--- kubernetes/homelab/apps/cilium/cilium/app Kustomization: cilium/cilium HelmRelease: cilium/cilium

+++ kubernetes/homelab/apps/cilium/cilium/app Kustomization: cilium/cilium HelmRelease: cilium/cilium

@@ -25,8 +25,8 @@

     cleanupOnFail: true
     remediation:
       retries: 3
       strategy: rollback
   valuesFrom:
   - kind: ConfigMap
-    name: cilium-helm-values-8c5tht9dfm
+    name: cilium-helm-values-8bgh9fc27d
 
--- kubernetes/homelab/apps/cilium/cilium/app Kustomization: cilium/cilium ConfigMap: cilium/cilium-helm-values-8c5tht9dfm

+++ kubernetes/homelab/apps/cilium/cilium/app Kustomization: cilium/cilium ConfigMap: cilium/cilium-helm-values-8c5tht9dfm

@@ -1,126 +0,0 @@

----
-apiVersion: v1
-data:
-  values.yaml: |
-    ---
-    # yaml-language-server: $schema=https://raw.githubusercontent.com/cilium/cilium/refs/heads/main/install/kubernetes/cilium/values.schema.json
-    # Explanation of each field can be found in the Cilium documentation:
-    # https://github.com/cilium/cilium/blob/main/install/kubernetes/cilium/values.yaml
-    autoDirectNodeRoutes: true
-    bandwidthManager:
-      enabled: true
-      bbr: true
-    bpf:
-      masquerade: true
-      preallocateMaps: true
-    cgroup:
-      automount:
-        enabled: false
-      hostRoot: /sys/fs/cgroup
-    # This needs to be false to use Multus because Multus is technically a CNI plugin
-    # https://github.com/siderolabs/talos/discussions/7914#discussioncomment-7457510
-    cni:
-      exclusive: false
-    enableRuntimeDeviceDetection: true
-    endpointRoutes:
-      enabled: true
-    envoy:
-      enabled: false
-    ipam:
-      mode: kubernetes
-    ipv4NativeRoutingCIDR: 10.42.0.0/16
-    k8sServiceHost: 127.0.0.1
-    # The kubeprism port
-    k8sServicePort: 7445
-    kubeProxyReplacement: true
-    kubeProxyReplacementHealthzBindAddr: 0.0.0.0:10256
-    l2announcements:
-      enabled: true
-    loadBalancer:
-      algorithm: maglev
-      mode: dsr
-    localRedirectPolicy: true
-    rollOutCiliumPods: true
-    routingMode: native
-    securityContext:
-      capabilities:
-        ciliumAgent:
-          - CHOWN
-          - KILL
-          - NET_ADMIN
-          - NET_RAW
-          - IPC_LOCK
-          - SYS_ADMIN
-          - SYS_RESOURCE
-          - DAC_OVERRIDE
-          - FOWNER
-          - SETGID
-          - SETUID
-        cleanCiliumState:
-          - NET_ADMIN
-          - SYS_ADMIN
-          - SYS_RESOURCE
-    hubble:
-      enabled: true
-      metrics:
-        enabled:
-          - dns:query
-          - drop
-          - tcp
-          - flow
-          - port-distribution
-          - icmp
-          - http
-        serviceMonitor:
-          enabled: true
-        dashboards:
-          enabled: true
-          annotations:
-            grafana_folder: Cilium
-      relay:
-        enabled: true
-        rollOutPods: true
-        prometheus:
-          serviceMonitor:
-            enabled: true
-      ui:
-        enabled: true
-        rollOutPods: true
-        ingress:
-          enabled: true
-          annotations:
-            external-dns.alpha.kubernetes.io/target: internal.drmoo.io
-          className: internal
-          hosts: ["hubble.drmoo.io"]
-          tls:
-            - hosts:
-                - "*.drmoo.io"
-              secretName: drmoo-io-tls
-    operator:
-      rollOutPods: true
-      prometheus:
-        enabled: true
-        serviceMonitor:
-          enabled: true
-      dashboards:
-        enabled: true
-        annotations:
-          grafana_folder: Cilium
-    prometheus:
-      enabled: true
-      serviceMonitor:
-        enabled: true
-        trustCRDsExist: true
-    dashboards:
-      enabled: true
-      annotations:
-        grafana_folder: Cilium
-kind: ConfigMap
-metadata:
-  labels:
-    app.kubernetes.io/name: cilium
-    kustomize.toolkit.fluxcd.io/name: cilium
-    kustomize.toolkit.fluxcd.io/namespace: cilium
-  name: cilium-helm-values-8c5tht9dfm
-  namespace: cilium
-
--- kubernetes/homelab/apps/cilium/cilium/app Kustomization: cilium/cilium ConfigMap: cilium/cilium-helm-values-8bgh9fc27d

