Hybrid cloud cluster monorepo with Ansible, K8s, NixOS, and Terraform.
cute.haus
ansible
terraform
nix
k8s
k8s: reorg and disable service links
Aly Raffauf
(Jun 25, 2026, 1:46 AM EDT)
86bb1adf
da7396f6
+68
-48
+1
k8s/charts/aly-codes/templates/deployment.yaml
+1
k8s/charts/aly-codes/templates/deployment.yaml
+1
k8s/charts/audiobookshelf/templates/deployment.yaml
+1
k8s/charts/audiobookshelf/templates/deployment.yaml
+2
-1
k8s/charts/bluesky-pds/templates/deployment.yaml
+2
-1
k8s/charts/bluesky-pds/templates/deployment.yaml
···
17
17
app: {{ .Chart.Name }}
18
18
spec:
19
19
automountServiceAccountToken: false
20
+
enableServiceLinks: false
21
+
terminationGracePeriodSeconds: 15
20
22
securityContext:
21
23
seccompProfile:
22
24
type: RuntimeDefault
23
-
terminationGracePeriodSeconds: 15
24
25
tolerations:
25
26
- key: node.kubernetes.io/not-ready
26
27
operator: Exists
+1
k8s/charts/collabora/templates/deployment.yaml
+1
k8s/charts/collabora/templates/deployment.yaml
+1
k8s/charts/error-pages/templates/deployment.yaml
+1
k8s/charts/error-pages/templates/deployment.yaml
+1
k8s/charts/forgejo/templates/deployment.yaml
+1
k8s/charts/forgejo/templates/deployment.yaml
+2
-1
k8s/charts/forward-auth/templates/deployment.yaml
+2
-1
k8s/charts/forward-auth/templates/deployment.yaml
···
19
19
app: forward-auth-{{ $key }}
20
20
spec:
21
21
automountServiceAccountToken: false
22
+
enableServiceLinks: false
23
+
terminationGracePeriodSeconds: 15
22
24
securityContext:
23
25
seccompProfile:
24
26
type: RuntimeDefault
25
-
terminationGracePeriodSeconds: 15
26
27
{{- with $.Values.failover }}
27
28
tolerations:
28
29
- key: node.kubernetes.io/not-ready
+1
k8s/charts/gotenberg/templates/deployment.yaml
+1
k8s/charts/gotenberg/templates/deployment.yaml
+4
-4
k8s/charts/immich/templates/deployment-ml.yaml
+4
-4
k8s/charts/immich/templates/deployment-ml.yaml
···
17
17
app: immich-ml
18
18
spec:
19
19
automountServiceAccountToken: false
20
+
enableServiceLinks: false
21
+
terminationGracePeriodSeconds: 30
20
22
securityContext:
21
23
seccompProfile:
22
24
type: RuntimeDefault
23
-
terminationGracePeriodSeconds: 30
24
-
enableServiceLinks: false
25
-
nodeSelector:
26
-
kubernetes.io/hostname: jubilife
27
25
tolerations:
28
26
- key: node.kubernetes.io/not-ready
29
27
operator: Exists
···
33
31
operator: Exists
34
32
effect: NoExecute
35
33
tolerationSeconds: 60
34
+
nodeSelector:
35
+
kubernetes.io/hostname: jubilife
36
36
containers:
37
37
- name: immich-ml
38
38
image: ghcr.io/immich-app/immich-machine-learning:v2.7.5-openvino@sha256:619b43773d4f050d7504a236061034c06ef653f28693813ebccb1ab5d1e77512
+4
-4
k8s/charts/immich/templates/deployment.yaml
+4
-4
k8s/charts/immich/templates/deployment.yaml
···
17
17
app: immich
18
18
spec:
19
19
automountServiceAccountToken: false
20
+
enableServiceLinks: false
21
+
terminationGracePeriodSeconds: 30
20
22
securityContext:
21
23
seccompProfile:
22
24
type: RuntimeDefault
23
-
terminationGracePeriodSeconds: 30
24
-
enableServiceLinks: false
25
-
nodeSelector:
26
-
kubernetes.io/hostname: jubilife
27
25
tolerations:
28
26
- key: node.kubernetes.io/not-ready
29
27
operator: Exists
···
33
31
operator: Exists
34
32
effect: NoExecute
35
33
tolerationSeconds: 60
34
+
nodeSelector:
35
+
kubernetes.io/hostname: jubilife
36
36
containers:
37
37
- name: immich
38
38
image: ghcr.io/immich-app/immich-server:v2.7.5@sha256:c15bff75068effb03f4355997d03dc7e0fc58720c2b54ad6f7f10d1bc57efaa5
+4
-3
k8s/charts/immich/templates/statefulset-postgres.yaml
+4
-3
k8s/charts/immich/templates/statefulset-postgres.yaml
···
16
16
app: immich-postgres
17
17
spec:
18
18
automountServiceAccountToken: false
19
+
enableServiceLinks: false
20
+
terminationGracePeriodSeconds: 30
19
21
securityContext:
20
22
seccompProfile:
21
23
type: RuntimeDefault
22
-
terminationGracePeriodSeconds: 30
23
-
nodeSelector:
24
-
kubernetes.io/hostname: jubilife
25
24
tolerations:
26
25
- key: node.kubernetes.io/not-ready
27
26
operator: Exists
···
31
30
operator: Exists
32
31
effect: NoExecute
33
32
tolerationSeconds: 60
33
+
nodeSelector:
34
+
kubernetes.io/hostname: jubilife
34
35
containers:
35
36
- name: postgres
36
37
image: ghcr.io/immich-app/postgres:17-vectorchord0.4.3-pgvector0.8.0@sha256:0baf4cde9b54d8d7dc6a6ad8d8c43c3c6b884f82e1c2a023d571414820e39336
+4
-4
k8s/charts/jellyfin/templates/deployment.yaml
+4
-4
k8s/charts/jellyfin/templates/deployment.yaml
···
17
17
app: {{ .Chart.Name }}
18
18
spec:
19
19
automountServiceAccountToken: false
20
+
enableServiceLinks: false
21
+
terminationGracePeriodSeconds: 30
20
22
securityContext:
21
23
seccompProfile:
22
24
type: RuntimeDefault
23
-
terminationGracePeriodSeconds: 30
24
-
enableServiceLinks: false
25
-
nodeSelector:
26
-
kubernetes.io/hostname: jubilife
27
25
tolerations:
28
26
- key: node.kubernetes.io/not-ready
29
27
operator: Exists
···
33
31
operator: Exists
34
32
effect: NoExecute
35
33
tolerationSeconds: 60
34
+
nodeSelector:
35
+
kubernetes.io/hostname: jubilife
36
36
containers:
37
37
- name: {{ .Chart.Name }}
38
38
image: docker.io/jellyfin/jellyfin:10.11.11@sha256:aefb67e6a7ff1debdd154a78a7bbb780fd0c873d8639210a7f6a2016ad2b35db
+1
k8s/charts/morsels/templates/deployment.yaml
+1
k8s/charts/morsels/templates/deployment.yaml
+1
-1
k8s/charts/nextcloud/templates/deployment.yaml
+1
-1
k8s/charts/nextcloud/templates/deployment.yaml
+1
k8s/charts/ombi/templates/deployment.yaml
+1
k8s/charts/ombi/templates/deployment.yaml
+13
-13
k8s/charts/paperless/templates/deployment.yaml
+13
-13
k8s/charts/paperless/templates/deployment.yaml
···
17
17
app: {{ .Chart.Name }}
18
18
spec:
19
19
automountServiceAccountToken: false
20
+
enableServiceLinks: false
21
+
terminationGracePeriodSeconds: 30
22
+
securityContext:
23
+
fsGroup: 1000
24
+
tolerations:
25
+
- key: node.kubernetes.io/not-ready
26
+
operator: Exists
27
+
effect: NoExecute
28
+
tolerationSeconds: 60
29
+
- key: node.kubernetes.io/unreachable
30
+
operator: Exists
31
+
effect: NoExecute
32
+
tolerationSeconds: 60
20
33
initContainers:
21
34
- name: wait-deps
22
35
image: ghcr.io/paperless-ngx/paperless-ngx:latest@sha256:6c86cad803970ea782683a8e80e7403444c5bf3cf70de63b4d3c8e87500db92f
···
30
43
echo "waiting for gotenberg..."
31
44
until curl -sf http://gotenberg:3000/health; do sleep 2; done
32
45
echo "dependencies ready"
33
-
terminationGracePeriodSeconds: 30
34
-
enableServiceLinks: false
35
-
securityContext:
36
-
fsGroup: 1000
37
-
tolerations:
38
-
- key: node.kubernetes.io/not-ready
39
-
operator: Exists
40
-
effect: NoExecute
41
-
tolerationSeconds: 60
42
-
- key: node.kubernetes.io/unreachable
43
-
operator: Exists
44
-
effect: NoExecute
45
-
tolerationSeconds: 60
46
46
containers:
47
47
- name: {{ .Chart.Name }}
48
48
image: ghcr.io/paperless-ngx/paperless-ngx:latest@sha256:6c86cad803970ea782683a8e80e7403444c5bf3cf70de63b4d3c8e87500db92f
+2
-2
k8s/charts/plex/templates/deployment.yaml
+2
-2
k8s/charts/plex/templates/deployment.yaml
···
17
17
app: {{ .Chart.Name }}
18
18
spec:
19
19
automountServiceAccountToken: false
20
+
enableServiceLinks: false
21
+
terminationGracePeriodSeconds: 30
20
22
securityContext:
21
23
seccompProfile:
