chore(deps): update dependency fluxcd/flux2 to v2.4.0

kubernetes/apps/production/flyimg/deployment.yaml

@@ -16,7 +16,7 @@ spec:
     spec:
       containers:
         - name: flyimg-container
-          image: flyimg/flyimg:1.4.15
+          image: flyimg/flyimg:1.4.13
           securityContext:
             allowPrivilegeEscalation: false
           ports:
@@ -26,8 +26,8 @@ spec:
               cpu: 50m
               memory: 100Mi
             limits:
-              cpu: 2000m
-              memory: 512Mi
+              cpu: 1000m # 1 vCPU
+              memory: 200Mi
           volumeMounts:
             - name: flyimg-storage
               mountPath: /var/www/html/web/uploads

kubernetes/infrastructure/cert-manager/cert-manager.yaml

@@ -18,7 +18,7 @@ spec:
   chart:
     spec:
       chart: cert-manager
-      version: "v1.16.1"
+      version: "1.15.3"
       sourceRef:
         kind: HelmRepository
         name: cert-manager

kubernetes/infrastructure/crds/traefik.crds.yaml

@@ -8,7 +8,7 @@ spec:
   interval: 30m
   url: https://github.com/traefik/traefik-helm-chart.git
   ref:
-    tag: v32.1.1
+    tag: v32.0.0
   ignore: |
     # exclude all
     /*

kubernetes/infrastructure/monitoring/kube-prometheus-stack.yaml

@@ -18,7 +18,7 @@ spec:
   chart:
     spec:
       chart: kube-prometheus-stack
-      version: "65.3.1"
+      version: "63.1.0"
       sourceRef:
         kind: HelmRepository
         name: monitoring

kubernetes/infrastructure/spegel/spegel.yaml

@@ -18,7 +18,7 @@ spec:
   chart:
     spec:
       chart: spegel
-      version: "v0.0.27"
+      version: "v0.0.24"
       interval: 5m
       sourceRef:
         kind: HelmRepository

kubernetes/infrastructure/traefik/external-services/tabby.fascinated.cc.yml

@@ -1,33 +0,0 @@
-kind: Service
-apiVersion: v1
-metadata:
-  name: tabby-external
-  namespace: traefik
-spec:
-  type: ExternalName
-  externalName: 10.0.0.136
-  ports:
-    - name: http
-      port: 8280
----
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
-  name: tabby-external-ingress
-  namespace: traefik
-  annotations:
-    kubernetes.io/ingress.class: traefik-external
-spec:
-  entryPoints:
-    - websecure
-  routes:
-    - match: Host(`tabby.fascinated.cc`)
-      kind: Rule
-      middlewares:
-        - name: default-headers
-          namespace: traefik
-      services:
-        - name: tabby-external
-          port: 8280
-  tls:
-    secretName: fascinated-cc

kubernetes/infrastructure/traefik/traefik.yaml

@@ -18,7 +18,7 @@ spec:
   chart:
     spec:
       chart: traefik
-      version: "32.1.1"
+      version: "32.0.0"
       sourceRef:
         kind: HelmRepository
         name: traefik