kustomize/bases/deployment/deployment.yaml

@@ -6,6 +6,6 @@ metadata:
 spec:
   replicas: 1
   strategy:
-    type: RollingUpdate
+    type: Recreate
   template:
     spec:

kustomize/bases/deployservice/deployment.yaml

@@ -6,6 +6,6 @@ metadata:
 spec:
   replicas: 1
   strategy:
-    type: RollingUpdate
+    type: Recreate
   template:
     spec:

kustomize/bases/noservice/deployment.yaml

@@ -6,6 +6,6 @@ metadata:
 spec:
   replicas: 1
   strategy:
-    type: RollingUpdate
+    type: Recreate
   template:
     spec:

namespaces/ai/ollama/kustomization.yaml

@@ -1,11 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
-images:
-  - name: image
-    newName: ollama/ollama
-    newTag: 0.21.0
-
 transformers:
   - |-
     apiVersion: builtin

namespaces/ai/ollama/patches/deployment.yaml

@@ -3,8 +3,6 @@ kind: Deployment
 metadata:
   name: app
 spec:
-  strategy:
-    type: Recreate # Needed since only 1 GPU
   template:
     spec:
       runtimeClassName: nvidia
@@ -15,7 +13,7 @@ spec:
           effect: "NoSchedule"
       containers:
         - name: ollama
-          image: image
+          image: ollama/ollama:0.6.7
           imagePullPolicy: IfNotPresent
           resources:
             limits:

namespaces/ai/openwebui/extra/gatus-endpoints.yaml

@@ -8,7 +8,7 @@ data:
   owui-internal-gatus-endpoints.yaml: |
     endpoints:
       - name: Open WebUI
-        url: http://open-webui-chart.ai.svc.cluster.local/
+        url: http://open-webui.ai.svc.cluster.local/
         group: Internal/AI
         interval: 5m 
         alerts:

namespaces/ai/openwebui/kustomization.yaml

@@ -91,7 +91,7 @@ replacements:
 labels:
   - includeSelectors: true
     pairs:
-      app.kubernetes.io/appName: open-webui-chart
+      app.kubernetes.io/appName: open-webui
   - pairs:
       app.kubernetes.io/appNamespace: ai
   - pairs:

namespaces/ai/openwebui/patches/chart.yaml

@@ -20,7 +20,7 @@ spec:
       subPath: "data"
       storageClass: longhorn-private
     image:
-      tag: 0.6.15
+      tag: 0.6.10
     extraEnvVars:
       - name: ENABLE_OAUTH_SIGNUP
         value: "true"

namespaces/ai/tabby/config.toml

@@ -1,13 +1,13 @@
 [model.completion.http]
 kind = "ollama/completion"
-model_name = "qwen3.5:9b"
+model_name = "qwen2.5-coder:14b-instruct-q4_K_M"
 api_endpoint = "http://ollama-svc:11434"
 # prompt_template = "<PRE> {prefix} <SUF>{suffix} <MID>"  # Example prompt template for the CodeLlama model series.
 
 # Chat model
 [model.chat.http]
 kind = "openai/chat"
-model_name = "qwen3.5:9b"
+model_name = "llama3.2:latest"
 api_endpoint = "http://ollama-svc:11434/v1"
 
 # Embedding model

namespaces/ai/tabby/kustomization.yaml

@@ -1,10 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
-images:
-  - name: image
-    newName: tabbyml/tabby
-    newTag: "20260330"
 transformers:
   - |-
     apiVersion: builtin

namespaces/ai/tabby/patches/deployment.yaml

@@ -12,7 +12,7 @@ spec:
           effect: "NoSchedule"
       containers:
         - name: tabby
-          image: image
+          image: tabbyml/tabby:0.25.2
           imagePullPolicy: IfNotPresent
           ports:
             - name: tabby

namespaces/apps/comentario/kustomization.yaml

@@ -1,11 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
-images:
-  - name: image
-    newName: registry.gitlab.com/comentario/comentario
-    newTag: v3.14.0
-
 transformers:
   - |-
     apiVersion: builtin

namespaces/apps/comentario/patches/deployment.yaml

@@ -21,7 +21,7 @@ spec:
                     values:
                       - "true"
       containers:
-        - image: image
+        - image: registry.gitlab.com/comentario/comentario:v3.13.1
           imagePullPolicy: IfNotPresent
           name: comentario
           ports:

namespaces/apps/linkwarden/kustomization.yaml

@@ -1,11 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
-images:
-  - name: image
-    newName: ghcr.io/linkwarden/linkwarden
-    newTag: v2.14.0
-
 transformers:
   - |-
     apiVersion: builtin

namespaces/apps/linkwarden/patches/deployment.yaml

@@ -7,8 +7,7 @@ spec:
     spec:
       containers:
         - name: linkwarden
-          image: image
+          image: ghcr.io/linkwarden/linkwarden:v2.9.1
-          imagePullPolicy: IfNotPresent
           envFrom:
             - configMapRef:
                 name: linkwarden-config

namespaces/apps/paperless/kustomization.yaml

@@ -1,11 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
-images:
-  - name: image
-    newName: ghcr.io/paperless-ngx/paperless-ngx
-    newTag: 2.20.14
-
 transformers:
   - |-
     apiVersion: builtin
@@ -111,7 +106,7 @@ configMapGenerator:
       - PAPERLESS_FILENAME_DATE_ORDER=MDY
       - PAPERLESS_FILENAME_FORMAT="{{created_year}}/{{created_month}}/{{created_day}}/{{title}}"
       - PAPERLESS_PORT="8000"
-      - PAPERLESS_BIND_ADDR="::"
+      - PAPERLESS_BIND_ADDR="[::]"
       - PAPERLESS_CONSUMER_POLLING="30"
       # Setup SMTP
       - PAPERLESS_EMAIL_HOST=blizzard.mxrouting.net

