fix mistakes

Author: chkpwd

ansible/inventory/group_vars/gatus/main.yml

@@ -57,7 +57,7 @@ gatus_config:
       <<: *gatus_icmp_tcp_default
     - name: Home Assistant
       group: infra
-      url: icmp://10.0.10.8
+      url: icmp://10.0.20.4
       <<: *gatus_icmp_tcp_default
     - name: Kubernetes Node 1
       group: kubernetes

ansible/roles/traefik/files/config.yml

@@ -102,7 +102,7 @@ http:
     home-assistant:
       loadBalancer:
         servers:
-          - url: "http://10.0.10.8:8123"
+          - url: "http://10.0.20.4:8123"
     synology:
       loadBalancer:
         servers:

kubernetes/apps/frigate/config.yml

@@ -1,17 +1,15 @@
 ---
 mqtt:
   enabled: true
-  host: 10.0.10.8
+  host: 10.0.20.4
   user: "{FRIGATE_MQTT_USER}"
   password: "{FRIGATE_MQTT_PASSWORD}"
 
-# Object detection on the Intel iGPU via OpenVINO (gpu.intel.com/i915).
 detectors:
   ov:
     type: openvino
-    device: GPU
+    device: CPU
 
-# Default SSDLite MobileNet v2 model bundled in the image.
 model:
   width: 300
   height: 300
@@ -20,7 +18,6 @@ model:
   path: /openvino-model/ssdlite_mobilenet_v2.xml
   labelmap_path: /openvino-model/coco_91cl_bkgr.txt
 
-# Intel VAAPI hardware-accelerated decoding.
 ffmpeg:
   hwaccel_args: preset-vaapi
 
@@ -37,7 +34,6 @@ objects:
 
 record:
   enabled: true
-  # 0.17 replaced record.retain with continuous/motion blocks.
   continuous:
     days: 3
   motion:

kubernetes/apps/frigate/helm-release.yml

@@ -35,7 +35,6 @@ spec:
               globalMounts:
                 - path: /config
         initContainers:
-          # Copy the GitOps-managed config into the writable /config PVC.
           init-config:
             image: &image
               repository: ghcr.io/blakeblackshear/frigate
@@ -45,8 +44,6 @@ spec:
               - /bin/bash
               - -c
               - cp -f /tmp/frigate-config/config.yml /config/config.yml
-          # Seed a writable copy of nginx's tree so the non-root user can
-          # write runtime/log/temp files under /usr/local/nginx.
           init-nginx:
             image: *image
             command:
@@ -61,7 +58,6 @@ spec:
                   name: frigate
             env:
               TZ: America/New_York
-              # Non-root (s6-overlay) plumbing — see s6-* override scripts.
               HOME: /tmp/home
               USER: &uid "1026"
               S6_CATCHALL_USER: *uid
@@ -103,10 +99,6 @@ spec:
                 memory: 4Gi
     defaultPodOptions:
       automountServiceAccountToken: false
-      # Run as the NAS-owning user (1026:100) — matching the arr apps — so
-      # Frigate writes recordings to NFS under standard root_squash instead
-      # of running as root. Frigate's s6-overlay image needs the s6-* script
-      # overrides + HOME/S6_* env + writable /run,/usr/local/nginx,/tmp/home.
       securityContext:
         runAsUser: 1026
         runAsGroup: &gid 100
@@ -144,7 +136,6 @@ spec:
         globalMounts:
           - path: /tmp/frigate-config
             readOnly: true
-      # s6-overlay override scripts (executable) for non-root operation.
       s6-scripts:
         type: configMap
         name: frigate-s6-scripts
@@ -174,7 +165,6 @@ spec:
         sizeLimit: 512Mi
         globalMounts:
           - path: /dev/shm
-      # Writable dirs the non-root user needs (stock image expects root here).
       run:
         type: emptyDir
         medium: Memory

kubernetes/apps/frigate/kustomization.yml

@@ -9,7 +9,6 @@ configMapGenerator:
   - name: frigate-configmap
     files:
       - config.yml=./config.yml
-  # s6-overlay override scripts required to run Frigate as a non-root UID.
   - name: frigate-s6-scripts
     files:
       - run=./s6-log-prepare-run

kubernetes/apps/frigate/s6-applyuidgid

@@ -1,7 +1,4 @@
 #!/bin/bash
-# Non-root override for /package/admin/s6/command/s6-applyuidgid.
-# s6 cannot switch uid/gid without privileges when the container already
-# runs as a non-root user, so drop the leading uid/gid args and exec the
-# target program directly.
+# Non-root override: skip the s6 uid/gid switch, exec the target directly.
 ARGS=( "$@" )
 exec ${ARGS[@]:2}

kubernetes/apps/frigate/s6-log-prepare-run

@@ -1,9 +1,7 @@
 #!/command/with-contenv bash
 set -o errexit -o nounset -o pipefail
 
-# Non-root override for /etc/s6-overlay/s6-rc.d/log-prepare/run.
-# The stock script chowns/chmods the log dirs, which fails when Frigate
-# runs as a non-root UID. Just create the directories.
+# Non-root override: create log dirs without the stock chown/chmod.
 dirs=(
   /dev/shm/logs/frigate
   /dev/shm/logs/go2rtc

kubernetes/apps/teslamateapi/helm-release.yml

@@ -42,7 +42,7 @@ spec:
           app:
             env:
               API_TOKEN_DISABLE: "false"
-              MQTT_HOST: 10.0.10.8
+              MQTT_HOST: 10.0.20.4
               TZ: America/New_York
               MQTT_PASSWORD:
                 valueFrom:

kubernetes/core/proxies/hass-proxy.yml

@@ -23,7 +23,7 @@ spec:
               name: http
           env:
             - name: INT_HOST
-              value: "http://10.0.10.8:8123"
+              value: "http://10.0.20.4:8123"
             - name: EXTRA_CONFIG
               value: |
                 proxy_set_header Upgrade $http_upgrade;