Update ghcr.io/paperless-ngx/paperless-ngx Docker tag to v2.20.6

Reviewed-on: #312

clusters/ipv6/git-ops/gitea-act/gitea-act.yml

@@ -25,6 +25,9 @@ spec:
       - name: runner-data
         persistentVolumeClaim:
           claimName: gitea-act-runner-longhorn
+      - name: docker-ipv6
+        configMap:
+          name: docker-daemon-ipv6
       containers:
       - name: runner
         image: gitea/act_runner@sha256:8477d5b61b655caad4449888bae39f1f34bebd27db56cb15a62dccb3dcf3a944
@@ -64,7 +67,7 @@ spec:
         - name: runner-data
           mountPath: /data
       - name: daemon
-        image: docker:29.1.5-dind
+        image: docker:29.2.0-dind
         env:
         - name: DOCKER_TLS_CERTDIR
           value: /certs
@@ -73,3 +76,6 @@ spec:
         volumeMounts:
         - name: docker-certs
           mountPath: /certs
+        - name: docker-ipv6
+          mountPath: /etc/docker/daemon.json
+          subPath: daemon.json

clusters/ipv6/git-ops/gitea-act/gitea-docker-daemon.yml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: docker-daemon-ipv6
+  namespace: git-ops
+data:
+  daemon.json: |
+    {
+      "ipv6": true,
+      "fixed-cidr-v6": "2001:db8:1::/64"
+    }

clusters/ipv6/git-ops/gitea/gitea-svc.yml

@@ -30,3 +30,21 @@ spec:
   selector:
     app: gitea-db
   clusterIP: None
+
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: gitea-lb-service
+  namespace: git-ops
+spec:
+  selector:
+    app: gitea-app
+  ports:
+  - port: 3000
+    targetPort: 3000
+    name: http
+  - port: 22
+    targetPort: 22
+    name: ssh
+  type: LoadBalancer

clusters/ipv6/longhorn-system/longhorn-ingress.yml

@@ -0,0 +1,27 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: longhorn-ingress
+  namespace: longhorn-system
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-cloudflare
+    traefik.ingress.kubernetes.io/router.middlewares: tools-authelia@kubernetescrd
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+spec:
+  ingressClassName: traefik
+  tls:
+  - hosts:
+    - longhorn.akshun-lab.cc
+    secretName: longhorn-tls
+  rules:
+  - host: longhorn.akshun-lab.cc
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: longhorn-frontend
+            port:
+              number: 80

clusters/ipv6/media/immich/immich-ml.yml

@@ -19,7 +19,7 @@ spec:
       runtimeClassName: nvidia
       containers:
       - name: immich-machine-learning
-        image: ghcr.io/immich-app/immich-machine-learning:v2.5.0-cuda
+        image: ghcr.io/immich-app/immich-machine-learning:v2.5.2-cuda
         ports:
         - containerPort: 3003
         env:

clusters/ipv6/media/immich/immich.yml

@@ -18,7 +18,7 @@ spec:
     spec:
       containers:
       - name: immich-server
-        image: ghcr.io/immich-app/immich-server:v2.5.0
+        image: ghcr.io/immich-app/immich-server:v2.5.2
         readinessProbe:
           exec:
             command:

clusters/ipv6/tools/cloudflare-ddns/cf-ddns.yml

@@ -15,7 +15,7 @@ spec:
     spec:
       hostNetwork: true
       containers:
-      - name: cf-ddns
+      - name: cf-ddns-1
         image: favonia/cloudflare-ddns:1.15.1
         securityContext:
           capabilities:
@@ -24,6 +24,25 @@ spec:
         env:
         - name: DOMAINS
           value: "*.akshun-lab.cc"
+        - name: PROXIED
+          value: "true"
+        - name: IP4_PROVIDER
+          value: "none"
+        - name: CLOUDFLARE_API_TOKEN
+          valueFrom:
+            secretKeyRef:
+              name: cf-ddns-secret
+              key: api-token
+
+      - name: cf-ddns-2
+        image: favonia/cloudflare-ddns:1.15.1
+        securityContext:
+          capabilities:
+            drop:
+            - ALL
+        env:
+        - name: DOMAINS
+          value: "gitea.akshun-lab.cc"
         - name: PROXIED
           value: "false"
         - name: IP4_PROVIDER

clusters/ipv6/tools/paperless-ngx/paperless-ngx.yml

@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
       - name: paperless-ngx
-        image: ghcr.io/paperless-ngx/paperless-ngx:2.20.5
+        image: ghcr.io/paperless-ngx/paperless-ngx:2.20.6
         readinessProbe:
           exec:
             command:

clusters/ipv6/tools/searxng/searxng.yml

@@ -18,7 +18,7 @@ spec:
     spec:
       containers:
       - name: searxng
-        image: searxng/searxng@sha256:4a60859bc9c3b47ad5ceed998f847c5192f16ce26fbc01a1975628e19b6040df
+        image: searxng/searxng@sha256:7dfe4abf855ee9ef946c057211179dbc97e05d49a15db11d937c84b1e412098a
         ports:
         - containerPort: 8080
         env: