blocky helm release - kubesearch

Key	Types
persistence.config.name (8) `blocky-config`	string
persistence.config.type (8) `configMap`	string
persistence.config.globalMounts[].path (7) `/app/config.yml`	string
persistence.config.globalMounts[].subPath (7) `config.yml`	string
persistence.config.globalMounts[].readOnly (3) `true`	boolean
persistence.config.enabled (3) `true`	boolean
persistence.config.advancedMounts.blocky.app[].path (1) `/app/config.yml`	string
persistence.config.advancedMounts.blocky.app[].subPath (1) `config.yaml`	string
persistence.list-cache.accessMode (1) `ReadWriteMany`	string
persistence.list-cache.globalMounts[].path (1) `/var/cache/blocky/lists`	string
persistence.list-cache.size (1) `2Gi`	string
persistence.list-cache.type (1) `persistentVolumeClaim`	string
persistence.lists.globalMounts[].readOnly (1) `true`	boolean
persistence.lists.items[].key (1) `allowlist.txt blocklist.txt`	string
persistence.lists.items[].path (1) `allowlist.txt blocklist.txt`	string
persistence.lists.name (1) `blocky-lists`	string
persistence.lists.type (1) `configMap`	string
persistence.postgres-cert.defaultMode (1) `440`	number
persistence.postgres-cert.globalMounts[].path (1) `/var/run/secrets/postgresql`	string
persistence.postgres-cert.name (1) `blocky-postgres-cert`	string
persistence.postgres-cert.type (1) `secret`	string
persistence.tls.globalMounts[].path (1) `/certs/tls.crt /certs/tls.key`	string
persistence.tls.globalMounts[].subPath (1) `tls.crt tls.key`	string
persistence.tls.name (1) `blocky-tls`	string
persistence.tls.type (1) `secret`	string
service.dns.type (7) `LoadBalancer`	string
service.dns.controller (6) `blocky`	string
service.dns.externalTrafficPolicy (6) `Local`	string
service.dns.ports.dns-tcp.port (4) `53`	number
service.dns.ports.dns-tcp.protocol (3) `TCP`	string
service.dns.ports.dns-tcp.enabled (1) `true`	boolean
service.dns.ports.dns-udp.port (4) `53`	number
service.dns.ports.dns-udp.protocol (4) `UDP`	string
service.dns.ports.dns-udp.enabled (1) `true`	boolean
service.dns.ports.tcp.port (3) `53`	number
service.dns.ports.tcp.protocol (3) `TCP`	string
service.dns.ports.tcp.targetPort (2) `53`	number
service.dns.ports.tcp.enabled (1) `true`	boolean
service.dns.ports.udp.port (3) `53`	number
service.dns.ports.udp.protocol (3) `UDP`	string
service.dns.ports.udp.targetPort (2) `53`	number
service.dns.ports.udp.enabled (1) `true`	boolean
service.dns.ports.dns-tls.port (1) `853`	number
service.dns.ports.http.port (1) `4000`	number
service.dns.ports.http.protocol (1) `TCP`	string
service.dns.annotations."lbipam.cilium.io/ips" (3) `192.168.10.85`	string
service.dns.annotations."metallb.io/loadBalancerIPs" (2) `${BLOCKY_IP_ADDRESS}`	string
service.dns.annotations."coredns.io/hostname" (1) `dot.clerici.tech`	string
service.dns.annotations."metallb.universe.tf/allow-shared-ip" (1) `blocky`	string
service.dns.annotations."metallb.universe.tf/loadBalancerIPs" (1) `${LB_BLOCKY}`	string
service.dns.ipFamilyPolicy (2) `PreferDualStack`	string
service.dns.enabled (1) `true`	boolean
service.dns.ipFamilies[] (1) `- IPv4 - IPv6`	string
service.dns.loadBalancerClass (1) `io.cilium/bgp-control-plane`	string
service.dns.loadBalancerIP (1) `${LB_IP_BLOCKY_SVC}`	string
service.app.controller (4) `blocky`	string
service.app.ports.http.port (4) `4000`	number
service.app.ports.http.primary (1) `true`	boolean
service.app.ports.http.targetPort (1) `4000`	number
service.app.ports.dns-tcp.port (1) `53`	number
service.app.ports.dns-tcp.protocol (1) `TCP`	string
service.app.ports.dns-tcp.targetPort (1) `5353`	number
service.app.ports.dns-udp.port (1) `53`	number
service.app.ports.dns-udp.protocol (1) `UDP`	string
service.app.ports.dns-udp.targetPort (1) `5353`	number
service.app.annotations."lbipam.cilium.io/ips" (1) `fd42:78a5:2c09::53,192.168.0.53`	string
service.app.forceRename (1) `blocky`	string
service.app.ipFamilyPolicy (1) `PreferDualStack`	string
service.app.type (1) `LoadBalancer`	string
service.main.ports.http.port (2) `4000`	number
service.main.ports.http.protocol (1) `TCP`	string
service.main.annotations."metallb.universe.tf/allow-shared-ip" (1) `blocky`	string
service.main.annotations."metallb.universe.tf/loadBalancerIPs" (1) `${LB_BLOCKY}`	string
service.main.controller (1) `main`	string
service.main.enabled (1) `true`	boolean
service.main.externalTrafficPolicy (1) `Local`	string
service.main.type (1) `LoadBalancer`	string
service.blocky.ports.http.port (1) `4000`	number
service.blocky.ports.http.protocol (1) `HTTP`	string
service.cache.controller (1) `cache`	string
service.cache.ports.http.port (1) `6379`	number
service.frontend.controller (1) `frontend`	string
service.frontend.ports.http.port (1) `3000`	number
service.internal.clusterIP (1) `2001:cafe:43::c`	string
service.internal.controller (1) `blocky`	string
service.internal.ports.dns-tcp.port (1) `53`	number
service.internal.ports.dns-tcp.protocol (1) `TCP`	string
service.internal.ports.dns-udp.port (1) `53`	number
service.internal.ports.dns-udp.protocol (1) `UDP`	string
service.k8s.clusterIP (1) `${BLOCKY_CLUSTER_IP}`	string
service.k8s.controller (1) `blocky`	string
service.k8s.ports.dns-tcp.port (1) `53`	number
service.k8s.ports.dns-tls.port (1) `853`	number
service.k8s.ports.dns-udp.port (1) `53`	number
service.k8s.ports.dns-udp.protocol (1) `UDP`	string
service.k8s.ports.http.port (1) `4000`	number
service.ts.annotations."tailscale.com/hostname" (1) `blocky`	string
service.ts.annotations."tailscale.com/proxy-group" (1) `ingress-proxy`	string
service.ts.annotations."tailscale.com/tags" (1) `tag:dns`	string
service.ts.controller (1) `blocky`	string
service.ts.ipFamilyPolicy (1) `PreferDualStack`	string
service.ts.loadBalancerClass (1) `tailscale`	string
service.ts.ports.dns-tcp.port (1) `53`	number
service.ts.ports.dns-tcp.protocol (1) `TCP`	string
service.ts.ports.dns-tcp.targetPort (1) `5353`	number
service.ts.ports.dns-udp.port (1) `53`	number
service.ts.ports.dns-udp.protocol (1) `UDP`	string
service.ts.ports.dns-udp.targetPort (1) `5353`	number
service.ts.ports.http.port (1) `80`	number
service.ts.ports.http.primary (1) `true`	boolean
service.ts.ports.http.targetPort (1) `4000`	number
service.ts.type (1) `LoadBalancer`	string
controllers.blocky.replicas (5) `1`	number
controllers.blocky.strategy (5) `RollingUpdate`	string
controllers.blocky.pod.securityContext.runAsGroup (4) `1000`	number
controllers.blocky.pod.securityContext.runAsNonRoot (4) `true`	boolean
controllers.blocky.pod.securityContext.runAsUser (4) `1000`	number
controllers.blocky.pod.securityContext.seccompProfile.type (4) `RuntimeDefault`	string
controllers.blocky.pod.securityContext.fsGroup (1) `1000`	number
controllers.blocky.pod.hostUsers (2) `false`	boolean
controllers.blocky.pod.affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchLabels."app.kubernetes.io/instance" (1) `blocky`	string
controllers.blocky.pod.affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].topologyKey (1) `kubernetes.io/hostname`	string
controllers.blocky.pod.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (1) `blocky`	string
controllers.blocky.pod.topologySpreadConstraints[].maxSkew (1) `1`	number
controllers.blocky.pod.topologySpreadConstraints[].topologyKey (1) `kubernetes.io/hostname`	string
controllers.blocky.pod.topologySpreadConstraints[].whenUnsatisfiable (1) `DoNotSchedule`	string
controllers.blocky.containers.app.image.repository (3) `ghcr.io/0xerr0r/blocky`	string
controllers.blocky.containers.app.image.tag (3) `v0.26@sha256:b259ada3f943e73283f1fc5e84ac39a791afec7de86515d1aeccc03d2c39e595`	string
controllers.blocky.containers.app.securityContext.allowPrivilegeEscalation (3) `false`	boolean
controllers.blocky.containers.app.securityContext.capabilities.drop[] (3) `- ALL`	string
controllers.blocky.containers.app.securityContext.capabilities.add[] (2) `- NET_BIND_SERVICE`	string
controllers.blocky.containers.app.securityContext.readOnlyRootFilesystem (3) `true`	boolean
controllers.blocky.containers.app.env.TZ (2) `${TIMEZONE}`	string
controllers.blocky.containers.app.probes.liveness.custom (2) `true`	boolean
controllers.blocky.containers.app.probes.liveness.enabled (2) `true`	boolean
controllers.blocky.containers.app.probes.liveness.spec.exec.command[] (2) `- /app/blocky - healthcheck`	string
controllers.blocky.containers.app.probes.liveness.spec.failureThreshold (1) `3`	number
controllers.blocky.containers.app.probes.liveness.spec.initialDelaySeconds (1) `15`	number
controllers.blocky.containers.app.probes.liveness.spec.periodSeconds (1) `10`	number
controllers.blocky.containers.app.probes.liveness.spec.timeoutSeconds (1) `1`	number
controllers.blocky.containers.app.probes.readiness.custom (2) `true`	boolean
controllers.blocky.containers.app.probes.readiness.enabled (2) `true`	boolean
controllers.blocky.containers.app.probes.readiness.spec.exec.command[] (2) `- /app/blocky - healthcheck`	string
controllers.blocky.containers.app.probes.readiness.spec.failureThreshold (1) `3`	number
controllers.blocky.containers.app.probes.readiness.spec.initialDelaySeconds (1) `15`	number
controllers.blocky.containers.app.probes.readiness.spec.periodSeconds (1) `10`	number
controllers.blocky.containers.app.probes.readiness.spec.timeoutSeconds (1) `1`	number
controllers.blocky.containers.app.probes.startup.custom (1) `true`	boolean
controllers.blocky.containers.app.probes.startup.enabled (1) `true`	boolean
controllers.blocky.containers.app.probes.startup.spec.exec.command[] (1) `- /app/blocky - healthcheck - -p - "5353"`	string
controllers.blocky.containers.app.probes.startup.spec.failureThreshold (1) `10`	number
controllers.blocky.containers.app.resources.limits.memory (2) `512Mi`	string
controllers.blocky.containers.app.resources.limits.cpu (1) `1`	number
controllers.blocky.containers.app.resources.requests.cpu (2) `10m`	string
controllers.blocky.containers.app.resources.requests.memory (2) `128Mi`	string
controllers.blocky.containers.blocky.image.repository (2) `ghcr.io/0xerr0r/blocky`	string
controllers.blocky.containers.blocky.image.tag (2) `v0.35.0@sha256:4f165b63db0d76c96ecc47c7a8f57caeedc003a912bdce29abb0e283ce02e16b`	string
controllers.blocky.containers.blocky.probes.liveness.custom (2) `true`	boolean
controllers.blocky.containers.blocky.probes.liveness.enabled (2) `true`	boolean
controllers.blocky.containers.blocky.probes.liveness.spec.exec.command[] (1) `- /app/blocky - healthcheck`	string
controllers.blocky.containers.blocky.probes.liveness.spec.tcpSocket.port (1) `1053`	number
controllers.blocky.containers.blocky.probes.readiness.custom (1) `true`	boolean
controllers.blocky.containers.blocky.probes.readiness.enabled (1) `true`	boolean
controllers.blocky.containers.blocky.probes.readiness.spec.exec.command[] (1) `- /app/blocky - healthcheck`	string
controllers.blocky.containers.blocky.probes.startup.custom (1) `true`	boolean
controllers.blocky.containers.blocky.probes.startup.enabled (1) `true`	boolean
controllers.blocky.containers.blocky.probes.startup.spec.failureThreshold (1) `12`	number
controllers.blocky.containers.blocky.probes.startup.spec.periodSeconds (1) `5`	number
controllers.blocky.containers.blocky.probes.startup.spec.tcpSocket.port (1) `1053`	number
controllers.blocky.containers.blocky.resources.limits.memory (2) `512Mi`	string
controllers.blocky.containers.blocky.resources.requests.cpu (2) `50m`	string
controllers.blocky.containers.blocky.resources.requests.memory (2) `100Mi`	string
controllers.blocky.containers.blocky.securityContext.allowPrivilegeEscalation (2) `false`	boolean
controllers.blocky.containers.blocky.securityContext.capabilities.drop[] (2) `- ALL`	string
controllers.blocky.containers.blocky.securityContext.capabilities.add[] (1) `- NET_BIND_SERVICE`	string
controllers.blocky.containers.blocky.securityContext.readOnlyRootFilesystem (2) `true`	boolean
controllers.blocky.containers.blocky.env.PGCONNECT_TIMEOUT (1) `10`	number
controllers.blocky.containers.blocky.env.PGDATABASE.valueFrom.configMapKeyRef.key (1) `dbname`	string
controllers.blocky.containers.blocky.env.PGDATABASE.valueFrom.configMapKeyRef.name (1) `blocky-postgres`	string
controllers.blocky.containers.blocky.env.PGHOST.valueFrom.configMapKeyRef.key (1) `host`	string
controllers.blocky.containers.blocky.env.PGHOST.valueFrom.configMapKeyRef.name (1) `blocky-postgres`	string
controllers.blocky.containers.blocky.env.PGPORT.valueFrom.configMapKeyRef.key (1) `port`	string
controllers.blocky.containers.blocky.env.PGPORT.valueFrom.configMapKeyRef.name (1) `blocky-postgres`	string
controllers.blocky.containers.blocky.env.PGSSLCERT (1) `/var/run/secrets/postgresql/tls.crt`	string
controllers.blocky.containers.blocky.env.PGSSLKEY (1) `/var/run/secrets/postgresql/tls.key`	string
controllers.blocky.containers.blocky.env.PGSSLMODE (1) `verify-full`	string
controllers.blocky.containers.blocky.env.PGSSLROOTCERT (1) `/var/run/secrets/postgresql/ca.crt`	string
controllers.blocky.containers.blocky.env.PGUSER.valueFrom.configMapKeyRef.key (1) `username`	string
controllers.blocky.containers.blocky.env.PGUSER.valueFrom.configMapKeyRef.name (1) `blocky-postgres`	string
controllers.blocky.annotations."reloader.stakater.com/auto" (2) `true`	string
controllers.blocky.rollingUpdate.surge (2) `1`	number
controllers.blocky.rollingUpdate.unavailable (2) `1`	number
controllers.main.annotations."reloader.stakater.com/auto" (2) `true`	string
controllers.main.containers.main.image.repository (2) `ghcr.io/0xerr0r/blocky`	string
controllers.main.containers.main.image.tag (2) `v0.35.0@sha256:4f165b63db0d76c96ecc47c7a8f57caeedc003a912bdce29abb0e283ce02e16b`	string
