🩺 gatus

kubernetes/apps/default/bazarr/app/gatus.yaml

@@ -0,0 +1,26 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: bazarr-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: bazarr
+        group: internal
+        url: 192.168.8.1
+        interval: 1m
+        ui:
+          hide-hostname: true
+          hide-url: true
+        dns:
+          query-name: bazarr.${SECRET_CLUSTER_DOMAIN}
+          query-type: A
+        conditions:
+          - "[BODY] == 192.168.169.101"
+          - "[DNS_RCODE] == NOERROR"
+        alerts:
+          - type: pushover

kubernetes/apps/default/bazarr/app/kustomization.yaml

@@ -5,6 +5,7 @@ kind: Kustomization
 namespace: default
 resources:
   - ./externalsecret.yaml
+  - ./gatus.yaml
   - ./helmrelease.yaml
   - ./volume.yaml
   - ./volsync.yaml

kubernetes/apps/default/calibre-web/app/helmrelease.yaml

@@ -1,74 +0,0 @@
----
-# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/helmrelease-helm-v2beta1.json
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
-kind: HelmRelease
-metadata:
-  name: &app calibre-web
-  namespace: default
-spec:
-  interval: 30m
-  chart:
-    spec:
-      chart: app-template
-      version: 1.5.1
-      sourceRef:
-        kind: HelmRepository
-        name: bjw-s
-        namespace: flux-system
-  maxHistory: 2
-  install:
-    createNamespace: true
-    remediation:
-      retries: 3
-  upgrade:
-    cleanupOnFail: true
-    remediation:
-      retries: 3
-  uninstall:
-    keepHistory: false
-  values:
-    image:
-      repository: ghcr.io/auricom/calibre-web
-      tag: 0.6.20
-    env:
-      TZ: "${TIMEZONE}"
-    service:
-      main:
-        ports:
-          http:
-            port: 8083
-    ingress:
-      main:
-        enabled: true
-        ingressClassName: "nginx"
-        annotations:
-          hajimari.io/icon: mdi:bookshelf
-        hosts:
-          - host: &host "{{ .Release.Name }}.${SECRET_CLUSTER_DOMAIN}"
-            paths:
-              - path: /
-                pathType: Prefix
-        tls:
-          - hosts:
-              - *host
-    podSecurityContext:
-      runAsUser: 568
-      runAsGroup: 568
-      fsGroup: 568
-      fsGroupChangePolicy: "OnRootMismatch"
-    persistence:
-      config:
-        enabled: true
-        existingClaim: calibre-web-config
-      books:
-        enabled: true
-        type: nfs
-        server: "${LOCAL_LAN_TRUENAS}"
-        path: /mnt/storage/home/claude/books
-        mountPath: /mnt/storage/home/claude/books
-    resources:
-      requests:
-        cpu: 15m
-        memory: 204M
-      limits:
-        memory: 380M

kubernetes/apps/default/calibre-web/app/kustomization.yaml

@@ -1,9 +0,0 @@
----
-# yaml-language-server: $schema=https://raw.githubusercontent.com/SchemaStore/schemastore/master/src/schemas/json/kustomization.json
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-namespace: default
-resources:
-  - ./helmrelease.yaml
-  - ./volume.yaml
-  - ./volsync.yaml

kubernetes/apps/default/calibre-web/app/volsync.yaml

@@ -1,49 +0,0 @@
----
-# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/external-secrets.io/externalsecret_v1beta1.json
-apiVersion: external-secrets.io/v1beta1
-kind: ExternalSecret
-metadata:
-  name: calibre-web-restic
-  namespace: default
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: onepassword-connect
-  target:
-    name: calibre-web-restic-secret
-    creationPolicy: Owner
-    template:
-      engineVersion: v2
-      data:
-        RESTIC_REPOSITORY: '{{ .REPOSITORY_TEMPLATE }}/calibre-web'
-        RESTIC_PASSWORD: '{{ .RESTIC_PASSWORD }}'
-        AWS_ACCESS_KEY_ID: '{{ .AWS_ACCESS_KEY_ID }}'
-        AWS_SECRET_ACCESS_KEY: '{{ .AWS_SECRET_ACCESS_KEY }}'
-  dataFrom:
-    - extract:
-        key: volsync-restic-template
----
-# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/volsync.backube/replicationsource_v1alpha1.json
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationSource
-metadata:
-  name: calibre-web
-  namespace: default
-spec:
-  sourcePVC: calibre-web-config
-  trigger:
-    schedule: "0 7 * * *"
-  restic:
-    copyMethod: Snapshot
-    pruneIntervalDays: 7
-    repository: calibre-web-restic-secret
-    cacheCapacity: 10Gi
-    volumeSnapshotClassName: csi-ceph-blockpool
-    storageClassName: rook-ceph-block
-    moverSecurityContext:
-      runAsUser: 568
-      runAsGroup: 568
-      fsGroup: 568
-    retain:
-      daily: 7
-      within: 3d

kubernetes/apps/default/calibre-web/app/volume.yaml

@@ -1,17 +0,0 @@
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: calibre-web-config
-  namespace: default
-  labels:
-    app.kubernetes.io/name: &name calibre-web
-    app.kubernetes.io/instance: *name
-    snapshot.home.arpa/enabled: "true"
-spec:
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 1Gi
-  storageClassName: rook-ceph-block

kubernetes/apps/default/calibre-web/ks.yaml

@@ -1,27 +0,0 @@
----
-# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/kustomization-kustomize-v1.json
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: cluster-apps-calibre-web
-  namespace: flux-system
-  labels:
-    substitution.flux.home.arpa/enabled: "true"
-spec:
-  dependsOn:
-    - name: cluster-apps-external-secrets-stores
-    - name: cluster-apps-rook-ceph-cluster
-    - name: cluster-apps-volsync-app
-  path: ./kubernetes/apps/default/calibre-web/app
-  prune: true
-  sourceRef:
-    kind: GitRepository
-    name: home-ops-kubernetes
-  healthChecks:
-    - apiVersion: helm.toolkit.fluxcd.io/v2beta1
-      kind: HelmRelease
-      name: calibre-web
-      namespace: default
-  interval: 30m
-  retryInterval: 1m
-  timeout: 3m

kubernetes/apps/default/calibre/app/gatus.yaml

@@ -0,0 +1,26 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: calibre-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: calibre
+        group: internal
+        url: 192.168.8.1
+        interval: 1m
+        ui:
+          hide-hostname: true
+          hide-url: true
+        dns:
+          query-name: calibre.${SECRET_CLUSTER_DOMAIN}
+          query-type: A
+        conditions:
+          - "[BODY] == 192.168.169.101"
+          - "[DNS_RCODE] == NOERROR"
+        alerts:
+          - type: pushover

