps.smtp.user }}'
 defaultSecrets:
-  - key: adminPassword
+- key: adminPassword
-  - key: dbPassword
+- key: dbPassword
-  - key: smtpPassword
+- key: smtpPassword
 requiredSecrets:
-  - postgres.password
+- postgres.password

listmonk/versions/5/db-init-job.yaml

@@ -60,6 +60,7 @@ spec:
           echo "Creating database and user for Listmonk..."
           psql -c "CREATE DATABASE ${DB_NAME};" || echo "Database ${DB_NAME} already exists"
           psql -c "CREATE USER ${DB_USER} WITH PASSWORD '${DB_PASSWORD}';" || echo "User ${DB_USER} already exists"
+          psql -c "ALTER USER ${DB_USER} WITH PASSWORD '${DB_PASSWORD}';"
           psql -c "GRANT ALL PRIVILEGES ON DATABASE ${DB_NAME} TO ${DB_USER};"
           psql -d ${DB_NAME} -c "GRANT ALL ON SCHEMA public TO ${DB_USER};"
           echo "Database initialization complete"

listmonk/versions/5/ingress.yaml

@@ -3,17 +3,8 @@ kind: Ingress
 metadata:
   name: listmonk
   namespace: listmonk
-  annotations:
-    traefik.ingress.kubernetes.io/router.entrypoints: websecure
-    traefik.ingress.kubernetes.io/router.tls: "true"
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
 spec:
   ingressClassName: traefik
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}
   rules:
     - host: {{ .domain }}
       http:

listmonk/versions/5/manifest.yaml

@@ -1,11 +1,9 @@
-version: 5.0.3-2
+version: 5.0.3-3
 requires:
-  - name: postgres
+- name: postgres
 defaultConfig:
   namespace: listmonk
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: listmonk.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 1Gi
   db:
     host: '{{ .apps.postgres.host }}'
@@ -13,8 +11,9 @@ defaultConfig:
     name: listmonk
     user: listmonk
 defaultSecrets:
-  - key: dbPassword
+- key: dbPassword
-  - key: dbUrl
+- key: dbUrl
-    default: 'postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable'
+  default: postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host
+    }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable
 requiredSecrets:
-  - postgres.password
+- postgres.password

longhorn/versions/v1/ingress.yaml

@@ -16,7 +16,3 @@ spec:
                 name: longhorn-frontend
                 port:
                   number: 80
-  tls:
-    - secretName: wildcard-internal-wild-cloud-tls
-      hosts:
-        - "longhorn.{{ .internalDomain }}"

longhorn/versions/v1/manifest.yaml

@@ -1,10 +1,9 @@
-version: v1.8.1-4
+version: v1.8.1-5
 deploymentName: longhorn-ui
 requires:
-  - name: traefik
+- name: nfs
-  - name: nfs
+- name: snapshot-controller
-  - name: snapshot-controller
 defaultConfig:
   namespace: longhorn-system
-  internalDomain: "{{ .cloud.internalDomain }}"
+  internalDomain: '{{ .cloud.internalDomain }}'
-  backupTarget: "nfs://{{ .apps.nfs.host }}:/data/{{ .cluster.name }}/backups"
+  backupTarget: nfs://{{ .apps.nfs.host }}:/data/{{ .cluster.name }}/backups

loomio/versions/3/ingress.yaml

@@ -2,15 +2,8 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: loomio
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
 spec:
   ingressClassName: traefik
-  tls:
-  - hosts:
-    - {{ .domain }}
-    secretName: {{ .tlsSecretName }}
   rules:
   - host: {{ .domain }}
     http:

loomio/versions/3/manifest.yaml

@@ -1,15 +1,13 @@
-version: 3.0.24-2
+version: 3.0.24-3
 requires:
-  - name: postgres
+- name: postgres
-    installed_as: postgres
+  installed_as: postgres
-  - name: redis
+- name: redis
-  - name: smtp
+- name: smtp
 defaultConfig:
   namespace: loomio
-  externalDnsDomain: '{{ .cloud.domain }}'
   appName: Loomio
-  domain: 'loomio.{{ .cloud.domain }}'
+  domain: loomio.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage:
     uploads: 5Gi
     files: 5Gi
@@ -31,15 +29,16 @@ defaultConfig:
     tls: '{{ .apps.smtp.tls }}'
     from: '{{ .apps.smtp.from }}'
 defaultSecrets:
-  - key: dbPassword
+- key: dbPassword
-    default: "{{ random.AlphaNum 32 }}"
+  default: '{{ random.AlphaNum 32 }}'
-  - key: dbUrl
+- key: dbUrl
-    default: "postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?pool=30&sslmode=disable"
+  default: postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host
-  - key: deviseSecret
+    }}:{{ .app.db.port }}/{{ .app.db.name }}?pool=30&sslmode=disable
-    default: "{{ random.AlphaNum 32 }}"
+- key: deviseSecret
-  - key: secretCookieToken
+  default: '{{ random.AlphaNum 32 }}'
-    default: "{{ random.AlphaNum 32 }}"
+- key: secretCookieToken
-  - key: smtpPassword
+  default: '{{ random.AlphaNum 32 }}'
-    default: "{{ .secrets.smtp.password }}"
+- key: smtpPassword
+  default: '{{ .secrets.smtp.password }}'
 requiredSecrets:
-  - postgres.password
+- postgres.password

