chore(deps): update container image tccr.io/truecharts/adminer to latest (#12775)

**Description**

Update of the original @kqmaverick guide from @depasseg (see ->
https://github.com/truecharts/website/pull/286), so I'll have them both
review here since filing on the Website one gets overwritten by here

⚒️ Fixes  # <!--(issue)-->

**⚙️ Type of change**

- [ ] ⚙️ Feature/App addition
- [ ] 🪛 Bugfix
- [ ] ⚠️ Breaking change (fix or feature that would cause existing
functionality to not work as expected)
- [ ] 🔃 Refactor of current code

**🧪 How Has This Been Tested?**
<!--
Please describe the tests that you ran to verify your changes. Provide
instructions so we can reproduce. Please also list any relevant details
for your test configuration
-->

**📃 Notes:**
<!-- Please enter any other relevant information here -->

**✔️ Checklist:**

- [ ] ⚖️ My code follows the style guidelines of this project
- [ ] 👀 I have performed a self-review of my own code
- [ ] #️⃣ I have commented my code, particularly in hard-to-understand
areas
- [ ] 📄 I have made corresponding changes to the documentation
- [ ] ⚠️ My changes generate no new warnings
- [ ] 🧪 I have added tests to this description that prove my fix is
effective or that my feature works
- [ ] ⬆️ I increased versions for any altered app according to semantic
versioning

**➕ App addition**

If this PR is an app addition please make sure you have done the
following.

- [ ] 🪞 I have opened a PR on
[truecharts/containers](https://github.com/truecharts/containers) adding
the container to TrueCharts mirror repo.
- [ ] 🖼️ I have added an icon in the Chart's root directory called
`icon.png`

---

_Please don't blindly check all the boxes. Read them and only check
those that apply.
Those checkboxes are there for the reviewer to see what is this all
about and
the status of this PR with a quick glance._

---------

Signed-off-by: StevenMcElligott <89483932+StevenMcElligott@users.noreply.github.com>
Co-authored-by: kqmaverick <121722567+kqmaverick@users.noreply.github.com>

.all-contributorsrc

@@ -1964,6 +1964,24 @@
       "contributions": [
         "code"
       ]
+    },
+    {
+      "login": "aamirazad",
+      "name": "Aamir Azad",
+      "avatar_url": "https://avatars.githubusercontent.com/u/82281117?v=4",
+      "profile": "http://tigertutoringtool.aamira.me",
+      "contributions": [
+        "doc"
+      ]
+    },
+    {
+      "login": "jordan-woyak",
+      "name": "Jordan Woyak",
+      "avatar_url": "https://avatars.githubusercontent.com/u/1768214?v=4",
+      "profile": "https://github.com/jordan-woyak",
+      "contributions": [
+        "code"
+      ]
     }
   ],
   "contributorsPerLine": 7,

.github/README.md

@@ -124,7 +124,7 @@ A lot of our work is based on the great effort of others. We would love to exten
 ## Contributors ✨
 
 <!-- ALL-CONTRIBUTORS-BADGE:START - Do not remove or modify this section -->
-[![All Contributors](https://img.shields.io/badge/all_contributors-210-orange.svg?style=for-the-badge)](#contributors)
+[![All Contributors](https://img.shields.io/badge/all_contributors-212-orange.svg?style=for-the-badge)](#contributors)
 <!-- ALL-CONTRIBUTORS-BADGE:END -->
 
 Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/docs/en/emoji-key)):
@@ -406,6 +406,10 @@ Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/d
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/MickaelFontes"><img src="https://avatars.githubusercontent.com/u/81414455?v=4?s=100" width="100px;" alt="MickaelFontes"/><br /><sub><b>MickaelFontes</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=MickaelFontes" title="Code">💻</a></td>
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/blastik"><img src="https://avatars.githubusercontent.com/u/3662083?v=4?s=100" width="100px;" alt="David CM"/><br /><sub><b>David CM</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=blastik" title="Code">💻</a></td>
     </tr>
+    <tr>
+      <td align="center" valign="top" width="14.28%"><a href="http://tigertutoringtool.aamira.me"><img src="https://avatars.githubusercontent.com/u/82281117?v=4?s=100" width="100px;" alt="Aamir Azad"/><br /><sub><b>Aamir Azad</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=aamirazad" title="Documentation">📖</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/jordan-woyak"><img src="https://avatars.githubusercontent.com/u/1768214?v=4?s=100" width="100px;" alt="Jordan Woyak"/><br /><sub><b>Jordan Woyak</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=jordan-woyak" title="Code">💻</a></td>
+    </tr>
   </tbody>
 </table>
 

.github/ct-install.yaml

@@ -28,6 +28,7 @@ excluded-charts:
   - charts/stable/heimdall
   - charts/stable/mc-router
   - charts/stable/multus
+  - charts/stable/local-ai
   - charts/stable/orbital-sync
   - charts/stable/plex-meta-manager
   - charts/stable/pod-gateway

charts/dependency/kube-state-metrics/Chart.yaml

@@ -1,5 +1,5 @@
 apiVersion: v2
-appVersion: "2.9.2"
+appVersion: "2.10.0"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
@@ -21,7 +21,7 @@ name: kube-state-metrics
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/kube-state-metrics
 type: application
-version: 3.0.12
+version: 3.0.17
 annotations:
   truecharts.org/catagories: |
     - metrics

charts/dependency/kube-state-metrics/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/kube-state-metrics
   pullPolicy: IfNotPresent
-  tag: v2.9.2@sha256:3afe680fae090d3ffda0c969d914d4ddbbfd2da0be668c8a6f344b73e8c207a2
+  tag: v2.10.0@sha256:4df0da14f79e4308606b551f91bf6611b4207229344c3165684fbaccd6e2c475
 
 service:
   main:

charts/dependency/mariadb/Chart.yaml

@@ -25,7 +25,7 @@ sources:
   - https://github.com/prometheus/mysqld_exporter
   - https://mariadb.org
 type: application
-version: 9.0.15
+version: 9.0.20
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/mariadb/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/mariadb
   pullPolicy: IfNotPresent
-  tag: v11.0.3@sha256:4a87c148792e6bb9bbc340e6a992255ee8596fa3e9b28de5038c632cf28ec93c
+  tag: v11.0.3@sha256:8fc31764c9cbc950025f4fd12df80a9d9afd23544988a63288988d211e89744b
 
 workload:
   main:

charts/dependency/memcached/Chart.yaml

@@ -23,7 +23,7 @@ sources:
   - https://github.com/bitnami/bitnami-docker-memcached
   - http://memcached.org/
 type: application
-version: 8.0.16
+version: 8.0.21
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/memcached/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/memcached
   pullPolicy: IfNotPresent
-  tag: v1.6.21@sha256:117c7f246c0854b46f655a73f411f418e8f78a50cafec5e92d6ebfdb49319331
+  tag: v1.6.21@sha256:4c093f754425d49af43bdf72651300a37a76308ff342bd5836d38c2714f060b9
 
 service:
   main:

charts/dependency/mongodb/Chart.yaml

@@ -1,5 +1,5 @@
 apiVersion: v2
-appVersion: "6.0.9"
+appVersion: "6.0.10"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
@@ -23,7 +23,7 @@ sources:
   - https://github.com/bitnami/bitnami-docker-mongodb
   - https://www.mongodb.com
 type: application
-version: 8.0.11
+version: 8.0.16
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/mongodb/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/mongodb
   pullPolicy: IfNotPresent
-  tag: v6.0.9@sha256:8a867b30c13acb263a0b9f29b8fb9d733fe6bd659d84563db06102c45571dd25
+  tag: v6.0.10@sha256:ae08c7ae9b5a573d480d5108823bfe36cb6806b4a5755eb1e90bb00d7a4aa1bf
 
 workload:
   main:

charts/dependency/node-exporter/Chart.yaml

@@ -21,7 +21,7 @@ name: node-exporter
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/node-exporter
 type: application
-version: 3.0.14
+version: 3.0.19
 annotations:
   truecharts.org/catagories: |
     - metrics

charts/dependency/node-exporter/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/node-exporter
   pullPolicy: IfNotPresent
-  tag: v1.6.1@sha256:0672c1a846be61018b11cd88ce0df3629d7a80ec895b93051b2b7a5c7fe8b080
+  tag: v1.6.1@sha256:932954e9fabea922ac0a443b174a6a7de41451304b97cf0bcad7f70d6d44c807
 
 service:
   main:

charts/dependency/redis/Chart.yaml

@@ -23,7 +23,7 @@ sources:
   - https://github.com/bitnami/bitnami-docker-redis
   - http://redis.io/
 type: application
-version: 8.0.19
+version: 8.0.23
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/redis/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/redis
   pullPolicy: IfNotPresent
-  tag: v7.2.1@sha256:37dfec3b4ba963bb135f7948e82fec8753e0b52bf714307bf001a3e3d50f2fbf
+  tag: v7.2.1@sha256:367fe40481435c422d6876053917e22069089d0c93ef0246298880526b748c04
 
 workload:
   main:

charts/dependency/solr/Chart.yaml

@@ -22,7 +22,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/solr
   - https://github.com/apache/solr
 type: application
-version: 6.0.16
+version: 6.0.21
 annotations:
   truecharts.org/catagories: |
     - search

charts/dependency/solr/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/solr
   pullPolicy: IfNotPresent
-  tag: v9.3.0@sha256:a4c234e4dd04d2ebc4c18b97097973cb153fdb22a4ade306ad7607c1a032980c
+  tag: v9.3.0@sha256:c7339d241f5c4f674a775ef8f2501b49d757bb969754cde24bf2b9109ce29b19
 
 workload:
   main:

charts/enterprise/blocky/Chart.yaml

@@ -1,5 +1,5 @@
 apiVersion: v2
-appVersion: "0.21.0"
+appVersion: "0.22.0"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
@@ -25,7 +25,7 @@ sources:
   - https://0xerr0r.github.io/blocky/
   - https://github.com/0xERR0R/blocky
   - https://github.com/Mozart409/blocky-frontend
-version: 8.0.0
+version: 8.0.1
 annotations:
   truecharts.org/catagories: |
     - network

charts/enterprise/blocky/docs/setup-guide.md

@@ -1,18 +1,35 @@
 # Blocky Setup Guide
 
-This will guide you through the basic setup of Blocky which is the preferred DNS solution for TrueCharts. This guide will cover basic setup options which will get you up and running and is not all inclusive.
+This will guide you through the basic setup of Blocky which is the preferred DNS solution for TrueCharts. This guide will cover basic setup options which will get you up and running and is not all inclusive.  Configuring your devices to use Blocky is out of scope of this guide.
 
 ## Upstream DNS
 
-Blocky has multiple DNS entries configured by default these can be overridden to your personal preferences or left as default.
+Blocky has the following DNS entries configured by default.  They can be overridden to your personal preferences or left as default. Here are some common ones:
 
-Blocky supports 3 methods for upstream DNS.
+- 1.1.1.1
+- 1.0.0.1
+- 8.8.8.8
+- 8.8.4.4
+- 9.9.9.9
+- 149.112.112.112
+- 208.67.222.222
+- 208.67.220.220
+- 8.26.56.26
+- 8.20.247.20
+- 185.228.168.9
+- 185.228.169.9
+- 76.76.19.19
+- 76.223.122.150
+- 76.76.2.0
+- 76.76.10.0
+
+Blocky supports 3 methods for upstream DNS.  You can use any combination of the below.
 
 - UDP - Basic DNS
 - DoT - DNS over TLS
 - DoH - DNS over HTTPS
 
-While UDP provides no security for DNS both DoT and DoH will encrypt DNS request. DoH has the added benefit of privacy since DNS traffic will appear as HTTPS traffic.
+While UDP provides no security for DNS both DoT and DoH will encrypt DNS request. DoH has the added benefit of privacy since DNS traffic will appear as HTTPS traffic.  
 
 ### UDP DNS Setup
 
@@ -37,9 +54,9 @@ While UDP provides no security for DNS both DoT and DoH will encrypt DNS request
 
 ## Bootstrap DNS
 
-For DNS providers that do not use an IP address for DoT or DoH a bootstrap DNS provider
- is needed to resolve the DoT or DoH address. This provider can be any UDP upstream DNS.
- In the below example I am using Google DNS.
+If you entered a non-IP address (meaning you used a domain name) for DoT or DoH, then you need to ensure that a bootstrap DNS provider
+is configured to resolve the DoT or DoH address. This provider can be any UDP upstream DNS.
+In the below example I am using Google DNS.
 
 ![blocky-bootstrap-google](./img/blocky-bootstrap-google.png)
 
@@ -59,10 +76,17 @@ certain blocklists if you find legitimate traffic being blocked.
 
 1. Pick a Group Name for your blocklists.
 2. Add List entries for each blocklist by URL.
-  ![blocky-blacklist](./img/blocky-blacklist.png)
+   ![blocky-blacklist](./img/blocky-blacklist.png)
 3. Add a Clients Group Block and set Client Group Name to `default`
 4. Under Groups Entry enter the Group name you used above.
-  ![blocky-blacklist-group](./img/blocky-blacklist-group.png)
+   ![blocky-blacklist-group](./img/blocky-blacklist-group.png)
+
+## Networking
+
+If you want to use Blocky on your local network to take advantage of the filtering above, or the k8s-gateway below, you 
+need to setup a static ip address and leave the default setting DNS TCP Service and DNS UDP Service as LoadBalancer.
+
+You need to configure the devices on your network to use the static IP address configured above.  This can be done per device or by changing the DHCP or DNS settings on your router.
 
 ## k8s-Gateway Configuration
 
@@ -75,4 +99,3 @@ is to add your root domain in the Domain name block.
 ## Prometheus/Grafana
 
 TBD
-

charts/enterprise/blocky/values.yaml

@@ -1,6 +1,6 @@
 image:
   repository: tccr.io/truecharts/blocky
-  tag: v0.21.0@sha256:ed72f8a64307b7b734174589ac631726dd642cc8202c3bdf2eeb1de4adedbe0a
+  tag: v0.22.0@sha256:385055de8ad0b9074d2057d054768d649b8289c5dd566367e0b6289ba5d661a4
   pullPolicy: IfNotPresent
 
 k8sgatewayImage:

charts/enterprise/grafana/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "10.1.1"
+appVersion: "10.1.2"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 14.0.6
 deprecated: false
 description: Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, Elasticsearch, OpenTSDB, Prometheus and InfluxDB.
 home: https://truecharts.org/charts/enterprise/grafana
@@ -24,7 +24,7 @@ sources:
   - https://github.com/bitnami/bitnami-docker-grafana
   - https://grafana.com/
 type: application
-version: 9.0.11
+version: 9.0.18
 annotations:
   truecharts.org/catagories: |
     - metrics

charts/enterprise/grafana/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/grafana
   pullPolicy: IfNotPresent
-  tag: v10.1.1@sha256:2d274c7e2ea23f214f27ed907d816e9bad56c48cd03d1f34d650f43e184565d2
+  tag: v10.1.2@sha256:32fd9faad9b33eb189d403277720417fb83ccd90c65c004417e8baaa817db306
 manifestManager:
   enabled: true
 securityContext:

charts/enterprise/vaultwarden/Chart.yaml

@@ -1,5 +1,5 @@
 apiVersion: v2
-appVersion: "1.29.1"
+appVersion: "1.29.2"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
@@ -25,7 +25,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/enterprise/vaultwarden
   - https://github.com/dani-garcia/vaultwarden
 type: application
-version: 22.0.0
+version: 23.0.1
 annotations:
   truecharts.org/catagories: |
     - security

charts/enterprise/vaultwarden/questions.yaml

@@ -200,14 +200,21 @@ questions:
                       schema:
                         type: string
                         default: ""
-                    - variable: ssl
+                    - variable: security
                       label: "Enable SSL connection"
                       schema:
-                        type: boolean
-                        default: true
+                        type: string
+                        default: "starttls"
+                        enum:
+                          - value: "starttls"
+                            description: "STARTTLS (587)"
+                          - value: "force_tls"
+                            description: "FORCE_TLS (465)"
+                          - value: "off"
+                            description: "OFF (25)"
                     - variable: port
                       label: "SMTP port"
-                      description: "Usually: 25 without SSL, 587 with SSL"
+                      description: "Usually: 587 with STARTTLS, 465 with FORCE_TLS, and 25 without SSL"
                       schema:
                         type: int
                         default: 587

charts/enterprise/vaultwarden/templates/_configmap.tpl

@@ -47,7 +47,7 @@ data:
   SMTP_FROM_NAME: {{ .Values.vaultwarden.smtp.fromName | quote }}
   {{- end }}
   {{- if .Values.vaultwarden.smtp.ssl }}
-  SMTP_SSL: {{ .Values.vaultwarden.smtp.ssl | quote }}
+  SMTP_SECURITY: {{ .Values.vaultwarden.smtp.security | quote }}
   {{- end }}
   {{- if .Values.vaultwarden.smtp.port }}
   SMTP_PORT: {{ .Values.vaultwarden.smtp.port | quote }}

charts/enterprise/vaultwarden/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/vaultwarden
   pullPolicy: IfNotPresent
-  tag: v1.29.1@sha256:5a670aee4b1a57a5a414607f9222f558ab365625f64ff78885f7776971c95b54
+  tag: v1.29.2@sha256:f5761cdd99e267221623b7a91d123153885afd0980b31c863de039245b73aad3
 manifestManager:
   enabled: true
 service:
@@ -95,8 +95,8 @@ vaultwarden:
     ## SMTP sender name, defaults to 'Bitwarden_RS'.
     # fromName: ""
     ## Enable SSL connection.
-    # ssl: true
-    ## SMTP port. Defaults to 25 without SSL, 587 with SSL.
+    # security: starttls
+    ## SMTP port. Defaults to 587 with STARTTLS, 465 with FORCE_TLS, and 25 without SSL.
     # port: 587
     ## SMTP Authentication Mechanisms. Comma-separated options: 'Plain', 'Login' and 'Xoauth2'. Defaults to 'Plain'.
     # authMechanism: Plain

charts/incubator/eco/Chart.yaml

@@ -21,7 +21,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/eco
   - https://github.com/ich777/docker-steamcmd-server/tree/eco
 type: application
-version: 3.1.0
+version: 3.1.1
 annotations:
   truecharts.org/catagories: |
     - games

charts/incubator/eco/values.yaml

@@ -14,7 +14,7 @@ service:
   main:
     ports:
       main:
-        protocol: http
+        protocol: tcp
         port: 3001
   game:
     enabled: true
@@ -57,16 +57,14 @@ workload:
         main:
           probes:
             liveness:
-              path: "/"
-              type: http
-              port: "{{ .Values.service.main.ports.main.port }}"
-            readiness:
-              path: "/"
-              type: http
-              port: "{{ .Values.service.main.ports.main.port }}"
-            startup:
+              enabled: true
+              type: tcp
+            readiness:
+              enabled: true
+              type: tcp
+            startup:
+              enabled: true
               type: tcp
-              port: "{{ .Values.service.main.ports.main.port }}"
           env:
             STEAMCMD_DIR: "{{ .Values.persistence.steamcmd.mountPath }}"
             SERVER_DIR: "{{ .Values.persistence.serverfiles.mountPath }}"
@@ -87,12 +85,9 @@ persistence:
     enabled: true
     type: configmap
     objectName: eco-network
-    targetSelector:
-      main:
-        main:
-          mountPath: /serverdata/serverfiles/Configs/Network.eco
-          subPath: Network.eco
-          readOnly: true
+    mountPath: /serverdata/serverfiles/Configs/Network.eco
+    subPath: Network.eco
+    readOnly: true
 
 portal:
   open:

charts/incubator/firezone/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "0.7.30"
+appVersion: "0.7.35"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 14.0.3
 deprecated: false
 description: WireGuard-based VPN server and egress firewall
 home: https://truecharts.org/charts/incubator/firezone
@@ -22,7 +22,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/firezone
   - https://github.com/firezone/firezone
 type: application
-version: 0.0.8
+version: 0.2.1
 annotations:
   truecharts.org/catagories: |
     - vpn

charts/incubator/firezone/questions.yaml

@@ -11,232 +11,229 @@ questions:
 # Include{podSpec}
 # Include{containerMain}
 
-                                - variable: env
-                                  label: Image Environment
-                                  schema:
-                                    additional_attrs: true
-                                    type: dict
-                                    attrs:
-                                      - variable: EXTERNAL_URL
-                                        label: External Url
-                                        description: Must be a valid and public FQDN for ACME SSL issuance to function. Include https://
-                                        schema:
-                                          type: string
-                                          required: true
-                                          default: ""
-                                      - variable: DEFAULT_ADMIN_EMAIL
-                                        label: Default Admin Email
-                                        description: Primary administrator email.
-                                        schema:
-                                          type: string
-                                          required: true
-                                          default: ""
-                                      - variable: DEFAULT_ADMIN_PASSWORD
-                                        label: Default Admin Password
-                                        description: Primary administrator password.
-                                        schema:
-                                          type: string
-                                          required: true
-                                          private: true
-                                          default: ""
-                                      - variable: RESET_ADMIN_ON_BOOT
-                                        label: Reset Admin On Boot
-                                        description: to create or reset the admin password every time FireZone starts.
-                                        schema:
-                                          type: boolean
-                                          default: false
-                                      - variable: TELEMETRY_ENABLED
-                                        label: Telemetry Enabled
-                                        description: Enable or disable the FireZone telemetry collection.
-                                        schema:
-                                          type: boolean
-                                          default: false
-                                      - variable: devices
-                                        label: Devices Settings
-                                        schema:
-                                          type: boolean
-                                          default: false
-                                          show_subquestions_if: true
-                                          subquestions:
-                                            - variable: ALLOW_UNPRIVILEGED_DEVICE_MANAGEMENT
-                                              label: Allow Unprivileged Devices
-                                              description: Enable or disable management of devices on unprivileged accounts.
-                                              schema:
-                                                type: boolean
-                                                default: true
-                                            - variable: ALLOW_UNPRIVILEGED_DEVICE_CONFIGURATION
-                                              label: Allow Unprivileged Device Configuration
-                                              description: Enable or disable configuration of device network settings for unprivileged users.
-                                              schema:
-                                                type: boolean
-                                                default: true
-                                            - variable: VPN_SESSION_DURATION
-                                              label: VPN Session Duration
-                                              description: Optionally require users to periodically authenticate to the FireZone, Interval for WireGuard persistent keepalive.
-                                              schema:
-                                                type: int
-                                                default: 0
-                                            - variable: DEFAULT_CLIENT_PERSISTENT_KEEPALIVE
-                                              label: Default Client Persistent KeepAlive
-                                              description: send a keepalive packet every 25 seconds. Otherwise, keep it disabled with a 0 default value.
-                                              schema:
-                                                type: int
-                                                default: 25
-                                            - variable: DEFAULT_CLIENT_MTU
-                                              label: Default Client MTU
-                                              description: WireGuard interface MTU for devices.
-                                              schema:
-                                                type: int
-                                                default: 1280
-                                            - variable: DEFAULT_CLIENT_ENDPOINT
-                                              label: Default Client EndPoint
-                                              description: IPv4, IPv6 address, or FQDN that devices will be configured to connect to. Defaults to this server's FQDN.
-                                              schema:
-                                                type: string
-                                                default: ""
-                                            - variable: DEFAULT_CLIENT_DNS
-                                              label: Default Client DNS
-                                              description: Comma-separated list of DNS servers to use for devices.
-                                              schema:
-                                                type: string
-                                                default: "1.1.1.1,1.0.0.1"
-                                            - variable: DEFAULT_CLIENT_ALLOWED_IPS
-                                              label: Default Client Allowed IPs
-                                              description: AllowedIPs determines which destination IPs get routed through FireZone.
-                                              schema:
-                                                type: string
-                                                default: "0.0.0.0/0,::/0"
-                                            - variable: MAX_DEVICES_PER_USER
-                                              label: Max Devices Per User
-                                              description: Changes how many devices a user can have at a time.
-                                              schema:
-                                                type: int
-                                                default: 10
-                                      - variable: authorization
-                                        label: Authorization Settings
-                                        schema:
-                                          type: boolean
-                                          default: false
-                                          show_subquestions_if: true
-                                          subquestions:
-                                            - variable: LOCAL_AUTH_ENABLED
-                                              label: Local Auth Enabled
-                                              description: Enable or disable the local authentication method for all users.
-                                              schema:
-                                                type: boolean
-                                                default: true
-                                            - variable: DISABLE_VPN_ON_OIDC_ERROR
-                                              label: Disable VPN On OIDC Error
-                                              description: Enable or disable auto disabling VPN connection on OIDC refresh error.
-                                              schema:
-                                                type: boolean
-                                                default: false
-                                      - variable: wireguard
-                                        label: Wireguard Settings
-                                        schema:
-                                          type: boolean
-                                          default: false
-                                          show_subquestions_if: true
-                                          subquestions:
-                                            - variable: WIREGUARD_IPV4_ENABLED
-                                              label: WireGuard IPV4 Enabled
-                                              description: Enable or disable IPv4 support for WireGuard.
-                                              schema:
-                                                type: boolean
-                                                default: true
-                                            - variable: WIREGUARD_IPV6_ENABLED
-                                              label: WireGuard IPV6 Enabled
-                                              description: Enable or disable IPv6 support for WireGuard.
-                                              schema:
-                                                type: boolean
-                                                default: false
-                                      - variable: outbound
-                                        label: OutBound Email Settings
-                                        schema:
-                                          type: boolean
-                                          default: false
-                                          show_subquestions_if: true
-                                          subquestions:
-                                            - variable: OUTBOUND_EMAIL_FROM
-                                              label: Outbound Email From
-                                              description: From address to use for sending outbound emails.
-                                              schema:
-                                                type: string
-                                                default: ""
-                                            - variable: OUTBOUND_EMAIL_ADAPTER
-                                              label: Outbound Email Adapter
-                                              description: Method to use for sending outbound email.
-                                              schema:
-                                                type: string
-                                                default: "Elixir.FzHttpWeb.Mailer.NoopAdapter"
-                                                enum:
-                                                  - value: "Elixir.FzHttpWeb.Mailer.AmazonSES"
-                                                    description: "AmazonSES"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.CustomerIO"
-                                                    description: CustomerIO"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Dyn"
-                                                    description: Dyn
-                                                  - value: "Elixir.FzHttpWeb.Mailer.ExAwsAmazonSES"
-                                                    description: ExAwsAmazonSES"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Gmail"
-                                                    description: Gmail"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.MailPace"
-                                                    description: MailPace"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Mailgun"
-                                                    description: Mailgun"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Mailjet"
-                                                    description: MailJet"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Mandrill"
-                                                    description: Mandrill"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Postmark"
-                                                    description: Postmark"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.ProtonBridge"
-                                                    description: ProtonBridge"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.SMTP"
-                                                    description: SMTP"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.SMTP2GO"
-                                                    description: SMTP2GO"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Sendgrid"
-                                                    description: SendGrid"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Sendinblue"
-                                                    description: "SendInBlue"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Sendmail"
-                                                    description: "Sendmail"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.SocketLabs"
-                                                    description: "SocketLabs"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.SparkPost"
-                                                    description: "SparkPost"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.NoopAdapter"
-                                                    description: "NoopAdapter"
-                                            - variable: OUTBOUND_EMAIL_ADAPTER_OPTS
-                                              label: Outbound Email Adapter OPTS
-                                              description: Adapter configuration, see https://github.com/swoosh/swoosh#adapters.
-                                              schema:
-                                                type: string
-                                                default: ""
-                                      - variable: connectivity
-                                        label: Connectivity Settings
-                                        schema:
-                                          type: boolean
-                                          default: false
-                                          show_subquestions_if: true
-                                          subquestions:
-                                            - variable: CONNECTIVITY_CHECKS_ENABLED
-                                              label: Connectivity Checks Enabled
-                                              description:     Enable / disable periodic checking for egress connectivity. Determines the instance's public IP to populate Endpoint fields.
-                                              schema:
-                                                type: boolean
-                                                default: true
-                                            - variable: CONNECTIVITY_CHECKS_INTERVAL
-                                              label: Connectivity Checks Interval
-                                              description: Periodicity in seconds to check for egress connectivity.
-                                              schema:
-                                                type: int
-                                                default: 43200
-
 # Include{containerBasic}
 # Include{containerAdvanced}
 
