infrastructure/flux-system/kustomization-longhorn-ui.yaml

@@ -1,17 +0,0 @@
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: longhorn-ui
-  namespace: flux-system
-spec:
-  interval: 10m
-  path: ./infrastructure/longhorn/ui-ingress
-  targetNamespace: longhorn-system
-  prune: true
-  sourceRef:
-    kind: GitRepository
-    name: flux-system
-    namespace: flux-system
-  dependsOn:
-    - name: core
-  wait: true

infrastructure/longhorn/ui-ingress/ingress.yaml

@@ -1,26 +0,0 @@
-# infrastructure/longhorn/ui-ingress/ingress.yaml
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: longhorn-ingress
-  namespace: longhorn-system
-  annotations:
-    traefik.ingress.kubernetes.io/router.entrypoints: websecure
-    traefik.ingress.kubernetes.io/router.tls: "true"
-    traefik.ingress.kubernetes.io/router.middlewares: longhorn-system-longhorn-basicauth@kubernetescrd,longhorn-system-longhorn-headers@kubernetescrd
-spec:
-  ingressClassName: traefik
-  tls:
-    - hosts: ["longhorn.bstein.dev"]
-      secretName: longhorn-tls
-  rules:
-    - host: longhorn.bstein.dev
-      http:
-        paths:
-          - path: /
-            pathType: Prefix
-            backend:
-              service:
-                name: longhorn-frontend
-                port:
-                  number: 80

infrastructure/longhorn/ui-ingress/kustomization.yaml

@@ -1,6 +0,0 @@
-# infrastructure/longhorn/ui-ingress/kustomization.yaml
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - middlewares.yaml
-  - ingress.yaml

infrastructure/longhorn/ui-ingress/middleware.yaml

@@ -1,22 +0,0 @@
-# infrastructure/longhorn/ui-ingress/middleware.yaml
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
-  name: longhorn-basicauth
-  namespace: longhorn-system
-spec:
-  basicAuth:
-    secret: longhorn-basic-auth
-    realm: "Longhorn Dashboard"
-
----
-
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
-  name: longhorn-headers
-  namespace: longhorn-system
-spec:
-  headers:
-    customRequestHeaders:
-      X-Forwarded-Proto: "https"

infrastructure/traefik/clusterrole.yaml

@@ -1,4 +1,3 @@
-# infrastructure/traefik/clusterrole.yaml
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
@@ -61,19 +60,3 @@ rules:
   - get
   - list
   - watch
-- apiGroups:
-  - traefik.io
-  resources:
-  - middlewares
-  - ingressroutes
-  - ingressroutetcps
-  - ingressrouteudps
-  - tlsoptions
-  - tlsstores
-  - serverstransports
-  - traefikservices
-  verbs: 
-  - get
-  - list
-  - watch
-

infrastructure/traefik/clusterrolebinding.yaml

@@ -1,4 +1,3 @@
-# infrastructure/traefik/clusterrolebinding.yaml
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:

infrastructure/traefik/deployment.yaml

@@ -1,4 +1,3 @@
-# infrastructure/traefik/deployment.yaml
 apiVersion: v1
 items:
 - apiVersion: apps/v1
@@ -31,7 +30,6 @@ items:
         containers:
         - args:
           - --providers.kubernetesIngress=true
-          - --providers.kubernetescrd=true 
           - --entrypoints.web.address=:80
           - --entrypoints.websecure.address=:443
           - --api.dashboard=true

infrastructure/traefik/kustomization.yaml

@@ -1,4 +1,3 @@
-# infrastructure/traefik/kustomization.yaml
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 metadata:

infrastructure/traefik/serviceaccount.yaml

@@ -1,4 +1,3 @@
-# infrastructure/traefik/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:

scripts/jellyfin_manual_load.fish

@@ -193,11 +193,7 @@ if test -n "$REMOTE_SUBDIR"
 end
 
 # --- rsync flags (robust/resumable/overwrite) ---
-set -l RSYNC_FLAGS -a --progress --human-readable \
+set -l RSYNC_FLAGS -a --progress --partial --inplace --append-verify --human-readable --exclude='.nfs*' --chmod=Du=rwx,Dgo=rwx,Fu=rw,Fgo=rw --timeout=60 --contimeout=30
-  --partial --partial-dir=.rsync-partial --delay-updates \
-  --chmod=Du=rwx,Dgo=rwx,Fu=rw,Fgo=rw \
-  --timeout=600 --contimeout=30 \
-  --exclude='.nfs*'
 
 # --- perform copy ---
 set -l copy_ok 0

services/jellyfin/loader.yaml

@@ -9,7 +9,7 @@ spec:
   volumes:
   - name: media
     persistentVolumeClaim:
-      claimName: jellyfin-media-asteria
+      claimName: jellyfin-media
   containers:
   - name: toolbox
     image: alpine:3.19

services/vault/helmrelease.yaml

@@ -1,4 +1,3 @@
-# services/vault/helmrelease.yaml
 apiVersion: helm.toolkit.fluxcd.io/v2
 kind: HelmRelease
 metadata:

services/vault/ingress.yaml

@@ -1,4 +1,3 @@
-# services/vault/helmrelease.yaml
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:

services/vault/kustomization.yaml

@@ -1,4 +1,3 @@
-# services/vault/kustomization.yaml
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: vault

services/vault/middleware.yaml

@@ -1,4 +1,3 @@
-# services/vault/middleware.yaml
 apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:

services/vault/namespace.yaml

@@ -1,4 +1,3 @@
-# services/vault/namespace.yaml
 apiVersion: v1
 kind: Namespace
 metadata:

services/vault/serverstransport.yaml

@@ -1,4 +1,3 @@
-# services/vault/serverstransport.yaml
 apiVersion: traefik.io/v1alpha1
 kind: ServersTransport
 metadata: