apps(prettysunflower-website): Replicas 2 -> 1

News panel

Signed-off-by: prettysunflower <me@prettysunflower.moe>

apps/seija/anko/.gitignore

@@ -0,0 +1 @@
+local_settings.py

apps/seija/anko/deployment.yaml

@@ -0,0 +1,45 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: anko
+  labels:
+    app.kubernetes.io/name: anko
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: anko
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: anko
+    spec:
+      containers:
+        - name: anko
+          image: "git.prettysunflower.moe/prettysunflower/anko:main"
+          imagePullPolicy: Always
+          ports:
+            - containerPort: 8000
+              name: http
+          volumeMounts:
+          - name: config
+            mountPath: /anko/anko/local_settings.py
+            subPath: local_settings.py
+          securityContext:
+            runAsUser: 1000
+            runAsGroup: 1000
+            runAsNonRoot: true
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            seccompProfile:
+              type: RuntimeDefault
+      volumes:
+      - name: config
+        configMap:
+          name: anko-config
+      dnsPolicy: "None"
+      dnsConfig:
+        nameservers:
+          - 100.94.59.38

apps/seija/anko/kustomization.yaml

@@ -0,0 +1,7 @@
+resources:
+- deployment.yaml
+- services.yaml
+configMapGenerator:
+- name: anko-config
+  files:
+  - local_settings.py

apps/seija/anko/local_settings.sops.py

@@ -0,0 +1,15 @@
+{
+	"data": "ENC[AES256_GCM,data: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,iv:PYUTTzJRIFP+zke8k0KQwhTiHuTypb998WnZTiyaUxs=,tag:wjWH0OTyDRZ/sUWZjjbu4g==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1r0tjhg6uexyj0p7fp0ftv5h7r7e3ptzkk2797pznfvrvsm576u0s37yyaw",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJN3k2RlFTVjErWGExVEx2\nRW96OUdPT2hHYjE3SVBBTXZibTJtaWp1Y0hNClRXbnAwWFAzUU5JbEFQK0h2QjJZ\nZTNrQlR0WjIrWWZUWENydzFjNDdWdDgKLS0tIG1RQUluOWQxM0IxcUs4K29ZMEpL\nTVZEZyt1OXFsNHJra1Fla1J2NHV5Q0UKBUFbsUthHnT0A9hhroi5E1dkWh6t9PL1\nUyf9zVas9TJC3VJoVx/ngY5BuCBKqpPAirzf656SwQRjxT3otXEAqw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-08-01T15:14:39Z",
+		"mac": "ENC[AES256_GCM,data:yqRT65355uUY9RzwrBu1A+zfQe7T+7Yt4mQRMvbPjFmFctjcirlD9uHvam1zKvDHfHEzXP3ABsUW5rxPMJyz4VoWq8f3R/x30tcUvRHbruqLpO9rsMQfrtRv9dhP7XvbbfgHxoSrveZEY/jdxly3BlhzZlAZidPBdN1P54W186k=,iv:rvwpWYDgThjN7HfRwMoOdztQttOdvvmJpz8heuY/Wpk=,tag:XrW4Q/LnhpQzl3WZab0K7w==,type:str]",
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.10.2"
+	}
+}

apps/seija/anko/services.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: anko
+spec:
+  type: ClusterIP
+  selector:
+    app.kubernetes.io/name: anko
+  ports:
+    - protocol: TCP
+      port: 80
+      targetPort: http

apps/seija/prettysunflower-website/deployment.yaml

@@ -5,7 +5,7 @@ metadata:
   labels:
     app.kubernetes.io/name: prettysunflower-website
 spec:
-  replicas: 2
+  replicas: 1
   selector:
     matchLabels:
       app.kubernetes.io/name: prettysunflower-website
@@ -81,4 +81,4 @@ spec:
       dnsPolicy: "ClusterFirst"
       dnsConfig:
         nameservers:
-          - 100.94.59.38
+          - 100.94.59.38

apps/sekibanki/etherpad/deployment.yaml

@@ -26,7 +26,7 @@ spec:
                 - fsn
       containers:
         - name: etherpad
-          image: etherpad/etherpad:2.3.2
+          image: etherpad/etherpad:2.4.2
           ports:
             - containerPort: 9001
               name: http