+  - variable: firezone
+    group: App Configuration
+    label: FireZone
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: web
+          label: Web Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: external_url
+                label: External Url
+                description: Must be a valid and public FQDN for ACME SSL issuance to function. Include https://
+                schema:
+                  type: string
+                  required: true
+                  default: ""
+              - variable: trusted_proxies
+                label: Trusted Proxies
+                description: List of trusted reverse proxies.
+                schema:
+                  type: list
+                  default: []
+                  items:
+                    - variable: proxy
+                      label: Proxy IP
+                      schema:
+                        type: string
+                        required: true
+                        default: ""
+              - variable: private_clients
+                label: Private Clients
+                description: List of trusted clients.
+                schema:
+                  type: list
+                  default: []
+                  items:
+                    - variable: client_ip
+                      label: Client IP
+                      schema:
+                        type: string
+                        required: true
+                        default: ""
+              - variable: secure_cookies
+                label: Secure Cookies
+                description: Enable or disable requiring secure cookies. Required for HTTPS.
+                schema:
+                  type: boolean
+                  default: true
+        - variable: admin
+          label: Admin Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: reset_admin_on_boot
+                label: Reset Admin On Boot
+                description: to create or reset the admin password every time Firezone starts. By default, the admin password is only set when Firezone is installed.
+                schema:
+                  type: boolean
+                  default: false
+              - variable: default_email
+                label: Default Email
+                description: Primary administrator email.
+                schema:
+                  type: string
+                  required: true
+                  default: ""
+              - variable: default_password
+                label: Default Password
+                description: Default password that will be used for creating or resetting the primary administrator account.
+                schema:
+                  type: string
+                  required: true
+                  private: true
+                  default: ""
+        - variable: devices
+          label: Devices Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: allow_unprivileged_device_management
+                label: Allow Unprivileged Device Management
+                description: Enable or disable management of devices on unprivileged accounts.
+                schema:
+                  type: boolean
+                  default: true
+              - variable: allow_unprivileged_device_config
+                label: Allow Unprivileged Device Configuration
+                description: Enable or disable configuration of device network settings for unprivileged users.
+                schema:
+                  type: boolean
+                  default: true
+              - variable: vpn_session_duration
+                label: VPN Session Duration
+                description: Optionally require users to periodically authenticate to the Firezone web UI in order to keep their VPN sessions active.
+                schema:
+                  type: int
+                  default: 0
+              - variable: client_persistent_keepalive
+                label: Client Persistent KeepAlive
+                description: If you experience NAT or firewall traversal problems, you can enable this to send a keepalive packet every 25 seconds, disabled by setting it to 0.
+                schema:
+                  type: int
+                  default: 0
+              - variable: default_client_mtu
+                label: Default Client MTU
+                description: WireGuard interface MTU for devices.
+                schema:
+                  type: int
+                  default: 1280
+              - variable: client_endpoint
+                label: Client Endpoint
+                description: IPv4, IPv6 address, or FQDN that devices will be configured to connect to.
+                schema:
+                  type: string
+                  default: ""
+              - variable: client_dns
+                label: Client DNS
+                description: List of DNS servers to use for devices.
+                schema:
+                  type: list
+                  empty: false
+                  required: true
+                  default:
+                    - 1.1.1.1
+                    - 1.0.0.1
+                  items:
+                    - variable: dns
+                      label: DNS
+                      schema:
+                        type: string
+                        required: true
+                        default: ""
+              - variable: client_allowed_ips
+                label: Client Allowed Ips
+                description: Configures the default AllowedIPs setting for devices.
+                schema:
+                  type: list
+                  empty: false
+                  default:
+                    - 0.0.0.0/0
+                  items:
+                    - variable: ip
+                      label: IP
+                      schema:
+                        type: string
+                        required: true
+                        default: ""
+              - variable: max_devices_per_user
+                label: Max Devices Per User
+                description: Changes how many devices a user can have at a time.
+                schema:
+                  type: int
+                  default: 10
+        - variable: authorization
+          label: Authorization Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: local_auth_enabled
+                label: Local Auth Enabled
+                description: Enable or disable the local authentication method for all users.
+                schema:
+                  type: boolean
+                  default: true
+              - variable: disable_vpn_on_oidc_error
+                label: Disable VPN On OIDC Error
+                description: Enable or disable auto disabling VPN connection on OIDC refresh error.
+                schema:
+                  type: boolean
+                  default: false
+        - variable: wireguard
+          label: Wireguard Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: ipv4_masquerade_enabled
+                label: IPv4 Masquerade Enabled
+                description: Enable or disable IPv4 masqeurading.
+                schema:
+                  type: boolean
+                  default: true
+        - variable: connectivity
+          label: Connectivity Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: checks_enabled
+                label: Checks Enabled
+                description: Enable / disable periodic checking for egress connectivity.
+                schema:
+                  type: boolean
+                  default: true
+              - variable: checks_interval
+                label: Checks Interval
+                description: Periodicity in seconds to check for egress connectivity.
+                schema:
+                  type: int
+                  default: 43200
+        - variable: other
+          label: Other Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: telemetry_enabled
+                label: Telemetry Enabled
+                description: Enable or disable the Firezone telemetry collection.
+                schema:
+                  type: boolean
+                  default: false
+
 # Include{containerConfig}
 # Include{podOptions}
 # Include{serviceRoot}

charts/incubator/firezone/templates/_secrets.tpl

@@ -1,12 +1,15 @@
 {{/* Define the secrets */}}
 {{- define "firezone.secrets" -}}
 {{- $secretName := (printf "%s-firezone-secrets" (include "tc.v1.common.lib.chart.names.fullname" $)) -}}
-{{- $keyGuardian := randAlphaNum 64 -}}
-{{- $keyDatabase := randAlphaNum 64 -}}
-{{- $keySecret := randAlphaNum 64 -}}
-{{- $keyLive := randAlphaNum 64 -}}
-{{- $keyCookieSigning := randAlphaNum 64 -}}
-{{- $keyCookieEncrypt := randAlphaNum 64 -}}
+
+# firezone requires all these keys to be in base 64 | b64enc format presented in the container, so this b64enc here is intentional
+# https://www.firezone.dev/docs/reference/env-vars#secrets-and-encryption
+{{- $keyGuardian := randAlphaNum 48 | b64enc -}}
+{{- $keyDatabase := randAlphaNum 32 | b64enc -}}
+{{- $keySecret := randAlphaNum 48 | b64enc -}}
+{{- $keyLive := randAlphaNum 24 | b64enc -}}
+{{- $keyCookieSigning := randAlphaNum 6 | b64enc -}}
+{{- $keyCookieEncrypt := randAlphaNum 6 | b64enc -}}
 {{- with (lookup "v1" "Secret" .Release.Namespace $secretName) -}}
   {{- $keyGuardian = index .data "GUARDIAN_SECRET_KEY" | b64dec -}}
   {{- $keyDatabase = index .data "DATABASE_ENCRYPTION_KEY" | b64dec -}}

charts/incubator/firezone/templates/common.yaml

@@ -4,7 +4,7 @@
 {{/* Render secrets for firezone */}}
 {{- $secrets := include "firezone.secrets" . | fromYaml -}}
 {{- if $secrets -}}
-  {{- $_ := set .Values.secret "secrets" $secrets -}}
+  {{- $_ := set .Values.secret "firezone-secrets" $secrets -}}
 {{- end -}}
 
 {{/* Render the templates */}}

charts/incubator/firezone/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/firezone
   pullPolicy: IfNotPresent
-  tag: v0.7.30@sha256:e22dc7a9be93a804bbe0e3d301c883625463a3649d856c8b41f80a2257214667
+  tag: v0.7.35@sha256:53c08baeb65dde8689ebb3bd1fc9fbb034970dfdc9bceb005c4ffa03fe2b3e93
 
 securityContext:
   container:
@@ -15,26 +15,66 @@ securityContext:
         - NET_ADMIN
         - SYS_MODULE
 
+service:
+  main:
+    ports:
+      main:
+        protocol: http
+        port: 13000
+  wireguard:
+    enabled: true
+    ports:
+      wireguard:
+        enabled: true
+        protocol: udp
+        port: 51820
+
+firezone:
+  web:
+    external_url: "https://example.com"
+    trusted_proxies: []
+    private_clients: []
+  admin:
+    reset_admin_on_boot: false
+    default_email: "admin@email.com"
+    default_password: "1234567890"
+  devices:
+    allow_unprivileged_device_management: true
+    allow_unprivileged_device_config: true
+    vpn_session_duration: 0
+    client_persistent_keepalive: 25
+    default_client_mtu: 1280
+    client_endpoint: ""
+    client_dns:
+      - 1.1.1.1
+      - 1.0.0.1
+    client_allowed_ips:
+      - 0.0.0.0/0
+    max_devices_per_user: 10
+  authorization:
+    local_auth_enabled: true
+    disable_vpn_on_oidc_error: false
+  wireguard:
+    ipv4_masquerade_enabled: true
+  connectivity:
+    checks_enabled: true
+    checks_interval: 43200
+  other:
+    telemetry_enabled: false
+
 workload:
   main:
     podSpec:
       containers:
         main:
-          probes:
-            liveness:
-              enabled: false
-            readiness:
-              enabled: false
-            startup:
-              enabled: false
           env:
             # web
             PHOENIX_HTTP_PORT: "{{ .Values.service.main.ports.main.port }}"
-            EXTERNAL_URL: "https://app.mydomain.com"
-            # PHOENIX_SECURE_COOKIES: true
+            EXTERNAL_URL: "{{ .Values.firezone.web.external_url }}"
+            PHOENIX_SECURE_COOKIES: "{{ .Values.firezone.web.secure_cookies }}"
             # PHOENIX_HTTP_PROTOCOL_OPTIONS: "{}"
-            # PHOENIX_EXTERNAL_TRUSTED_PROXIES: "[]"
-            # PHOENIX_PRIVATE_CLIENTS: "[]"
+            PHOENIX_EXTERNAL_TRUSTED_PROXIES: "{{ toJson .Values.firezone.web.trusted_proxies }}"
+            PHOENIX_PRIVATE_CLIENTS: "{{ toJson .Values.firezone.web.private_clients }}"
             # DB
             DATABASE_HOST:
               secretKeyRef:
@@ -51,49 +91,49 @@ workload:
             DATABASE_SSL_ENABLED: false
             # DATABASE_SSL_OPTS: "{}"
             # Admin
-            RESET_ADMIN_ON_BOOT: false
-            DEFAULT_ADMIN_EMAIL: "admin@email.com"
-            DEFAULT_ADMIN_PASSWORD: "1234567890"
+            RESET_ADMIN_ON_BOOT: "{{ .Values.firezone.admin.reset_admin_on_boot }}"
+            DEFAULT_ADMIN_EMAIL: "{{ .Values.firezone.admin.default_email }}"
+            DEFAULT_ADMIN_PASSWORD: "{{ .Values.firezone.admin.default_password }}"
             # Secrets and Encryption
             GUARDIAN_SECRET_KEY:
               secretKeyRef:
-                name: secrets
+                name: firezone-secrets
                 key: GUARDIAN_SECRET_KEY
             DATABASE_ENCRYPTION_KEY:
               secretKeyRef:
-                name: secrets
+                name: firezone-secrets
                 key: DATABASE_ENCRYPTION_KEY
             SECRET_KEY_BASE:
               secretKeyRef:
-                name: secrets
+                name: firezone-secrets
                 key: SECRET_KEY_BASE
             LIVE_VIEW_SIGNING_SALT:
               secretKeyRef:
-                name: secrets
+                name: firezone-secrets
                 key: LIVE_VIEW_SIGNING_SALT
             COOKIE_SIGNING_SALT:
               secretKeyRef:
-                name: secrets
+                name: firezone-secrets
                 key: COOKIE_SIGNING_SALT
             COOKIE_ENCRYPTION_SALT:
               secretKeyRef:
-                name: secrets
+                name: firezone-secrets
                 key: COOKIE_ENCRYPTION_SALT
             # Devices
-            ALLOW_UNPRIVILEGED_DEVICE_MANAGEMENT: true
-            ALLOW_UNPRIVILEGED_DEVICE_CONFIGURATION: true
-            VPN_SESSION_DURATION: 0
-            DEFAULT_CLIENT_PERSISTENT_KEEPALIVE: 25
-            DEFAULT_CLIENT_MTU: 1280
-            # DEFAULT_CLIENT_ENDPOINT: ""
-            DEFAULT_CLIENT_DNS: "1.1.1.1,1.0.0.1"
-            DEFAULT_CLIENT_ALLOWED_IPS: "0.0.0.0/0, ::/0"
+            ALLOW_UNPRIVILEGED_DEVICE_MANAGEMENT: "{{ .Values.firezone.devices.allow_unprivileged_device_management }}"
+            ALLOW_UNPRIVILEGED_DEVICE_CONFIGURATION: "{{ .Values.firezone.devices.allow_unprivileged_device_config }}"
+            VPN_SESSION_DURATION: "{{ .Values.firezone.devices.vpn_session_duration }}"
+            DEFAULT_CLIENT_PERSISTENT_KEEPALIVE: "{{ .Values.firezone.devices.client_persistent_keepalive }}"
+            DEFAULT_CLIENT_MTU: "{{ .Values.firezone.devices.default_client_mtu }}"
+            DEFAULT_CLIENT_ENDPOINT: "{{ .Values.firezone.devices.client_endpoint }}"
+            DEFAULT_CLIENT_DNS: '{{ join "," .Values.firezone.devices.client_dns }}'
+            DEFAULT_CLIENT_ALLOWED_IPS: '{{ join "," .Values.firezone.devices.client_allowed_ips }}'
             # Limits
-            MAX_DEVICES_PER_USER: 10
+            MAX_DEVICES_PER_USER: "{{ .Values.firezone.devices.max_devices_per_user }}"
             # Authorization
-            LOCAL_AUTH_ENABLED: true
-            DISABLE_VPN_ON_OIDC_ERROR: false
-            SAML_ENTITY_ID: "urn:firezone.dev:firezone-app"
+            LOCAL_AUTH_ENABLED: "{{ .Values.firezone.authorization.local_auth_enabled }}"
+            DISABLE_VPN_ON_OIDC_ERROR: "{{ .Values.firezone.authorization.disable_vpn_on_oidc_error }}"
+            # SAML_ENTITY_ID: "urn:firezone.dev:firezone-app"
             # SAML_KEYFILE_PATH: "/var/firezone/saml.key"
             # SAML_CERTFILE_PATH: "/var/firezone/saml.crt"
             # OPENID_CONNECT_PROVIDERS: "[]"
@@ -101,30 +141,18 @@ workload:
             # WireGuard
             WIREGUARD_PORT: "{{ .Values.service.wireguard.ports.wireguard.port }}"
             WIREGUARD_IPV4_ENABLED: true
+            WIREGUARD_IPV4_MASQUERADE: "{{ .Values.firezone.wireguard.ipv4_masquerade_enabled }}"
             WIREGUARD_IPV6_ENABLED: false
+            WIREGUARD_IPV6_MASQUERADE: false
             # Outbound Emails
-            OUTBOUND_EMAIL_FROM: ""
-            OUTBOUND_EMAIL_ADAPTER: "Elixir.FzHttpWeb.Mailer.NoopAdapter"
+            # OUTBOUND_EMAIL_FROM: ""
+            # OUTBOUND_EMAIL_ADAPTER: "Elixir.FzHttpWeb.Mailer.NoopAdapter"
             # OUTBOUND_EMAIL_ADAPTER_OPTS: "{}"
             # Connectivity Checks
-            CONNECTIVITY_CHECKS_ENABLED: true
-            CONNECTIVITY_CHECKS_INTERVAL: 43200
+            CONNECTIVITY_CHECKS_ENABLED: "{{ .Values.firezone.connectivity.checks_enabled }}"
+            CONNECTIVITY_CHECKS_INTERVAL: "{{ .Values.firezone.connectivity.checks_interval }}"
             # Telemetry
-            TELEMETRY_ENABLED: false
-
-service:
-  main:
-    ports:
-      main:
-        protocol: http
-        port: 13000
-  wireguard:
-    enabled: true
-    ports:
-      wireguard:
-        enabled: true
-        protocol: udp
-        port: 51820
+            TELEMETRY_ENABLED: "{{ .Values.firezone.other.telemetry_enabled }}"
 
 persistence:
   config:

charts/incubator/icloudpd/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "latest"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 11.1.2
+    version: 14.0.1
 deprecated: false
 description: iCloudPD, syncs photos from iDevices to a single directory on TrueNAS.
 home: https://truecharts.org/charts/incubator/icloudpd
@@ -23,7 +23,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/icloudpd
   - https://github.com/Womabre/-TrueNAS-docker-templates
 type: application
-version: 2.0.16
+version: 3.0.0
 annotations:
   truecharts.org/SCALE-support: "true"
   truecharts.org/catagories: |

charts/incubator/icloudpd/questions.yaml

@@ -212,6 +212,7 @@ questions:
               - value: Bark
                 description: Bark
 # Include{containerConfig}
+# Include{podOptions}
 # Include{serviceExpertRoot}
 # Include{serviceExpert}
 # Include{serviceList}

charts/incubator/icloudpd/templates/common.yaml

@@ -1,2 +1 @@
-{{/* Render the templates */}}
-{{ include "tc.common.loader.all" . }}
+{{ include "tc.v1.common.loader.all" . }}

charts/incubator/icloudpd/values.yaml

@@ -3,13 +3,12 @@ image:
   repository: tccr.io/truecharts/icloudpd
   tag: latest@sha256:ab4b90c22a3bf93d6045cd26733447b143a66d5c9100a91c9bbea27f0443a838
 