kubernetes/apps/default/calibre/app/kustomization.yaml

@@ -4,6 +4,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: default
 resources:
+  - ./gatus.yaml
   - ./helmrelease.yaml
   - ./volume.yaml
   - ./volsync.yaml

kubernetes/apps/default/changedetection/app/helmrelease.yaml

@@ -1,77 +0,0 @@
----
-# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/helmrelease-helm-v2beta1.json
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
-kind: HelmRelease
-metadata:
-  name: changedetection
-  namespace: default
-spec:
-  interval: 30m
-  chart:
-    spec:
-      chart: app-template
-      version: 1.5.1
-      sourceRef:
-        kind: HelmRepository
-        name: bjw-s
-        namespace: flux-system
-  maxHistory: 2
-  install:
-    createNamespace: true
-    remediation:
-      retries: 3
-  upgrade:
-    cleanupOnFail: true
-    remediation:
-      retries: 3
-  uninstall:
-    keepHistory: false
-  values:
-    controller:
-      type: statefulset
-    image:
-      repository: ghcr.io/dgtlmoon/changedetection.io
-      tag: "0.44.2"
-    env:
-      TZ: ${TIMEZONE}
-      PORT: &port 5000
-      PUID: 568
-      PGID: 568
-      BASE_URL: https://changedetection.${SECRET_CLUSTER_DOMAIN}
-    service:
-      main:
-        ports:
-          http:
-            port: *port
-    ingress:
-      main:
-        enabled: true
-        ingressClassName: nginx
-        annotations:
-          nginx.ingress.kubernetes.io/whitelist-source-range: |
-            10.0.0.0/8,172.16.0.0/12,192.168.0.0/16
-          hajimari.io/icon: mdi:web-sync
-        hosts:
-          - host: &host "{{ .Release.Name }}.${SECRET_CLUSTER_DOMAIN}"
-            paths:
-              - path: /
-                pathType: Prefix
-        tls:
-          - hosts:
-              - *host
-    podSecurityContext:
-      runAsUser: 568
-      runAsGroup: 568
-      fsGroup: 568
-      fsGroupChangePolicy: OnRootMismatch
-    persistence:
-      config:
-        enabled: true
-        existingClaim: changedetection-config
-        mountPath: /datastore
-    resources:
-      requests:
-        cpu: 10m
-        memory: 100Mi
-      limits:
-        memory: 500Mi

kubernetes/apps/default/changedetection/app/kustomization.yaml

@@ -1,11 +0,0 @@
----
-# yaml-language-server: $schema=https://raw.githubusercontent.com/SchemaStore/schemastore/master/src/schemas/json/kustomization.json
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-namespace: default
-resources:
-  - ./helmrelease.yaml
-  - ./volume.yaml
-  - ./volsync.yaml
-patchesStrategicMerge:
-  - ./patches/browser.yaml

kubernetes/apps/default/changedetection/app/patches/browser.yaml

@@ -1,35 +0,0 @@
----
-# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/helmrelease-helm-v2beta1.json
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
-kind: HelmRelease
-metadata:
-  name: changedetection
-  namespace: default
-spec:
-  values:
-    additionalContainers:
-      browser:
-        name: browser
-        image: docker.io/browserless/chrome:latest
-        imagePullPolicy: Always
-        env:
-          - name: SCREEN_WIDTH
-            value: "1920"
-          - name: SCREEN_HEIGHT
-            value: "1024"
-          - name: SCREEN_DEPTH
-            value: "16"
-          - name: ENABLE_DEBUGGER
-            value: "false"
-          - name: PREBOOT_CHROME
-            value: "true"
-          - name: CONNECTION_TIMEOUT
-            value: "300000"
-          - name: MAX_CONCURRENT_SESSIONS
-            value: "10"
-          - name: CHROME_REFRESH_TIME
-            value: "600000"
-          - name: DEFAULT_BLOCK_ADS
-            value: "true"
-          - name: DEFAULT_STEALTH
-            value: "true"

kubernetes/apps/default/changedetection/app/volsync.yaml

@@ -1,49 +0,0 @@
----
-# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/external-secrets.io/externalsecret_v1beta1.json
-apiVersion: external-secrets.io/v1beta1
-kind: ExternalSecret
-metadata:
-  name: changedetection-restic
-  namespace: default
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: onepassword-connect
-  target:
-    name: changedetection-restic-secret
-    creationPolicy: Owner
-    template:
-      engineVersion: v2
-      data:
-        RESTIC_REPOSITORY: '{{ .REPOSITORY_TEMPLATE }}/changedetection'
-        RESTIC_PASSWORD: '{{ .RESTIC_PASSWORD }}'
-        AWS_ACCESS_KEY_ID: '{{ .AWS_ACCESS_KEY_ID }}'
-        AWS_SECRET_ACCESS_KEY: '{{ .AWS_SECRET_ACCESS_KEY }}'
-  dataFrom:
-    - extract:
-        key: volsync-restic-template
----
-# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/volsync.backube/replicationsource_v1alpha1.json
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationSource
-metadata:
-  name: changedetection
-  namespace: default
-spec:
-  sourcePVC: changedetection-config
-  trigger:
-    schedule: "0 7 * * *"
-  restic:
-    copyMethod: Snapshot
-    pruneIntervalDays: 7
-    repository: changedetection-restic-secret
-    cacheCapacity: 10Gi
-    volumeSnapshotClassName: csi-ceph-blockpool
-    storageClassName: rook-ceph-block
-    moverSecurityContext:
-      runAsUser: 568
-      runAsGroup: 568
-      fsGroup: 568
-    retain:
-      daily: 7
-      within: 3d

kubernetes/apps/default/changedetection/app/volume.yaml

@@ -1,17 +0,0 @@
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: changedetection-config
-  namespace: default
-  labels:
-    app.kubernetes.io/name: &name changedetection
-    app.kubernetes.io/instance: *name
-    snapshot.home.arpa/enabled: "true"
-spec:
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 1Gi
-  storageClassName: rook-ceph-block

kubernetes/apps/default/changedetection/ks.yaml

@@ -1,27 +0,0 @@
----
-# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/kustomization-kustomize-v1.json
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: cluster-apps-changedetection
-  namespace: flux-system
-  labels:
-    substitution.flux.home.arpa/enabled: "true"
-spec:
-  dependsOn:
-    - name: cluster-apps-external-secrets-stores
-    - name: cluster-apps-rook-ceph-cluster
-    - name: cluster-apps-volsync-app
-  path: ./kubernetes/apps/default/changedetection/app
-  prune: true
-  sourceRef:
-    kind: GitRepository
-    name: home-ops-kubernetes
-  healthChecks:
-    - apiVersion: helm.toolkit.fluxcd.io/v2beta1
-      kind: HelmRelease
-      name: changedetection
-      namespace: default
-  interval: 30m
-  retryInterval: 1m
-  timeout: 3m