controllers.main.containers.main.probes.liveness.enabled (2) `true`	boolean
controllers.main.containers.main.probes.liveness.custom (1) `true`	boolean
controllers.main.containers.main.probes.liveness.spec.failureThreshold (1) `3`	number
controllers.main.containers.main.probes.liveness.spec.httpGet.path (1) `/api/blocking/status`	string
controllers.main.containers.main.probes.liveness.spec.httpGet.port (1) `4000`	number
controllers.main.containers.main.probes.liveness.spec.initialDelaySeconds (1) `0`	number
controllers.main.containers.main.probes.liveness.spec.periodSeconds (1) `10`	number
controllers.main.containers.main.probes.liveness.spec.timeoutSeconds (1) `1`	number
controllers.main.containers.main.probes.readiness.enabled (2) `true`	boolean
controllers.main.containers.main.probes.readiness.custom (1) `true`	boolean
controllers.main.containers.main.probes.readiness.spec.failureThreshold (1) `3`	number
controllers.main.containers.main.probes.readiness.spec.httpGet.path (1) `/api/blocking/status`	string
controllers.main.containers.main.probes.readiness.spec.httpGet.port (1) `4000`	number
controllers.main.containers.main.probes.readiness.spec.initialDelaySeconds (1) `0`	number
controllers.main.containers.main.probes.readiness.spec.periodSeconds (1) `10`	number
controllers.main.containers.main.probes.readiness.spec.timeoutSeconds (1) `1`	number
controllers.main.containers.main.probes.startup.enabled (2) `true`	boolean
controllers.main.containers.main.probes.startup.spec.failureThreshold (1) `30`	number
controllers.main.containers.main.probes.startup.spec.periodSeconds (1) `5`	number
controllers.main.containers.main.env.TZ (1) `${TZ}`	string
controllers.main.containers.main.resources.limits.memory (1) `150Mi`	string
controllers.main.containers.main.resources.requests.cpu (1) `10m`	string
controllers.main.containers.main.resources.requests.memory (1) `50Mi`	string
controllers.main.containers.main.securityContext.allowPrivilegeEscalation (1) `false`	boolean
controllers.main.containers.main.securityContext.capabilities.drop[] (1) `- ALL`	string
controllers.main.containers.main.securityContext.readOnlyRootFilesystem (1) `true`	boolean
controllers.main.strategy (2) `RollingUpdate`	string
controllers.main.replicas (1) `2`	number
controllers.${APP}.annotations."reloader.stakater.com/auto" (1) `true`	string
controllers.${APP}.containers.app.env.TZ (1) `${TIMEZONE}`	string
controllers.${APP}.containers.app.image.repository (1) `ghcr.io/0xerr0r/blocky`	string
controllers.${APP}.containers.app.image.tag (1) `v0.35.0@sha256:4f165b63db0d76c96ecc47c7a8f57caeedc003a912bdce29abb0e283ce02e16b`	string
controllers.${APP}.containers.app.probes.liveness.custom (1) `true`	boolean
controllers.${APP}.containers.app.probes.liveness.enabled (1) `true`	boolean
controllers.${APP}.containers.app.probes.liveness.spec.failureThreshold (1) `3`	number
controllers.${APP}.containers.app.probes.liveness.spec.initialDelaySeconds (1) `30`	number
controllers.${APP}.containers.app.probes.liveness.spec.periodSeconds (1) `30`	number
controllers.${APP}.containers.app.probes.liveness.spec.tcpSocket.port (1) `53`	number
controllers.${APP}.containers.app.probes.readiness.custom (1) `true`	boolean
controllers.${APP}.containers.app.probes.readiness.enabled (1) `true`	boolean
controllers.${APP}.containers.app.probes.readiness.spec.failureThreshold (1) `3`	number
controllers.${APP}.containers.app.probes.readiness.spec.initialDelaySeconds (1) `30`	number
controllers.${APP}.containers.app.probes.readiness.spec.periodSeconds (1) `30`	number
controllers.${APP}.containers.app.probes.readiness.spec.tcpSocket.port (1) `53`	number
controllers.${APP}.containers.app.probes.startup.enabled (1) `false`	boolean
controllers.${APP}.containers.app.resources.limits.memory (1) `512Mi`	string
controllers.${APP}.containers.app.resources.requests.cpu (1) `10m`	string
controllers.${APP}.containers.app.securityContext.allowPrivilegeEscalation (1) `false`	boolean
controllers.${APP}.containers.app.securityContext.capabilities.add[] (1) `- NET_BIND_SERVICE`	string
controllers.${APP}.containers.app.securityContext.capabilities.drop[] (1) `- ALL`	string
controllers.${APP}.containers.app.securityContext.readOnlyRootFilesystem (1) `true`	boolean
controllers.${APP}.initContainers.init-db.envFrom[].secretRef.name (1) `blocky-secret`	string
controllers.${APP}.initContainers.init-db.image.repository (1) `ghcr.io/home-operations/postgres-init`	string
controllers.${APP}.initContainers.init-db.image.tag (1) `18`	number
controllers.${APP}.pod.securityContext.runAsGroup (1) `568`	number
controllers.${APP}.pod.securityContext.runAsNonRoot (1) `true`	boolean
controllers.${APP}.pod.securityContext.runAsUser (1) `568`	number
controllers.${APP}.rollingUpdate.maxUnavailable (1) `50%`	string
controllers.${APP}.strategy (1) `RollingUpdate`	string
controllers.${APP}.type (1) `daemonset`	string
controllers.cache.containers.server.command (1) `redis-server`	string
controllers.cache.containers.server.env.REDIS_REPLICATION_MODE (1) `master`	string
controllers.cache.containers.server.image.repository (1) `public.ecr.aws/docker/library/redis`	string
controllers.cache.containers.server.image.tag (1) `8.10.3@sha256:f245f4c83b84a9e9a0588da1c9456e579455310f0945d5db52cd2ba27f2000cc`	string
controllers.cache.containers.server.resources.limits.memory (1) `100Mi`	string
controllers.cache.containers.server.resources.requests.cpu (1) `10m`	string
controllers.cache.containers.server.resources.requests.memory (1) `10Mi`	string
controllers.frontend.containers.main.env.BLOCKY_API_URL (1) `http://{{ .Release.Name }}-app:4000`	string
controllers.frontend.containers.main.image.repository (1) `ghcr.io/gabeduartem/blocky-ui`	string
controllers.frontend.containers.main.image.tag (1) `2.0.0@sha256:fb614982e1a28674e242dba14b804a4e19cec54034b9c5f36ef35a245a1758cf`	string
controllers.frontend.containers.main.probes.liveness.enabled (1) `true`	boolean
controllers.frontend.containers.main.probes.liveness.type (1) `HTTP`	string
controllers.frontend.containers.main.probes.readiness.enabled (1) `true`	boolean
controllers.frontend.containers.main.probes.readiness.type (1) `HTTP`	string
controllers.frontend.containers.main.securityContext.allowPrivilegeEscalation (1) `false`	boolean
controllers.frontend.containers.main.securityContext.capabilities.drop[] (1) `- ALL`	string
controllers.frontend.containers.main.securityContext.readOnlyRootFilesystem (1) `true`	boolean
controllers.frontend.pod.hostUsers (1) `false`	boolean
controllers.frontend.pod.securityContext.runAsGroup (1) `1000`	number
controllers.frontend.pod.securityContext.runAsNonRoot (1) `true`	boolean
controllers.frontend.pod.securityContext.runAsUser (1) `1000`	number