-podSecurityContext:
-  runAsGroup: 0
-  runAsUser: 0
-
 securityContext:
-  readOnlyRootFilesystem: false
-  runAsNonRoot: false
+  container:
+    readOnlyRootFilesystem: false
+    runAsNonRoot: false
+    runAsGroup: 0
+    runAsUser: 0
 
 icloudpd:
   apple_id: your@appleid.com
@@ -35,7 +34,7 @@ icloudpd:
   delete_accompanying: false
   delete_empty_directories: false
   command_line_options: ""
-  notification_title: iCloud PD
+  notification_title: "iCloud PD"
   # https://github.com/boredazfcuk/docker-icloudpd/blob/master/NOTIFICATIONS.md
   notification_type: ""
   # prowl_api_key: ""
@@ -70,47 +69,51 @@ icloudpd:
   # bark_device_key: ""
   # bark_server: ""
 
-env:
-  user: apps
-  group: apps
-  user_id: "{{ .Values.security.PUID }}"
-  group_id: "{{ .Values.podSecurityContext.fsGroup }}"
-  download_path: /home/{{ .Values.env.user }}/iCloud
-  jpeg_path: /home/{{ .Values.env.user }}/iCloud
-  # User Defined
-  apple_id: "{{ .Values.icloudpd.apple_id }}"
-  synchronisation_interval: "{{ .Values.icloudpd.synchronisation_interval }}"
-  synchronisation_delay: "{{ .Values.icloudpd.synchronisation_delay }}"
-  notification_days: "{{ .Values.icloudpd.notification_days }}"
-  authentication_type: "{{ .Values.icloudpd.authentication_type }}"
-  skip_check: '{{ ternary "True" "False" .Values.icloudpd.skip_check }}'
-  download_notifications: '{{ ternary "True" "False" .Values.icloudpd.download_notifications }}'
-  delete_notifications: '{{ ternary "True" "False" .Values.icloudpd.delete_notifications }}'
-  delete_accompanying: '{{ ternary "True" "False" .Values.icloudpd.delete_accompanying }}'
-  delete_empty_directories: '{{ ternary "True" "False" .Values.icloudpd.delete_empty_directories }}'
-  set_exif_datetime: '{{ ternary "True" "False" .Values.icloudpd.set_exif_datetime }}'
-  auto_delete: '{{ ternary "True" "False" .Values.icloudpd.auto_delete }}'
-  photo_size: "{{ .Values.icloudpd.photo_size }}"
-  skip_live_photos: '{{ ternary "True" "False" .Values.icloudpd.skip_live_photos }}'
-  live_photo_size: "{{ .Values.icloudpd.live_photo_size }}"
-  skip_videos: '{{ ternary "True" "False" .Values.icloudpd.skip_videos }}'
-  recent_only: '{{ ternary "" .Values.icloudpd.recent_only (eq 0 (int .Values.icloudpd.recent_only)) }}'
-  until_found: '{{ ternary "" .Values.icloudpd.until_found (eq 0 (int .Values.icloudpd.until_found)) }}'
-  photo_album: "{{ .Values.icloudpd.photo_album }}"
-  convert_heic_to_jpeg: '{{ ternary "True" "False" .Values.icloudpd.convert_heic_to_jpeg }}'
-  jpeg_quality: "{{ .Values.icloudpd.jpeg_quality }}"
-  icloud_china: '{{ ternary "True" "" .Values.icloudpd.icloud_china }}'
-  command_line_options: "{{ .Values.icloudpd.command_line_options }}"
-  notification_title: "{{ .Values.icloudpd.notification_title }}"
-  notification_type: "{{ .Values.icloudpd.notification_type }}"
-
-probes:
-  liveness:
-    enabled: false
-  readiness:
-    enabled: false
-  startup:
-    enabled: false
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          env:
+            user: apps
+            group: apps
+            user_id: "{{ .Values.securityContext.container.runAsUser }}"
+            group_id: "{{ .Values.securityContext.container.runAsGroup }}"
+            download_path: /home/{{ .Values.workload.main.podSpec.containers.main.env.user }}/iCloud
+            jpeg_path: /home/{{ .Values.workload.main.podSpec.containers.main.env.user }}/iCloud
+            # User Defined
+            apple_id: "{{ .Values.icloudpd.apple_id }}"
+            synchronisation_interval: "{{ .Values.icloudpd.synchronisation_interval }}"
+            synchronisation_delay: "{{ .Values.icloudpd.synchronisation_delay }}"
+            notification_days: "{{ .Values.icloudpd.notification_days }}"
+            authentication_type: "{{ .Values.icloudpd.authentication_type }}"
+            skip_check: '{{ ternary "True" "False" .Values.icloudpd.skip_check }}'
+            download_notifications: '{{ ternary "True" "False" .Values.icloudpd.download_notifications }}'
+            delete_notifications: '{{ ternary "True" "False" .Values.icloudpd.delete_notifications }}'
+            delete_accompanying: '{{ ternary "True" "False" .Values.icloudpd.delete_accompanying }}'
+            delete_empty_directories: '{{ ternary "True" "False" .Values.icloudpd.delete_empty_directories }}'
+            set_exif_datetime: '{{ ternary "True" "False" .Values.icloudpd.set_exif_datetime }}'
+            auto_delete: '{{ ternary "True" "False" .Values.icloudpd.auto_delete }}'
+            photo_size: "{{ .Values.icloudpd.photo_size }}"
+            skip_live_photos: '{{ ternary "True" "False" .Values.icloudpd.skip_live_photos }}'
+            live_photo_size: "{{ .Values.icloudpd.live_photo_size }}"
+            skip_videos: '{{ ternary "True" "False" .Values.icloudpd.skip_videos }}'
+            recent_only: '{{ ternary "" .Values.icloudpd.recent_only (eq 0 (int .Values.icloudpd.recent_only)) }}'
+            until_found: '{{ ternary "" .Values.icloudpd.until_found (eq 0 (int .Values.icloudpd.until_found)) }}'
+            photo_album: "{{ .Values.icloudpd.photo_album }}"
+            convert_heic_to_jpeg: '{{ ternary "True" "False" .Values.icloudpd.convert_heic_to_jpeg }}'
+            jpeg_quality: "{{ .Values.icloudpd.jpeg_quality }}"
+            icloud_china: '{{ ternary "True" "" .Values.icloudpd.icloud_china }}'
+            command_line_options: "{{ .Values.icloudpd.command_line_options }}"
+            notification_title: "{{ .Values.icloudpd.notification_title }}"
+            notification_type: "{{ .Values.icloudpd.notification_type }}"
+          probes:
+            liveness:
+              enabled: false
+            readiness:
+              enabled: false
+            startup:
+              enabled: false
 
 service:
   main:
@@ -128,4 +131,5 @@ persistence:
     mountPath: /home/apps/iCloud
 
 portal:
-  enabled: false
+  open:
+    enabled: false

charts/incubator/jenkins/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "2.392.0"
+appVersion: "2.422.0"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 11.1.2
+    version: 14.0.1
 deprecated: false
 description: The gold standard in devops tools for running CI/CD pipelines.
 home: https://truecharts.org/charts/incubator/jenkins
@@ -19,8 +19,9 @@ maintainers:
 name: jenkins
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/jenkins
+  - https://github.com/jenkinsci/docker
 type: application
-version: 3.0.15
+version: 4.0.0
 annotations:
   truecharts.org/catagories: |
     - productivity

charts/incubator/jenkins/questions.yaml

@@ -146,19 +146,18 @@ questions:
 # Include{ingressAdvanced}
 # Include{ingressList}
 # Include{securityContextRoot}
-
-        - variable: runAsUser
-          label: runAsUser
-          description: The UserID of the user running the application
-          schema:
-            type: int
-            default: 1000
-        - variable: runAsGroup
-          label: runAsGroup
-          description: The groupID this App of the user running the application
-          schema:
-            type: int
-            default: 1000
+              - variable: runAsUser
+                label: "runAsUser"
+                description: "The UserID of the user running the application"
+                schema:
+                  type: int
+                  default: 1000
+              - variable: runAsGroup
+                label: "runAsGroup"
+                description: "The groupID of the user running the application"
+                schema:
+                  type: int
+                  default: 1000
 # Include{securityContextContainer}
 # Include{securityContextAdvanced}
 # Include{securityContextPod}
@@ -168,7 +167,6 @@ questions:
           schema:
             type: int
             default: 1000
-
 # Include{resources}
 # Include{advanced}
 # Include{addons}

charts/incubator/jenkins/templates/_secret.tpl

@@ -1,15 +1,7 @@
 {{/* Define the secret */}}
 {{- define "jenkins.secret" -}}
-
-{{- $secretName := printf "%s-secret" (include "tc.common.names.fullname" .) -}}
----
-apiVersion: v1
-kind: Secret
-metadata:
-  name: {{ $secretName }}
-  labels:
-    {{- include "tc.common.labels" . | nindent 4 }}
-stringData:
+enabled: true
+data:
   JAVA_OPTS: {{ join " " (include "java.opts" . | fromYaml).opts | quote }}
   JENKINS_OPTS: {{ join " " (include "jenkins.opts" . | fromYaml).opts | quote }}
   JENKINS_JAVA_OPTS: {{ join " " (include "jenkins.java.opts" . | fromYaml).opts | quote }}

charts/incubator/jenkins/templates/common.yaml

@@ -1,8 +1,11 @@
 {{/* Make sure all variables are set properly */}}
-{{- include "tc.common.loader.init" . }}
+{{- include "tc.v1.common.loader.init" . }}
 
-{{/* Render secret */}}
-{{- include "jenkins.secret" . }}
+{{/* Render secrets for jenkins */}}
+{{- $secret := include "jenkins.secret" . | fromYaml -}}
+{{- if $secret -}}
+  {{- $_ := set .Values.secret "jenkins-secret" $secret -}}
+{{- end -}}
 
 {{/* Render the templates */}}
-{{ include "tc.common.loader.apply" . }}
+{{ include "tc.v1.common.loader.apply" . }}

charts/incubator/jenkins/values.yaml

@@ -1,12 +1,14 @@
 image:
   repository: tccr.io/truecharts/jenkins
   pullPolicy: IfNotPresent
-  tag: 2.392.0@sha256:362ac8a36b4a1d603a0bce6e5c35097b33d6aae0544ba1cef8f300d2788dd09b
+  tag: 2.422.0@sha256:c046d180b498bbeab33fbcd0900ef14bcd4272fc85350f5cbdfa19b5ac45e283
 
-podSecurityContext:
-  runAsGroup: 1000
-  runAsUser: 1000
-  fsGroup: 1000
+security:
+  container:
+    runAsGroup: 1000
+    runAsUser: 1000
+  pod:
+    fsGroup: 1000
 
 # securityContext:
 #   readOnlyRootFilesystem: false
@@ -18,26 +20,29 @@ jenkins:
   plugins_force_upgrade: false
   upgrade_if_no_marker: false
 
-envFrom:
-  - secretRef:
-      name: '{{ include "tc.common.names.fullname" . }}-secret'
-
-probes:
-  liveness:
-    type: HTTP
-    path: /login
-  readiness:
-    type: HTTP
-    path: /login
-  startup:
-    type: HTTP
-    path: /login
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          probes:
+            liveness:
+              type: http
+              path: /login
+            readiness:
+              type: http
+              path: /login
+            startup:
+              type: tcp
+          envFrom:
+            - secretRef:
+                name: 'jenkins-secret'
 
 service:
   main:
     ports:
       main:
-        protocol: HTTP
+        protocol: http
         port: 10280
   agent:
     enabled: true
@@ -52,4 +57,5 @@ persistence:
     mountPath: /var/jenkins_home
 
 portal:
-  enabled: true
+  open:
+    enabled: true

charts/incubator/local-ai/ci/base-values.yaml

@@ -1 +0,0 @@
-imageSelector: image

charts/incubator/local-ai/ci/cublas-cuda11-ffmpeg-values.yaml

@@ -1 +0,0 @@
-imageSelector: cublasCuda11FfmpegImage

charts/incubator/local-ai/ci/cublas-cuda11-values.yaml

@@ -1 +0,0 @@
-imageSelector: cublasCuda11Image

charts/incubator/local-ai/ci/cublas-cuda12-ffmpeg-values.yaml

@@ -1 +0,0 @@
-imageSelector: cublasCuda12FfmpegImage

charts/incubator/local-ai/ci/cublas-cuda12-values.yaml

@@ -1 +0,0 @@
-imageSelector: cublasCuda12Image

charts/incubator/local-ai/ci/ffmpeg-values.yaml

@@ -1 +0,0 @@
-imageSelector: ffmpegImage

charts/incubator/odoo/Chart.yaml

@@ -26,7 +26,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/odoo
   - https://github.com/odoo/docker
 type: application
-version: 14.0.0
+version: 14.0.1
 annotations:
   truecharts.org/catagories: |
     - media

charts/incubator/odoo/questions.yaml

@@ -34,18 +34,6 @@ questions:
                   required: true
                   private: true
                   default: ""
-        - variable: db
-          label: DB Configuration
-          schema:
-            additional_attrs: true
-            type: dict
-            attrs:
-              - variable: filter
-                label: DB Filter
-                schema:
-                  type: string
-                  required: true
-                  default: "^mycompany.*$"
         - variable: smtp
           label: SMTP Configuration
           schema:
@@ -108,9 +96,9 @@ questions:
                               type: int
                               default: 8069
                               required: true
-        - variable: odoo
-          label: "Odoo Service"
-          description: "Odoo Services"
+        - variable: xmlrpcs
+          label: "XMLR PCS Service"
+          description: "XMLR PCS Service"
           schema:
             additional_attrs: true
             type: dict
@@ -130,6 +118,15 @@ questions:
                               type: int
                               default: 8071
                               required: true
+        - variable: longpolling
+          label: "Long Polling Service"
+          description: "Long Polling Service"
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{serviceSelectorLoadBalancer}
+# Include{serviceSelectorExtras}
                     - variable: longpolling
                       label: "Long Polling Service Port Configuration"
                       schema:
@@ -183,13 +180,13 @@ questions:
                 description: "The UserID of the user running the application"
                 schema:
                   type: int
-                  default: 0
+                  default: 568
               - variable: runAsGroup
                 label: "runAsGroup"
                 description: "The groupID this App of the user running the application"
                 schema:
                   type: int
-                  default: 0
+                  default: 568
 # Include{securityContextContainer}
 # Include{securityContextAdvanced}
 # Include{securityContextPod}

charts/incubator/odoo/templates/_configmap.tpl

@@ -3,56 +3,50 @@
 {{- $fullname := (include "tc.v1.common.lib.chart.names.fullname" $) -}}
 