22
24
type: RuntimeDefault
23
-
terminationGracePeriodSeconds: 30
24
-
enableServiceLinks: false
25
25
# hostNetwork so GDM auto-discovery, DLNA and the router-forwarded
26
26
# remote-access port (32400) all reach Plex directly on jubilife.
27
27
hostNetwork: true
+1
k8s/charts/pocket-id/templates/deployment.yaml
+1
k8s/charts/pocket-id/templates/deployment.yaml
+1
k8s/charts/switchyard/templates/deployment.yaml
+1
k8s/charts/switchyard/templates/deployment.yaml
+1
k8s/charts/tika/templates/deployment.yaml
+1
k8s/charts/tika/templates/deployment.yaml
+11
-10
k8s/charts/tranquil-pds/templates/deployment.yaml
+11
-10
k8s/charts/tranquil-pds/templates/deployment.yaml
···
15
15
app: {{ .Chart.Name }}
16
16
spec:
17
17
automountServiceAccountToken: false
18
+
enableServiceLinks: false
19
+
terminationGracePeriodSeconds: 15
18
20
securityContext:
19
21
seccompProfile:
20
22
type: RuntimeDefault
21
-
terminationGracePeriodSeconds: 15
23
+
tolerations:
24
+
- key: node.kubernetes.io/not-ready
25
+
operator: Exists
26
+
effect: NoExecute
27
+
tolerationSeconds: 60
28
+
- key: node.kubernetes.io/unreachable
29
+
operator: Exists
30
+
effect: NoExecute
31
+
tolerationSeconds: 60
22
32
imagePullSecrets:
23
33
- name: atcr-pull
24
34
topologySpreadConstraints:
···
28
38
labelSelector:
29
39
matchLabels:
30
40
app: {{ .Chart.Name }}
31
-
tolerations:
32
-
- key: node.kubernetes.io/not-ready
33
-
operator: Exists
34
-
effect: NoExecute
35
-
tolerationSeconds: 60
36
-
- key: node.kubernetes.io/unreachable
37
-
operator: Exists
38
-
effect: NoExecute
39
-
tolerationSeconds: 60
40
41
containers:
41
42
- name: {{ .Chart.Name }}
42
43
image: atcr.io/tranquil.farm/tranquil-pds:latest@sha256:58b5bd2c29f49b2e735f13c957ace78c318551c4f982e653021e1b100a208716
+2
-1
k8s/charts/uptime-kuma/templates/deployment.yaml
+2
-1
k8s/charts/uptime-kuma/templates/deployment.yaml
···
17
17
app: {{ .Chart.Name }}
18
18
spec:
19
19
automountServiceAccountToken: false
20
+
enableServiceLinks: false
21
+
terminationGracePeriodSeconds: 10
20
22
securityContext:
21
23
seccompProfile:
22
24
type: RuntimeDefault
23
-
terminationGracePeriodSeconds: 10
24
25
tolerations:
25
26
- key: node.kubernetes.io/not-ready
26
27
operator: Exists
+2
-1
k8s/charts/valkey/templates/deployment.yaml
+2
-1
k8s/charts/valkey/templates/deployment.yaml
···
17
17
app: {{ .Chart.Name }}
18
18
spec:
19
19
automountServiceAccountToken: false
20
+
enableServiceLinks: false
21
+
terminationGracePeriodSeconds: 15
20
22
securityContext:
21
23
seccompProfile:
22
24
type: RuntimeDefault
23
-
terminationGracePeriodSeconds: 15
24
25
tolerations:
25
26
- key: node.kubernetes.io/not-ready
26
27
operator: Exists
+2
-1
k8s/charts/vaultwarden/templates/deployment.yaml
+2
-1
k8s/charts/vaultwarden/templates/deployment.yaml
···
17
17
app: {{ .Chart.Name }}
18
18
spec:
19
19
automountServiceAccountToken: false
20
+
enableServiceLinks: false
21
+
terminationGracePeriodSeconds: 10
20
22
securityContext:
21
23
seccompProfile:
22
24
type: RuntimeDefault
23
-
terminationGracePeriodSeconds: 10
24
25
tolerations:
25
26
- key: node.kubernetes.io/not-ready
26
27
operator: Exists