kubernetes/apps/default/firefly-iii/app/gatus.yaml

@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: firefly-iii-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: firefly-iii
+        group: internal
+        url: https://cash.${SECRET_CLUSTER_DOMAIN}/login
+        interval: 1m
+        client:
+          insecure: true
+        conditions:
+          - "[STATUS] == 200"
+        alerts:
+          - type: pushover
+

kubernetes/apps/default/firefly-iii/app/helmrelease.yaml

@@ -33,7 +33,7 @@ spec:
         imagePullPolicy: IfNotPresent
         envFrom: &envFrom
           - secretRef:
-              name: bazarr-secret
+              name: firefly-iii-secret
     controller:
       annotations:
         reloader.stakater.com/auto: "true"

kubernetes/apps/default/firefly-iii/app/kustomization.yaml

@@ -5,6 +5,7 @@ kind: Kustomization
 namespace: default
 resources:
   - ./externalsecret.yaml
+  - ./gatus.yaml
   - ./helmrelease.yaml
   - ./volume.yaml
   - ./volsync.yaml

kubernetes/apps/default/flood/app/gatus.yaml

@@ -0,0 +1,26 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: flood-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: flood
+        group: internal
+        url: 192.168.8.1
+        interval: 1m
+        ui:
+          hide-hostname: true
+          hide-url: true
+        dns:
+          query-name: flood.${SECRET_CLUSTER_DOMAIN}
+          query-type: A
+        conditions:
+          - "[BODY] == 192.168.169.101"
+          - "[DNS_RCODE] == NOERROR"
+        alerts:
+          - type: pushover

kubernetes/apps/default/flood/app/kustomization.yaml

@@ -5,6 +5,7 @@ kind: Kustomization
 namespace: default
 resources:
   - ./externalsecret.yaml
+  - ./gatus.yaml
   - ./helmrelease.yaml
   - ./volume.yaml
   - ./volsync.yaml

kubernetes/apps/default/freshrss/app/gatus.yaml

@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: freshrss-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: freshrss
+        group: internal
+        url: https://freshrss.${SECRET_CLUSTER_DOMAIN}/i/
+        interval: 1m
+        client:
+          insecure: true
+        conditions:
+          - "[STATUS] == 200"
+        alerts:
+          - type: pushover
+

kubernetes/apps/default/freshrss/app/kustomization.yaml

@@ -5,6 +5,7 @@ kind: Kustomization
 namespace: default
 resources:
   - ./externalsecret.yaml
+  - ./gatus.yaml
   - ./helmrelease.yaml
   - ./volsync.yaml
   - ./volume.yaml

kubernetes/apps/default/frigate/app/gatus.yaml

@@ -20,6 +20,28 @@ data:
           query-name: frigate.${SECRET_CLUSTER_DOMAIN}
           query-type: A
         conditions:
-          - "len([BODY]) == 0"
+          - "[BODY] == 192.168.169.101"
+          - "[DNS_RCODE] == NOERROR"
+        alerts:
+          - type: pushover
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: frigate-cam-01-bedroom-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: cam-01-bedroom
+        group: cameras
+        url: https://cam-01-bedroom.${SECRET_DOMAIN}
+        interval: 5m
+        client:
+          insecure: true
+        conditions:
+          - "[STATUS] == 200"
         alerts:
           - type: pushover

kubernetes/apps/default/ghostfolio/app/gatus.yaml

@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: ghostfolio-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: ghostfolio
+        group: internal
+        url: https://portfolio.${SECRET_CLUSTER_DOMAIN}
+        interval: 1m
+        client:
+          insecure: true
+        conditions:
+          - "[STATUS] == 200"
+        alerts:
+          - type: pushover
+

kubernetes/apps/default/ghostfolio/app/kustomization.yaml

@@ -5,4 +5,5 @@ kind: Kustomization
 namespace: default
 resources:
   - ./externalsecret.yaml
+  - ./gatus.yaml
   - ./helmrelease.yaml

kubernetes/apps/default/hajimari/app/gatus.yaml

@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: hajimari-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: hajimari
+        group: internal
+        url: https://apps.${SECRET_CLUSTER_DOMAIN}
+        interval: 1m
+        client:
+          insecure: true
+        conditions:
+          - "[STATUS] == 200"
+        alerts:
+          - type: pushover
+

kubernetes/apps/default/hajimari/app/kustomization.yaml

@@ -4,4 +4,5 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: default
 resources:
+  - ./gatus.yaml
   - ./helmrelease.yaml

kubernetes/apps/default/home-assistant/app/gatus.yaml

@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: home-assistant-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: home-assistant
+        group: internal
+        url: https://home-assistant.${SECRET_CLUSTER_DOMAIN}
+        interval: 1m
+        client:
+          insecure: true
+        conditions:
+          - "[STATUS] == 200"
+        alerts:
+          - type: pushover
+

kubernetes/apps/default/home-assistant/app/kustomization.yaml

@@ -5,6 +5,7 @@ kind: Kustomization
 namespace: default
 resources:
   - ./externalsecret.yaml
+  - ./gatus.yaml
   - ./helmrelease.yaml
   - ./podmonitor.yaml
   - ./volsync.yaml

kubernetes/apps/default/immich/app/gatus.yaml

@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: immich-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: immich
+        group: internal
+        url: https://photos.${SECRET_CLUSTER_DOMAIN}/auth/login
+        interval: 1m
+        client:
+          insecure: true
+        conditions:
+          - "[STATUS] == 200"
+        alerts:
+          - type: pushover
+

kubernetes/apps/default/immich/app/kustomization.yaml

@@ -6,6 +6,7 @@ namespace: default
 resources:
   - ./configmap.yaml
   - ./externalsecret.yaml
+  - ./gatus.yaml
   - ./microservices
   - ./machine-learning
   - ./server

kubernetes/apps/default/invidious/app/gatus.yaml

@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: invidious-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: invidious
+        group: external
+        url: https://invidious.${SECRET_CLUSTER_DOMAIN}
+        interval: 1m
+        client:
+          dns-resolver: tcp://1.1.1.1:53
+          insecure: true
+        conditions:
+          - "[STATUS] == 200"
+        alerts:
+          - type: pushover

kubernetes/apps/default/invidious/app/kustomization.yaml

@@ -5,4 +5,5 @@ kind: Kustomization
 namespace: default
 resources:
   - ./externalsecret.yaml
+  - ./gatus.yaml
   - ./helmrelease.yaml