+++ kubernetes/homelab/apps/cilium/cilium/app Kustomization: cilium/cilium ConfigMap: cilium/cilium-helm-values-8bgh9fc27d

@@ -0,0 +1,126 @@

+---
+apiVersion: v1
+data:
+  values.yaml: |
+    ---
+    # yaml-language-server: $schema=https://raw.githubusercontent.com/cilium/cilium/refs/heads/main/install/kubernetes/cilium/values.schema.json
+    # Explanation of each field can be found in the Cilium documentation:
+    # https://github.com/cilium/cilium/blob/main/install/kubernetes/cilium/values.yaml
+    autoDirectNodeRoutes: true
+    bandwidthManager:
+      enabled: true
+      bbr: true
+    bpf:
+      masquerade: true
+      preallocateMaps: true
+    cgroup:
+      automount:
+        enabled: false
+      hostRoot: /sys/fs/cgroup
+    # This needs to be false to use Multus because Multus is technically a CNI plugin
+    # https://github.com/siderolabs/talos/discussions/7914#discussioncomment-7457510
+    cni:
+      exclusive: false
+    dashboards:
+      enabled: true
+      annotations:
+        grafana_folder: Cilium
+    enableRuntimeDeviceDetection: true
+    endpointRoutes:
+      enabled: true
+    envoy:
+      enabled: false
+    hubble:
+      enabled: true
+      metrics:
+        enabled:
+          - dns:query
+          - drop
+          - tcp
+          - flow
+          - port-distribution
+          - icmp
+          - http
+        serviceMonitor:
+          enabled: true
+        dashboards:
+          enabled: true
+          annotations:
+            grafana_folder: Cilium
+      relay:
+        enabled: true
+        rollOutPods: true
+        prometheus:
+          serviceMonitor:
+            enabled: true
+      ui:
+        enabled: true
+        rollOutPods: true
+        ingress:
+          enabled: true
+          annotations:
+            external-dns.alpha.kubernetes.io/target: internal.drmoo.io
+          className: internal
+          hosts: ["hubble.drmoo.io"]
+          tls:
+            - hosts:
+                - "*.drmoo.io"
+              secretName: drmoo-io-tls
+    ipam:
+      mode: kubernetes
+    ipv4NativeRoutingCIDR: 10.42.0.0/16
+    k8sServiceHost: 127.0.0.1
+    # The kubeprism port
+    k8sServicePort: 7445
+    kubeProxyReplacement: true
+    kubeProxyReplacementHealthzBindAddr: 0.0.0.0:10256
+    l2announcements:
+      enabled: true
+    loadBalancer:
+      algorithm: maglev
+      mode: dsr
+    localRedirectPolicy: true
+    operator:
+      rollOutPods: true
+      prometheus:
+        enabled: true
+        serviceMonitor:
+          enabled: true
+      dashboards:
+        enabled: true
+        annotations:
+          grafana_folder: Cilium
+    prometheus:
+      enabled: true
+      serviceMonitor:
+        enabled: true
+        trustCRDsExist: true
+    rollOutCiliumPods: true
+    routingMode: native
+    securityContext:
+      capabilities:
+        ciliumAgent:
+          - CHOWN
+          - KILL
+          - NET_ADMIN
+          - NET_RAW
+          - IPC_LOCK
+          - SYS_ADMIN
+          - SYS_RESOURCE
+          - DAC_OVERRIDE
+          - FOWNER
+          - SETGID
+          - SETUID
+        cleanCiliumState:
+          - NET_ADMIN
+          - SYS_ADMIN
+          - SYS_RESOURCE
+kind: ConfigMap
+metadata:
+  labels:
+    app.kubernetes.io/name: cilium
+    kustomize.toolkit.fluxcd.io/name: cilium
+    kustomize.toolkit.fluxcd.io/namespace: cilium
+  name: cilium-helm-values-8bgh9fc27d
+  namespace: cilium
+
--- kubernetes/homelab/apps/homelab/homepage/app Kustomization: homelab/homepage ConfigMap: homelab/homepage-config

