chore: update readme

Signed-off-by: Devin Buhl <[email protected]>
onedr0p · Apr 15, 2024 · f8c4bb9 · f8c4bb9
1 parent 1b71e2d
commit f8c4bb9
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 11 deletions.
diff --git a/README.md b/README.md
@@ -123,9 +123,9 @@ graph TD;
 
 ## ☁️ Cloud Dependencies
 
-While most of my infrastructure and workloads are self-hosted I do rely upon the cloud for certain key parts of my setup. This saves me from having to worry about two things. (1) Dealing with chicken/egg scenarios and (2) services I critically need whether my cluster is online or not.
+While most of my infrastructure and workloads are self-hosted I do rely upon the cloud for certain key parts of my setup. This saves me from having to worry about three things. (1) Dealing with chicken/egg scenarios, (2) services I critically need whether my cluster is online or not and (3) The "hit by a bus factor" - what happens to critical apps (e.g. Password Manager, Photos) that my family relies on when I no longer around.
 
-The alternative solution to these two problems would be to host a Kubernetes cluster in the cloud and deploy applications like [HCVault](https://www.vaultproject.io/), [Vaultwarden](https://github.com/dani-garcia/vaultwarden), [ntfy](https://ntfy.sh/), and [Gatus](https://gatus.io/). However, maintaining another cluster and monitoring another group of workloads is a lot more time and effort than I am willing to put in.
+Alternative solutions to the first two of these problems would be to host a Kubernetes cluster in the cloud and deploy applications like [HCVault](https://www.vaultproject.io/), [Vaultwarden](https://github.com/dani-garcia/vaultwarden), [ntfy](https://ntfy.sh/), and [Gatus](https://gatus.io/). However, maintaining another cluster and monitoring another group of workloads will probably be more or equal out to the same costs as described below.
 
 | Service                                         | Use                                                               | Cost           |
 |-------------------------------------------------|-------------------------------------------------------------------|----------------|
@@ -136,7 +136,6 @@ The alternative solution to these two problems would be to host a Kubernetes clu
 | [GitHub](https://github.com/)                   | Hosting this repository and continuous integration/deployments    | Free           |
 | [Migadu](https://migadu.com/)                   | Email hosting                                                     | ~$20/yr        |
 | [Pushover](https://pushover.net/)               | Kubernetes Alerts and application notifications                   | $5 OTP         |
-| [Terraform Cloud](https://www.terraform.io/)    | Storing Terraform state                                           | Free           |
 | [UptimeRobot](https://uptimerobot.com/)         | Monitoring internet connectivity and external facing applications | ~$60/yr        |
 |                                                 |                                                                   | Total: ~$20/mo |
 

diff --git a/kubernetes/main/bootstrap/talos/matchbox/assets/controller.secret.sops.yaml b/kubernetes/main/bootstrap/talos/matchbox/assets/controller.secret.sops.yaml
@@ -13,8 +13,6 @@ machine:
     kubelet:
         image: ghcr.io/siderolabs/kubelet:${KUBERNETES_VERSION}
         extraArgs:
-            image-gc-high-threshold: "55"
-            image-gc-low-threshold: "50"
             rotate-server-certificates: "true"
         extraMounts:
             - destination: /var/openebs/local
@@ -182,8 +180,8 @@ sops:
             R0p5RXZuMUNXVnFyZVNDTmVWRXorR0EKImMXF7/XlFtGimJcBL+Z4y4EgAEJnEpD
             WzSiMe8hB7pzjCXC8PGcRRkGYV46QQRw8yk2p/2bV6ycXkJ+6GKSHg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-04-02T23:58:38Z"
-    mac: ENC[AES256_GCM,data:m5IaP7icM6aAaZLMPCWdQHZS0KCU2l29ws8eJvO0dQChogvdCftglzJyfHAtfs7GmCJDlM+RhGV0qapokqorx1b0G1bw3zeGn/ljv9BuxO9KyhNcNUBa1FYc7QCwJiDUk85NXiK2UpL4Yfy54T8TDbF53+RGzKt4rABT9AUSADA=,iv:bWczm3vtAtY1AOiink10MN1yCLFPK3d6Xp+iCuk/x8w=,tag:2KVEkDH4m0I74ibR/TVuBw==,type:str]
+    lastmodified: "2024-04-15T18:43:43Z"
+    mac: ENC[AES256_GCM,data:g/0VatjMEswJSdpm6M6LrTy0zmIOVxsdLnXhgKjIDPB5ewU3OPHNhlpC/lzEvXUUra5Ieg7JSxme1JBPWyqtBk9dez5U6Aod5uHfx0XIkJs7eTu67LWAzrgfB0XpeWwrJNVTXqCHPEM5ywevrnvQLn5lnmR9APrKIKtssDcbQEc=,iv:fFZjn7fpB9JwGf5VebA0+U/dqPHhkg+pJsD1VvSakrA=,tag:QQB7wZ6YzpUBdFaeZIjlDg==,type:str]
     pgp: []
     encrypted_regex: ^(token|crt|key|id|secret|secretboxEncryptionSecret|ca)$
     version: 3.8.1
diff --git a/kubernetes/main/bootstrap/talos/matchbox/assets/worker.secret.sops.yaml b/kubernetes/main/bootstrap/talos/matchbox/assets/worker.secret.sops.yaml
@@ -13,8 +13,6 @@ machine:
     kubelet:
         image: ghcr.io/siderolabs/kubelet:${KUBERNETES_VERSION}
         extraArgs:
-            image-gc-high-threshold: "55"
-            image-gc-low-threshold: "50"
             rotate-server-certificates: "true"
         extraMounts:
             - destination: /var/openebs/local
@@ -136,8 +134,8 @@ sops:
             QUE4UkZiRDRJRGRHTTNCemdIYllvTmsKZBAn5SbfQDL1yrU8VUUfJUV/yADU3oVU
             Vn/pmwdPNfcwgucnZVUQVWXzCdZlgvs3vOpgf58NEBrQs36MMlNBJQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-04-02T23:58:52Z"
-    mac: ENC[AES256_GCM,data:8KOSFd/0dZbm3JLftDUsfdiNRJuBoBRIT/CapOl9xSWlFXb5e8tpZ8kJpZmUuU46lxnvWOQBx+WOsobEhN2xoKUQ4/bSWCZ4gQqlsXSnRNJkNXUqRB4r+WmGzjbKCQpt8R+BTkh3VKOYRrO7fvHAsq6w+b4gAO2Mz7V+AI+5qXc=,iv:3FEhF4DC3CoG0jUnDI2CEMbHtLcQ87ZU1BDEV8kmjW4=,tag:15sNn+3rOBIV1RznkOoB2Q==,type:str]
+    lastmodified: "2024-04-15T18:43:50Z"
+    mac: ENC[AES256_GCM,data:p/uNMCoRW2YeGVqQW05fP1GP220FL927W53X2J6DOmKnLj3hMd+VNU8DKJhnp8Dh+zKht/WUPF0PChZIWIchibYZ7SpkiZK3hJVJ8ZjZMzmGeGwB5CYZr/kPmhVXY31mVSsEHtPU+wX+fyAftILVVhwaMeiAw4S0bPmA1nw2W+k=,iv:5aUBCJrwpZc+dDBR3hNrQgTHoQRAh/D4Jtqyoloud28=,tag:cSSmoE/G6RNIhoUATZ+wWQ==,type:str]
     pgp: []
     encrypted_regex: ^(token|crt|key|id|secret|secretboxEncryptionSecret|ca)$
     version: 3.8.1