kubernetes/apps/default/jellyfin/app/gatus.yaml

@@ -0,0 +1,21 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: jellyfin-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: jellyfin
+        group: internal
+        url: https://jellyfin.${SECRET_CLUSTER_DOMAIN}/web/index.html
+        interval: 1m
+        client:
+          insecure: true
+        conditions:
+          - "[STATUS] == 200"
+        alerts:
+          - type: pushover

kubernetes/apps/default/jellyfin/app/kustomization.yaml

@@ -4,6 +4,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: default
 resources:
+  - ./gatus.yaml
   - ./helmrelease.yaml
   - ./volsync.yaml
   - ./volume.yaml

kubernetes/apps/default/jellyseer/app/helmrelease.yaml

@@ -1,76 +0,0 @@
----
-# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/helmrelease-helm-v2beta1.json
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
-kind: HelmRelease
-metadata:
-  name: &app jellyseer
-  namespace: default
-spec:
-  interval: 30m
-  chart:
-    spec:
-      chart: app-template
-      version: 1.5.1
-      sourceRef:
-        kind: HelmRepository
-        name: bjw-s
-        namespace: flux-system
-  maxHistory: 2
-  install:
-    createNamespace: true
-    remediation:
-      retries: 3
-  upgrade:
-    cleanupOnFail: true
-    remediation:
-      retries: 3
-  uninstall:
-    keepHistory: false
-  values:
-    image:
-      repository: docker.io/fallenbagel/jellyseerr
-      tag: 1.6.0
-    env:
-      TZ: "${TIMEZONE}"
-      LOG_LEVEL: "info"
-      PORT: &port 8080
-    service:
-      main:
-        ports:
-          http:
-            port: *port
-    ingress:
-      main:
-        enabled: true
-        ingressClassName: "nginx"
-        annotations:
-          hajimari.io/icon: mdi:eye-circle
-        hosts:
-          - host: &host "{{ .Release.Name }}.${SECRET_CLUSTER_DOMAIN}"
-            paths:
-              - path: /
-                pathType: Prefix
-          - host: &host2 "requests.${SECRET_CLUSTER_DOMAIN}"
-            paths:
-              - path: /
-                pathType: Prefix
-        tls:
-          - hosts:
-              - *host
-              - *host2
-    podSecurityContext:
-      runAsUser: 1000
-      runAsGroup: 1000
-      fsGroup: 1000
-      fsGroupChangePolicy: "OnRootMismatch"
-    persistence:
-      config:
-        enabled: true
-        existingClaim: jellyseer-config
-        mountPath: /app/config
-    resources:
-      requests:
-        cpu: 10m
-        memory: 250Mi
-      limits:
-        memory: 500Mi

kubernetes/apps/default/jellyseer/app/kustomization.yaml

@@ -1,9 +0,0 @@
----
-# yaml-language-server: $schema=https://raw.githubusercontent.com/SchemaStore/schemastore/master/src/schemas/json/kustomization.json
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-namespace: default
-resources:
-  - ./helmrelease.yaml
-  - ./volsync.yaml
-  - ./volume.yaml

kubernetes/apps/default/jellyseer/app/volsync.yaml

@@ -1,49 +0,0 @@
----
-# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/external-secrets.io/externalsecret_v1beta1.json
-apiVersion: external-secrets.io/v1beta1
-kind: ExternalSecret
-metadata:
-  name: jellyseer-restic
-  namespace: default
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: onepassword-connect
-  target:
-    name: jellyseer-restic-secret
-    creationPolicy: Owner
-    template:
-      engineVersion: v2
-      data:
-        RESTIC_REPOSITORY: '{{ .REPOSITORY_TEMPLATE }}/jellyseer'
-        RESTIC_PASSWORD: '{{ .RESTIC_PASSWORD }}'
-        AWS_ACCESS_KEY_ID: '{{ .AWS_ACCESS_KEY_ID }}'
-        AWS_SECRET_ACCESS_KEY: '{{ .AWS_SECRET_ACCESS_KEY }}'
-  dataFrom:
-    - extract:
-        key: volsync-restic-template
----
-# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/volsync.backube/replicationsource_v1alpha1.json
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationSource
-metadata:
-  name: jellyseer
-  namespace: default
-spec:
-  sourcePVC: jellyseer-config
-  trigger:
-    schedule: "0 7 * * *"
-  restic:
-    copyMethod: Snapshot
-    pruneIntervalDays: 7
-    repository: jellyseer-restic-secret
-    cacheCapacity: 10Gi
-    volumeSnapshotClassName: csi-ceph-blockpool
-    storageClassName: rook-ceph-block
-    moverSecurityContext:
-      runAsUser: 1000
-      runAsGroup: 1000
-      fsGroup: 1000
-    retain:
-      daily: 7
-      within: 3d

kubernetes/apps/default/jellyseer/app/volume.yaml

@@ -1,17 +0,0 @@
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: jellyseer-config
-  namespace: default
-  labels:
-    app.kubernetes.io/name: &name jellyseer
-    app.kubernetes.io/instance: *name
-    snapshot.home.arpa/enabled: "true"
-spec:
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 1Gi
-  storageClassName: rook-ceph-block

kubernetes/apps/default/jellyseer/ks.yaml

@@ -1,26 +0,0 @@
----
-# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/kustomization-kustomize-v1.json
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: cluster-apps-jellyseer-app
-  namespace: flux-system
-  labels:
-    substitution.flux.home.arpa/enabled: "true"
-spec:
-  dependsOn:
-    - name: cluster-apps-rook-ceph-cluster
-    - name: cluster-apps-volsync-app
-  path: ./kubernetes/apps/default/jellyseer/app
-  prune: true
-  sourceRef:
-    kind: GitRepository
-    name: home-ops-kubernetes
-  healthChecks:
-    - apiVersion: helm.toolkit.fluxcd.io/v2beta1
-      kind: HelmRelease
-      name: jellyseer
-      namespace: default
-  interval: 30m
-  retryInterval: 1m
-  timeout: 3m

kubernetes/apps/default/joplin/app/gatus.yaml

@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: joplin-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: joplin
+        group: external
+        url: https://joplin.${SECRET_CLUSTER_DOMAIN}
+        interval: 1m
+        client:
+          dns-resolver: tcp://1.1.1.1:53
+          insecure: true
+        conditions:
+          - "[STATUS] == 200"
+        alerts:
+          - type: pushover

kubernetes/apps/default/joplin/app/kustomization.yaml

@@ -5,4 +5,5 @@ kind: Kustomization
 namespace: default
 resources:
   - ./externalsecret.yaml
+  - ./gatus.yaml
   - ./helmrelease.yaml