 {{- $admin := .Values.odoo.admin -}}
-{{- $db := .Values.odoo.db -}}
 {{- $smtp := .Values.odoo.smtp -}}
 
 {{- $pgdb := .Values.cnpg.main.database -}}
 {{- $pguser := .Values.cnpg.main.user -}}
 {{- $pgpassword := .Values.cnpg.main.creds.password | trimAll "\"" -}}
-{{- $pghost := .Values.cnpg.main.creds.host | trimAll "\"" -}}
+{{- $pghost := .Values.cnpg.main.creds.host -}}
 
 odoo-config:
   enabled: true
   data:
     odoo.conf: |
-      [options]
-      addons_path = {{ .Values.persistence.addons.mountPath }}
-      data_dir = {{ .Values.persistence.odoo.mountPath }}
-      admin_passwd = {{ $admin.passwd }}
-      longpolling_port = {{ .Values.service.odoo.ports.longpolling.port }}
-      xmlrpc = True
-      xmlrpc_interface =
-      xmlrpc_port = {{ .Values.service.main.ports.main.port }}
-      xmlrpcs = True
-      xmlrpcs_interface =
-      xmlrpcs_port = {{ .Values.service.odoo.ports.xmlrpcs.port }}
-      db_host = {{ $pghost }}
-      db_port = 5432
-      db_user = {{ $pguser }}
-      db_password = {{ $pgpassword }}
-      dbfilter = {{ $db.dbfilter }}
-      csv_internal_sep = ,
-      db_maxconn = 64
-      debug_mode = False
-      limit_memory_hard = 2684354560
-      limit_memory_soft = 2147483648
-      limit_request = 8192
-      limit_time_cpu = 60
-      limit_time_real = 120
-      list_db = True
-      log_db = False
-      log_handler = [':INFO']
-      log_level = info
-      logfile = None
-      max_cron_threads = 2
-      osv_memory_age_limit = 1.0
-      osv_memory_count_limit = False
-      smtp_server = {{ $smtp.server }}
-      smtp_port = {{ $smtp.port }}
-      smtp_user = {{ $smtp.user }}
-      smtp_password = {{ $smtp.password }}
-      smtp_ssl = {{ $smtp.ssl }}
-      email_from = {{ $smtp.from }}
-      workers = 0
+     [options]
+       addons_path = {{ .Values.persistence.addons.mountPath }}
+       data_dir = {{ .Values.persistence.odoo.mountPath }}
+       admin_passwd = {{ $admin.passwd }}
+       longpolling_port = {{ .Values.service.longpolling.ports.longpolling.port }}
+       xmlrpc = True
+       xmlrpc_interface =
+       xmlrpc_port = {{ .Values.service.main.ports.main.port }}
+       xmlrpcs = True
+       xmlrpcs_interface =
+       xmlrpcs_port = {{ .Values.service.xmlrpcs.ports.xmlrpcs.port }}
+       csv_internal_sep = ,
+       db_maxconn = 64
+       debug_mode = False
+       limit_memory_hard = 2684354560
+       limit_memory_soft = 2147483648
+       limit_request = 8192
+       limit_time_cpu = 60
+       limit_time_real = 120
+       list_db = True
+       log_db = False
+       log_handler = [':INFO']
+       log_level = info
+       logfile = None
+       max_cron_threads = 2
+       osv_memory_age_limit = 1.0
+       osv_memory_count_limit = False
+       smtp_server = {{ $smtp.server }}
+       smtp_port = {{ $smtp.port }}
+       smtp_user = {{ $smtp.user }}
+       smtp_password = {{ $smtp.password }}
+       smtp_ssl = {{ $smtp.ssl }}
+       email_from = {{ $smtp.from }}
+       workers = 0
 
 {{- end -}}

charts/incubator/odoo/values.yaml

@@ -1,35 +1,29 @@
 image:
   repository: tccr.io/truecharts/odoo
   pullPolicy: IfNotPresent
-  tag: v16.0.0@sha256:c1936984eeb8f504f5ebe74cf972319d6cd619ecbdf09249179ecdee2feeecf3
-
-# test for root
-securityContext:
-  container:
-    runAsNonRoot: false
-    readOnlyRootFilesystem: false
-    runAsUser: 0
-    runAsGroup: 0
+  tag: v16.0.0@sha256:9a0e0d913dc6c4ed5904ae233dc2de7fa1a00f10eb5a66f21e1f695c62933a1d
 
 service:
   main:
     ports:
       main:
         port: 8069
-  odoo:
+  xmlrpcs:
     enabled: true
     ports:
       xmlrpcs:
         enabled: true
         port: 8071
+  longpolling:
+    enabled: true
+    ports:
       longpolling:
         enabled: true
         port: 8072
+
 odoo:
   admin:
     passwd: admin
-  db:
-    filter: ^mycompany.*$
   smtp:
     server: ""
     port: 587
@@ -38,6 +32,23 @@ odoo:
     ssl: "False"
     from: ""
 
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          env:
+            USER: "{{ .Values.cnpg.main.user }}"
+            PORT: 5432
+            PASSWORD:
+              secretKeyRef:
+                name: cnpg-main-user
+                key: password
+            HOST:
+              secretKeyRef:
+                name: cnpg-main-urls
+                key: host
+
 persistence:
   odoo:
     enabled: true
@@ -54,7 +65,6 @@ persistence:
         main:
           mountPath: /etc/odoo/odoo.conf
           subPath: odoo.conf
-          readOnly: true
 
 # Enabled postgres
 cnpg:

charts/incubator/postgresql/Chart.yaml

@@ -6,7 +6,7 @@ dependencies:
     version: 14.0.1
 deprecated: false
 description: PostgresSQL
-home: https://truecharts.org/charts/stable/postgresql
+home: https://truecharts.org/charts/incubator/postgresql
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/postgresql.png
 keywords:
   - postgres
@@ -20,7 +20,7 @@ maintainers:
     url: https://truecharts.org
 name: postgresql
 sources:
-  - https://github.com/truecharts/charts/tree/master/charts/stable/postgresql
+  - https://github.com/truecharts/charts/tree/master/charts/incubator/postgresql
   - https://www.postgresql.org/
 type: application
 version: 14.0.0

charts/incubator/postgresql/templates/NOTES.txt

@@ -0,0 +1 @@
+{{- include "tc.v1.common.lib.chart.notes" $ -}}

charts/incubator/qbitrr/Chart.yaml

@@ -1,5 +1,5 @@
 apiVersion: v2
-appVersion: "3.7.3"
+appVersion: "3.7.4"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
@@ -22,7 +22,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/qbitrr
   - https://github.com/Feramance/Qbitrr
 type: application
-version: 0.0.2
+version: 0.0.5
 annotations:
   truecharts.org/SCALE-support: "true"
   truecharts.org/catagories: |

charts/incubator/qbitrr/docs/installation-notes.md

@@ -0,0 +1,36 @@
+# Installation Notes
+This document will provide information on the successful setup of qBitrr.
+
+## qBitrr config.toml
+Upon first run qBbitrr will download a config.toml file from the upstream developer. This file is just a template and will need to be modified before qBitrr begins operating. It is recommended that when configuring initial install to also enable the codeserver addon so that you can modify the config.toml file.
+
+## qBitrr Application Configurations
+Most of the configurations can remain the default. You will need to map your qBittorrent root download directory to App Completed Download Storage as shown below.
+
+![qbit-downloads](./img/qbit-downloads.png)
+
+You should also enable the codeserver addon as previously discussed.
+
+![qbitrr-codeserver](./img/qbitrr-codeserver.png)
+
+## config.toml
+Once qBitrr has started access the config.toml file using the previously configured `http://<ip address>:<port>` that was setup for the codeserver addon.
+
+### Settings
+This section has basic qBitrr settings. You may modify any as you choose but the `CompletedDownloadFolder` option must be set to `"/completed_downloads"` as that is what the App Completed Download Storage is mapped to.
+
+:::warning Completed Download Folder
+
+If `CompletedDownloadFolder` option is not set to  `"/completed_downloads"` qBitrr will not be able to find any downloads.
+
+:::
+
+### qBit
+This section has qBittorrent specific settings. Ensure that `Host`, `Port`, `UserName`, and `Password` all match your qBittorrent installation. The host and port can be located using the Heavyscript `heavyscript dns -a` command.
+
+### Sonarr/Radarr
+The following sections have Sonarr/Radarr specific settings. The template configuration file populates two instances for both Sonarr and Radarr by default. These can be renamed/deleted as needed to match your setup. Ensure that `URI`, `API` and `Category` are set correctly so that qBitrr can communicate with your Sonarr and Radarr installations. The `Category` is what you have set in Sonarr/Radarr to use in qBittorrent (ie. movies, tv).
+
+### Remaining Sonarr/Radarr Configurations
+All of the following sections can be configured based on personal preference. If you chose to rename or delete any of the predefined templates ensure you follow the same schema for the remaining sections. It is recommended that `SearchMissing` be set to false. qBitrr will not have access to your Sonarr/Radarr database file unless they are configured in an unsupported manner. This will disable that functionality.
+

charts/incubator/qbitrr/questions.yaml

@@ -41,13 +41,13 @@ questions:
                 description: "The UserID of the user running the application"
                 schema:
                   type: int
-                  default: 568
+                  default: 0
               - variable: runAsGroup
                 label: "runAsGroup"
                 description: "The groupID this App of the user running the application"
                 schema:
                   type: int
-                  default: 568
+                  default: 0
 # Include{securityContextContainer}
 # Include{securityContextAdvanced}
 # Include{securityContextPod}

charts/incubator/qbitrr/values.yaml

@@ -1,10 +1,13 @@
 image:
   repository: tccr.io/truecharts/qbitrr
   pullPolicy: IfNotPresent
-  tag: v3.7.3@sha256:3cf9a566ce5d027a8030bf2374a2e421ed498782397a1354fe326cd8e09ee003
+  tag: v3.7.4@sha256:46ce7db5c51415f0848963c8fa4b6afacf7ac9690ecb986449948bb455d10ecf
 securityContext:
   container:
     readOnlyRootFilesystem: false
+    runAsNonRoot: false
+    runAsUser: 0
+    runAsGroup: 0
 
 service:
   main:
@@ -16,26 +19,26 @@ service:
 workload:
   main:
     podSpec:
+      initContainers:
+        1-create-config-file:
+          type: install
+          enabled: true
+          imageSelector: "image"
+          command:
+            - /bin/sh
+            - -c
+          args:
+            - |
+              conf="/config/config.toml"
+              example="https://raw.githubusercontent.com/Feramance/qBitrr/master/config.example.toml"
+              if [ -f "$conf" ]; then
+                echo "$conf exists. Skipping..."
+              else
+                echo "$conf does not exist... Downloading the example from upstream..."
+                wget "$example" -O $conf || echo "Failed to download"
+              fi
       containers:
         main:
-          lifecycle:
-            postStart:
-              type: exec
-              command:
-                - /bin/sh
-                - -c
-                - |
-                  echo "Creating config.toml file..."
-                  if [ -f /config/config.toml ]; then
-                    echo "Config file exists! Skipping..."
-                  else
-                    if mv -n /config/.config/config.rename_me.toml /config/config.toml; then
-                      echo "Config file copied successfully!"
-                    else
-                      echo "Copying config file failed."
-                      exit 1
-                    fi
-                  fi
           probes:
             liveness:
               enabled: false
@@ -48,6 +51,10 @@ persistence:
   config:
     enabled: true
     mountPath: /config
+    targetSelector:
+      main:
+        main: {}
+        1-create-config-file: {}
   downloads:
     enabled: true
     mountPath: /completed_downloads
@@ -55,4 +62,3 @@ persistence:
 portal:
   open:
     enabled: false
-

charts/incubator/sonsoftheforest/Chart.yaml

@@ -0,0 +1,28 @@
+apiVersion: v2
+appVersion: "latest"
+dependencies:
+  - name: common
+    repository: https://library-charts.truecharts.org
+    version: 14.0.1
+deprecated: false
+description: A custom SteamCMD chart that runs Sons Of The Forest Server.
+home: https://truecharts.org/charts/incubator/sonsoftheforest
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/sonsoftheforest.png
+keywords:
+  - sonsoftheforest
+  - GameServers
+kubeVersion: ">=1.16.0-0"
+maintainers:
+  - email: info@truecharts.org
+    name: TrueCharts
+    url: https://truecharts.org
+name: sonsoftheforest
+sources:
+  - https://github.com/truecharts/charts/tree/master/charts/incubator/sonsoftheforest
+  - https://github.com/ich777/docker-steamcmd-server/tree/sonsoftheforest
+type: application
+version: 0.0.1
+annotations:
+  truecharts.org/catagories: |
+    - GameServers
+  truecharts.org/SCALE-support: "true"

charts/incubator/sonsoftheforest/README.md

@@ -0,0 +1,27 @@
+# README
+
+## General Info
+
+TrueCharts can be installed as both *normal* Helm Charts or as Apps on TrueNAS SCALE.
+However only installations using the TrueNAS SCALE Apps system are supported.
+
+For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/incubator/)
+
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/charts/issues/new/choose)**
+
+
+## Support
+
+- Please check our [quick-start guides for TrueNAS SCALE](https://truecharts.org/manual/SCALE/guides/scale-intro).
+- See the [Website](https://truecharts.org)
+- Check our [Discord](https://discord.gg/tVsPTHWTtr)
+- Open a [issue](https://github.com/truecharts/charts/issues/new/choose)
+
+---
+
+## Sponsor TrueCharts
+
+TrueCharts can only exist due to the incredible effort of our staff.
+Please consider making a [donation](https://truecharts.org/sponsor) or contributing back to the project any way you can!
+
+*All Rights Reserved - The TrueCharts Project*

