disable spliit and pocketid

Reviewed-on: https://git.smittenfeld.nl/peter/homelab-docker-config/pulls/311

docker-compose.yml

@@ -9,9 +9,9 @@ include:
   - paperless/docker-compose.yml
   - pihole/docker-compose.yml
   - pingvin/docker-compose.yml
-  - pocketid/docker-compose.yml
-#  - spliit/docker-compose.yml migrated to k8s
+#  - pocketid/docker-compose.yml
+#  - spliit/docker-compose.yml
   - shlink/docker-compose.yml
   - synapse/docker-compose.yml
 #  - updater/docker-compose.yml
-  - vaultwarden/docker-compose.yml
+#  - vaultwarden/docker-compose.yml

immich/docker-compose.yml

@@ -1,7 +1,7 @@
 services:
   immich-server:
     container_name: immich_server
-    image: ghcr.io/immich-app/immich-server:v2.7.2
+    image: ghcr.io/immich-app/immich-server:v2.7.5
     # extends:
     #   file: hwaccel.transcoding.yml
     #   service: cpu # set to one of [nvenc, quicksync, rkmpp, vaapi, vaapi-wsl] for accelerated transcoding
@@ -25,7 +25,7 @@ services:
 
   immich-machine-learning:
     container_name: immich_machine_learning
-    image: ghcr.io/immich-app/immich-machine-learning:v2.7.2
+    image: ghcr.io/immich-app/immich-machine-learning:v2.7.5
     volumes:
       - model-cache:/cache
     env_file:

paperless/docker-compose.yml

@@ -18,7 +18,7 @@ services:
       - 5434:5432
 
   paperless:
-    image: ghcr.io/paperless-ngx/paperless-ngx:2.20.14
+    image: ghcr.io/paperless-ngx/paperless-ngx:2.20.13
     restart: always
     depends_on:
       - db
@@ -49,7 +49,7 @@ services:
       PAPERLESS_REDIRECT_LOGIN_TO_SSO: true
 
   gotenberg:
-    image: docker.io/gotenberg/gotenberg:8.30.1
+    image: docker.io/gotenberg/gotenberg:8.29.1
     restart: always
 
     # The gotenberg chromium route is used to convert .eml files. We do not

spliit/spliit.yaml

@@ -0,0 +1,119 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: spliit
+---
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: spliit-db
+  namespace: spliit
+spec:
+  instances: 1
+  storage:
+    size: 2Gi
+  bootstrap:
+    initdb:
+      database: spliit
+      owner: spliit
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: spliit
+  namespace: spliit
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: spliit
+  template:
+    metadata:
+      labels:
+        app: spliit
+    spec:
+      containers:
+        - name: spliit
+          image: petersmit27/spliit:latest
+          ports:
+            - containerPort: 3000
+          env:
+            - name: POSTGRES_PRISMA_URL
+              valueFrom:
+                secretKeyRef:
+                  name: spliit-db-app
+                  key: uri
+            - name: POSTGRES_URL_NON_POOLING
+              valueFrom:
+                secretKeyRef:
+                  name: spliit-db-app
+                  key: uri
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: spliit
+  namespace: spliit
+spec:
+  selector:
+    app: spliit
+  ports:
+    - port: 3000
+      targetPort: 3000
+---
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: spliit
+  namespace: spliit
+spec:
+  parentRefs:
+    - name: main
+      namespace: envoy-gateway-system
+      sectionName: https-smittenfeld
+  hostnames:
+    - split.smittenfeld.nl
+  rules:
+    - backendRefs:
+        - name: spliit
+          port: 3000
+---
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: spliit-create-group
+  namespace: spliit
+spec:
+  parentRefs:
+    - name: main
+      namespace: envoy-gateway-system
+      sectionName: https-smittenfeld
+  hostnames:
+    - split.smittenfeld.nl
+  rules:
+    - matches:
+        - path:
+            type: PathPrefix
+            value: /groups/create
+      backendRefs:
+        - name: spliit
+          port: 3000
+---
+apiVersion: gateway.envoyproxy.io/v1alpha1
+kind: SecurityPolicy
+metadata:
+  name: spliit-create-ip-restriction
+  namespace: spliit
+spec:
+  targetRefs:
+    - group: gateway.networking.k8s.io
+      kind: HTTPRoute
+      name: spliit-create-group
+  authorization:
+    defaultAction: Deny
+    rules:
+      - action: Allow
+        principal:
+          clientCIDRs:
+            - 188.91.195.91/32

synapse/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   element-call-auth-service:
-    image: ghcr.io/element-hq/lk-jwt-service:0.4.2
+    image: ghcr.io/element-hq/lk-jwt-service:0.4.3
     container_name: element-call-jwt
     hostname: auth-server
     environment:
@@ -13,7 +13,7 @@ services:
     ports:
       - 8071:8080
   element-call-livekit:
-    image: livekit/livekit-server:v1.10.1
+    image: livekit/livekit-server:v1.11.0
     command: --config /etc/livekit.yaml
     ports:
       - "7880:7880/tcp"
@@ -42,7 +42,7 @@ services:
       - 5439:5432
   mautrix-whatsapp:
     container_name: mautrix-whatsapp
-    image: dock.mau.dev/mautrix/whatsapp:v0.2603.0
+    image: dock.mau.dev/mautrix/whatsapp:v0.2604.0
     #image: petersmit27/mautrix-whatsapp:latest
     restart: always
     volumes:
@@ -97,7 +97,7 @@ services:
       - 5442:5432
   synapse:
     container_name: synapse
-    image: matrixdotorg/synapse:v1.150.0
+    image: matrixdotorg/synapse:v1.151.0
     restart: always
     volumes:
       - ${SYNAPSE_CONFIG_DIR}:/data