controllers.frontend.pod.securityContext.seccompProfile.type (1) `RuntimeDefault`	string
controllers.frontend.strategy (1) `RollingUpdate`	string
serviceMonitor.app.endpoints[].interval (3) `1m`	string
serviceMonitor.app.endpoints[].path (3) `/metrics`	string
serviceMonitor.app.endpoints[].port (3) `http`	string
serviceMonitor.app.endpoints[].scheme (3) `http`	string
serviceMonitor.app.endpoints[].scrapeTimeout (3) `10s`	string
serviceMonitor.app.serviceName (3) `blocky`	string
serviceMonitor.blocky.endpoints[].port (2) `http`	string
serviceMonitor.blocky.endpoints[].path (1) `/metrics`	string
serviceMonitor.blocky.service.name (1) `blocky`	string
serviceMonitor.blocky.serviceName (1) `blocky-k8s`	string
serviceMonitor.main.enabled (2) `true`	boolean
serviceMonitor.main.endpoints[].interval (2) `30s`	string
serviceMonitor.main.endpoints[].path (2) `/metrics`	string
serviceMonitor.main.endpoints[].port (2) `http`	string
serviceMonitor.main.endpoints[].scrapeTimeout (2) `10s`	string
serviceMonitor.main.serviceName (2) `blocky`	string
ingress.app.hosts[].host (2) `{{ .Release.Name }}.${SECRET_DOMAIN}`	string
ingress.app.hosts[].paths[].path (2) `/`	string
ingress.app.hosts[].paths[].service.identifier (2) `app`	string
ingress.app.hosts[].paths[].service.port (2) `http`	string
ingress.app.annotations."cert-manager.io/cluster-issuer" (1) `letsencrypt-production`	string
ingress.app.annotations."hajimari.io/enable" (1) `false`	string
ingress.app.className (1) `internal`	string
ingress.app.enabled (1) `true`	boolean
ingress.app.tls[].hosts[] (1) `- ${APP}.local.${SECRET_DOMAIN}`	string
ingress.app.tls[].secretName (1) `${APP}-tls-production`	string
configMaps.config.data."config.yml" (1) upstream: default: - tcp-tls:one.one.one.one:853 - tcp-tls:dns.quad9.net:853 conditional: mapping: ${SECRET_DOMAIN}: ${LB_K8S_GATEWAY} clientLookup: upstream: ${GATEWAY_IP} bootstrapDns: tcp+udp:1.1.1.1 blocking: blackLists: ads: - https://raw.githubusercontent.com/ookangzheng/dbl-oisd-nl/master/dbl.txt fakenews: - https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/fakenews/hosts whiteLists: ads: - https://raw.githubusercontent.com/anudeepND/whitelist/master/domains/whitelist.txt - \| investing.com clientGroupsBlock: default: - ads - fakenews prometheus: enable: true path: /metrics httpPort: 4000 logLevel: info	string
configMaps.config.enabled (1) `true`	boolean
defaultPodOptions.nodeSelector."kubernetes.io/arch" (1) `amd64`	string
defaultPodOptions.securityContext.fsGroup (1) `568`	number
defaultPodOptions.securityContext.runAsGroup (1) `568`	number
defaultPodOptions.securityContext.runAsNonRoot (1) `true`	boolean
defaultPodOptions.securityContext.runAsUser (1) `568`	number
defaultPodOptions.securityContext.seccompProfile.type (1) `RuntimeDefault`	string
defaultPodOptions.shareProcessNamespace (1) `true`	boolean
networkpolicies.blocky.controller (1) `blocky`	string
networkpolicies.blocky.egress[].toCIDR[] (1) `- "8.8.8.8/32" - "1.1.1.1/32" - "9.9.9.9/32" - "2620:fe::fe/128" - "2606:4700:4700::1111/128" - "2001:4860:4860::8888/128" - ${NODE_GATEWAY}/32`	string
networkpolicies.blocky.egress[].toEndpoints[].matchLabels."app.kubernetes.io/instance" (1) `k8s-gateway`	string
networkpolicies.blocky.egress[].toEndpoints[].matchLabels.k8s-app (1) `kube-dns`	string
networkpolicies.blocky.egress[].toEndpoints[].matchLabels.k8s:"io.kubernetes.pod.namespace" (1) `kube-system`	string
networkpolicies.blocky.egress[].toEntities[] (1) `- world`	string
networkpolicies.blocky.egress[].toPorts[].ports[].port (1) `53 53 53 53 443 853 1053 1053 53 53`	string
networkpolicies.blocky.egress[].toPorts[].ports[].protocol (1) `UDP TCP UDP TCP TCP UDP UDP TCP UDP TCP`	string
networkpolicies.blocky.ingress[].fromEndpoints[].matchLabels."app.kubernetes.io/instance" (1) `blocky-ui`	string
networkpolicies.blocky.ingress[].fromEndpoints[].matchLabels."gateway.envoyproxy.io/owning-gateway-name" (1) `external`	string
networkpolicies.blocky.ingress[].fromEndpoints[].matchLabels.k8s:"io.kubernetes.pod.namespace" (1) `envoy-gateway`	string
networkpolicies.blocky.ingress[].fromEntities[] (1) `- all`	string
networkpolicies.blocky.ingress[].toPorts[].ports[].port (1) `53 53 853 4000`	string
networkpolicies.blocky.ingress[].toPorts[].ports[].protocol (1) `UDP TCP TCP TCP`	string
networkpolicies.blocky.type (1) `cilium`	string
route.blocky-DOH.annotations."gatus.home-operations.com/endpoint" (1) `url: https://dns.clerici.tech/dns-query?dns=AAABAAABAAAAAAAABmdvb2dsZQNjb20AAAEAAQ`	string
route.blocky-DOH.hostnames[] (1) `- dns.clerici.tech`	string
route.blocky-DOH.parentRefs[].name (1) `external`	string
route.blocky-DOH.parentRefs[].namespace (1) `envoy-gateway`	string
route.blocky-DOH.rules[].backendRefs[].identifier (1) `k8s`	string
route.blocky-DOH.rules[].backendRefs[].port (1) `4000`	number
route.blocky-DOH.rules[].matches[].path.type (1) `PathPrefix`	string
route.blocky-DOH.rules[].matches[].path.value (1) `/dns-query`	string
route.blocky.annotations."gethomepage.dev/description" (1) `DNS proxy and ad-blocker written in Go`	string
route.blocky.annotations."gethomepage.dev/enabled" (1) `true`	string
route.blocky.annotations."gethomepage.dev/group" (1) `Network`	string
route.blocky.annotations."gethomepage.dev/icon" (1) `blocky`	string
route.blocky.annotations."gethomepage.dev/name" (1) `Blocky`	string
route.blocky.annotations."gethomepage.dev/pod-selector" (1) `app.kubernetes.io/instance in ( blocky, blocky-dragonfly )`	string
route.blocky.hostnames[] (1) `- blocky.${CLUSTER_DOMAIN}`	string
route.blocky.parentRefs[].name (1) `traefik-gateway`	string
route.blocky.parentRefs[].namespace (1) `network`	string
route.blocky.parentRefs[].sectionName (1) `websecure`	string
route.blocky.rules[].backendRefs[].identifier (1) `blocky`	string
route.blocky.rules[].filters[].extensionRef.group (1) `traefik.io`	string
route.blocky.rules[].filters[].extensionRef.kind (1) `Middleware`	string
route.blocky.rules[].filters[].extensionRef.name (1) `auth-chain`	string
route.blocky.rules[].filters[].type (1) `ExtensionRef`	string
route.internal.enabled (1) `true`	boolean
route.internal.hostnames[] (1) `- {{ .Release.Name }}.${INTERNAL_HOSTNAME}`	string
route.internal.kind (1) `HTTPRoute`	string
route.internal.parentRefs[].name (1) `envoy-internal`	string
route.internal.parentRefs[].namespace (1) `networking`	string
route.internal.parentRefs[].sectionName (1) `https`	string
route.internal.rules[].backendRefs[].name (1) `blocky-frontend`	string
route.internal.rules[].backendRefs[].port (1) `3000`	number
route.main.hostnames[] (1) `- blocky.${SECRET_DOMAIN}`	string
route.main.parentRefs[].name (1) `internal`	string
route.main.parentRefs[].namespace (1) `networking`	string
route.main.rules[].backendRefs[].identifier (1) `main`	string
route.main.rules[].backendRefs[].port (1) `http`	string

