15 changed files with 39 additions and 130 deletions
--- a/application-template.yaml
+++ b/application-template.yaml
@ -6,7 +6,7 @@ metadata:
 spec:
  project: dev-tools
  source:
-    repoURL: 'ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git'
+    repoURL: 'https://git.dvirlabs.com/dvirlabs/dev-tools.git'
    targetRevision: HEAD
    path: charts/application-template
    helm:
--- a/argocd-apps/cluster-secret-store-creator.yaml
+++ b/argocd-apps/cluster-secret-store-creator.yaml
@ -6,7 +6,7 @@ metadata:
 spec:
  project: dev-tools
  source:
-    repoURL: ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git
+    repoURL: https://git.dvirlabs.com/dvirlabs/dev-tools.git
    targetRevision: HEAD
    path: manifests/cluster-secret-store
    directory:
@ -15,5 +15,8 @@ spec:
    server: https://kubernetes.default.svc
    namespace: dev-tools
  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
    syncOptions:
      - CreateNamespace=true
--- a/argocd-apps/external-secrets-dev-tools.yaml
+++ b/argocd-apps/external-secrets-dev-tools.yaml
@ -6,7 +6,7 @@ metadata:
 spec:
  project: dev-tools
  source:
-    repoURL: ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git
+    repoURL: https://git.dvirlabs.com/dvirlabs/dev-tools.git
    targetRevision: HEAD
    path: manifests/external-secrets-dev-tools
    directory:
@ -15,5 +15,8 @@ spec:
    server: https://kubernetes.default.svc
    namespace: dev-tools
  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
    syncOptions:
      - CreateNamespace=true
--- a/argocd-apps/external-secrets.yaml
+++ b/argocd-apps/external-secrets.yaml
@ -6,7 +6,7 @@ metadata:
 spec:
  project: dev-tools
  source:
-    repoURL: 'ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git'
+    repoURL: 'https://git.dvirlabs.com/dvirlabs/dev-tools.git'
    targetRevision: HEAD
    path: charts/external-secrets
    helm:
@ -15,4 +15,7 @@ spec:
  destination:
    server: https://kubernetes.default.svc
    namespace: dev-tools
-  syncPolicy: {}
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
--- a/argocd-apps/gitea.yaml
+++ b/argocd-apps/gitea.yaml
@ -6,7 +6,7 @@ metadata:
 spec:
  project: dev-tools
  source:
-    repoURL: 'ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git'
+    repoURL: 'https://git.dvirlabs.com/dvirlabs/dev-tools.git'
    targetRevision: HEAD
    path: charts/helm-gitea
    helm:
--- a/argocd-apps/harbor.yaml
+++ b/argocd-apps/harbor.yaml
@ -6,7 +6,7 @@ metadata:
 spec:
  project: dev-tools
  source:
-    repoURL: 'ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git'
+    repoURL: 'https://git.dvirlabs.com/dvirlabs/dev-tools.git'
    targetRevision: HEAD
    path: charts/harbor
    helm:
--- a/argocd-apps/oidc-bootstrap.yaml
+++ b/argocd-apps/oidc-bootstrap.yaml
@ -6,7 +6,7 @@ metadata:
 spec:
  project: dev-tools
  source:
-    repoURL: ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git
+    repoURL: https://git.dvirlabs.com/dvirlabs/dev-tools.git
    targetRevision: HEAD
    path: manifests/oidc-bootstrap
    directory:
@ -14,4 +14,7 @@ spec:
  destination:
    server: https://kubernetes.default.svc
    namespace: dev-tools
-  syncPolicy: {}
+  syncPolicy:
+    automated:
+      prune: false
+      selfHeal: true
--- a/argocd-apps/planka.yaml
+++ b/argocd-apps/planka.yaml
@ -6,7 +6,7 @@ metadata:
 spec:
  project: dev-tools
  source:
-    repoURL: ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git
+    repoURL: https://git.dvirlabs.com/dvirlabs/dev-tools.git
    targetRevision: HEAD
    path: charts/planka
    helm:
--- a/argocd-apps/vault-config.yaml
+++ b/argocd-apps/vault-config.yaml
@ -6,7 +6,7 @@ metadata:
 spec:
  project: dev-tools
  source:
-    repoURL: ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git
+    repoURL: https://git.dvirlabs.com/dvirlabs/dev-tools.git
    targetRevision: HEAD
    path: manifests/vault
    directory:
@ -14,4 +14,7 @@ spec:
  destination:
    server: https://kubernetes.default.svc
    namespace: dev-tools
-  syncPolicy: {}
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
--- a/argocd-apps/vault.yaml
+++ b/argocd-apps/vault.yaml
@ -6,7 +6,7 @@ metadata:
 spec:
  project: dev-tools
  source:
-    repoURL: ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git
+    repoURL: https://git.dvirlabs.com/dvirlabs/dev-tools.git
    targetRevision: HEAD
    path: charts/vault