+++ kubernetes/homelab/apps/homelab/homepage/app Kustomization: homelab/homepage ConfigMap: homelab/homepage-config

@@ -58,18 +58,16 @@

         - X:
             - abbr: X
               icon: x.png
               href: https://x.com/
   custom.css: ''
   custom.js: ''
-  docker.yaml: |+
-    ---
-
-  kubernetes.yaml: |+
-    ---
-
+  docker.yaml: |
+    ---
+  kubernetes.yaml: |
+    ---
   proxmox.yaml: |
     # Proxmox configuration for Homepage
     # This file is required by Homepage v1.0+ even if you don't use Proxmox
     # Leave empty if you don't have Proxmox integration
   services.yaml: |
     ---
@@ -229,21 +227,21 @@

             description: OBKiddos
             widget:
               type: minecraft
               url: udp://minecraft-3-minecraft.games.svc.cluster.local:25565
   settings.yaml: |
     ---
-    title: Moo's Pasture
+    headerStyle: clean
     logpath: /tmp
-    target: _self
     quicklaunch:
       searchDescriptions: true
       hideInternetSearch: true
       showSearchSuggestions: true
       hideVisitURL: true
-    headerStyle: clean
+    target: _self
+    title: Moo's Pasture
   widgets.yaml: |
     ---
     - search:
         provider: google
         focus: true
         target: _self
--- kubernetes/homelab/apps/media/recyclarr/app Kustomization: media/recyclarr ConfigMap: media/recyclarr-configmap

+++ kubernetes/homelab/apps/media/recyclarr/app Kustomization: media/recyclarr ConfigMap: media/recyclarr-configmap

@@ -1,119 +1,12 @@

 ---
 apiVersion: v1
 data:
   recyclarr.yml: |
     ---
     # yaml-language-server: $schema=https://raw.githubusercontent.com/recyclarr/recyclarr/master/schemas/config-schema.json
-    sonarr:
-      sonarr:
-        base_url: http://sonarr.media.svc.cluster.local
-        api_key: foobarbazfoobarbazfoobarbazfooba
-        delete_old_custom_formats: true
-        replace_existing_custom_formats: true
-        quality_definition:
-          type: series
-        quality_profiles:
-          - name: Web 1080p
-            reset_unmatched_scores:
-              enabled: true
-            upgrade:
-              allowed: true
-              until_quality: Web-1080p
-              until_score: 10000
-            min_format_score: 0
-            quality_sort: top
-            qualities:
-              - name: Web-1080p
-                qualities:
-                  - WEBDL-1080p
-                  - WEBRip-1080p
-              - name: HDTV-1080p
-          - name: Web 720p
-            reset_unmatched_scores:
-              enabled: true
-            upgrade:
-              allowed: true
-              until_quality: Web-720p
-              until_score: 10000
-            min_format_score: 0
-            quality_sort: top
-            qualities:
-              - name: Web-720p
-                qualities:
-                  - WEBDL-720p
-                  - WEBRip-720p
-              - name: HDTV-720p
-          - name: Any
-            reset_unmatched_scores:
-              enabled: true
-            upgrade:
-              allowed: true
-              until_quality: Web-1080p
-              until_score: 10000
-            min_format_score: 0
-            quality_sort: top
-            qualities:
-              - name: Web-1080p
-                qualities:
-                  - WEBDL-1080p
-                  - WEBRip-1080p
-              - name: HDTV-1080p
-              - name: Web-720p
-                qualities:
-                  - WEBDL-720p
-                  - WEBRip-720p
-              - name: HDTV-720p
-              - name: Web-480p
-                qualities:
-                  - WEBDL-480p
-                  - WEBRip-480p
-              - name: DVD
-              - name: SDTV
-        custom_formats:
-          - trash_ids:
-              # Unwanted
-              - 85c61753df5da1fb2aab6f2a47426b09 # BR-DISK
-              - 9c11cd3f07101cdba90a2d81cf0e56b4 # LQ
-              - 47435ece6b99a0b477caf360e79ba0bb # x265 (HD)
-              - fbcb31d8dabd2a319072b84fc0b7249c # Extras
-              # Misc
-              - ec8fa7296b64e8cd390a1600981f3923 # Repack/Proper
-              - eb3d5cc0a2be0db205fb823640db6a3c # Repack v2
-              - 44e7c4de10ae50265753082e5dc76047 # Repack v3
-              # Streaming Services
-              - d660701077794679fd59e8bdf4ce3a29 # AMZN
-              - f67c9ca88f463a48346062e8ad07713f # ATVP
-              - 4e9a630db98d5391aec1368a0256e2fe # CRAV
-              - 36b72f59f4ea20aad9316f475f2d9fbb # DCU
-              - 89358767a60cc28783cdc3d0be9388a4 # DSNP
-              - 7a235133c87f7da4c8cccceca7e3c7a6 # HBO
-              - a880d6abc21e7c16884f3ae393f84179 # HMAX
-              - f6cce30f1733d5c8194222a7507909bb # HULU
-              - 0ac24a2a68a9700bcb7eeca8e5cd644c # iT
-              - 81d1fbf600e2540cee87f3a23f9d3c1c # MAX
-              - d34870697c9db575f17700212167be23 # NF
-              - b2b980877494b560443631eb1f473867 # NLZ
-              - fb1a91cdc0f26f7ca0696e0e95274645 # OViD
-              - 1656adc6d7bb2c8cca6acfb6592db421 # PCOK
-              - c67a75ae4a1715f2bb4d492755ba4195 # PMTP
-              - 3ac5d84fce98bab1b531393e9c82f467 # QIBI
-              - c30d2958827d1867c73318a5a2957eb1 # RED
-              - ae58039e1319178e6be73caab5c42166 # SHO
-              - 1efe8da11bfd74fbbcd4d8117ddb9213 # STAN
-              - 5d2317d99af813b6529c7ebf01c83533 # VDL
-              - 77a7b25585c18af08f60b1547bb9b4fb # CC
-              # HQ Source Groups
-              - e6258996055b9fbab7e9cb2f75819294 # WEB Tier 01
-              - 58790d4e2fdcd9733aa7ae68ba2bb503 # WEB Tier 02
-              - d84935abd3f8556dcd51d4f27e22d0a6 # WEB Tier 03
-              - d0c516558625b04b363fa6c5c2c7cfd4 # WEB Scene
-            quality_profiles:
-              - name: Web 1080p
-              - name: Web 720p
-              - name: Any
     radarr:
       radarr:
         base_url: http://radarr.media.svc.cluster.local
         api_key: foobarbazfoobarbazfoobarbazfooba
         delete_old_custom_formats: true
         replace_existing_custom_formats: true
@@ -202,12 +95,119 @@

