dashy/conf.yml

@@ -64,7 +64,7 @@ sections:
         target: newtab
       - title: PortSwigger Academy
         description: PortSwigger learning platform
-        icon: https://portswigger.net/content/images/logos/favicon.ico
+        icon: https://portswigger.net/content/images/logos/burp-suite-icon.svg
         url: https://portswigger.net/web-security/dashboard
         target: newtab
   - name: House

dashy/dashy.yaml

@@ -56,8 +56,8 @@ metadata:
     nginx.org/proxy-connect-timeout: "60s"
     nginx.org/proxy-read-timeout: "60s"
     # Uncomment to allow solving HTTP01 challenge
-    #ingress.kubernetes.io/ssl-redirect: "false"
-    #nginx.org/redirect-to-https: "false"
+    ingress.kubernetes.io/ssl-redirect: "true"
+    nginx.org/redirect-to-https: "true"
 spec:
   tls:
   - hosts:

ingress/ingress.yaml

@@ -186,7 +186,8 @@ metadata:
     nginx.org/redirect-to-https: "true"
     acme.cert-manager.io/http01-edit-in-place: "true"
     cert-manager.io/cluster-issuer: "letsencrypt"
-    nginx.org/basic-auth-secret: transmission-secret
+    # nginx.org/basic-auth-secret: ""
+    # nginx.org/basic-auth-secret: transmission-secret
     nginx.org/hsts: "true"
     nginx.org/hsts-max-age: "15552000"
 spec:

nextcloud/nextcloud-dply.yaml

@@ -196,4 +196,55 @@ spec:
             - name: nextcloud
               persistentVolumeClaim:
                 claimName: nextcloud
-
+---
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: nextcloud-backup-augustin
+spec:
+  schedule: "@weekly"
+  jobTemplate:
+    spec:
+      template:
+        spec:
+          affinity:
+            nodeAffinity:
+              requiredDuringSchedulingIgnoredDuringExecution:
+                nodeSelectorTerms:
+                - matchExpressions:
+                  - key: arch
+                    operator: In
+                    values:
+                    - x86
+          containers:
+          - name: nextcloud-backup-augustin
+            image: qdii/backup-rsync:latest
+            env:
+            - name: LOCAL_FOLDER_PATH
+              value: /mnt/data/Augustin/files
+            - name: REMOTE_USER
+              value: "uab10c1ba4bc"
+            - name: REMOTE_SERVER
+              value: "bck.dodges.it"
+            - name: REMOTE_FOLDER_PATH
+              value: "/home/uab10c1ba4bc/data/vol0/augustin"
+            volumeMounts:
+            - name: backup
+              mountPath: "/root/.ssh/id_rsa"
+              subPath: ssh_private_key
+              readOnly: true
+            - name: backup
+              mountPath: "/root/.ssh/id_rsa.pub"
+              subPath: ssh_public_key
+              readOnly: true
+            - name: nextcloud
+              mountPath: /mnt
+          restartPolicy: Never
+          volumes:
+            - name: backup
+              secret:
+                secretName: backup
+                defaultMode: 0400
+            - name: nextcloud
+              persistentVolumeClaim:
+                claimName: nextcloud

nvidia/values.yaml

@@ -0,0 +1,116 @@
+# Plugin configuration
+# Only one of "name" or "map" should ever be set for a given deployment.
+# Use "name" to point to an external ConfigMap with a list of configurations.
+# Use "map" to build an integrated ConfigMap from a set of configurations as
+# part of this helm chart. An example of setting "map" might be:
+# config:
+#   map:
+#     default: |-
+#       version: v1
+#       flags:
+#         migStrategy: none
+#     mig-single: |-
+#       version: v1
+#       flags:
+#         migStrategy: single
+#     mig-mixed: |-
+#       version: v1
+#       flags:
+#         migStrategy: mixed
+config:
+  # ConfigMap name if pulling from an external ConfigMap
+  name: ""
+  # Set of named configs to build an integrated ConfigMap from
+  map: {}
+  # Default config name within the ConfigMap
+  default: ""
+  # List of fallback strategies to attempt if no config is selected and no default is provided
+  fallbackStrategies: ["named" , "single"]
+
+legacyDaemonsetAPI: null
+compatWithCPUManager: null
+migStrategy: null
+failOnInitError: null
+deviceListStrategy: null
+deviceIDStrategy: null
+nvidiaDriverRoot: null
+gdsEnabled: null
+mofedEnabled: null
+
+nameOverride: ""
+fullnameOverride: ""
+namespaceOverride: ""
+selectorLabelsOverride: {}
+
+allowDefaultNamespace: false
+
+imagePullSecrets: []
+image:
+  repository: nvcr.io/nvidia/k8s-device-plugin
+  pullPolicy: IfNotPresent
+  # Overrides the image tag whose default is the chart appVersion.
+  tag: ""
+
+updateStrategy:
+  type: RollingUpdate
+
+podAnnotations: {}
+podSecurityContext: {}
+securityContext: {}
+
+resources: {}
+nodeSelector:
+  kubernetes.io/hostname: smk.dodges.it
+affinity: {}
+tolerations:
+  # This toleration is deprecated. Kept here for backward compatibility
+  # See https://kubernetes.io/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/
+  - key: CriticalAddonsOnly
+    operator: Exists
+  - key: nvidia.com/gpu
+    operator: Exists
+    effect: NoSchedule
+
+# Mark this pod as a critical add-on; when enabled, the critical add-on
+# scheduler reserves resources for critical add-on pods so that they can
+# be rescheduled after a failure.
+# See https://kubernetes.io/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/
+priorityClassName: "system-node-critical"
+
+runtimeClassName: null
+
+# Subcharts
+nfd:
+  nameOverride: node-feature-discovery
+  enableNodeFeatureApi: false
+  master:
+    extraLabelNs:
+      - nvidia.com
+    serviceAccount:
+      name: node-feature-discovery
+
+  worker:
+    tolerations:
+    - key: "node-role.kubernetes.io/master"
+      operator: "Equal"
+      value: ""
+      effect: "NoSchedule"
+    - key: "nvidia.com/gpu"
+      operator: "Equal"
+      value: "present"
+      effect: "NoSchedule"
+    config:
+      sources:
+        pci:
+          deviceClassWhitelist:
+          - "02"
+          - "0200"
+          - "0207"
+          - "0300"
+          - "0302"
+          deviceLabelFields:
+          - vendor
+gfd:
+  enabled: false
+  nameOverride: gpu-feature-discovery
+  namespaceOverride: ""