Key

Types

persistence.config.name (8)

blocky-config

string

persistence.config.type (8)

configMap

string

persistence.config.globalMounts[].path (7)

/app/config.yml

string

persistence.config.globalMounts[].subPath (7)

config.yml

string

persistence.config.globalMounts[].readOnly (3)

true

boolean

persistence.config.enabled (3)

true

boolean

persistence.config.advancedMounts.blocky.app[].path (1)

/app/config.yml

string

persistence.config.advancedMounts.blocky.app[].subPath (1)

config.yaml

string

persistence.list-cache.accessMode (1)

ReadWriteMany

string

persistence.list-cache.globalMounts[].path (1)

/var/cache/blocky/lists

string

persistence.list-cache.size (1)

2Gi

string

persistence.list-cache.type (1)

persistentVolumeClaim

string

persistence.lists.globalMounts[].readOnly (1)

true

boolean

persistence.lists.items[].key (1)

allowlist.txt
blocklist.txt

string

persistence.lists.items[].path (1)

allowlist.txt
blocklist.txt

string

persistence.lists.name (1)

blocky-lists

string

persistence.lists.type (1)

configMap

string

persistence.postgres-cert.defaultMode (1)

number

persistence.postgres-cert.globalMounts[].path (1)

/var/run/secrets/postgresql

string

persistence.postgres-cert.name (1)

blocky-postgres-cert

string

persistence.postgres-cert.type (1)

secret

string

persistence.tls.globalMounts[].path (1)

/certs/tls.crt
/certs/tls.key

string

persistence.tls.globalMounts[].subPath (1)

tls.crt
tls.key

string

persistence.tls.name (1)

blocky-tls

string

persistence.tls.type (1)

secret

string

service.dns.type (7)

LoadBalancer

string

service.dns.controller (6)

blocky

string

service.dns.externalTrafficPolicy (6)

Local

string

service.dns.ports.dns-tcp.port (4)

number

service.dns.ports.dns-tcp.protocol (3)

TCP

string

service.dns.ports.dns-tcp.enabled (1)

true

boolean

service.dns.ports.dns-udp.port (4)

number

service.dns.ports.dns-udp.protocol (4)

UDP

string

service.dns.ports.dns-udp.enabled (1)

true

boolean

service.dns.ports.tcp.port (3)

number

service.dns.ports.tcp.protocol (3)

TCP

string

service.dns.ports.tcp.targetPort (2)

number

service.dns.ports.tcp.enabled (1)

true

boolean

service.dns.ports.udp.port (3)

number

service.dns.ports.udp.protocol (3)

UDP

string

service.dns.ports.udp.targetPort (2)

number

service.dns.ports.udp.enabled (1)

true

boolean

service.dns.ports.dns-tls.port (1)

number

service.dns.ports.http.port (1)

number

service.dns.ports.http.protocol (1)

TCP

string

service.dns.annotations."lbipam.cilium.io/ips" (3)

192.168.10.85

string

service.dns.annotations."metallb.io/loadBalancerIPs" (2)

${BLOCKY_IP_ADDRESS}

string

service.dns.annotations."coredns.io/hostname" (1)

dot.clerici.tech

string

service.dns.annotations."metallb.universe.tf/allow-shared-ip" (1)

blocky

string

service.dns.annotations."metallb.universe.tf/loadBalancerIPs" (1)

${LB_BLOCKY}

string

service.dns.ipFamilyPolicy (2)

PreferDualStack

string

service.dns.enabled (1)

true

boolean

service.dns.ipFamilies[] (1)

- IPv4
- IPv6

string

service.dns.loadBalancerClass (1)

io.cilium/bgp-control-plane

string

service.dns.loadBalancerIP (1)

${LB_IP_BLOCKY_SVC}

string

service.app.controller (4)

blocky

string

service.app.ports.http.port (4)

number

service.app.ports.http.primary (1)

true

boolean

service.app.ports.http.targetPort (1)

number

service.app.ports.dns-tcp.port (1)

number

service.app.ports.dns-tcp.protocol (1)

TCP

string

service.app.ports.dns-tcp.targetPort (1)

number

service.app.ports.dns-udp.port (1)

number

service.app.ports.dns-udp.protocol (1)

UDP

string

service.app.ports.dns-udp.targetPort (1)

number

service.app.annotations."lbipam.cilium.io/ips" (1)

fd42:78a5:2c09::53,192.168.0.53

string

service.app.forceRename (1)

blocky

string

service.app.ipFamilyPolicy (1)

PreferDualStack

string

service.app.type (1)

LoadBalancer

string

service.main.ports.http.port (2)

number

service.main.ports.http.protocol (1)

TCP

string

service.main.annotations."metallb.universe.tf/allow-shared-ip" (1)

blocky

string

service.main.annotations."metallb.universe.tf/loadBalancerIPs" (1)

${LB_BLOCKY}

string

service.main.controller (1)

main

string

service.main.enabled (1)

true

boolean

service.main.externalTrafficPolicy (1)

Local

string

service.main.type (1)

LoadBalancer

string

service.blocky.ports.http.port (1)

number

service.blocky.ports.http.protocol (1)

HTTP

string

service.cache.controller (1)

cache

string

service.cache.ports.http.port (1)

number

service.frontend.controller (1)

frontend

string

service.frontend.ports.http.port (1)

number

service.internal.clusterIP (1)

2001:cafe:43::c

string

service.internal.controller (1)

blocky

string

service.internal.ports.dns-tcp.port (1)

number

service.internal.ports.dns-tcp.protocol (1)

TCP

string

service.internal.ports.dns-udp.port (1)

number

service.internal.ports.dns-udp.protocol (1)

UDP

string

service.k8s.clusterIP (1)

${BLOCKY_CLUSTER_IP}

string

service.k8s.controller (1)

blocky

string

service.k8s.ports.dns-tcp.port (1)

number

service.k8s.ports.dns-tls.port (1)

number

service.k8s.ports.dns-udp.port (1)

number

service.k8s.ports.dns-udp.protocol (1)

UDP

string

service.k8s.ports.http.port (1)

number

service.ts.annotations."tailscale.com/hostname" (1)

blocky

string

service.ts.annotations."tailscale.com/proxy-group" (1)

ingress-proxy

string

service.ts.annotations."tailscale.com/tags" (1)

tag:dns

string

service.ts.controller (1)

blocky

string

service.ts.ipFamilyPolicy (1)

PreferDualStack

string

service.ts.loadBalancerClass (1)

tailscale

string

service.ts.ports.dns-tcp.port (1)

number

service.ts.ports.dns-tcp.protocol (1)

TCP

string

service.ts.ports.dns-tcp.targetPort (1)

number

service.ts.ports.dns-udp.port (1)

number

service.ts.ports.dns-udp.protocol (1)

UDP

string

service.ts.ports.dns-udp.targetPort (1)

number

service.ts.ports.http.port (1)

number

service.ts.ports.http.primary (1)

true

boolean

service.ts.ports.http.targetPort (1)

number

service.ts.type (1)

LoadBalancer

string

controllers.blocky.replicas (5)

number

controllers.blocky.strategy (5)