               - c9fd353f8f5f1baf56dc601c4cb29920 # PCOK
               - e36a0ba1bc902b26ee40818a1d59b8bd # PMTP
               - c2863d2a50c9acad1fb50e53ece60817 # STAN
             quality_profiles:
               - name: Remux/Web 1080p
                 score: 0
+    sonarr:
+      sonarr:
+        base_url: http://sonarr.media.svc.cluster.local
+        api_key: foobarbazfoobarbazfoobarbazfooba
+        delete_old_custom_formats: true
+        replace_existing_custom_formats: true
+        quality_definition:
+          type: series
+        quality_profiles:
+          - name: Web 1080p
+            reset_unmatched_scores:
+              enabled: true
+            upgrade:
+              allowed: true
+              until_quality: Web-1080p
+              until_score: 10000
+            min_format_score: 0
+            quality_sort: top
+            qualities:
+              - name: Web-1080p
+                qualities:
+                  - WEBDL-1080p
+                  - WEBRip-1080p
+              - name: HDTV-1080p
+          - name: Web 720p
+            reset_unmatched_scores:
+              enabled: true
+            upgrade:
+              allowed: true
+              until_quality: Web-720p
+              until_score: 10000
+            min_format_score: 0
+            quality_sort: top
+            qualities:
+              - name: Web-720p
+                qualities:
+                  - WEBDL-720p
+                  - WEBRip-720p
+              - name: HDTV-720p
+          - name: Any
+            reset_unmatched_scores:
+              enabled: true
+            upgrade:
+              allowed: true
+              until_quality: Web-1080p
+              until_score: 10000
+            min_format_score: 0
+            quality_sort: top
+            qualities:
+              - name: Web-1080p
+                qualities:
+                  - WEBDL-1080p
+                  - WEBRip-1080p
+              - name: HDTV-1080p
+              - name: Web-720p
+                qualities:
+                  - WEBDL-720p
+                  - WEBRip-720p
+              - name: HDTV-720p
+              - name: Web-480p
+                qualities:
+                  - WEBDL-480p
+                  - WEBRip-480p
+              - name: DVD
+              - name: SDTV
+        custom_formats:
+          - trash_ids:
+              # Unwanted
+              - 85c61753df5da1fb2aab6f2a47426b09 # BR-DISK
+              - 9c11cd3f07101cdba90a2d81cf0e56b4 # LQ
+              - 47435ece6b99a0b477caf360e79ba0bb # x265 (HD)
+              - fbcb31d8dabd2a319072b84fc0b7249c # Extras
+              # Misc
+              - ec8fa7296b64e8cd390a1600981f3923 # Repack/Proper
+              - eb3d5cc0a2be0db205fb823640db6a3c # Repack v2
+              - 44e7c4de10ae50265753082e5dc76047 # Repack v3
+              # Streaming Services
+              - d660701077794679fd59e8bdf4ce3a29 # AMZN
+              - f67c9ca88f463a48346062e8ad07713f # ATVP
+              - 4e9a630db98d5391aec1368a0256e2fe # CRAV
+              - 36b72f59f4ea20aad9316f475f2d9fbb # DCU
+              - 89358767a60cc28783cdc3d0be9388a4 # DSNP
+              - 7a235133c87f7da4c8cccceca7e3c7a6 # HBO
+              - a880d6abc21e7c16884f3ae393f84179 # HMAX
+              - f6cce30f1733d5c8194222a7507909bb # HULU
+              - 0ac24a2a68a9700bcb7eeca8e5cd644c # iT
+              - 81d1fbf600e2540cee87f3a23f9d3c1c # MAX
+              - d34870697c9db575f17700212167be23 # NF
+              - b2b980877494b560443631eb1f473867 # NLZ
+              - fb1a91cdc0f26f7ca0696e0e95274645 # OViD
+              - 1656adc6d7bb2c8cca6acfb6592db421 # PCOK
+              - c67a75ae4a1715f2bb4d492755ba4195 # PMTP
+              - 3ac5d84fce98bab1b531393e9c82f467 # QIBI
+              - c30d2958827d1867c73318a5a2957eb1 # RED
+              - ae58039e1319178e6be73caab5c42166 # SHO
+              - 1efe8da11bfd74fbbcd4d8117ddb9213 # STAN
+              - 5d2317d99af813b6529c7ebf01c83533 # VDL
+              - 77a7b25585c18af08f60b1547bb9b4fb # CC
+              # HQ Source Groups
+              - e6258996055b9fbab7e9cb2f75819294 # WEB Tier 01
+              - 58790d4e2fdcd9733aa7ae68ba2bb503 # WEB Tier 02
+              - d84935abd3f8556dcd51d4f27e22d0a6 # WEB Tier 03
+              - d0c516558625b04b363fa6c5c2c7cfd4 # WEB Scene
+            quality_profiles:
+              - name: Web 1080p
+              - name: Web 720p
+              - name: Any
 kind: ConfigMap
 metadata:
   labels:
     app.kubernetes.io/name: recyclarr
     kustomize.toolkit.fluxcd.io/name: recyclarr
     kustomize.toolkit.fluxcd.io/namespace: media
--- kubernetes/homelab/apps/media/betanin/app Kustomization: media/betanin ConfigMap: media/beets-config