mastodon/versions/4/ingress.yaml

@@ -3,16 +3,8 @@ kind: Ingress
 metadata:
   name: mastodon
   namespace: {{ .namespace }}
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    traefik.ingress.kubernetes.io/router.entrypoints: websecure
 spec:
   ingressClassName: traefik
-  tls:
-  - hosts:
-    - {{ .domain }}
-    secretName: {{ .tlsSecretName }}
   rules:
   - host: {{ .domain }}
     http:

mastodon/versions/4/manifest.yaml

@@ -1,17 +1,15 @@
-version: 4.5.3-3
+version: 4.5.3-4
 requires:
-  - name: postgres
+- name: postgres
-  - name: redis
+- name: redis
-  - name: smtp
+- name: smtp
 defaultConfig:
   namespace: mastodon
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: mastodon.{{ .cloud.domain }}
   locale: en
   singleUserMode: false
   assetsStorage: 5Gi
   systemStorage: 5Gi
-  tlsSecretName: wildcard-wild-cloud-tls
   sidekiq:
     replicas: 1
   db:
@@ -30,22 +28,20 @@ defaultConfig:
     user: '{{ .apps.smtp.user }}'
     tls: '{{ .apps.smtp.tls }}'
 defaultSecrets:
-  - key: secretKeyBase
+- key: secretKeyBase
-    default: "{{ random.AlphaNum 128 }}"
+  default: '{{ random.AlphaNum 128 }}'
-  - key: otpSecret
+- key: otpSecret
-    default: "{{ random.AlphaNum 128 }}"
+  default: '{{ random.AlphaNum 128 }}'
-  - key: vapidPrivateKey
+- key: vapidPrivateKey
-    # Generated by vapid-init-job.yaml on first deploy
+- key: vapidPublicKey
-  - key: vapidPublicKey
+- key: activeRecordPrimaryKey
-    # Generated by vapid-init-job.yaml on first deploy
+  default: '{{ random.AlphaNum 32 }}'
-  - key: activeRecordPrimaryKey
+- key: activeRecordDeterministicKey
-    default: "{{ random.AlphaNum 32 }}"
+  default: '{{ random.AlphaNum 32 }}'
-  - key: activeRecordDeterministicKey
+- key: activeRecordKeyDerivationSalt
-    default: "{{ random.AlphaNum 32 }}"
+  default: '{{ random.AlphaNum 32 }}'
-  - key: activeRecordKeyDerivationSalt
+- key: dbPassword
-    default: "{{ random.AlphaNum 32 }}"
+- key: smtpPassword
-  - key: dbPassword
-  - key: smtpPassword
 requiredSecrets:
-  - postgres.password
+- postgres.password
-  - redis.password
+- redis.password

mattermost/versions/10/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: mattermost
   namespace: mattermost
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: mattermost
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

mattermost/versions/10/manifest.yaml

@@ -1,11 +1,9 @@
-version: 10.8.1-1
+version: 10.8.1-2
 requires:
-  - name: postgres
+- name: postgres
 defaultConfig:
   namespace: mattermost
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: mattermost.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   db:
     host: '{{ .apps.postgres.host }}'
@@ -13,8 +11,9 @@ defaultConfig:
     name: mattermost
     user: mattermost
 defaultSecrets:
-  - key: dbPassword
+- key: dbPassword
-  - key: dbUrl
+- key: dbUrl
-    default: 'postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable&connect_timeout=10'
+  default: postgres://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host
+    }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable&connect_timeout=10
 requiredSecrets:
-  - postgres.password
+- postgres.password

mautic/versions/7/ingress.yaml

@@ -2,10 +2,6 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: mautic
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -19,7 +15,3 @@ spec:
                 name: mautic
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