kubernetes/apps/default/komga/app/gatus.yaml

@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: komga-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: komga
+        group: internal
+        url: https://komga.${SECRET_CLUSTER_DOMAIN}
+        interval: 1m
+        client:
+          insecure: true
+        conditions:
+          - "[STATUS] == 200"
+        alerts:
+          - type: pushover
+

kubernetes/apps/default/komga/app/kustomization.yaml

@@ -4,6 +4,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: default
 resources:
+  - ./gatus.yaml
   - ./helmrelease.yaml
   - ./volsync.yaml
   - ./volume.yaml

kubernetes/apps/default/kustomization.yaml

@@ -9,8 +9,6 @@ resources:
   - ./authelia/ks.yaml
   - ./bazarr/ks.yaml
   - ./calibre/ks.yaml
-  - ./calibre-web/ks.yaml
-  - ./changedetection/ks.yaml
   - ./cloudnative-pg/ks.yaml
   - ./emqx/ks.yaml
   - ./firefly-iii/ks.yaml
@@ -23,7 +21,6 @@ resources:
   - ./immich/ks.yaml
   - ./invidious/ks.yaml
   - ./jellyfin/ks.yaml
-  - ./jellyseer/ks.yaml
   - ./joplin/ks.yaml
   - ./komf/ks.yaml
   - ./komga/ks.yaml
@@ -46,7 +43,6 @@ resources:
   - ./pyload/ks.yaml
   - ./qbittorrent/ks.yaml
   - ./radarr/ks.yaml
-  - ./readarr/ks.yaml
   - ./recyclarr/ks.yaml
   - ./redis/ks.yaml
   - ./resilio-sync/ks.yaml

kubernetes/apps/default/libreddit/app/gatus.yaml

@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: invidious-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: invidious
+        group: external
+        url: https://invidious.${SECRET_CLUSTER_DOMAIN}
+        interval: 1m
+        client:
+          dns-resolver: tcp://1.1.1.1:53
+          insecure: true
+        conditions:
+          - "[STATUS] == 200"
+        alerts:
+          - type: pushover

kubernetes/apps/default/libreddit/app/kustomization.yaml

@@ -4,4 +4,5 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: default
 resources:
+  - ./gatus.yaml
   - ./helmrelease.yaml

kubernetes/apps/default/lidarr/app/gatus.yaml

@@ -0,0 +1,26 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: lidarr-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: lidarr
+        group: internal
+        url: 192.168.8.1
+        interval: 1m
+        ui:
+          hide-hostname: true
+          hide-url: true
+        dns:
+          query-name: lidarr.${SECRET_CLUSTER_DOMAIN}
+          query-type: A
+        conditions:
+          - "[BODY] == 192.168.169.101"
+          - "[DNS_RCODE] == NOERROR"
+        alerts:
+          - type: pushover

kubernetes/apps/default/lidarr/app/kustomization.yaml

@@ -5,6 +5,7 @@ kind: Kustomization
 namespace: default
 resources:
   - ./externalsecret.yaml
+  - ./gatus.yaml
   - ./helmrelease.yaml
   - ./volsync.yaml
   - ./volume.yaml

kubernetes/apps/default/lychee/app/gatus.yaml

@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: lychee-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: lychee
+        group: external
+        url: https://lychee.${SECRET_CLUSTER_DOMAIN}
+        interval: 1m
+        client:
+          dns-resolver: tcp://1.1.1.1:53
+          insecure: true
+        conditions:
+          - "[STATUS] == 200"
+        alerts:
+          - type: pushover

kubernetes/apps/default/lychee/app/kustomization.yaml

@@ -5,6 +5,7 @@ kind: Kustomization
 namespace: default
 resources:
   - ./externalsecret.yaml
+  - ./gatus.yaml
   - ./helmrelease.yaml
   - ./volsync.yaml
   - ./volume.yaml

kubernetes/apps/default/mailrise/app/gatus.yaml

@@ -0,0 +1,26 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: mailrise-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: mailrise
+        group: internal
+        url: 192.168.8.1
+        interval: 1m
+        ui:
+          hide-hostname: true
+          hide-url: true
+        dns:
+          query-name: mailrise.${SECRET_CLUSTER_DOMAIN}
+          query-type: A
+        conditions:
+          - "[BODY] == 192.168.169.101"
+          - "[DNS_RCODE] == NOERROR"
+        alerts:
+          - type: pushover

kubernetes/apps/default/mailrise/app/kustomization.yaml

@@ -5,6 +5,7 @@ kind: Kustomization
 namespace: default
 resources:
   - ./externalsecret.yaml
+  - ./gatus.yaml
   - ./helmrelease.yaml
 configMapGenerator:
   - name: mailrise-configmap

kubernetes/apps/default/media-browser/app/gatus.yaml

@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: media-browser-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: media-browser
+        group: internal
+        url: https://media-browser.${SECRET_CLUSTER_DOMAIN}
+        interval: 1m
+        client:
+          insecure: true
+        conditions:
+          - "[STATUS] == 200"
+        alerts:
+          - type: pushover
+

kubernetes/apps/default/media-browser/app/kustomization.yaml

@@ -4,6 +4,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: default
 resources:
+  - ./gatus.yaml
   - ./helmrelease.yaml
   - ./volsync.yaml
   - ./volume.yaml

kubernetes/apps/default/navidrome/app/gatus.yaml

@@ -0,0 +1,26 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: navidrome-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: navidrome
+        group: internal
+        url: 192.168.8.1
+        interval: 1m
+        ui:
+          hide-hostname: true
+          hide-url: true
+        dns:
+          query-name: navidrome.${SECRET_CLUSTER_DOMAIN}
+          query-type: A
+        conditions:
+          - "[BODY] == 192.168.169.101"
+          - "[DNS_RCODE] == NOERROR"
+        alerts:
+          - type: pushover

kubernetes/apps/default/navidrome/app/kustomization.yaml

@@ -4,6 +4,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: default
 resources:
+  - ./gatus.yaml
   - ./helmrelease.yaml
   - ./volsync.yaml
   - ./volume.yaml

kubernetes/apps/default/nitter/app/gatus.yaml

@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: nitter-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: nitter
+        group: external
+        url: https://nitter.${SECRET_CLUSTER_DOMAIN}
+        interval: 1m
+        client:
+          dns-resolver: tcp://1.1.1.1:53
+          insecure: true
+        conditions:
+          - "[STATUS] == 200"
+        alerts:
+          - type: pushover

kubernetes/apps/default/nitter/app/kustomization.yaml

@@ -4,6 +4,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: default
 resources:
+  - ./gatus.yaml
   - ./helmrelease.yaml
 configMapGenerator:
   - name: nitter