+++ kubernetes/homelab/apps/media/betanin/app Kustomization: media/betanin ConfigMap: media/beets-config

@@ -1,42 +1,81 @@

 ---
 apiVersion: v1
 data:
-  config.yaml: "---\nplugins:\n  # NOTE: These data sources have commented out because\
-    \ the best option is to\n  # use one consistent datasource.\n  # More info in\
-    \ the README\n  # - discogs\n  # - spotify\n  # - bandcamp\n  # - deezer\n  -\
-    \ originquery\n  - fromfilename\n  - fetchart\n  - embedart\n  - extrafiles\n\
-    \  - mbsync\n  - hook\n  - unimported\n  - zero\n  - lastgenre\n  - yearfixer\n\
-    \  - missing\n  - info\n  - unimported\nthreaded: yes\nverbose: no\n# NOTE: This\
-    \ assumes that the music directory is mounted here\ndirectory: /data/media/music\n\
-    # NOTE: This makes a large assumption that the beets dir is located at /beets\n\
-    library: /beets/beets.db\n# Pointing beets to the file where we keep the list\
-    \ of directories\n# we've already imported.\nstatefile: /beets/state.pickle\n\
-    asciify_paths: true\nimport:\n  # The log file location\n  log: /beets/log.txt\n\
-    \  # Either yes or no, controlling whether metadata (e.g., ID3) tags are written\
-    \ to files when using beet import.\n  # Defaults to yes. The -w and -W command-line\
-    \ options override this setting.\n  write: yes\n  # Either yes or no, indicating\
-    \ whether to copy files into the library directory when using beet import. Defaults\
-    \ to yes. Can be overridden with the -c and -C command-line options.\n  # The\
-    \ option is ignored if move is enabled (i.e., beets can move or copy files but\
-    \ it doesn\u2019t make sense to do both).\n  copy: yes\n  # Either yes or no,\
-    \ indicating whether to move files into the library directory when using beet\
-    \ import.\n  # Defaults to no.\n  move: no\n  # Controlling whether an interrupted\
-    \ import is picked up during the next import\n  resume: yes\n  # Either yes or\
-    \ no, controlling whether imported directories are recorded and whether\n  # these\
-    \ recorded directories are skipped during the next import.\n  incremental: yes\n\
-    \  # Either yes or no, controlling whether skipped directories are recorded in\
-    \ the incremental list. When set to yes,\n  # skipped directories won\u2019t be\
-    \ recorded, and beets will try to import them again later.\n  # When set to no,\
-    \ skipped directories will be recorded, and skipped later. Default to 'no'\n \
-    \ incremental_skip_later: no\n  # Either yes or no (default), controlling whether\
-    \ to ask for a manual decision from the user\n  # when the importer is unsure\
-    \ how to proceed. This corresponds to the --quiet flag to beet import.\n  # Setting\
-    \ this to no in the configuration so that it's possible to run\n  # 'beet import'\
-    \ without quiet on the running process.\n  # However, the script that runs continuously\
-    \ calls 'beet import -q'\n  quiet: no\n  # Either skip (default) or asis, specifying\
+  config.yaml: "---\nart_filename: cover\nasciify_paths: true\n# Refer to the README\
+    \ for more details on the release group disambiguation process.\n# and here: https://beets.readthedocs.io/en/stable/reference/config.html#aunique\n\
+    aunique:\n  keys: albumartist album\n  disambiguators: albumtype releasegroupdisambig\
+    \ albumdisambig label catalognum\n  bracket: \"()\"\n# NOTE: Bandcamp search works\
+    \ by simply iterating through a list of albums that are returned\n# from a query\
+    \ for the album name. This could be quite a slow process, depending on the 'search_max'.\n\
+    # Further, the bandcamp search might not work if the album name is common (i.e.\
+    \ won't show up in first X results)\nbandcamp:\n  source_weight: 0.7\n  include_digital_only_tracks:\
+    \ true\n  search_max: 10\n  art: yes\ncheck:\n  import: yes # Add checksums for\
+    \ new files during the import process. # This also disables integrity checks on\
+    \ import and will not ask you to skip the import of corrupted files.\n  write-check:\
+    \ yes # Verify checksums before writing files with beet write or beet modify.\n\
+    \  write-update: yes # Update checksums after writing files with beet write or\
+    \ beet modify.\n  convert-update: no # Update the checksum if a file has been\
+    \ converted with the --keep-new flag.\n  threads: 2 # Threads to compute checksums.\n\
+    # https://beets.readthedocs.io/en/stable/reference/config.html#clutter\nclutter:\
+    \ [\"Thumbs.DB\", \".DS_Store\", \"**.zip\", \"**.torrent\", \"**.ini\", \"**.txt\"\
+    , \"**.nfo\", \"**.m3u\"]\ndeezer:\n  source_weight: 0.7\n# NOTE: This assumes\
+    \ that the music directory is mounted here\ndirectory: /data/media/music\ndiscogs:\n\
+    \  user_token: \"\"\n  source_weight: 0.7\n  extra_tags: [year]\n# We want to\
+    \ enable this plugin so that we can use its 'extractart' and 'clearart' features,\n\
+    # but we don't want to automatically embed album art because it increases the\
+    \ size of EACH song on an album (it's duplicative)\nembedart:\n  auto: no\n# Ensures\
+    \ that beets also copies over music-related files that we want to keep,\n# such\
+    \ as coverart and 'origin.yaml' files, which contain metadata from the tracker\n\
+    extrafiles:\n  patterns:\n    artworkdir:\n      - \"[sS]cans/\"\n      - \"[aA]rtwork/\"\
+    \n    paths:\n      artworkdir: $albumpath/artwork\n    all:\n      - \"*.jpg\"\
+    \n      - \"*.png\"\n      - \"*.jpeg\"\n      - \"*.pdf\"\n      - \"*.cue\"\n\
+    \      - \"*.log\"\n      - \"origin.yaml\"\nfetchart:\n  auto: yes # Enable automatic\
+    \ album art fetching during import.\n  cautious: no # Pick only trusted album\
+    \ art by ignoring filenames that do not contain one of the keywords in \"cover_names\"\
+    .\n  enforce_ratio: yes # Only allow images with 1:1 aspect ratio\n  minwidth:\
+    \ 500 # Only images with a width bigger or equal to minwidth are considered as\
+    \ valid album art candidates.\n  maxwidth: 3000 # A maximum image width to downscale\
+    \ fetched images if they are too big.\n  # The height is recomputed so that the\
+    \ aspect ratio is preserved.\n  sources: # An asterisk * expands to all available\
+    \ sources.\n    - filesystem # No remote art sources are queried if local art\
+    \ is found in the filesystem.\n    - coverart\n    - albumart\n    - bandcamp\n\
+    \    - fanarttv\n    - itunes\n    - amazon\n    - wikipedia\n  store_source:\
+    \ yes # Store the art source (e.g. filesystem) in the beets database as art_source.\n\
+    # To provide better logs:\nhook:\n  hooks:\n    - event: album_imported\n    \
+    \  command: echo \"\\\"{album}\\\"\"\n    - event: import\n      command: echo\
+    \ \"Imported from {paths}\"\n    - event: art_set\n      command: echo \"Coverart\
+    \ saved\"\n    - event: import_begin\n      command: echo \"Import started...\"\
+    \n    - event: import_task_apply\n      command: echo \"Metadata applied\"\n \
+    \   - event: item_copied\n      command: echo \"\\\"{item}\\\" copied from \\\"\
+    {source}\\\" to \\\"{destination}\\\"\"\n    - event: item_moved\n      command:\
+    \ echo \"Moved \\\"{item}\\\"\"\n    - event: write\n      command: echo \"Writing\