    helm:
@ -15,7 +15,10 @@ spec:
  destination:
    server: https://kubernetes.default.svc
    namespace: dev-tools
-  syncPolicy: {}
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
  ignoreDifferences:
  - group: admissionregistration.k8s.io
    kind: MutatingWebhookConfiguration
--- a/argocd-apps/wikijs.yaml
+++ b/argocd-apps/wikijs.yaml
@ -6,7 +6,7 @@ metadata:
 spec:
  project: dev-tools
  source:
-    repoURL: 'ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git'
+    repoURL: 'https://git.dvirlabs.com/dvirlabs/dev-tools.git'
    targetRevision: HEAD
    path: charts/wiki
    helm:
@ -16,6 +16,9 @@ spec:
    server: https://kubernetes.default.svc
    namespace: dev-tools
  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
    syncOptions:
      - CreateNamespace=true
  ignoreDifferences:
--- a/argocd-apps/woodpecker.yaml
+++ b/argocd-apps/woodpecker.yaml
@ -8,7 +8,7 @@ metadata:
 spec:
  project: dev-tools
  source:
-    repoURL: 'ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git'
+    repoURL: 'https://git.dvirlabs.com/dvirlabs/dev-tools.git'
    targetRevision: HEAD
    path: charts/woodpecker
    helm:
--- a/manifests/gitea/current-values.yaml
+++ b/manifests/gitea/current-values.yaml
@ -1,88 +0,0 @@
-nodeSelector:
-  workload: general
-
-ingress:
-  enabled: true
-  className: traefik
-  annotations:
-    traefik.ingress.kubernetes.io/router.entrypoints: websecure
-    traefik.ingress.kubernetes.io/router.tls: "true"
-  hosts:
-    - host: git.dvirlabs.com
-      paths:
-        - path: /
-          pathType: Prefix
-  tls:
-    - hosts:
-        - git.dvirlabs.com
-      secretName: git-dvirlabs-cert
-
-gitea:
-  admin:
-    username: admin
-    password: admin1234
-    email: admin@dvirlabs.com
-    passwordMode: keepUpdated
-
-  config:
-    server:
-      DOMAIN: git.dvirlabs.com
-      ROOT_URL: https://git.dvirlabs.com/
-      SSH_DOMAIN: git.dvirlabs.com
-      SSH_LISTEN_PORT: 2222
-      SSH_PORT: 22
-      PROTOCOL: http
-    metrics:
-        ENABLED: true
-        TOKEN: prometheusmetricstoken
-    security:
-      INSTALL_LOCK: true
-      SECRET_KEY: somesecret
-      INTERNAL_TOKEN: somesecret
-  oauth:
-    - name: "Keycloak"
-      provider: "openidConnect"
-      key: "gitea"
-      secret: "gIA3YXhesiyIbKkMMtasCVTd7CvUyLwA"
-      autoDiscoverUrl: "https://keycloak.dvirlabs.com/realms/lab/.well-known/openid-configuration"
-      scopes: "openid profile email"
-      groupClaimName: "groups"
-      adminGroup: "gitea-admins"
-      restrictedGroup: "gitea-users"
-
-  livenessProbe:
-    enabled: true
-    tcpSocket:
-      port: http
-    initialDelaySeconds: 200
-
-  readinessProbe:
-    enabled: true
-    tcpSocket:
-      port: http
-    initialDelaySeconds: 5
-
-postgresql-ha:
-  enabled: false
-
-postgresql:
-  enabled: true
-  global:
-    postgresql:
-      auth:
-        username: gitea
-        password: gitea
-        database: gitea
-  primary:
-    nodeSelector:
-      workload: general
-    persistence:
-      storageClass: nfs-client
-      size: 20Gi
-
-persistence:
-  enabled: true
-  storageClass: nfs-client
-  size: 50Gi
-  accessModes:
-    - ReadWriteOnce
--- a/manifests/gitea/values.yaml
+++ b/manifests/gitea/values.yaml
@ -1,10 +1,3 @@
-global:
-  security:
-    allowInsecureImages: true
-
-nodeSelector:
-  workload: general
-
 ingress:
  enabled: true
  className: traefik
@ -71,10 +64,6 @@ postgresql-ha:

 postgresql:
  enabled: true
-  image:
-    registry: docker.io
-    repository: bitnamilegacy/postgresql
-    tag: 17.5.0-debian-12-r3
  global:
    postgresql:
      auth:
@ -83,19 +72,10 @@ postgresql:
        database: gitea
  primary:
    persistence:
-      storageClass: nfs-client
-      size: 50Gi
+      size: 10Gi

 persistence:
  enabled: true
-  storageClass: nfs-client
-  size: 50Gi
+  size: 5Gi
  accessModes:
    - ReadWriteOnce
-
-valkey-cluster:
-  enabled: true
-  image:
-    registry: docker.io
-    repository: bitnamilegacy/valkey-cluster
-    tag: 8.1.1-debian-12-r2
--- a/manifests/wikijs/values.yaml
+++ b/manifests/wikijs/values.yaml
@ -27,10 +27,6 @@ postgresql:
  postgresqlUsername: wikijs
  postgresqlPassword: wikijs123
  postgresqlDatabase: wiki
-  image:
-    registry: docker.io
-    repository: bitnamilegacy/postgresql
-    tag: 11.22.0
  persistence:
    enabled: true
    size: 30Gi