kubernetes/apps/default/outline/app/gatus.yaml

@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: outline-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: outline
+        group: internal
+        url: https://docs.${SECRET_CLUSTER_DOMAIN}
+        interval: 1m
+        client:
+          insecure: true
+        conditions:
+          - "[STATUS] == 200"
+        alerts:
+          - type: pushover
+

kubernetes/apps/default/outline/app/kustomization.yaml

@@ -5,4 +5,5 @@ kind: Kustomization
 namespace: default
 resources:
   - ./externalsecret.yaml
+  - ./gatus.yaml
   - ./helmrelease.yaml

kubernetes/apps/default/paperless/app/gatus.yaml

@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: paperless-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: paperless
+        group: internal
+        url: https://paperless.${SECRET_CLUSTER_DOMAIN}/accounts/login/
+        interval: 1m
+        client:
+          insecure: true
+        conditions:
+          - "[STATUS] == 200"
+        alerts:
+          - type: pushover
+

kubernetes/apps/default/paperless/app/kustomization.yaml

@@ -5,4 +5,5 @@ kind: Kustomization
 namespace: default
 resources:
   - ./externalsecret.yaml
+  - ./gatus.yaml
   - ./helmrelease.yaml

kubernetes/apps/default/pgadmin/app/gatus.yaml

@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: pgadmin-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: pgadmin
+        group: internal
+        url: https://pgadmin.${SECRET_CLUSTER_DOMAIN}/login
+        interval: 1m
+        client:
+          insecure: true
+        conditions:
+          - "[STATUS] == 200"
+        alerts:
+          - type: pushover
+

kubernetes/apps/default/pgadmin/app/kustomization.yaml

@@ -5,6 +5,7 @@ kind: Kustomization
 namespace: default
 resources:
   - ./externalsecret.yaml
+  - ./gatus.yaml
   - ./helmrelease.yaml
   - ./volsync.yaml
   - ./volume.yaml

kubernetes/apps/default/prowlarr/app/gatus.yaml

@@ -0,0 +1,26 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: prowlarr-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: prowlarr
+        group: internal
+        url: 192.168.8.1
+        interval: 1m
+        ui:
+          hide-hostname: true
+          hide-url: true
+        dns:
+          query-name: prowlarr.${SECRET_CLUSTER_DOMAIN}
+          query-type: A
+        conditions:
+          - "[BODY] == 192.168.169.101"
+          - "[DNS_RCODE] == NOERROR"
+        alerts:
+          - type: pushover

kubernetes/apps/default/prowlarr/app/kustomization.yaml

@@ -5,6 +5,7 @@ kind: Kustomization
 namespace: default
 resources:
   - ./externalsecret.yaml
+  - ./gatus.yaml
   - ./helmrelease.yaml
   - ./volsync.yaml
   - ./volume.yaml

kubernetes/apps/default/pyload/app/gatus.yaml

@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: pyload-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: pyload
+        group: internal
+        url: https://pyload.${SECRET_CLUSTER_DOMAIN}/login
+        interval: 1m
+        client:
+          insecure: true
+        conditions:
+          - "[STATUS] == 200"
+        alerts:
+          - type: pushover
+

kubernetes/apps/default/pyload/app/kustomization.yaml

@@ -4,6 +4,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: default
 resources:
+  - ./gatus.yaml
   - ./helmrelease.yaml
   - ./volsync.yaml
   - ./volume.yaml

kubernetes/apps/default/qbittorrent/app/gatus.yaml

@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: qbittorrent-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: qbittorrent
+        group: internal
+        url: https://qbittorrent.${SECRET_CLUSTER_DOMAIN}
+        interval: 1m
+        client:
+          insecure: true
+        conditions:
+          - "[STATUS] == 200"
+        alerts:
+          - type: pushover
+

kubernetes/apps/default/qbittorrent/app/kustomization.yaml

@@ -4,6 +4,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: default
 resources:
+  - ./gatus.yaml
   - ./helmrelease.yaml
   - ./jobs
   - ./volsync.yaml

kubernetes/apps/default/radarr/app/gatus.yaml

@@ -0,0 +1,26 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: radarr-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: radarr
+        group: internal
+        url: 192.168.8.1
+        interval: 1m
+        ui:
+          hide-hostname: true
+          hide-url: true
+        dns:
+          query-name: radarr.${SECRET_CLUSTER_DOMAIN}
+          query-type: A
+        conditions:
+          - "[BODY] == 192.168.169.101"
+          - "[DNS_RCODE] == NOERROR"
+        alerts:
+          - type: pushover

kubernetes/apps/default/radarr/app/kustomization.yaml

@@ -5,6 +5,7 @@ kind: Kustomization
 namespace: default
 resources:
   - ./externalsecret.yaml
+  - ./gatus.yaml
   - ./helmrelease.yaml
   - ./volsync.yaml
   - ./volume.yaml

kubernetes/apps/default/readarr/app/externalsecret.yaml

@@ -1,25 +0,0 @@
----
-# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/external-secrets.io/externalsecret_v1beta1.json
-apiVersion: external-secrets.io/v1beta1
-kind: ExternalSecret
-metadata:
-  name: readarr
-  namespace: default
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: onepassword-connect
-  target:
-    name: readarr-secret
-    creationPolicy: Owner
-    template:
-      data:
-        # App
-        READARR__API_KEY: "{{ .READARR__API_KEY }}"
-        PUSHOVER_API_TOKEN: "{{ .PUSHOVER_API_TOKEN }}"
-        PUSHOVER_USER_KEY: "{{ .PUSHOVER_USER_KEY }}"
-  dataFrom:
-    - extract:
-        key: pushover
-    - extract:
-        key: readarr