charts/incubator/sonsoftheforest/questions.yaml

@@ -0,0 +1,538 @@
+# Include{groups}
+portals: {}
+questions:
+# Include{global}
+# Include{workload}
+# Include{workloadDeployment}
+
+# Include{replicas1}
+# Include{podSpec}
+# Include{containerMain}
+
+# Include{containerBasic}
+# Include{containerAdvanced}
+
+  - variable: sonsoftheforest
+    group: App Configuration
+    label: Sons of the Forest
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: game
+          label: Game Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: id
+                label: Game Id
+                description: The ID of the container to download at start up.
+                schema:
+                  type: string
+                  required: true
+                  default: "2465200"
+              - variable: user
+                label: Steam User
+                description: Leave blank for anonymous login.
+                schema:
+                  type: string
+                  default: ""
+              - variable: password
+                label: Steam Password
+                description: Leave blank for anonymous login.
+                schema:
+                  type: string
+                  default: ""
+              - variable: validate
+                label: Validate
+                description: Validates the game data.
+                schema:
+                  type: boolean
+                  default: true
+              - variable: params
+                label: Game Params
+                schema:
+                  type: list
+                  default: []
+                  required: true
+                  items:
+                    - variable: param
+                      label: Param
+                      schema:
+                        type: string
+                        required: true
+                        default: ""
+        - variable: server
+          label: Game Server Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: ServerName
+                label: Server Name
+                description: Name of the server visible in the server list, and in the Steam contacts.
+                schema:
+                  type: string
+                  required: true
+                  default: "Sons Of The Forest Docker Server"
+              - variable: MaxPlayers
+                label: Max Players
+                description: The maximum number of players allowed simultaneously on the server.
+                schema:
+                  type: int
+                  required: true
+                  default: 8
+                  min: 1
+              - variable: Password
+                label: Password
+                description: Adds a password to make your server “private”. Upon connection, this password will be requested before the client can proceed.
+                schema:
+                  type: string
+                  private: true
+                  default: ""
+              - variable: LanOnly
+                label: Lan Only
+                description: Allows or restricts the server visibility to LAN only.
+                schema:
+                  type: boolean
+                  default: false
+              - variable: SaveSlot
+                label: Save Slot
+                description: When creating a new save, this number will be the id of the save.
+                schema:
+                  type: int
+                  required: true
+                  default: 1
+                  min: 1
+              - variable: SaveMode
+                label: Save Mode
+                description: Game save initialization mode.
+                schema:
+                  type: string
+                  required: true
+                  default: "Continue"
+                  enum:
+                    - value: Continue
+                      description: Continue
+                    - value: New
+                      description: New
+              - variable: GameMode
+                label: Game Mode
+                description: Sets the difficulty game mode when creating a new save.
+                schema:
+                  type: string
+                  required: true
+                  default: "normal"
+                  enum:
+                    - value: peaceful
+                      description: Peaceful
+                    - value: normal
+                      description: Normal
+                    - value: hard
+                      description: Hard
+                    - value: hardsurvival
+                      description: Hard Survival
+                    - value: custom
+                      description: Custom
+              - variable: SaveInterval
+                label: Save Interval
+                description: How often the game server automatically saves the game to SaveSlot, in seconds.
+                schema:
+                  type: int
+                  required: true
+                  default: 600
+              - variable: IdleDayCycleSpeed
+                label: Idle Day Cycle Speed
+                description: A multiplier to how quickly the time passes compared to normal gameplay when the server is considered idle (no player connected).
+                schema:
+                  type: string
+                  required: true
+                  default: "0.0"
+              - variable: IdleTargetFramerate
+                label: Idle Target Framerate
+                description: Target framerate of the server when it’s considered idle (no player connected).
+                schema:
+                  type: int
+                  required: true
+                  default: 5
+              - variable: ActiveTargetFramerate
+                label: Active Target Framerate
+                description: Target framerate of the server when it’s NOT considered idle (one or more player connected).
+                schema:
+                  type: int
+                  required: true
+                  default: 60
+              - variable: LogFilesEnabled
+                label: Log Files Enabled
+                description: Defines if the logs will be written to files.
+                schema:
+                  type: boolean
+                  default: false
+              - variable: TimestampLogFilenames
+                label: Timestamp Log Filenames
+                description: Enabled log files timestamping.
+                schema:
+                  type: boolean
+                  default: true
+              - variable: TimestampLogEntries
+                label: Timestamp Log Entries
+                description: Enables each log entry written to file to be timestamped.
+                schema:
+                  type: boolean
+                  default: true
+              - variable: SkipNetworkAccessibilityTest
+                label: Skip Network Accessibility Test
+                description: Opt-out of network accessibility self tests.
+                schema:
+                  type: boolean
+                  default: false
+              - variable: GameSettings
+                label: Game Settings
+                schema:
+                  additional_attrs: true
+                  type: dict
+                  attrs:
+                    - variable: Gameplay.TreeRegrowth
+                      label: Tree Regrowth
+                      description: Enable automatic tree regrowth, triggered when sleeping.
+                      schema:
+                        type: boolean
+                        default: true
+                    - variable: Structure.Damage
+                      label: Structure Damage
+                      description: Allow buildings to be damaged.
+                      schema:
+                        type: boolean
+                        default: true
+              - variable: CustomGameModeSettings
+                label: Custom GameMode Settings
+                description: These parameters are ignored if the Game Mode is not “custom”.
+                schema:
+                  additional_attrs: true
+                  type: dict
+                  attrs:
+                    - variable: GameSetting.Multiplayer.Cheats
+                      label: Cheats
+                      description: Allows cheats on the server.
+                      schema:
+                        type: boolean
+                        default: false
+                    - variable: GameSetting.Vail.EnemySpawn
+                      label: Enemy Spawn
+                      description: Enable enemies spawning.
+                      schema:
+                        type: boolean
+                        default: true
+                    - variable: GameSetting.Vail.EnemyHealth
+                      label: Enemy Health
+                      description: Adjust enemy starting health.
+                      schema:
+                        type: string
+                        required: true
+                        default: "normal"
+                        enum:
+                          - value: low
+                            description: Low
+                          - value: normal
+                            description: Normal
+                          - value: high
+                            description: High
+                    - variable: GameSetting.Vail.EnemyDamage
+                      label: Enemy Damage
+                      description: Adjust damage enemies can do.
+                      schema:
+                        type: string
+                        required: true
+                        default: "normal"
+                        enum:
+                          - value: low
+                            description: Low
+                          - value: normal
+                            description: Normal
+                          - value: high
+                            description: High
+                    - variable: GameSetting.Vail.EnemyArmour
+                      label: Enemy Armour
+                      description: Adjust enemies armor strength.
+                      schema:
+                        type: string
+                        required: true
+                        default: "normal"
+                        enum:
+                          - value: low
+                            description: Low
+                          - value: normal
+                            description: Normal
+                          - value: high
+                            description: High
+                    - variable: GameSetting.Vail.EnemyAggression
+                      label: Enemy Aggression
+                      description: Adjust enemy aggression level.
+                      schema:
+                        type: string
+                        required: true
+                        default: "normal"
+                        enum:
+                          - value: low
+                            description: Low
+                          - value: normal
+                            description: Normal
+                          - value: high
+                            description: High
+                    - variable: GameSetting.Vail.AnimalSpawnRate
+                      label: Animal Spawn Rate
+                      description: Adjust animal spawn rate.
+                      schema:
+                        type: string
+                        required: true
+                        default: "normal"
+                        enum:
+                          - value: low
+                            description: Low
+                          - value: normal
+                            description: Normal
+                          - value: high
+                            description: High
+                    - variable: GameSetting.Environment.StartingSeason
+                      label: Starting Season
+                      description: Set environmental starting season.
+                      schema:
+                        type: string
+                        required: true
+                        default: "summer"
+                        enum:
+                          - value: spring
+                            description: Spring
+                          - value: summer
+                            description: Summer
+                          - value: autumn
+                            description: Autumn
+                          - value: winter
+                            description: Winter
+                    - variable: GameSetting.Environment.SeasonLength
+                      label: Season Length
+                      description: Adjust season length.
+                      schema:
+                        type: string
+                        required: true
+                        default: "default"
+                        enum:
+                          - value: short
+                            description: Short
+                          - value: default
+                            description: Default
+                          - value: long
+                            description: Long
+                          - value: realistic
+                            description: Realistic
+                    - variable: GameSetting.Environment.DayLength
+                      label: Day Length
+                      description: Adjust day length.
+                      schema:
+                        type: string
+                        required: true
+                        default: "default"
+                        enum:
+                          - value: short
+                            description: Short
+                          - value: default
+                            description: Default
+                          - value: long
+                            description: Long
+                          - value: realistic
+                            description: Realistic
+                    - variable: GameSetting.Environment.PrecipitationFrequency
+                      label: Precipitation Frequency
+                      description: Adjust the frequency of rain and snow.
+                      schema:
+                        type: string
+                        required: true
+                        default: "default"
+                        enum:
+                          - value: low
+                            description: Low
+                          - value: default
+                            description: Default
+                          - value: high
+                            description: High
+                    - variable: Structure.Damage
+                      label: Structure Damage
+                      description: Allow buildings to be damaged.
+                      schema:
+                        type: boolean
+                        default: true
+                    - variable: GameSetting.Survival.ConsumableEffects
+                      label: Consumable Effects
+                      description: Enable damage taken when low hydration and low fullness.
+                      schema:
+                        type: string
+                        required: true
+                        default: "hard"
+                        enum:
+                          - value: normal
+                            description: normal
+                          - value: hard
+                            description: Hard
+                    - variable: GameSetting.Survival.PlayerStatsDamage
+                      label: PlayerStat Damage
+                      description: Enable damage from each bad or rotten food and drink.
+                      schema:
+                        type: string
+                        required: true
+                        default: "off"
+                        enum:
+                          - value: "off"
+                            description: "Off"
+                          - value: normal
+                            description: normal
+                          - value: hard
+                            description: Hard
+                    - variable: GameSetting.Survival.ColdPenalties
+                      label: Cold Penalties
+                      description: Adjusts the severity that cold will affect health and stamina regeneration.
+                      schema:
+                        type: string
+                        required: true
+                        default: "off"
+                        enum:
+                          - value: "off"
+                            description: "Off"
+                          - value: normal
+                            description: normal
+                          - value: hard
+                            description: Hard
+                    - variable: GameSetting.Survival.ReducedFoodInContainers
+                      label: Reduced Food In Containers
+                      description: Reduces the amount of food found in containers.
+                      schema:
+                        type: boolean
+                        default: false
+                    - variable: GameSetting.Survival.SingleUseContainers
+                      label: Single Use Containers
+                      description: Containers can only be opened once.
+                      schema:
+                        type: boolean
+                        default: false
+
+# Include{containerConfig}
+# Include{podOptions}
+# Include{serviceRoot}
+        - variable: main
+          label: Main Service
+          description: The Primary service on which the healthcheck runs, often the webUI
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{serviceSelectorLoadBalancer}
+# Include{serviceSelectorExtras}
+                    - variable: main
+                      label: Main Service Port Configuration
+                      schema:
+                        additional_attrs: true
+                        type: dict
+                        attrs:
+                          - variable: port
+                            label: Port
+                            description: This port exposes the container port on the service
+                            schema:
+                              type: int
+                              default: 8766
+                              required: true
+        - variable: query
+          label: Query service
+          description: Query Service Port Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{serviceSelectorLoadBalancer}
+# Include{serviceSelectorExtras}
+                    - variable: query
+                      label: Query Service Port Configuration
+                      schema:
+                        additional_attrs: true
+                        type: dict
+                        attrs:
+                          - variable: port
+                            label: Port
+                            description: This port exposes the container port on the service
+                            schema:
+                              type: int
+                              default: 27016
+                              required: true
+        - variable: sync
+          label: Sync service
+          description: Sync Service Port Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{serviceSelectorLoadBalancer}
+# Include{serviceSelectorExtras}
+                    - variable: sync
+                      label: Sync Service Port Configuration
+                      schema:
+                        additional_attrs: true
+                        type: dict
+                        attrs:
+                          - variable: port
+                            label: Port
+                            description: This port exposes the container port on the service
+                            schema:
+                              type: int
+                              default: 9700
+                              required: true
+# Include{serviceExpertRoot}
+# Include{serviceExpert}
+# Include{serviceList}
+# Include{persistenceRoot}
+        - variable: steamcmd
+          label: App SteamCMD Storage
+          description: Stores the Application SteamCMD.
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{persistenceBasic}
+        - variable: serverfiles
+          label: App Server Files Storage
+          description: Stores the Application Server Files.
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{persistenceBasic}
+# Include{persistenceList}
+
+# Include{securityContextRoot}
+              - variable: runAsUser
+                label: "runAsUser"
+                description: "The UserID of the user running the application"
+                schema:
+                  type: int
+                  default: 0
+              - variable: runAsGroup
+                label: "runAsGroup"
+                description: "The groupID of the user running the application"
+                schema:
+                  type: int
+                  default: 0
+# Include{securityContextContainer}
+# Include{securityContextAdvanced}
+# Include{securityContextPod}
+              - variable: fsGroup
+                label: "fsGroup"
+                description: "The group that should own ALL storage."
+                schema:
+                  type: int
+                  default: 568
+
+# Include{resources}
+# Include{advanced}
+# Include{addons}
+# Include{codeserver}
+# Include{netshoot}
+# Include{vpn}
+# Include{documentation}

charts/incubator/sonsoftheforest/templates/NOTES.txt

@@ -0,0 +1 @@
+{{- include "tc.v1.common.lib.chart.notes" $ -}}

charts/incubator/sonsoftheforest/templates/_configmap.tpl

@@ -0,0 +1,13 @@
+{{/* Define the configmap */}}
+{{- define "sonsoftheforest.configmaps" -}}
+{{- $fullname := (include "tc.v1.common.lib.chart.names.fullname" $) -}}
+
+{{- $server := .Values.sonsoftheforest.server -}}
+
+sonsoftheforest-dscfg:
+  enabled: true
+  data:
+    dedicatedserver.cfg: |
+      {{ $server | toJson }}
+
+{{- end -}}

charts/incubator/sonsoftheforest/templates/common.yaml

@@ -0,0 +1,11 @@
+{{/* Make sure all variables are set properly */}}
+{{- include "tc.v1.common.loader.init" . -}}
+
+{{/* Render configmaps for all pods */}}
+{{- $configmaps := include "sonsoftheforest.configmaps" . | fromYaml -}}
+{{- if $configmaps -}}
+  {{- $_ := mustMergeOverwrite .Values.configmap $configmaps -}}
+{{- end -}}
+
+{{/* Render the templates */}}
+{{- include "tc.v1.common.loader.apply" . -}}