RollingUpdate

string

controllers.blocky.pod.securityContext.runAsGroup (4)

number

controllers.blocky.pod.securityContext.runAsNonRoot (4)

true

boolean

controllers.blocky.pod.securityContext.runAsUser (4)

number

controllers.blocky.pod.securityContext.seccompProfile.type (4)

RuntimeDefault

string

controllers.blocky.pod.securityContext.fsGroup (1)

number

controllers.blocky.pod.hostUsers (2)

false

boolean

controllers.blocky.pod.affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchLabels."app.kubernetes.io/instance" (1)

blocky

string

controllers.blocky.pod.affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].topologyKey (1)

kubernetes.io/hostname

string

controllers.blocky.pod.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (1)

blocky

string

controllers.blocky.pod.topologySpreadConstraints[].maxSkew (1)

number

controllers.blocky.pod.topologySpreadConstraints[].topologyKey (1)

kubernetes.io/hostname

string

controllers.blocky.pod.topologySpreadConstraints[].whenUnsatisfiable (1)

DoNotSchedule

string

controllers.blocky.containers.app.image.repository (3)

ghcr.io/0xerr0r/blocky

string

controllers.blocky.containers.app.image.tag (3)

v0.26@sha256:b259ada3f943e73283f1fc5e84ac39a791afec7de86515d1aeccc03d2c39e595

string

controllers.blocky.containers.app.securityContext.allowPrivilegeEscalation (3)

false

boolean

controllers.blocky.containers.app.securityContext.capabilities.drop[] (3)

- ALL

string

controllers.blocky.containers.app.securityContext.capabilities.add[] (2)

- NET_BIND_SERVICE

string

controllers.blocky.containers.app.securityContext.readOnlyRootFilesystem (3)

true

boolean

controllers.blocky.containers.app.env.TZ (2)

${TIMEZONE}

string

controllers.blocky.containers.app.probes.liveness.custom (2)

true

boolean

controllers.blocky.containers.app.probes.liveness.enabled (2)

true

boolean

controllers.blocky.containers.app.probes.liveness.spec.exec.command[] (2)

- /app/blocky
- healthcheck

string

controllers.blocky.containers.app.probes.liveness.spec.failureThreshold (1)

number

controllers.blocky.containers.app.probes.liveness.spec.initialDelaySeconds (1)

number

controllers.blocky.containers.app.probes.liveness.spec.periodSeconds (1)

number

controllers.blocky.containers.app.probes.liveness.spec.timeoutSeconds (1)

number

controllers.blocky.containers.app.probes.readiness.custom (2)

true

boolean

controllers.blocky.containers.app.probes.readiness.enabled (2)

true

boolean

controllers.blocky.containers.app.probes.readiness.spec.exec.command[] (2)

- /app/blocky
- healthcheck

string

controllers.blocky.containers.app.probes.readiness.spec.failureThreshold (1)

number

controllers.blocky.containers.app.probes.readiness.spec.initialDelaySeconds (1)

number

controllers.blocky.containers.app.probes.readiness.spec.periodSeconds (1)

number

controllers.blocky.containers.app.probes.readiness.spec.timeoutSeconds (1)

number

controllers.blocky.containers.app.probes.startup.custom (1)

true

boolean

controllers.blocky.containers.app.probes.startup.enabled (1)

true

boolean

controllers.blocky.containers.app.probes.startup.spec.exec.command[] (1)

- /app/blocky
- healthcheck
- -p
- "5353"

string

controllers.blocky.containers.app.probes.startup.spec.failureThreshold (1)

number

controllers.blocky.containers.app.resources.limits.memory (2)

512Mi

string

controllers.blocky.containers.app.resources.limits.cpu (1)

number

controllers.blocky.containers.app.resources.requests.cpu (2)

10m

string

controllers.blocky.containers.app.resources.requests.memory (2)

128Mi

string

controllers.blocky.containers.blocky.image.repository (2)

ghcr.io/0xerr0r/blocky

string

controllers.blocky.containers.blocky.image.tag (2)

v0.35.0@sha256:4f165b63db0d76c96ecc47c7a8f57caeedc003a912bdce29abb0e283ce02e16b

string

controllers.blocky.containers.blocky.probes.liveness.custom (2)

true

boolean

controllers.blocky.containers.blocky.probes.liveness.enabled (2)

true

boolean

controllers.blocky.containers.blocky.probes.liveness.spec.exec.command[] (1)

- /app/blocky
- healthcheck

string

controllers.blocky.containers.blocky.probes.liveness.spec.tcpSocket.port (1)

number

controllers.blocky.containers.blocky.probes.readiness.custom (1)

true

boolean

controllers.blocky.containers.blocky.probes.readiness.enabled (1)

true

boolean

controllers.blocky.containers.blocky.probes.readiness.spec.exec.command[] (1)

- /app/blocky
- healthcheck

string

controllers.blocky.containers.blocky.probes.startup.custom (1)

true

boolean

controllers.blocky.containers.blocky.probes.startup.enabled (1)

true

boolean

controllers.blocky.containers.blocky.probes.startup.spec.failureThreshold (1)

number

controllers.blocky.containers.blocky.probes.startup.spec.periodSeconds (1)

number

controllers.blocky.containers.blocky.probes.startup.spec.tcpSocket.port (1)

number

controllers.blocky.containers.blocky.resources.limits.memory (2)

512Mi

string

controllers.blocky.containers.blocky.resources.requests.cpu (2)

50m

string

controllers.blocky.containers.blocky.resources.requests.memory (2)

100Mi

string

controllers.blocky.containers.blocky.securityContext.allowPrivilegeEscalation (2)

false

boolean

controllers.blocky.containers.blocky.securityContext.capabilities.drop[] (2)

- ALL

string

controllers.blocky.containers.blocky.securityContext.capabilities.add[] (1)

- NET_BIND_SERVICE

string

controllers.blocky.containers.blocky.securityContext.readOnlyRootFilesystem (2)

true

boolean

controllers.blocky.containers.blocky.env.PGCONNECT_TIMEOUT (1)

number

controllers.blocky.containers.blocky.env.PGDATABASE.valueFrom.configMapKeyRef.key (1)

dbname

string

controllers.blocky.containers.blocky.env.PGDATABASE.valueFrom.configMapKeyRef.name (1)

blocky-postgres

string

controllers.blocky.containers.blocky.env.PGHOST.valueFrom.configMapKeyRef.key (1)

host

string

controllers.blocky.containers.blocky.env.PGHOST.valueFrom.configMapKeyRef.name (1)

blocky-postgres

string

controllers.blocky.containers.blocky.env.PGPORT.valueFrom.configMapKeyRef.key (1)

port

string

controllers.blocky.containers.blocky.env.PGPORT.valueFrom.configMapKeyRef.name (1)

blocky-postgres

string

controllers.blocky.containers.blocky.env.PGSSLCERT (1)

/var/run/secrets/postgresql/tls.crt

string

controllers.blocky.containers.blocky.env.PGSSLKEY (1)

/var/run/secrets/postgresql/tls.key

string

controllers.blocky.containers.blocky.env.PGSSLMODE (1)

verify-full

string

controllers.blocky.containers.blocky.env.PGSSLROOTCERT (1)

/var/run/secrets/postgresql/ca.crt

string

controllers.blocky.containers.blocky.env.PGUSER.valueFrom.configMapKeyRef.key (1)

username

string

controllers.blocky.containers.blocky.env.PGUSER.valueFrom.configMapKeyRef.name (1)

blocky-postgres

string

controllers.blocky.annotations."reloader.stakater.com/auto" (2)

true

string

controllers.blocky.rollingUpdate.surge (2)

number

controllers.blocky.rollingUpdate.unavailable (2)

number

controllers.main.annotations."reloader.stakater.com/auto" (2)

true

string

controllers.main.containers.main.image.repository (2)

ghcr.io/0xerr0r/blocky

string

controllers.main.containers.main.image.tag (2)

v0.35.0@sha256:4f165b63db0d76c96ecc47c7a8f57caeedc003a912bdce29abb0e283ce02e16b

string

controllers.main.containers.main.probes.liveness.enabled (2)

true

boolean

controllers.main.containers.main.probes.liveness.custom (1)

true

boolean

controllers.main.containers.main.probes.liveness.spec.failureThreshold (1)

number

controllers.main.containers.main.probes.liveness.spec.httpGet.path (1)