kubernetes/apps/default/readarr/app/helmrelease.yaml

@@ -1,99 +0,0 @@
----
-# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/helmrelease-helm-v2beta1.json
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
-kind: HelmRelease
-metadata:
-  name: &app readarr
-  namespace: default
-spec:
-  interval: 30m
-  chart:
-    spec:
-      chart: app-template
-      version: 1.5.1
-      sourceRef:
-        kind: HelmRepository
-        name: bjw-s
-        namespace: flux-system
-  maxHistory: 2
-  install:
-    createNamespace: true
-    remediation:
-      retries: 3
-  upgrade:
-    cleanupOnFail: true
-    remediation:
-      retries: 3
-  uninstall:
-    keepHistory: false
-  values:
-    controller:
-      annotations:
-        reloader.stakater.com/auto: "true"
-    image:
-      repository: ghcr.io/onedr0p/readarr-nightly
-      tag: 0.3.4.2187@sha256:a46119c3c82ec57850a33a5b64f9ab9f8fde9ce22b95b4af7c1b514ae867c113
-    env:
-      TZ: "${TIMEZONE}"
-      READARR__INSTANCE_NAME: Readarr (Audio)
-      READARR__PORT: &port 8080
-      READARR__LOG_LEVEL: info
-    envFrom:
-      - secretRef:
-          name: readarr-secret
-    service:
-      main:
-        ports:
-          http:
-            port: *port
-    ingress:
-      main:
-        enabled: true
-        ingressClassName: "nginx"
-        annotations:
-          auth.home.arpa/enabled: "true"
-          nginx.ingress.kubernetes.io/configuration-snippet: |-
-            proxy_set_header Accept-Encoding "";
-            sub_filter '</head>' '<link rel="stylesheet" type="text/css" href="https://theme-park.${SECRET_CLUSTER_DOMAIN}/css/base/readarr/nord.css"></head>';
-            sub_filter_once on;
-          hajimari.io/icon: mdi:bookshelf
-        hosts:
-          - host: &host "{{ .Release.Name }}.${SECRET_CLUSTER_DOMAIN}"
-            paths:
-              - path: /
-                pathType: Prefix
-        tls:
-          - hosts:
-              - *host
-    podSecurityContext:
-      runAsUser: 568
-      runAsGroup: 568
-      fsGroup: 568
-      fsGroupChangePolicy: "OnRootMismatch"
-      supplementalGroups:
-        - 100
-    persistence:
-      config:
-        enabled: true
-        existingClaim: readarr-config
-        mountPath: /config
-      books:
-        enabled: true
-        type: nfs
-        server: "${LOCAL_LAN_TRUENAS}"
-        path: /mnt/storage/home/claude/books
-        mountPath: /mnt/storage/home/claude/books
-      downloads:
-        enabled: true
-        type: nfs
-        server: "${LOCAL_LAN_TRUENAS}"
-        path: /mnt/storage/downloads
-        mountPath: /mnt/storage/downloads
-    podAnnotations:
-      secret.reloader.stakater.com/reload: *app
-    resources:
-      requests:
-        cpu: 10m
-        memory: 250Mi
-      limits:
-        memory: 1000Mi

kubernetes/apps/default/readarr/app/kustomization.yaml

@@ -1,10 +0,0 @@
----
-# yaml-language-server: $schema=https://raw.githubusercontent.com/SchemaStore/schemastore/master/src/schemas/json/kustomization.json
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-namespace: default
-resources:
-  - ./externalsecret.yaml
-  - ./helmrelease.yaml
-  - ./volsync.yaml
-  - ./volume.yaml

kubernetes/apps/default/readarr/app/volsync.yaml

@@ -1,49 +0,0 @@
----
-# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/external-secrets.io/externalsecret_v1beta1.json
-apiVersion: external-secrets.io/v1beta1
-kind: ExternalSecret
-metadata:
-  name: readarr-restic
-  namespace: default
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: onepassword-connect
-  target:
-    name: readarr-restic-secret
-    creationPolicy: Owner
-    template:
-      engineVersion: v2
-      data:
-        RESTIC_REPOSITORY: '{{ .REPOSITORY_TEMPLATE }}/readarr'
-        RESTIC_PASSWORD: '{{ .RESTIC_PASSWORD }}'
-        AWS_ACCESS_KEY_ID: '{{ .AWS_ACCESS_KEY_ID }}'
-        AWS_SECRET_ACCESS_KEY: '{{ .AWS_SECRET_ACCESS_KEY }}'
-  dataFrom:
-    - extract:
-        key: volsync-restic-template
----
-# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/volsync.backube/replicationsource_v1alpha1.json
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationSource
-metadata:
-  name: readarr
-  namespace: default
-spec:
-  sourcePVC: readarr-config
-  trigger:
-    schedule: "0 7 * * *"
-  restic:
-    copyMethod: Snapshot
-    pruneIntervalDays: 7
-    repository: readarr-restic-secret
-    cacheCapacity: 2Gi
-    volumeSnapshotClassName: csi-ceph-blockpool
-    storageClassName: rook-ceph-block
-    moverSecurityContext:
-      runAsUser: 568
-      runAsGroup: 568
-      fsGroup: 568
-    retain:
-      daily: 7
-      within: 3d

kubernetes/apps/default/readarr/app/volume.yaml

@@ -1,17 +0,0 @@
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: readarr-config
-  namespace: default
-  labels:
-    app.kubernetes.io/name: &name readarr
-    app.kubernetes.io/instance: *name
-    snapshot.home.arpa/enabled: "true"
-spec:
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 1Gi
-  storageClassName: rook-ceph-block

kubernetes/apps/default/readarr/ks.yaml

@@ -1,27 +0,0 @@
----
-# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/kustomization-kustomize-v1.json
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: cluster-apps-readarr-app
-  namespace: flux-system
-  labels:
-    substitution.flux.home.arpa/enabled: "true"
-spec:
-  dependsOn:
-    - name: cluster-apps-external-secrets-stores
-    - name: cluster-apps-rook-ceph-cluster
-    - name: cluster-apps-volsync-app
-  path: ./kubernetes/apps/default/readarr/app
-  prune: true
-  sourceRef:
-    kind: GitRepository
-    name: home-ops-kubernetes
-  healthChecks:
-    - apiVersion: helm.toolkit.fluxcd.io/v2beta1
-      kind: HelmRelease
-      name: readarr
-      namespace: default
-  interval: 30m
-  retryInterval: 1m
-  timeout: 3m

kubernetes/apps/default/resilio-sync/claude/gatus.yaml

@@ -0,0 +1,26 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: resilio-claude-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: resilio-claude
+        group: internal
+        url: 192.168.8.1
+        interval: 1m
+        ui:
+          hide-hostname: true
+          hide-url: true
+        dns:
+          query-name: resilio-claude.${SECRET_CLUSTER_DOMAIN}
+          query-type: A
+        conditions:
+          - "[BODY] == 192.168.169.101"
+          - "[DNS_RCODE] == NOERROR"
+        alerts:
+          - type: pushover

kubernetes/apps/default/resilio-sync/claude/kustomization.yaml

@@ -4,6 +4,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: default
 resources:
+  - ./gatus.yaml
   - ./helmrelease.yaml
   - ./volsync.yaml
   - ./volume.yaml

kubernetes/apps/default/resilio-sync/helene/gatus.yaml

@@ -0,0 +1,26 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: resilio-helene-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: resilio-helene
+        group: internal
+        url: 192.168.8.1
+        interval: 1m
+        ui:
+          hide-hostname: true
+          hide-url: true
+        dns:
+          query-name: resilio-helene.${SECRET_CLUSTER_DOMAIN}
+          query-type: A
+        conditions:
+          - "[BODY] == 192.168.169.101"
+          - "[DNS_RCODE] == NOERROR"
+        alerts:
+          - type: pushover