charts/incubator/sonsoftheforest/values.yaml

@@ -0,0 +1,145 @@
+image:
+  repository: tccr.io/truecharts/sonsoftheforest
+  pullPolicy: IfNotPresent
+  tag: latest@sha256:e435b582929c81473862460a9305751b0cf79413ecc8599332b0104e0da603ab
+
+securityContext:
+  container:
+    runAsNonRoot: false
+    readOnlyRootFilesystem: false
+    runAsUser: 0
+    runAsGroup: 0
+
+service:
+  main:
+    ports:
+      main:
+        protocol: udp
+        port: 8766
+  query:
+    enabled: true
+    ports:
+      query:
+        enabled: true
+        protocol: udp
+        port: 27016
+  sync:
+    enabled: true
+    ports:
+      sync:
+        enabled: true
+        protocol: udp
+        port: 9700
+
+sonsoftheforest:
+  game:
+    id: "2465200"
+    user: ""
+    password: ""
+    validate: false
+    params: []
+  server:
+    IpAddress: "0.0.0.0"
+    GamePort: "{{ .Values.service.main.ports.main.port }}"
+    QueryPort: "{{ .Values.service.query.ports.query.port }}"
+    BlobSyncPort: "{{ .Values.service.sync.ports.sync.port }}"
+    ServerName: "Sons Of The Forest Docker Server"
+    MaxPlayers: 8
+    Password: ""
+    LanOnly: false
+    # integer, equal to or greater than 1
+    SaveSlot: 1
+    # new, continue
+    SaveMode: "continue"
+    # peaceful, normal, hard, hardsurvival, custom
+    GameMode: "normal"
+    SaveInterval: 600
+    IdleDayCycleSpeed: "0.0"
+    IdleTargetFramerate: 5
+    ActiveTargetFramerate: 60
+    LogFilesEnabled: false
+    TimestampLogFilenames: true
+    TimestampLogEntries: true
+    SkipNetworkAccessibilityTest: false
+    GameSettings:
+      Gameplay.TreeRegrowth: true
+      Structure.Damage: true
+    CustomGameModeSettings:
+      # Multiplayer
+      GameSetting.Multiplayer.Cheats: false
+      # Vail
+      GameSetting.Vail.EnemySpawn: true
+      # low, normal, high
+      GameSetting.Vail.EnemyHealth: "normal"
+      # low, normal, high
+      GameSetting.Vail.EnemyDamage: "normal"
+      # low, normal, high
+      GameSetting.Vail.EnemyArmour: "normal"
+      # low, normal, high
+      GameSetting.Vail.EnemyAggression: "normal"
+      # low, normal, high
+      GameSetting.Vail.AnimalSpawnRate: "normal"
+      # Environment
+      # spring, summer, autumn, winter
+      GameSetting.Environment.StartingSeason: "Summer"
+      # short, default, long, realistic
+      GameSetting.Environment.SeasonLength: "default"
+      # short, default, long, realistic
+      GameSetting.Environment.DayLength: "default"
+      # low, default, high
+      GameSetting.Environment.PrecipitationFrequency: "default"
+      # not a dupe key.
+      Structure.Damage: true
+      # Survival
+      # normal, hard
+      GameSetting.Survival.ConsumableEffects: "normal"
+      # off, normal, hard
+      GameSetting.Survival.PlayerStatsDamage: "off"
+      # off, normal, hard
+      GameSetting.Survival.ColdPenalties: "off"
+      GameSetting.Survival.ReducedFoodInContainers: false
+      GameSetting.Survival.SingleUssonsoftheforestntainers: false
+
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          probes:
+            liveness:
+              enabled: false
+            readiness:
+              enabled: false
+            startup:
+              enabled: false
+          env:
+            GAME_PORT: "{{ .Values.service.main.ports.main.port }}"
+            STEAMCMD_DIR: "{{ .Values.persistence.steamcmd.mountPath }}"
+            SERVER_DIR: "{{ .Values.persistence.serverfiles.mountPath }}"
+            GAME_ID: "{{ .Values.sonsoftheforest.game.id }}"
+            USERNAME: "{{ .Values.sonsoftheforest.game.user }}"
+            PASSWRD: "{{ .Values.sonsoftheforest.game.password }}"
+            GAME_PARAMS: '{{ join " " .Values.sonsoftheforest.game.params }}'
+            VALIDATE: "{{ .Values.sonsoftheforest.game.validate }}"
+
+persistence:
+  steamcmd:
+    enabled: true
+    mountPath: /serverdata/steamcmd
+  serverfiles:
+    enabled: true
+    mountPath: /serverdata/serverfiles
+  dedicatedserver-dscfg:
+    enabled: true
+    type: configmap
+    objectName: sonsoftheforest-dscfg
+    targetSelector:
+      main:
+        main:
+          mountPath: /serverdata/serverfiles/userdata/dedicatedserver.cfg
+          subPath: dedicatedserver.cfg
+          readOnly: true
+
+portal:
+  open:
+    enabled: false

charts/incubator/spaceengineers/Chart.yaml

@@ -1,15 +1,11 @@
-annotations:
-  truecharts.org/SCALE-support: "true"
-  truecharts.org/catagories: |
-    - GameServers
 apiVersion: v2
 appVersion: "latest"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 11.1.2
+    version: 14.0.3
 deprecated: false
-description: "Space Engineers Dedicated Server build on Debian10"
+description: Space Engineers Dedicated Server.
 home: https://truecharts.org/charts/incubator/spaceengineers
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/spaceengineers.png
 keywords:
@@ -23,5 +19,10 @@ maintainers:
 name: spaceengineers
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/spaceengineers
+  - https://github.com/Devidian/docker-spaceengineers
 type: application
-version: 2.0.11
+version: 3.0.0
+annotations:
+  truecharts.org/catagories: |
+    - GameServers
+  truecharts.org/SCALE-support: "true"

charts/incubator/spaceengineers/questions.yaml

@@ -1,7 +1,5 @@
 # Include{groups}
-portals:
-  open:
-# Include{portalLink}
+portals: {}
 questions:
 # Include{global}
 # Include{workload}
@@ -10,36 +8,29 @@ questions:
 # Include{replicas1}
 # Include{podSpec}
 # Include{containerMain}
+
 # Include{containerBasic}
 # Include{containerAdvanced}
 
-  - variable: env
-    group: "App Configuration"
-    label: "Image Environment"
+  - variable: spaceengineers
+    group: App Configuration
+    label: SpaceEngineers
     schema:
       additional_attrs: true
       type: dict
       attrs:
-        - variable: WINEPREFIX
-          label: "WINEPREFIX"
+        - variable: instance_name
+          label: Instance Name
           schema:
             type: string
-            default: "/root/server"
-        - variable: WINEARCH
-          label: "WINEARCH"
+            default: ""
+        - variable: public_ip
+          label: Public IP
+          description: Public IP required for healthcheck
           schema:
             type: string
-            default: "win64"
-        - variable: WINEDEBUG
-          label: "WINEDEBUG"
-          schema:
-            type: string
-            default: "-all"
-        - variable: APT_KEY_DONT_WARN_ON_DANGEROUS_USAGE
-          label: "APT_KEY_DONT_WARN_ON_DANGEROUS_USAGE"
-          schema:
-            type: string
-            default: "1"
+            default: ""
+
 # Include{containerConfig}
 # Include{serviceRoot}
         - variable: main
@@ -64,53 +55,68 @@ questions:
                               type: int
                               default: 27017
                               required: true
+        - variable: api
+          label: API Service
+          description: The API service.
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{serviceSelectorLoadBalancer}
+# Include{serviceSelectorExtras}
+                    - variable: api
+                      label: API Service Port Configuration
+                      schema:
+                        additional_attrs: true
+                        type: dict
+                        attrs:
+                          - variable: port
+                            label: Port
+                            description: This port exposes the container port on the service
+                            schema:
+                              type: int
+                              default: 18080
+                              required: true
 # Include{serviceExpertRoot}
 # Include{serviceExpert}
 # Include{serviceList}
 # Include{persistenceRoot}
         - variable: steamcmd
-          label: "steamcmd Storage"
+          label: App SteamCMD Storage
+          description: Stores the Application SteamCMD.
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{persistenceBasic}
+        - variable: plugins
+          label: App Plugins Storage
+          description: Stores the Application Plugins.
           schema:
             additional_attrs: true
             type: dict
             attrs:
 # Include{persistenceBasic}
         - variable: serverfiles
-          label: "serverfiles Storage"
+          label: App Server Files Storage
+          description: Stores the Application Server Files.
           schema:
             additional_attrs: true
             type: dict
             attrs:
 # Include{persistenceBasic}
-        - variable: savegame
-          label: "savegame Storage"
-          schema:
-            additional_attrs: true
-            type: dict
-            attrs:
-# Include{persistenceBasic}
-        - variable: serverconfig
-          label: "serverconfig Storage"
+        - variable: instances
+          label: App Instances Storage
+          description: Stores the Application Instances.
           schema:
             additional_attrs: true
             type: dict
             attrs:
 # Include{persistenceBasic}
 # Include{persistenceList}
-# Include{ingressRoot}
-        - variable: main
-          label: "Main Ingress"
-          schema:
-            additional_attrs: true
-            type: dict
-            attrs:
-# Include{ingressDefault}
-# Include{ingressTLS}
-# Include{ingressTraefik}
-# Include{ingressAdvanced}
 # Include{ingressList}
-# Include{securityContextRoot}
 
+# Include{securityContextRoot}
               - variable: runAsUser
                 label: "runAsUser"
                 description: "The UserID of the user running the application"

charts/incubator/spaceengineers/templates/NOTES.txt

@@ -0,0 +1 @@
+{{- include "tc.v1.common.lib.chart.notes" $ -}}

charts/incubator/spaceengineers/templates/common.yaml

@@ -1,2 +1 @@
-{{/* Render the templates */}}
-{{ include "tc.common.loader.all" . }}
+{{ include "tc.v1.common.loader.all" . }}

charts/incubator/spaceengineers/values.yaml

@@ -1,45 +1,65 @@
-env:
-  APT_KEY_DONT_WARN_ON_DANGEROUS_USAGE: "1"
-  WINEARCH: win64
-  WINEDEBUG: -all
-  WINEPREFIX: /root/server
 image:
   pullPolicy: IfNotPresent
   repository: tccr.io/truecharts/spaceengineers
-  tag: latest@sha256:d723fd62a81af374f11b21ba3a265520c499baf53e77d9018ec4e60c4cb415ac
-persistence:
-  savegame:
-    enabled: true
-    mountPath: /appdata/space-engineers/instances/Saves/
-  serverconfig:
-    enabled: true
-    mountPath: /appdata/space-engineers/instances
-  serverfiles:
-    enabled: true
-    mountPath: /appdata/space-engineers/SpaceEngineersDedicated
-  steamcmd:
-    enabled: true
-    mountPath: /serverdata/steamcmd
-podSecurityContext:
-  runAsGroup: 0
-  runAsUser: 0
-probes:
-  liveness:
-    enabled: false
-  readiness:
-    enabled: false
-  startup:
-    enabled: false
+  tag: latest@sha256:5485c3fe13e73608d6f1f212ac7868dc91096e491ca6c556d20eeb1791da7447
+
 securityContext:
-  readOnlyRootFilesystem: false
-  runAsNonRoot: false
+  container:
+    runAsNonRoot: false
+    readOnlyRootFilesystem: false
+    runAsUser: 0
+    runAsGroup: 0
+
 service:
   main:
     ports:
       main:
+        protocol: udp
+        targetPort: 27016
         port: 27017
-        protocol: UDP
-        targetPort: 27017
+  api:
+    enabled: true
+    ports:
+      api:
+        protocol: http
+        enabled: true
+        targetPort: 8080
+        port: 18080
+
+spaceengineers:
+  instance_name: "TestInstance"
+  public_ip: "1.2.3.4"
+
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          probes:
+            liveness:
+              enabled: false
+            readiness:
+              enabled: false
+            startup:
+              enabled: false
+          env:
+            INSTANCE_NAME: "{{ .Values.spaceengineers.instance_name }}"
+            PUBLIC_IP: "{{ .Values.spaceengineers.public_ip }}"
+
+persistence:
+  steamcmd:
+    enabled: true
+    mountPath: /root/.steam
+  plugins:
+    enabled: true
+    mountPath: /appdata/space-engineers/plugins
+  serverfiles:
+    enabled: true
+    mountPath: /appdata/space-engineers/SpaceEngineersDedicated
+  instances:
+    enabled: true
+    mountPath: /appdata/space-engineers/instances
 
 portal:
-  enabled: true
+  open:
+    enabled: false

charts/incubator/traefik-forward-auth/Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v2
 kubeVersion: ">=1.16.0-0"
 name: traefik-forward-auth
-version: 0.1.3
+version: 0.2.0
 appVersion: "latest"
 description: A minimal forward authentication service that provides OAuth/SSO login and authentication for the traefik reverse proxy/load balancer. An example for a typical setup is included in the source (docs/how-to.md).
 type: application
@@ -21,7 +21,7 @@ sources:
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 11.1.2
+    version: 14.0.1
 maintainers:
   - email: info@truecharts.org
     name: TrueCharts

charts/incubator/traefik-forward-auth/questions.yaml

@@ -3,14 +3,13 @@ questions:
 # Include{global}
 # Include{workload}
 # Include{workloadDeployment}
-
 # Include{replicas1}
 # Include{podSpec}
 # Include{containerMain}
 # Include{containerBasic}
 # Include{containerAdvanced}
-
-# Include{controllerExpert}
+# Include{containerConfig}
+# Include{podOptions}
   - variable: tfaAppOptions
     group: App Configuration
     label: Application Options
@@ -274,20 +273,14 @@ questions:
           description: Optional resource indicator.
           schema:
             type: string
-# Include{fixedEnv}
-# Include{containerConfig}
 # Include{serviceRoot}
-        - variable: main
-          label: "Main Service"
-          description: "The Primary service on which the healthcheck runs, often the webUI"
-          schema:
-            type: dict
-            attrs:
-# Include{serviceSelector}
+# Include{serviceMain}
+# Include{serviceSelectorLoadBalancer}
 # Include{serviceSelectorExtras}
                     - variable: main
                       label: "Main Service Port Configuration"
                       schema:
+                        additional_attrs: true
                         type: dict
                         attrs:
                           - variable: port
@@ -297,94 +290,31 @@ questions:
                               type: int
                               default: 4181
                               required: true
-                          - variable: advanced
-                            label: "Show Advanced settings"
-                            schema:
-                              type: boolean
-                              default: false
-                              show_subquestions_if: true
-                              subquestions:
-                                - variable: enabled
-                                  label: "Enable the port"
-                                  schema:
-                                    type: boolean
-                                    default: true
-                                - variable: protocol
-                                  label: "Port Type"
-                                  schema:
-                                    type: string
-                                    default: "HTTP"
-                                    enum:
-                                      - value: HTTP
-                                        description: "HTTP"
-                                      - value: "HTTPS"
-                                        description: "HTTPS"
-                                      - value: TCP
-                                        description: "TCP"
-                                      - value: "UDP"
-                                        description: "UDP"
-                                - variable: nodePort
-                                  label: "Node Port (Optional)"
-                                  description: "This port gets exposed to the node. Only considered when service type is NodePort, Simple or LoadBalancer"
-                                  schema:
-                                    type: int
-                                    min: 9000
-                                    max: 65535
-                                - variable: targetPort
-                                  label: "Target Port"
-                                  description: "The internal(!) port on the container the Application runs on"
-                                  schema:
-                                    type: int
-                                    default: 4181
 # Include{serviceExpertRoot}
 # Include{serviceExpert}
 # Include{serviceList}
+# Include{persistenceRoot}
+        - variable: config
+          label: "App Config Storage"
+          description: "Stores the Application Configuration."
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{persistenceBasic}
+# Include{persistenceList}
 # Include{ingressRoot}
         - variable: main
           label: "Main Ingress"
           schema:
+            additional_attrs: true
             type: dict
             attrs:
 # Include{ingressDefault}
 # Include{ingressTLS}
 # Include{ingressTraefik}
 # Include{ingressAdvanced}
-# Include{ingressExpert}
 # Include{ingressList}
-  - variable: advancedSecurity
-    label: "Show Advanced Security Settings"
-    group: "Security and Permissions"
-    schema:
-      type: boolean
-      default: false
-      show_subquestions_if: true
-      subquestions:
-        - variable: securityContext
-          label: "Security Context"
-          schema:
-            type: dict
-            attrs:
-              - variable: privileged
-                label: "Privileged mode"
-                schema:
-                  type: boolean
-                  default: false
-              - variable: readOnlyRootFilesystem
-                label: "ReadOnly Root Filesystem"
-                schema:
-                  type: boolean
-                  default: true
-              - variable: allowPrivilegeEscalation
-                label: "Allow Privilege Escalation"
-                schema:
-                  type: boolean
-                  default: false
-              - variable: runAsNonRoot
-                label: "runAsNonRoot"
-                schema:
-                  type: boolean
-                  default: true
-# Include{securityContextAdvanced}
 # Include{securityContextRoot}
               - variable: runAsUser
                 label: "runAsUser"
@@ -394,7 +324,7 @@ questions:
                   default: 568
               - variable: runAsGroup
                 label: "runAsGroup"
-                description: "The groupID of the user running the application"
+                description: "The groupID this App of the user running the application"
                 schema:
                   type: int
                   default: 568
@@ -407,11 +337,10 @@ questions:
                 schema:
                   type: int
                   default: 568
-
 # Include{resources}
 # Include{advanced}
 # Include{addons}
 # Include{codeserver}
 # Include{netshoot}
-# Include{promtail}
 # Include{vpn}
+# Include{documentation}