apps/sekibanki/gitea/deployment.yaml

@@ -30,7 +30,7 @@ spec:
         nameservers:
           - 100.94.59.38
       containers:
-        - image: docker.gitea.com/gitea:1.24.3-rootless 
+        - image: docker.gitea.com/gitea:1.24.4-rootless 
           name: gitea
           ports:
             - containerPort: 3000

apps/sekibanki/glance/glance.yml

@@ -40,80 +40,8 @@ pages:
           - type: search
             search-engine: https://kagi.com/search?token=ygXAizA-9gY.ejxyFYbeHxOWVxBYgxMGtJPmAeu1pi1DCtOVTW5yFd8&q={QUERY}
             autofocus: true
-          - type: group
-            widgets:
-              - type: lobsters
-              - type: hacker-news
-          - type: bookmarks
-            groups:
-              - title: Internal
-                color: 331 64 52
-                links:
-                  - title: Hoarder
-                    url: https://hoarder.remilia.ch
-                    same-tab: true
-                  - title: Actual Budget
-                    url: https://actual.remilia.ch
-                    same-tab: true
-
-                  - title: Paperless
-                    url: https://papers.remilia.ch
-                    same-tab: true
-
-                  - title: Privatebin
-                    url: https://privatebin.remilia.ch
-                    same-tab: true
-
-                  - title: Proxmox
-                    url: https://yuyuko.remilia.ch:8006
-                    same-tab: true
-
-                  - title: Photos
-                    url: https://photos.remilia.ch
-                    same-tab: true
-
-                  - title: Portainer
-                    url: https://portainer.remilia.ch
-                    same-tab: true
-
-                  - title: Plex
-                    url: https://plex.remilia.ch
-                    same-tab: true
-
-              - title: Koumbit
-                color: 91 70 40
-                links:
-                  - title: IRC
-                    url: https://irc.prettysunflower.moe
-                    same-tab: true
-                  - title: Redmine
-                    url: https://redmine.koumbit.net/
-                    same-tab: true
-                  - title: kProject
-                    url: https://travail.koumbit.net/node/29390/punches
-                    same-tab: true
-                  - title: Etherpad
-                    url: https://pad.koumbit.net/
-                    same-tab: true
-                  - title: Wiki
-                    url: https://wiki.koumbit.net/
-                    same-tab: true
-              - title: Figurines
-                color: 10 70 50
-                links:
-                  - title: AmiAmi
-                    url: https://www.amiami.com/
-                    same-tab: true
-                  - title: HPOI
-                    url: https://www.hpoi.net/
-                    same-tab: true
-                  - title: OurFigureCollection (Suruga-ya)
-                    url: https://ourfigurecollection.moe/surugaya/
-                    same-tab: true
-                  - title: The Spreadsheet of Insanity
-                    url: https://data.remilia.ch/base/bsemaa6OqPGDk6A5Uch/tblZGRYDwnFCDqnFAld/viwJgLAdhRRzvGpULZR
-                    same-tab: true
-
+          - type: lobsters
+          - type: hacker-news
       - size: small
         widgets:
           - type: weather
@@ -142,4 +70,4 @@ theme:
   background-color: 0 0 95
   primary-color: 0 0 10
   positive-color: 175 59 40
-  negative-color: 0 90 50
+  negative-color: 0 90 50

apps/sekibanki/renovate/cronjob.yaml

@@ -25,7 +25,7 @@ spec:
                     - fsn
           containers:
             - name: renovate
-              image: renovate/renovate:41.47.1
+              image: renovate/renovate:41.52.1
               env:
                 - name: LOG_LEVEL
                   value: debug

apps/sekibanki/suwayomi/deployment.yaml

@@ -14,22 +14,13 @@ spec:
       labels:
         app.kubernetes.io/name: suwayomi
     spec:
-      affinity:
-        nodeAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-            nodeSelectorTerms:
-              - matchExpressions:
-                - key: kubernetes.io/hostname
-                  operator: In
-                  values:
-                  - ran
       volumes:
         - name: data
           persistentVolumeClaim:
             claimName: suwayomi-pvc
       containers:
         - name: suwayomi
-          image: ghcr.io/suwayomi/suwayomi-server:v2.0.1851
+          image: ghcr.io/suwayomi/suwayomi-server:v2.1.1875
           ports:
             - containerPort: 4567
               name: http

apps/sekibanki/suwayomi/pvc.yaml

@@ -8,4 +8,4 @@ spec:
   resources:
     requests:
       storage: 150Gi
-  storageClassName: seaweedfs-keiki
+  storageClassName: nfs-csi