kubernetes/apps/default/resilio-sync/helene/kustomization.yaml

@@ -4,6 +4,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: default
 resources:
+  - ./gatus.yaml
   - ./helmrelease.yaml
   - ./volsync.yaml
   - ./volume.yaml

kubernetes/apps/default/sabnzbd/app/gatus.yaml

@@ -0,0 +1,26 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: sabnzbd-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: sabnzbd
+        group: internal
+        url: 192.168.8.1
+        interval: 1m
+        ui:
+          hide-hostname: true
+          hide-url: true
+        dns:
+          query-name: sabnzbd.${SECRET_CLUSTER_DOMAIN}
+          query-type: A
+        conditions:
+          - "[BODY] == 192.168.169.101"
+          - "[DNS_RCODE] == NOERROR"
+        alerts:
+          - type: pushover

kubernetes/apps/default/sabnzbd/app/kustomization.yaml

@@ -5,6 +5,7 @@ kind: Kustomization
 namespace: default
 resources:
   - ./externalsecret.yaml
+  - ./gatus.yaml
   - ./helmrelease.yaml
   - ./volsync.yaml
   - ./volume.yaml

kubernetes/apps/default/semaphore/app/gatus.yaml

@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: semaphore-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: semaphore
+        group: internal
+        url: https://semaphore.${SECRET_CLUSTER_DOMAIN}/auth/login
+        interval: 1m
+        client:
+          insecure: true
+        conditions:
+          - "[STATUS] == 200"
+        alerts:
+          - type: pushover
+

kubernetes/apps/default/semaphore/app/kustomization.yaml

@@ -5,4 +5,5 @@ kind: Kustomization
 namespace: default
 resources:
   - ./externalsecret.yaml
+  - ./gatus.yaml
   - ./helmrelease.yaml

kubernetes/apps/default/sharry/app/gatus.yaml

@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: sharry-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: sharry
+        group: external
+        url: https://sharry.${SECRET_CLUSTER_DOMAIN}
+        interval: 1m
+        client:
+          dns-resolver: tcp://1.1.1.1:53
+          insecure: true
+        conditions:
+          - "[STATUS] == 200"
+        alerts:
+          - type: pushover

kubernetes/apps/default/sharry/app/kustomization.yaml

@@ -5,6 +5,7 @@ kind: Kustomization
 namespace: default
 resources:
   - ./externalsecret.yaml
+  - ./gatus.yaml
   - ./helmrelease.yaml
 configMapGenerator:
   - name: sharry-configmap

kubernetes/apps/default/sonarr/app/gatus.yaml

@@ -0,0 +1,26 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: sonarr-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: sonarr
+        group: internal
+        url: 192.168.8.1
+        interval: 1m
+        ui:
+          hide-hostname: true
+          hide-url: true
+        dns:
+          query-name: sonarr.${SECRET_CLUSTER_DOMAIN}
+          query-type: A
+        conditions:
+          - "[BODY] == 192.168.169.101"
+          - "[DNS_RCODE] == NOERROR"
+        alerts:
+          - type: pushover

kubernetes/apps/default/sonarr/app/kustomization.yaml

@@ -5,6 +5,7 @@ kind: Kustomization
 namespace: default
 resources:
   - ./externalsecret.yaml
+  - ./gatus.yaml
   - ./helmrelease.yaml
   - ./volsync.yaml
   - ./volume.yaml

kubernetes/apps/default/tandoor/app/gatus.yaml

@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: tandoor-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: tandoor
+        group: internal
+        url: https://tandoor.${SECRET_CLUSTER_DOMAIN}/accounts/login/
+        interval: 1m
+        client:
+          insecure: true
+        conditions:
+          - "[STATUS] == 200"
+        alerts:
+          - type: pushover
+

kubernetes/apps/default/tandoor/app/kustomization.yaml

@@ -5,6 +5,7 @@ kind: Kustomization
 namespace: default
 resources:
   - ./externalsecret.yaml
+  - ./gatus.yaml
   - ./helmrelease.yaml
   - ./volsync.yaml
   - ./volume.yaml

kubernetes/apps/default/theme-park/app/gatus.yaml

@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: theme-park-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: theme-park
+        group: internal
+        url: https://theme-park.${SECRET_CLUSTER_DOMAIN}
+        interval: 1m
+        client:
+          insecure: true
+        conditions:
+          - "[STATUS] == 200"
+        alerts:
+          - type: pushover
+

kubernetes/apps/default/unifi/app/gatus.yaml

@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: unifi-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: unifi
+        group: internal
+        url: https://unifi.${SECRET_CLUSTER_DOMAIN}/manage/account/login
+        interval: 1m
+        client:
+          insecure: true
+        conditions:
+          - "[STATUS] == 200"
+        alerts:
+          - type: pushover
+

kubernetes/apps/default/unifi/app/kustomization.yaml

@@ -4,6 +4,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: default
 resources:
+  - ./gatus.yaml
   - ./helmrelease.yaml
   - ./volsync.yaml
   - ./volume.yaml

kubernetes/apps/default/vaultwarden/app/gatus.yaml

@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: vaultwarden-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: vaultwarden
+        group: external
+        url: https://vaultwarden.${SECRET_CLUSTER_DOMAIN}
+        interval: 1m
+        client:
+          dns-resolver: tcp://1.1.1.1:53
+          insecure: true
+        conditions:
+          - "[STATUS] == 200"
+        alerts:
+          - type: pushover

kubernetes/apps/default/vaultwarden/app/kustomization.yaml

@@ -5,6 +5,7 @@ kind: Kustomization
 namespace: default
 resources:
   - ./externalsecret.yaml
+  - ./gatus.yaml
   - ./helmrelease.yaml
   - ./volsync.yaml
   - ./volume.yaml

kubernetes/apps/default/vikunja/app/gatus.yaml

@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: vikunja-gatus-ep
+  namespace: default
+  labels:
+    gatus.io/enabled: "true"
+data:
+  config.yaml: |
+    endpoints:
+      - name: vikunja
+        group: external
+        url: https://vikunja.${SECRET_CLUSTER_DOMAIN}
+        interval: 1m
+        client:
+          dns-resolver: tcp://1.1.1.1:53
+          insecure: true
+        conditions:
+          - "[STATUS] == 200"
+        alerts:
+          - type: pushover

kubernetes/apps/default/vikunja/app/kustomization.yaml

@@ -5,6 +5,7 @@ kind: Kustomization
 namespace: default
 resources:
   - ./externalsecret.yaml
+  - ./gatus.yaml
   - ./helmrelease.yaml
   - ./volsync.yaml
   - ./volume.yaml