charts/incubator/traefik-forward-auth/templates/_secret.tpl

@@ -1,57 +0,0 @@
-{{/* Define the secret */}}
-{{- define "tfa.secret" -}}
-
-{{- $googleSecretName := printf "%s-google-secret" (include "tc.common.names.fullname" .) }}
-{{- $oidcSecretName := printf "%s-oidc-secret" (include "tc.common.names.fullname" .) }}
-{{- $oauthSecretName := printf "%s-oauth2-secret" (include "tc.common.names.fullname" .) }}
-
----
-
-apiVersion: v1
-kind: Secret
-type: Opaque
-metadata:
-  name: {{ $googleSecretName }}
-  labels:
-    {{- include "tc.common.labels" . | nindent 4 }}
-data:
-  PROVIDERS_GOOGLE_CLIENT_ID: {{ .Values.tfaGoogleOptions.clientId | trimAll "\"" | b64enc }}
-  PROVIDERS_GOOGLE_CLIENT_SECRET: {{ .Values.tfaGoogleOptions.clientSecret | trimAll "\"" | b64enc }}
-  PROVIDERS_GOOGLE_PROMPT: {{ .Values.tfaGoogleOptions.prompt | trimAll "\"" | b64enc }}
-
----
-
-apiVersion: v1
-kind: Secret
-type: Opaque
-metadata:
-  name: {{ $oidcSecretName }}
-  labels:
-    {{- include "tc.common.labels" . | nindent 4 }}
-data:
-  PROVIDERS_OIDC_ISSUER_URL: {{ .Values.tfaOidcOptions.issuerUrl | trimAll "\"" | b64enc }}
-  PROVIDERS_OIDC_CLIENT_ID: {{ .Values.tfaOidcOptions.clientId | trimAll "\"" | b64enc }}
-  PROVIDERS_OIDC_CLIENT_SECRET: {{ .Values.tfaOidcOptions.clientSecret | trimAll "\"" | b64enc }}
-  PROVIDERS_OIDC_RESOURCE: {{ .Values.tfaOidcOptions.resource | trimAll "\"" | b64enc }}
-
----
-
-apiVersion: v1
-kind: Secret
-type: Opaque
-metadata:
-  name: {{ $oauthSecretName }}
-  labels:
-    {{- include "tc.common.labels" . | nindent 4 }}
-data:
-  PROVIDERS_GENERIC_OAUTH_AUTH_URL: {{ .Values.tfaOauthOptions.authUrl | trimAll "\"" | b64enc }}
-  PROVIDERS_GENERIC_OAUTH_TOKEN_URL: {{ .Values.tfaOauthOptions.tokenUrl | trimAll "\"" | b64enc }}
-  PROVIDERS_GENERIC_OAUTH_USER_URL: {{ .Values.tfaOauthOptions.userUrl | trimAll "\"" | b64enc }}
-  PROVIDERS_GENERIC_OAUTH_CLIENT_ID: {{ .Values.tfaOauthOptions.clientId | trimAll "\"" | b64enc }}
-  PROVIDERS_GENERIC_OAUTH_CLIENT_SECRET: {{ .Values.tfaOauthOptions.clientSecret | trimAll "\"" | b64enc }}
-  PROVIDERS_GENERIC_OAUTH_TOKEN_STYLE: {{ .Values.tfaOauthOptions.tokenStyle | trimAll "\"" | b64enc }}
-  PROVIDERS_GENERIC_OAUTH_RESOURCE: {{ .Values.tfaOauthOptions.resource | trimAll "\"" | b64enc }}
-
----
-
-{{- end }}

charts/incubator/traefik-forward-auth/templates/_secrets.tpl

@@ -0,0 +1,20 @@
+{{/* Define the secret */}}
+{{- define "tfa.secrets" -}}
+
+enabled: true
+data:
+  PROVIDERS_GOOGLE_CLIENT_ID: {{ .Values.tfaGoogleOptions.clientId | trimAll "\"" }}
+  PROVIDERS_GOOGLE_CLIENT_SECRET: {{ .Values.tfaGoogleOptions.clientSecret | trimAll "\"" }}
+  PROVIDERS_GOOGLE_PROMPT: {{ .Values.tfaGoogleOptions.prompt | trimAll "\"" }}
+  PROVIDERS_OIDC_ISSUER_URL: {{ .Values.tfaOidcOptions.issuerUrl | trimAll "\"" }}
+  PROVIDERS_OIDC_CLIENT_ID: {{ .Values.tfaOidcOptions.clientId | trimAll "\"" }}
+  PROVIDERS_OIDC_CLIENT_SECRET: {{ .Values.tfaOidcOptions.clientSecret | trimAll "\"" }}
+  PROVIDERS_OIDC_RESOURCE: {{ .Values.tfaOidcOptions.resource | trimAll "\"" }}
+  PROVIDERS_GENERIC_OAUTH_AUTH_URL: {{ .Values.tfaOauthOptions.authUrl | trimAll "\"" }}
+  PROVIDERS_GENERIC_OAUTH_TOKEN_URL: {{ .Values.tfaOauthOptions.tokenUrl | trimAll "\"" }}
+  PROVIDERS_GENERIC_OAUTH_USER_URL: {{ .Values.tfaOauthOptions.userUrl | trimAll "\"" }}
+  PROVIDERS_GENERIC_OAUTH_CLIENT_ID: {{ .Values.tfaOauthOptions.clientId | trimAll "\"" }}
+  PROVIDERS_GENERIC_OAUTH_CLIENT_SECRET: {{ .Values.tfaOauthOptions.clientSecret | trimAll "\"" }}
+  PROVIDERS_GENERIC_OAUTH_TOKEN_STYLE: {{ .Values.tfaOauthOptions.tokenStyle | trimAll "\"" }}
+  PROVIDERS_GENERIC_OAUTH_RESOURCE: {{ .Values.tfaOauthOptions.resource | trimAll "\"" }}
+{{- end }}

charts/incubator/traefik-forward-auth/templates/common.yaml

@@ -1,13 +1,17 @@
 {{/* Make sure all variables are set properly */}}
-{{- include "tc.common.loader.init" . }}
+{{- include "tc.v1.common.loader.init" . }}
 
 {{/* Render secret */}}
-{{- include "tfa.secret" . }}
+{{- $secret := include "tfa.secrets" . | fromYaml -}}
+{{- if $secret -}}
+  {{- $_ := set .Values.secret "tfa-secrets" $secret -}}
+{{- end -}}
 
+{{/* Render arguments */}}
 {{- $tplArgs := (include "tfa.args" . | fromYaml) }}
 {{- $_ := set .Values "tplArgs" $tplArgs -}}
-{{- $args := concat .Values.args .Values.tplArgs.args }}
-{{- $_ := set .Values "args" $args -}}
+{{- $mergedArgs := concat $.Values.workload.main.podSpec.containers.main.args .Values.tplArgs.args }}
+{{- $_ := set $.Values.workload.main.podSpec.containers.main "args" $mergedArgs -}}
 
 {{/* Render the templates */}}
-{{ include "tc.common.loader.apply" . }}
+{{ include "tc.v1.common.loader.apply" . }}

charts/incubator/traefik-forward-auth/values.yaml

@@ -3,13 +3,15 @@ image:
   pullPolicy: IfNotPresent
   tag: latest@sha256:edd7eb812cb38e59d32b5a00398b57a78506db2390cbe295f5df590a38a5d44e
 
-envFrom:
-  - secretRef:
-      name: '{{ include "tc.common.names.fullname" . }}-google-secret'
-  - secretRef:
-      name: '{{ include "tc.common.names.fullname" . }}-oidc-secret'
-  - secretRef:
-      name: '{{ include "tc.common.names.fullname" . }}-oauth2-secret'
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          args: []
+          envFrom:
+            - secretRef:
+                name: tfa-secrets
 
 service:
   main:

charts/incubator/van-dam/.helmignore

@@ -0,0 +1,30 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
+# OWNERS file for Kubernetes
+OWNERS
+# helm-docs templates
+*.gotmpl
+# docs folder
+/docs
+# icon
+icon.png

charts/incubator/van-dam/CHANGELOG.md

@@ -0,0 +1 @@
+# Changelog

charts/incubator/van-dam/Chart.yaml

@@ -0,0 +1,32 @@
+apiVersion: v2
+appVersion: "0.53.0"
+dependencies:
+  - name: common
+    repository: https://library-charts.truecharts.org
+    version: 14.0.3
+  - condition: redis.enabled
+    name: redis
+    repository: https://deps.truecharts.org
+    version: 7.0.6
+deprecated: false
+description: A Digital Asset Manager (DAM), specifically designed for 3D print files.
+home: https://truecharts.org/charts/incubator/van-dam
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/van-dam.png
+keywords:
+  - vanDAM
+  - media
+kubeVersion: ">=1.16.0-0"
+maintainers:
+  - email: info@truecharts.org
+    name: TrueCharts
+    url: https://truecharts.org
+name: van-dam
+sources:
+  - https://github.com/truecharts/charts/tree/master/charts/incubator/van-dam
+  - https://github.com/Floppy/van_dam
+type: application
+version: 0.0.1
+annotations:
+  truecharts.org/catagories: |
+    - media
+  truecharts.org/SCALE-support: "true"

charts/incubator/van-dam/README.md

@@ -0,0 +1,27 @@
+# README
+
+## General Info
+
+TrueCharts can be installed as both *normal* Helm Charts or as Apps on TrueNAS SCALE.
+However only installations using the TrueNAS SCALE Apps system are supported.
+
+For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/incubator/)
+
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/charts/issues/new/choose)**
+
+
+## Support
+
+- Please check our [quick-start guides for TrueNAS SCALE](https://truecharts.org/manual/SCALE/guides/scale-intro).
+- See the [Website](https://truecharts.org)
+- Check our [Discord](https://discord.gg/tVsPTHWTtr)
+- Open a [issue](https://github.com/truecharts/charts/issues/new/choose)
+
+---
+
+## Sponsor TrueCharts
+
+TrueCharts can only exist due to the incredible effort of our staff.
+Please consider making a [donation](https://truecharts.org/sponsor) or contributing back to the project any way you can!
+
+*All Rights Reserved - The TrueCharts Project*

charts/incubator/van-dam/questions.yaml

@@ -0,0 +1,92 @@
+# Include{groups}
+portals:
+  open:
+# Include{portalLink}
+questions:
+# Include{global}
+# Include{workload}
+# Include{workloadDeployment}
+
+# Include{replicas1}
+# Include{podSpec}
+# Include{containerMain}
+
+
+# Include{containerBasic}
+# Include{containerAdvanced}
+
+# Include{containerConfig}
+# Include{podOptions}
+# Include{serviceRoot}
+# Include{serviceMain}
+# Include{serviceSelectorLoadBalancer}
+# Include{serviceSelectorExtras}
+                    - variable: main
+                      label: "Main Service Port Configuration"
+                      schema:
+                        additional_attrs: true
+                        type: dict
+                        attrs:
+                          - variable: port
+                            label: "Port"
+                            description: "This port exposes the container port on the service"
+                            schema:
+                              type: int
+                              default: 3214
+                              required: true
+# Include{serviceExpertRoot}
+# Include{serviceExpert}
+# Include{serviceList}
+# Include{persistenceRoot}
+        - variable: libraries
+          label: "App Libraries Storage"
+          description: "Stores the Application Libraries."
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{persistenceBasic}
+# Include{persistenceList}
+# Include{ingressRoot}
+        - variable: main
+          label: "Main Ingress"
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{ingressDefault}
+# Include{ingressTLS}
+# Include{ingressTraefik}
+# Include{ingressAdvanced}
+# Include{ingressList}
+# Include{securityContextRoot}
+
+              - variable: runAsUser
+                label: "runAsUser"
+                description: "The UserID of the user running the application"
+                schema:
+                  type: int
+                  default: 0
+              - variable: runAsGroup
+                label: "runAsGroup"
+                description: "The groupID of the user running the application"
+                schema:
+                  type: int
+                  default: 0
+# Include{securityContextContainer}
+# Include{securityContextAdvanced}
+# Include{securityContextPod}
+              - variable: fsGroup
+                label: "fsGroup"
+                description: "The group that should own ALL storage."
+                schema:
+                  type: int
+                  default: 568
+
+# Include{resources}
+# Include{advanced}
+# Include{addons}
+# Include{codeserver}
+# Include{netshoot}
+# Include{vpn}
+# Include{documentation}

charts/incubator/van-dam/templates/NOTES.txt

@@ -0,0 +1 @@
+{{- include "tc.v1.common.lib.chart.notes" $ -}}

charts/incubator/van-dam/templates/_secrets.tpl

@@ -0,0 +1,13 @@
+{{/* Define the secrets */}}
+{{- define "vandam.secrets" -}}
+{{- $secretName := (printf "%s-vandam-secrets" (include "tc.v1.common.lib.chart.names.fullname" $)) }}
+
+{{- $secretKey := randAlphaNum 64 -}}
+
+ {{- with lookup "v1" "Secret" .Release.Namespace $secretName -}}
+   {{- $secretKey = index .data "SECRET_KEY_BASE" | b64dec -}}
+ {{- end }}
+enabled: true
+data:
+  SECRET_KEY_BASE: {{ $secretKey }}
+{{- end -}}