application-template.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   project: dev-tools
   source:
-    repoURL: 'ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git'
+    repoURL: 'https://git.dvirlabs.com/dvirlabs/dev-tools.git'
     targetRevision: HEAD
     path: charts/application-template
     helm:

argocd-apps/cluster-secret-store-creator.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   project: dev-tools
   source:
-    repoURL: ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git
+    repoURL: https://git.dvirlabs.com/dvirlabs/dev-tools.git
     targetRevision: HEAD
     path: manifests/cluster-secret-store
     directory:
@@ -15,5 +15,8 @@ spec:
     server: https://kubernetes.default.svc
     namespace: dev-tools
   syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
     syncOptions:
       - CreateNamespace=true

argocd-apps/external-secrets-dev-tools.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   project: dev-tools
   source:
-    repoURL: ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git
+    repoURL: https://git.dvirlabs.com/dvirlabs/dev-tools.git
     targetRevision: HEAD
     path: manifests/external-secrets-dev-tools
     directory:
@@ -15,5 +15,8 @@ spec:
     server: https://kubernetes.default.svc
     namespace: dev-tools
   syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
     syncOptions:
       - CreateNamespace=true

argocd-apps/external-secrets.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   project: dev-tools
   source:
-    repoURL: 'ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git'
+    repoURL: 'https://git.dvirlabs.com/dvirlabs/dev-tools.git'
     targetRevision: HEAD
     path: charts/external-secrets
     helm:
@@ -15,4 +15,7 @@ spec:
   destination:
     server: https://kubernetes.default.svc
     namespace: dev-tools
-  syncPolicy: {}
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true

argocd-apps/gitea.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   project: dev-tools
   source:
-    repoURL: 'ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git'
+    repoURL: 'https://git.dvirlabs.com/dvirlabs/dev-tools.git'
     targetRevision: HEAD
     path: charts/helm-gitea
     helm:

argocd-apps/harbor.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   project: dev-tools
   source:
-    repoURL: 'ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git'
+    repoURL: 'https://git.dvirlabs.com/dvirlabs/dev-tools.git'
     targetRevision: HEAD
     path: charts/harbor
     helm:

argocd-apps/oidc-bootstrap.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   project: dev-tools
   source:
-    repoURL: ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git
+    repoURL: https://git.dvirlabs.com/dvirlabs/dev-tools.git
     targetRevision: HEAD
     path: manifests/oidc-bootstrap
     directory:
@@ -14,4 +14,7 @@ spec:
   destination:
     server: https://kubernetes.default.svc
     namespace: dev-tools
-  syncPolicy: {}
+  syncPolicy:
+    automated:
+      prune: false
+      selfHeal: true

argocd-apps/planka.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   project: dev-tools
   source:
-    repoURL: ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git
+    repoURL: https://git.dvirlabs.com/dvirlabs/dev-tools.git
     targetRevision: HEAD
     path: charts/planka
     helm:

argocd-apps/vault-config.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   project: dev-tools
   source:
-    repoURL: ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git
+    repoURL: https://git.dvirlabs.com/dvirlabs/dev-tools.git
     targetRevision: HEAD
     path: manifests/vault
     directory:
@@ -14,4 +14,7 @@ spec:
   destination:
     server: https://kubernetes.default.svc
     namespace: dev-tools
-  syncPolicy: {}
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true

argocd-apps/vault.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   project: dev-tools
   source:
-    repoURL: ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git
+    repoURL: https://git.dvirlabs.com/dvirlabs/dev-tools.git
     targetRevision: HEAD
     path: charts/vault
     helm:
@@ -15,7 +15,10 @@ spec:
   destination:
     server: https://kubernetes.default.svc
     namespace: dev-tools
-  syncPolicy: {}
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
   ignoreDifferences:
   - group: admissionregistration.k8s.io
     kind: MutatingWebhookConfiguration

argocd-apps/wikijs.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   project: dev-tools
   source:
-    repoURL: 'ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git'
+    repoURL: 'https://git.dvirlabs.com/dvirlabs/dev-tools.git'
     targetRevision: HEAD
     path: charts/wiki
     helm:
@@ -16,6 +16,9 @@ spec:
     server: https://kubernetes.default.svc
     namespace: dev-tools
   syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
     syncOptions:
       - CreateNamespace=true
   ignoreDifferences:

argocd-apps/woodpecker.yaml

@@ -8,7 +8,7 @@ metadata:
 spec:
   project: dev-tools
   source:
-    repoURL: 'ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git'
+    repoURL: 'https://git.dvirlabs.com/dvirlabs/dev-tools.git'
     targetRevision: HEAD
     path: charts/woodpecker
     helm:

manifests/gitea/current-values.yaml

@@ -1,88 +0,0 @@
-nodeSelector:
-  workload: general
-
-ingress:
-  enabled: true
-  className: traefik
-  annotations:
-    traefik.ingress.kubernetes.io/router.entrypoints: websecure
-    traefik.ingress.kubernetes.io/router.tls: "true"
-  hosts:
-    - host: git.dvirlabs.com
-      paths:
-        - path: /
-          pathType: Prefix
-  tls:
-    - hosts:
-        - git.dvirlabs.com
-      secretName: git-dvirlabs-cert
-
-gitea:
-  admin:
-    username: admin
-    password: admin1234
-    email: admin@dvirlabs.com
-    passwordMode: keepUpdated
-
-  config:
-    server:
-      DOMAIN: git.dvirlabs.com
-      ROOT_URL: https://git.dvirlabs.com/
-      SSH_DOMAIN: git.dvirlabs.com
-      SSH_LISTEN_PORT: 2222
-      SSH_PORT: 22
-      PROTOCOL: http
-    metrics:
-        ENABLED: true
-        TOKEN: prometheusmetricstoken
-    security:
-      INSTALL_LOCK: true
-      SECRET_KEY: somesecret
-      INTERNAL_TOKEN: somesecret
-  oauth:
-    - name: "Keycloak"
-      provider: "openidConnect"
-      key: "gitea"
-      secret: "gIA3YXhesiyIbKkMMtasCVTd7CvUyLwA"
-      autoDiscoverUrl: "https://keycloak.dvirlabs.com/realms/lab/.well-known/openid-configuration"
-      scopes: "openid profile email"
-      groupClaimName: "groups"
-      adminGroup: "gitea-admins"
-      restrictedGroup: "gitea-users"
-
-  livenessProbe:
-    enabled: true
-    tcpSocket:
-      port: http
-    initialDelaySeconds: 200
-
-  readinessProbe:
-    enabled: true
-    tcpSocket:
-      port: http
-    initialDelaySeconds: 5
-
-postgresql-ha:
-  enabled: false
-
-postgresql:
-  enabled: true
-  global:
-    postgresql:
-      auth:
-        username: gitea
-        password: gitea
-        database: gitea
-  primary:
-    nodeSelector:
-      workload: general
-    persistence:
-      storageClass: nfs-client
-      size: 20Gi
-
-persistence:
-  enabled: true
-  storageClass: nfs-client
-  size: 50Gi
-  accessModes:
-    - ReadWriteOnce

manifests/gitea/values.yaml

@@ -1,10 +1,3 @@
-global:
-  security:
-    allowInsecureImages: true
-
-nodeSelector:
-  workload: general
-
 ingress:
   enabled: true
   className: traefik
@@ -71,10 +64,6 @@ postgresql-ha:
 
 postgresql:
   enabled: true
-  image:
-    registry: docker.io
-    repository: bitnamilegacy/postgresql
-    tag: 17.5.0-debian-12-r3
   global:
     postgresql:
       auth:
@@ -83,19 +72,10 @@ postgresql:
         database: gitea
   primary:
     persistence:
-      storageClass: nfs-client
+      size: 10Gi
-      size: 50Gi
 
 persistence:
   enabled: true
-  storageClass: nfs-client
+  size: 5Gi
-  size: 50Gi
   accessModes:
     - ReadWriteOnce
-
-valkey-cluster:
-  enabled: true
-  image:
-    registry: docker.io
-    repository: bitnamilegacy/valkey-cluster
-    tag: 8.1.1-debian-12-r2

manifests/wikijs/values.yaml

@@ -27,10 +27,6 @@ postgresql:
   postgresqlUsername: wikijs
   postgresqlPassword: wikijs123
   postgresqlDatabase: wiki
-  image:
-    registry: docker.io
-    repository: bitnamilegacy/postgresql
-    tag: 11.22.0
   persistence:
     enabled: true
     size: 30Gi