mautic/versions/7/manifest.yaml

@@ -1,18 +1,16 @@
-version: 7.1.2-2
+version: 7.1.2-3
 requires:
-  - name: mysql
+- name: mysql
-  - name: smtp
+- name: smtp
 defaultConfig:
   namespace: mautic
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: mautic.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   siteUrl: https://mautic.{{ .cloud.domain }}
   adminEmail: '{{ .operator.email }}'
   db:
     host: '{{ .apps.mysql.host }}'
-    port: "3306"
+    port: '3306'
     name: mautic
     user: mautic
   smtp:
@@ -21,8 +19,8 @@ defaultConfig:
     user: '{{ .apps.smtp.user }}'
     from: '{{ .apps.smtp.from }}'
 defaultSecrets:
-  - key: dbPassword
+- key: dbPassword
-  - key: adminPassword
+- key: adminPassword
 requiredSecrets:
-  - mysql.rootPassword
+- mysql.rootPassword
-  - smtp.password
+- smtp.password

mediawiki/versions/1/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: mediawiki
   namespace: mediawiki
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: mediawiki
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

mediawiki/versions/1/manifest.yaml

@@ -1,18 +1,16 @@
-version: 1.43.1-1
+version: 1.43.1-2
 requires:
-  - name: mysql
+- name: mysql
-  - name: smtp
+- name: smtp
 defaultConfig:
   namespace: mediawiki
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: wiki.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   siteName: My Wiki
   adminUser: admin
   db:
     host: '{{ .apps.mysql.host }}'
-    port: "3306"
+    port: '3306'
     name: mediawiki
     user: mediawiki
   smtp:
@@ -21,10 +19,10 @@ defaultConfig:
     from: '{{ .apps.smtp.from }}'
     user: '{{ .apps.smtp.user }}'
 defaultSecrets:
-  - key: adminPassword
+- key: adminPassword
-  - key: secretKey
+- key: secretKey
-  - key: upgradeKey
+- key: upgradeKey
-  - key: dbPassword
+- key: dbPassword
-  - key: smtpPassword
+- key: smtpPassword
 requiredSecrets:
-  - mysql.rootPassword
+- mysql.rootPassword

memcached/versions/1/manifest.yaml

@@ -1,5 +1,4 @@
-version: 1.6.32-3
+version: 1.6.32-4
-requires: []
 defaultConfig:
   namespace: memcached
   host: memcached.memcached.svc.cluster.local

mobilizon/versions/5/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: mobilizon
   namespace: {{ .namespace }}
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: mobilizon
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

mobilizon/versions/5/manifest.yaml

@@ -1,12 +1,10 @@
-version: 5.2.3-3
+version: 5.2.3-4
 requires:
-  - name: postgres
+- name: postgres
-  - name: smtp
+- name: smtp
 defaultConfig:
   namespace: mobilizon
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: mobilizon.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   instanceName: Mobilizon
   instanceEmail: '{{ .operator.email }}'
@@ -21,10 +19,10 @@ defaultConfig:
     user: '{{ .apps.smtp.user }}'
     from: '{{ .apps.smtp.from }}'
 defaultSecrets:
-  - key: dbPassword
+- key: dbPassword
-  - key: secretKeyBase
+- key: secretKeyBase
-  - key: secretKey
+- key: secretKey
-  - key: smtpPassword
+- key: smtpPassword
 requiredSecrets:
-  - postgres.password
+- postgres.password
-  - smtp.password
+- smtp.password

moodle/versions/4/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: moodle
   namespace: {{ .namespace }}
-  annotations:
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: moodle
                 port:
                   number: 8080
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

moodle/versions/4/manifest.yaml

@@ -1,19 +1,17 @@
-version: 4.5.2-3
+version: 4.5.2-4
 requires:
-  - name: mysql
+- name: mysql
 defaultConfig:
   namespace: moodle
   domain: moodle.{{ .cloud.domain }}
-  externalDnsDomain: "{{ .cloud.domain }}"
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   db:
-    host: "{{ .apps.mysql.host }}"
+    host: '{{ .apps.mysql.host }}'
-    port: "3306"
+    port: '3306'
     name: moodle
     user: moodle
 defaultSecrets:
-  - key: dbPassword
+- key: dbPassword
-  - key: adminPassword
+- key: adminPassword
 requiredSecrets:
-  - mysql.rootPassword
+- mysql.rootPassword

mysql/versions/9/manifest.yaml

@@ -1,5 +1,4 @@
-version: 9.1.0-3
+version: 9.1.0-4
-requires: []
 defaultConfig:
   namespace: mysql
   host: mysql.mysql.svc.cluster.local
@@ -7,5 +6,5 @@ defaultConfig:
   dbName: mysql
   user: mysql
 defaultSecrets:
-  - key: rootPassword
+- key: rootPassword
-  - key: password
+- key: password

nextcloud/versions/34/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: nextcloud
   namespace: {{ .namespace }}
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: nextcloud
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