/api/blocking/status

string

controllers.main.containers.main.probes.liveness.spec.httpGet.port (1)

number

controllers.main.containers.main.probes.liveness.spec.initialDelaySeconds (1)

number

controllers.main.containers.main.probes.liveness.spec.periodSeconds (1)

number

controllers.main.containers.main.probes.liveness.spec.timeoutSeconds (1)

number

controllers.main.containers.main.probes.readiness.enabled (2)

true

boolean

controllers.main.containers.main.probes.readiness.custom (1)

true

boolean

controllers.main.containers.main.probes.readiness.spec.failureThreshold (1)

number

controllers.main.containers.main.probes.readiness.spec.httpGet.path (1)

/api/blocking/status

string

controllers.main.containers.main.probes.readiness.spec.httpGet.port (1)

number

controllers.main.containers.main.probes.readiness.spec.initialDelaySeconds (1)

number

controllers.main.containers.main.probes.readiness.spec.periodSeconds (1)

number

controllers.main.containers.main.probes.readiness.spec.timeoutSeconds (1)

number

controllers.main.containers.main.probes.startup.enabled (2)

true

boolean

controllers.main.containers.main.probes.startup.spec.failureThreshold (1)

number

controllers.main.containers.main.probes.startup.spec.periodSeconds (1)

number

controllers.main.containers.main.env.TZ (1)

${TZ}

string

controllers.main.containers.main.resources.limits.memory (1)

150Mi

string

controllers.main.containers.main.resources.requests.cpu (1)

10m

string

controllers.main.containers.main.resources.requests.memory (1)

50Mi

string

controllers.main.containers.main.securityContext.allowPrivilegeEscalation (1)

false

boolean

controllers.main.containers.main.securityContext.capabilities.drop[] (1)

- ALL

string

controllers.main.containers.main.securityContext.readOnlyRootFilesystem (1)

true

boolean

controllers.main.strategy (2)

RollingUpdate

string

controllers.main.replicas (1)

number

controllers.${APP}.annotations."reloader.stakater.com/auto" (1)

true

string

controllers.${APP}.containers.app.env.TZ (1)

${TIMEZONE}

string

controllers.${APP}.containers.app.image.repository (1)

ghcr.io/0xerr0r/blocky

string

controllers.${APP}.containers.app.image.tag (1)

v0.35.0@sha256:4f165b63db0d76c96ecc47c7a8f57caeedc003a912bdce29abb0e283ce02e16b

string

controllers.${APP}.containers.app.probes.liveness.custom (1)

true

boolean

controllers.${APP}.containers.app.probes.liveness.enabled (1)

true

boolean

controllers.${APP}.containers.app.probes.liveness.spec.failureThreshold (1)

number

controllers.${APP}.containers.app.probes.liveness.spec.initialDelaySeconds (1)

number

controllers.${APP}.containers.app.probes.liveness.spec.periodSeconds (1)

number

controllers.${APP}.containers.app.probes.liveness.spec.tcpSocket.port (1)

number

controllers.${APP}.containers.app.probes.readiness.custom (1)

true

boolean

controllers.${APP}.containers.app.probes.readiness.enabled (1)

true

boolean

controllers.${APP}.containers.app.probes.readiness.spec.failureThreshold (1)

number

controllers.${APP}.containers.app.probes.readiness.spec.initialDelaySeconds (1)

number

controllers.${APP}.containers.app.probes.readiness.spec.periodSeconds (1)

number

controllers.${APP}.containers.app.probes.readiness.spec.tcpSocket.port (1)

number

controllers.${APP}.containers.app.probes.startup.enabled (1)

false

boolean

controllers.${APP}.containers.app.resources.limits.memory (1)

512Mi

string

controllers.${APP}.containers.app.resources.requests.cpu (1)

10m

string

controllers.${APP}.containers.app.securityContext.allowPrivilegeEscalation (1)

false

boolean

controllers.${APP}.containers.app.securityContext.capabilities.add[] (1)

- NET_BIND_SERVICE

string

controllers.${APP}.containers.app.securityContext.capabilities.drop[] (1)

- ALL

string

controllers.${APP}.containers.app.securityContext.readOnlyRootFilesystem (1)

true

boolean

controllers.${APP}.initContainers.init-db.envFrom[].secretRef.name (1)

blocky-secret

string

controllers.${APP}.initContainers.init-db.image.repository (1)

ghcr.io/home-operations/postgres-init

string

controllers.${APP}.initContainers.init-db.image.tag (1)

number

controllers.${APP}.pod.securityContext.runAsGroup (1)

number

controllers.${APP}.pod.securityContext.runAsNonRoot (1)

true

boolean

controllers.${APP}.pod.securityContext.runAsUser (1)

number

controllers.${APP}.rollingUpdate.maxUnavailable (1)

50%

string

controllers.${APP}.strategy (1)

RollingUpdate

string

controllers.${APP}.type (1)

daemonset

string

controllers.cache.containers.server.command (1)

redis-server

string

controllers.cache.containers.server.env.REDIS_REPLICATION_MODE (1)

master

string

controllers.cache.containers.server.image.repository (1)

public.ecr.aws/docker/library/redis

string

controllers.cache.containers.server.image.tag (1)

8.10.3@sha256:f245f4c83b84a9e9a0588da1c9456e579455310f0945d5db52cd2ba27f2000cc

string

controllers.cache.containers.server.resources.limits.memory (1)

100Mi

string

controllers.cache.containers.server.resources.requests.cpu (1)

10m

string

controllers.cache.containers.server.resources.requests.memory (1)

10Mi

string

controllers.frontend.containers.main.env.BLOCKY_API_URL (1)

http://{{ .Release.Name }}-app:4000

string

controllers.frontend.containers.main.image.repository (1)

ghcr.io/gabeduartem/blocky-ui

string

controllers.frontend.containers.main.image.tag (1)

2.0.0@sha256:fb614982e1a28674e242dba14b804a4e19cec54034b9c5f36ef35a245a1758cf

string

controllers.frontend.containers.main.probes.liveness.enabled (1)

true

boolean

controllers.frontend.containers.main.probes.liveness.type (1)

HTTP

string

controllers.frontend.containers.main.probes.readiness.enabled (1)

true

boolean

controllers.frontend.containers.main.probes.readiness.type (1)

HTTP

string

controllers.frontend.containers.main.securityContext.allowPrivilegeEscalation (1)

false

boolean

controllers.frontend.containers.main.securityContext.capabilities.drop[] (1)

- ALL

string

controllers.frontend.containers.main.securityContext.readOnlyRootFilesystem (1)

true

boolean

controllers.frontend.pod.hostUsers (1)

false

boolean

controllers.frontend.pod.securityContext.runAsGroup (1)

number

controllers.frontend.pod.securityContext.runAsNonRoot (1)

true

boolean

controllers.frontend.pod.securityContext.runAsUser (1)

number

controllers.frontend.pod.securityContext.seccompProfile.type (1)

RuntimeDefault

string

controllers.frontend.strategy (1)

RollingUpdate

string

serviceMonitor.app.endpoints[].interval (3)

1m

string

serviceMonitor.app.endpoints[].path (3)

/metrics

string

serviceMonitor.app.endpoints[].port (3)

http

string

serviceMonitor.app.endpoints[].scheme (3)

http

string

serviceMonitor.app.endpoints[].scrapeTimeout (3)