namespaces/apps/paperless/patches/deployment.yaml

@@ -14,10 +14,10 @@ spec:
                   - key: kubernetes.io/hostname
                     operator: In
                     values:
-                      - blackstaff
+                      - arthur
       containers:
         - name: paperless
-          image: image
+          image: ghcr.io/paperless-ngx/paperless-ngx:2.14.7
           imagePullPolicy: IfNotPresent
           volumeMounts:
             - name: consume-volume

namespaces/apps/syncthing/patches/statefulset.yaml

@@ -8,7 +8,7 @@ spec:
       restartPolicy: Always
       containers:
         - name: syncthing
-          image: syncthing/syncthing:2.0.10
+          image: syncthing/syncthing:1.29
           ports:
             - name: syncthing
               containerPort: 8384

namespaces/apps/vaultwarden/kustomization.yaml

@@ -1,11 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
-images:
-  - name: image
-    newName: vaultwarden/server
-    newTag: 1.35.7
-
 transformers:
   - |-
     apiVersion: builtin
@@ -96,4 +91,3 @@ configMapGenerator:
       - SMTP_FROM_NAME="Vaultwarden"
       - SMTP_USERNAME=homelab
       - SMTP_HOST=blizzard.mxrouting.net
-      - REQUIRE_DEVICE_EMAIL=false

namespaces/apps/vaultwarden/patches/deployment.yaml

@@ -7,7 +7,7 @@ spec:
     spec:
       containers:
         - name: vaultwarden
-          image: image
+          image: vaultwarden/server:1.33.2
           imagePullPolicy: IfNotPresent
           envFrom:
             - configMapRef:

namespaces/auth/authentik/patches/chart.yaml

@@ -5,7 +5,7 @@ metadata:
 spec:
   chart: authentik
   repo: https://charts.goauthentik.io
-  version: 2026.2.2
+  version: 2025.6.1
   targetNamespace: auth
   createNamespace: true
   valuesContent: |-

namespaces/kube-system/kustomization.yaml

@@ -1,14 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-
-configMapGenerator:
-  - name: coredns-custom
-    namespace: kube-system
-    options:
-      disableNameSuffixHash: true
-    literals:
-      - |
-        tailnet.server=leechpepin.tailnet:53 {
-            forward . 100.100.100.100
-            cache 30
-        }

namespaces/kustomization.yaml

@@ -2,7 +2,6 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
 resources:
-  - kube-system
   - cert-manager/post-crd
   - ai/
   - apps/

namespaces/longhorn/longhorn/patches/chart.yaml

@@ -8,7 +8,7 @@ metadata:
   generation: 1
   name: longhorn-install
 spec:
-  version: v1.10.2
+  version: v1.7.2
   chart: longhorn
   repo: https://charts.longhorn.io
   failurePolicy: abort

namespaces/monitoring/diun/kustomization.yaml

@@ -1,11 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
-images:
-  - name: image
-    newName: crazymax/diun
-    newTag: 4.31.0
-
 transformers:
   - |-
     apiVersion: builtin

namespaces/monitoring/diun/patches/deployment.yaml

@@ -23,7 +23,7 @@ spec:
       serviceAccountName: diun
       containers:
         - name: diun
-          image: image
+          image: crazymax/diun:4.29.0
           imagePullPolicy: IfNotPresent
           args: ["serve"]
           envFrom:

namespaces/monitoring/gatus/kustomization.yaml

@@ -1,10 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
-images:
-  - name: image
-    newName: twinproduction/gatus
-    newTag: v5.35.0
 transformers:
   - |-
     apiVersion: builtin

namespaces/monitoring/gatus/patches/deployment.yaml

@@ -23,12 +23,8 @@ spec:
                       - "true"
       containers:
         - name: gatus
-          image: image
+          image: twinproduction/gatus:v5.17.0
           imagePullPolicy: IfNotPresent
-          securityContext:
-            capabilities:
-              add:
-                - NET_RAW
           ports:
             - containerPort: 8080
               name: gatus
@@ -72,12 +68,6 @@ spec:
                   name: gatus-secrets
                   key: POSTGRES_PASSWORD
                   optional: false
-            - name: NTFY_TOPIC
-              valueFrom:
-                secretKeyRef:
-                  name: gatus-secrets
-                  key: NTFY_TOPIC
-                  optional: false
           volumeMounts:
             - mountPath: /config/config.yaml
               name: gatus-config

namespaces/monitoring/umami/kustomization.yaml

@@ -1,11 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
-images:
-  - name: image
-    newName: ghcr.io/umami-software/umami
-    newTag: postgresql-v2.19.0
-
 transformers:
   - |-
     apiVersion: builtin

namespaces/monitoring/umami/patches/deployment.yaml

@@ -22,8 +22,7 @@ spec:
                       - "true"
       containers:
         - name: umami
-          image: image
+          image: ghcr.io/umami-software/umami:postgresql-v2.17.0
-          imagePullPolicy: IfNotPresent
           envFrom:
             - configMapRef:
                 name: umami-config

restore/pgdump.yaml

@@ -1,17 +0,0 @@
-apiVersion: v1
-kind: Pod
-metadata:
-  name: pvc-inspector
-  namespace: core
-spec:
-  containers:
-    - name: inspector
-      image: busybox
-      command: ["sleep", "3600"]
-      volumeMounts:
-        - name: my-volume
-          mountPath: /data
-  volumes:
-    - name: my-volume
-      persistentVolumeClaim:
-        claimName: backup-pvc