nextcloud/versions/34/manifest.yaml

@@ -1,12 +1,10 @@
-version: 34.0.0-1
+version: 34.0.0-2
 requires:
-  - name: postgres
+- name: postgres
-  - name: redis
+- name: redis
 defaultConfig:
   namespace: nextcloud
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: nextcloud.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 5Gi
   adminUser: admin
   db:
@@ -17,10 +15,11 @@ defaultConfig:
   redis:
     host: '{{ .apps.redis.host }}'
 defaultSecrets:
-  - key: adminPassword
+- key: adminPassword
-  - key: dbPassword
+- key: dbPassword
-  - key: dbUrl
+- key: dbUrl
-    default: 'postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable'
+  default: postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host
+    }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable
 requiredSecrets:
-  - postgres.password
+- postgres.password
-  - redis.password
+- redis.password

nocodb/versions/2026/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: nocodb
   namespace: nocodb
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: nocodb
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

nocodb/versions/2026/manifest.yaml

@@ -1,11 +1,9 @@
-version: 2026.04.1-1
+version: 2026.04.1-2
 requires:
-  - name: postgres
+- name: postgres
 defaultConfig:
   namespace: nocodb
-  externalDnsDomain: '{{ .cloud.domain }}'
   domain: nocodb.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 1Gi
   db:
     host: '{{ .apps.postgres.host }}'
@@ -13,9 +11,10 @@ defaultConfig:
     name: nocodb
     user: nocodb
 defaultSecrets:
-  - key: dbPassword
+- key: dbPassword
-  - key: ncAuthJwtSecret
+- key: ncAuthJwtSecret
-  - key: dbUrl
+- key: dbUrl
-    default: 'pg://{{ .app.db.host }}:{{ .app.db.port }}?u={{ .app.db.user }}&p={{ .secrets.dbPassword }}&d={{ .app.db.name }}'
+  default: pg://{{ .app.db.host }}:{{ .app.db.port }}?u={{ .app.db.user }}&p={{ .secrets.dbPassword
+    }}&d={{ .app.db.name }}
 requiredSecrets:
-  - postgres.password
+- postgres.password

odoo/versions/18/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: odoo
   namespace: {{ .namespace }}
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -20,7 +16,3 @@ spec:
                 name: odoo
                 port:
                   number: 8069
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

odoo/versions/18/manifest.yaml

@@ -1,19 +1,17 @@
-version: 18.0-2
+version: 18.0-3
 requires:
-  - name: postgres
+- name: postgres
 defaultConfig:
   namespace: odoo
-  externalDnsDomain: "{{ .cloud.domain }}"
   domain: odoo.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
   storage: 2Gi
   db:
-    host: "{{ .apps.postgres.host }}"
+    host: '{{ .apps.postgres.host }}'
-    port: "{{ .apps.postgres.port }}"
+    port: '{{ .apps.postgres.port }}'
     name: odoo
     user: odoo
 defaultSecrets:
-  - key: dbPassword
+- key: dbPassword
-  - key: adminPassword
+- key: adminPassword
 requiredSecrets:
-  - postgres.password
+- postgres.password

ohmyform/versions/1/ingress.yaml

@@ -3,10 +3,6 @@ kind: Ingress
 metadata:
   name: ohmyform
   namespace: {{ .namespace }}
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -27,7 +23,3 @@ spec:
                 name: ohmyform-ui
                 port:
                   number: 4000
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

ohmyform/versions/1/manifest.yaml

@@ -1,26 +1,25 @@
-version: 1.0.3-2
+version: 1.0.3-3
 requires:
-  - name: postgres
+- name: postgres
-  - name: redis
+- name: redis
 defaultConfig:
   namespace: ohmyform
-  externalDnsDomain: "{{ .cloud.domain }}"
   domain: ohmyform.{{ .cloud.domain }}
-  tlsSecretName: wildcard-wild-cloud-tls
+  adminEmail: '{{ .operator.email }}'
-  adminEmail: "{{ .operator.email }}"
   db:
-    host: "{{ .apps.postgres.host }}"
+    host: '{{ .apps.postgres.host }}'
-    port: "{{ .apps.postgres.port }}"
+    port: '{{ .apps.postgres.port }}'
     name: ohmyform
     user: ohmyform
   redis:
-    host: "{{ .apps.redis.host }}"
+    host: '{{ .apps.redis.host }}'
 defaultSecrets:
-  - key: dbPassword
+- key: dbPassword
-  - key: dbUrl
+- key: dbUrl
-    default: "postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable"
+  default: postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host
-  - key: secretKey
+    }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable
-  - key: adminPassword
+- key: secretKey
+- key: adminPassword
 requiredSecrets:
-  - postgres.password
+- postgres.password
-  - redis.password
+- redis.password