+    \ to {path}\"\n    - event: cli_exit\n      command: echo \"All tasks finished!\"\
+    \nimport:\n  # The log file location\n  log: /beets/log.txt\n  # Either yes or\
+    \ no, controlling whether metadata (e.g., ID3) tags are written to files when\
+    \ using beet import.\n  # Defaults to yes. The -w and -W command-line options\
+    \ override this setting.\n  write: yes\n  # Either yes or no, indicating whether\
+    \ to copy files into the library directory when using beet import. Defaults to\
+    \ yes. Can be overridden with the -c and -C command-line options.\n  # The option\
+    \ is ignored if move is enabled (i.e., beets can move or copy files but it doesn\u2019\
+    t make sense to do both).\n  copy: yes\n  # Either yes or no, indicating whether\
+    \ to move files into the library directory when using beet import.\n  # Defaults\
+    \ to no.\n  move: no\n  # Controlling whether an interrupted import is picked\
+    \ up during the next import\n  resume: yes\n  # Either yes or no, controlling\
+    \ whether imported directories are recorded and whether\n  # these recorded directories\
+    \ are skipped during the next import.\n  incremental: yes\n  # Either yes or no,\
+    \ controlling whether skipped directories are recorded in the incremental list.\
+    \ When set to yes,\n  # skipped directories won\u2019t be recorded, and beets\
+    \ will try to import them again later.\n  # When set to no, skipped directories\
+    \ will be recorded, and skipped later. Default to 'no'\n  incremental_skip_later:\
+    \ no\n  # Either yes or no (default), controlling whether to ask for a manual\
+    \ decision from the user\n  # when the importer is unsure how to proceed. This\
+    \ corresponds to the --quiet flag to beet import.\n  # Setting this to no in the\
+    \ configuration so that it's possible to run\n  # 'beet import' without quiet\
+    \ on the running process.\n  # However, the script that runs continuously calls\
+    \ 'beet import -q'\n  quiet: no\n  # Either skip (default) or asis, specifying\
     \ what should happen in\n  # quiet mode (see the -q flag to import, above) when\
     \ there is no strong recommendation.\n  quiet_fallback: skip\n  # https://beets.readthedocs.io/en/stable/reference/config.html#from-scratch\n\
     \  from_scratch: no\n  # One of apply, skip, asis, or none, indicating which option\
     \ should be\n  # the default when selecting an action for a given match.\n  #\
     \ This is the action that will be taken when you type return without an option\
     \ letter.\n  default_action: apply\n  # Either ask (default), asis or skip. Specifies\
@@ -45,112 +84,72 @@

[Diff truncated by flux-local]
--- kubernetes/homelab/apps/networking/cloudflared/app Kustomization: networking/cloudflared ConfigMap: networking/cloudflared-configmap

+++ kubernetes/homelab/apps/networking/cloudflared/app Kustomization: networking/cloudflared ConfigMap: networking/cloudflared-configmap

@@ -1,19 +1,19 @@

 ---
 apiVersion: v1
 data:
   config.yaml: |
     ---
-    originRequest:
-      originServerName: external.drmoo.io
     ingress:
       - hostname: drmoo.io
         service: https://nginx-external-controller.networking.svc.cluster.local:443
       - hostname: "*.drmoo.io"
         service: https://nginx-external-controller.networking.svc.cluster.local:443
       - service: http_status:404
+    originRequest:
+      originServerName: external.drmoo.io
 kind: ConfigMap
 metadata:
   labels:
     app.kubernetes.io/name: cloudflared
     kustomize.toolkit.fluxcd.io/name: cloudflared
     kustomize.toolkit.fluxcd.io/namespace: networking