10s

string

serviceMonitor.app.serviceName (3)

blocky

string

serviceMonitor.blocky.endpoints[].port (2)

http

string

serviceMonitor.blocky.endpoints[].path (1)

/metrics

string

serviceMonitor.blocky.service.name (1)

blocky

string

serviceMonitor.blocky.serviceName (1)

blocky-k8s

string

serviceMonitor.main.enabled (2)

true

boolean

serviceMonitor.main.endpoints[].interval (2)

30s

string

serviceMonitor.main.endpoints[].path (2)

/metrics

string

serviceMonitor.main.endpoints[].port (2)

http

string

serviceMonitor.main.endpoints[].scrapeTimeout (2)

10s

string

serviceMonitor.main.serviceName (2)

blocky

string

ingress.app.hosts[].host (2)

{{ .Release.Name }}.${SECRET_DOMAIN}

string

ingress.app.hosts[].paths[].path (2)

string

ingress.app.hosts[].paths[].service.identifier (2)

app

string

ingress.app.hosts[].paths[].service.port (2)

http

string

ingress.app.annotations."cert-manager.io/cluster-issuer" (1)

letsencrypt-production

string

ingress.app.annotations."hajimari.io/enable" (1)

false

string

ingress.app.className (1)

internal

string

ingress.app.enabled (1)

true

boolean

ingress.app.tls[].hosts[] (1)

- ${APP}.local.${SECRET_DOMAIN}

string

ingress.app.tls[].secretName (1)

${APP}-tls-production

string

configMaps.config.data."config.yml" (1)

upstream:
  default:
    - tcp-tls:one.one.one.one:853
    - tcp-tls:dns.quad9.net:853
conditional:
  mapping:
    ${SECRET_DOMAIN}: ${LB_K8S_GATEWAY}
clientLookup:
  upstream: ${GATEWAY_IP}
bootstrapDns: tcp+udp:1.1.1.1
blocking:
  blackLists:
    ads:
      - https://raw.githubusercontent.com/ookangzheng/dbl-oisd-nl/master/dbl.txt
    fakenews:
      - https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/fakenews/hosts
  whiteLists:
    ads:
      - https://raw.githubusercontent.com/anudeepND/whitelist/master/domains/whitelist.txt
      - |
        investing.com
  clientGroupsBlock:
    default:
      - ads
      - fakenews
prometheus:
  enable: true
  path: /metrics
httpPort: 4000
logLevel: info

string

configMaps.config.enabled (1)

true

boolean

defaultPodOptions.nodeSelector."kubernetes.io/arch" (1)

amd64

string

defaultPodOptions.securityContext.fsGroup (1)

number

defaultPodOptions.securityContext.runAsGroup (1)

number

defaultPodOptions.securityContext.runAsNonRoot (1)

true

boolean

defaultPodOptions.securityContext.runAsUser (1)

number

defaultPodOptions.securityContext.seccompProfile.type (1)

RuntimeDefault

string

defaultPodOptions.shareProcessNamespace (1)

true

boolean

networkpolicies.blocky.controller (1)

blocky

string

networkpolicies.blocky.egress[].toCIDR[] (1)

- "8.8.8.8/32"
- "1.1.1.1/32"
- "9.9.9.9/32"
- "2620:fe::fe/128"
- "2606:4700:4700::1111/128"
- "2001:4860:4860::8888/128"
- ${NODE_GATEWAY}/32

string

networkpolicies.blocky.egress[].toEndpoints[].matchLabels."app.kubernetes.io/instance" (1)

k8s-gateway

string

networkpolicies.blocky.egress[].toEndpoints[].matchLabels.k8s-app (1)

kube-dns

string

networkpolicies.blocky.egress[].toEndpoints[].matchLabels.k8s:"io.kubernetes.pod.namespace" (1)

kube-system

string

networkpolicies.blocky.egress[].toEntities[] (1)

- world

string

networkpolicies.blocky.egress[].toPorts[].ports[].port (1)

string

networkpolicies.blocky.egress[].toPorts[].ports[].protocol (1)

UDP
TCP
UDP
TCP
TCP
UDP
UDP
TCP
UDP
TCP

string

networkpolicies.blocky.ingress[].fromEndpoints[].matchLabels."app.kubernetes.io/instance" (1)

blocky-ui

string

networkpolicies.blocky.ingress[].fromEndpoints[].matchLabels."gateway.envoyproxy.io/owning-gateway-name" (1)

external

string

networkpolicies.blocky.ingress[].fromEndpoints[].matchLabels.k8s:"io.kubernetes.pod.namespace" (1)

envoy-gateway

string

networkpolicies.blocky.ingress[].fromEntities[] (1)

- all

string

networkpolicies.blocky.ingress[].toPorts[].ports[].port (1)

string

networkpolicies.blocky.ingress[].toPorts[].ports[].protocol (1)

UDP
TCP
TCP
TCP

string

networkpolicies.blocky.type (1)

cilium

string

route.blocky-DOH.annotations."gatus.home-operations.com/endpoint" (1)

url: https://dns.clerici.tech/dns-query?dns=AAABAAABAAAAAAAABmdvb2dsZQNjb20AAAEAAQ

string

route.blocky-DOH.hostnames[] (1)

- dns.clerici.tech

string

route.blocky-DOH.parentRefs[].name (1)

external

string

route.blocky-DOH.parentRefs[].namespace (1)

envoy-gateway

string

route.blocky-DOH.rules[].backendRefs[].identifier (1)

k8s

string

route.blocky-DOH.rules[].backendRefs[].port (1)

number

route.blocky-DOH.rules[].matches[].path.type (1)

PathPrefix

string

route.blocky-DOH.rules[].matches[].path.value (1)

/dns-query

string

route.blocky.annotations."gethomepage.dev/description" (1)

DNS proxy and ad-blocker written in Go

string

route.blocky.annotations."gethomepage.dev/enabled" (1)

true

string

route.blocky.annotations."gethomepage.dev/group" (1)

Network

string

route.blocky.annotations."gethomepage.dev/icon" (1)

blocky

string

route.blocky.annotations."gethomepage.dev/name" (1)

Blocky

string

route.blocky.annotations."gethomepage.dev/pod-selector" (1)

app.kubernetes.io/instance in (
  blocky,
  blocky-dragonfly
)

string

route.blocky.hostnames[] (1)

- blocky.${CLUSTER_DOMAIN}

string

route.blocky.parentRefs[].name (1)

traefik-gateway

string

route.blocky.parentRefs[].namespace (1)

network

string

route.blocky.parentRefs[].sectionName (1)

websecure

string

route.blocky.rules[].backendRefs[].identifier (1)

blocky

string

route.blocky.rules[].filters[].extensionRef.group (1)

traefik.io

string

route.blocky.rules[].filters[].extensionRef.kind (1)

Middleware

string

route.blocky.rules[].filters[].extensionRef.name (1)

auth-chain

string

route.blocky.rules[].filters[].type (1)

ExtensionRef

string

route.internal.enabled (1)

true

boolean

route.internal.hostnames[] (1)

- {{ .Release.Name }}.${INTERNAL_HOSTNAME}

string

route.internal.kind (1)

HTTPRoute

string

route.internal.parentRefs[].name (1)

envoy-internal

string

route.internal.parentRefs[].namespace (1)

networking

string

route.internal.parentRefs[].sectionName (1)

https

string

route.internal.rules[].backendRefs[].name (1)

blocky-frontend

string

route.internal.rules[].backendRefs[].port (1)

number

route.main.hostnames[] (1)

- blocky.${SECRET_DOMAIN}

string

route.main.parentRefs[].name (1)

internal

string

route.main.parentRefs[].namespace (1)

networking

string

route.main.rules[].backendRefs[].identifier (1)

main

string

route.main.rules[].backendRefs[].port (1)

http

string

blocky helm

Install

Examples

Top Repositories (3 out of 8)

Values