Compare commits

..

86 Commits

Author SHA1 Message Date
SeanOMik dd70c87b36 fix: use correct kustomize file paths 2024-09-19 19:07:11 -04:00
SeanOMik 9e58733a47 feat: add kubevirt to thin cluster 2024-09-19 19:07:11 -04:00
SeanOMik 2b432acd32 feat: add home-assistant to thin cluster 2024-09-19 19:07:11 -04:00
SeanOMik 473ffdffc0 fix: use correct file path 2024-09-19 19:07:11 -04:00
SeanOMik 5a9e883b75 feat: switch from traefik to nginx-ingress 2024-09-19 19:07:11 -04:00
SeanOMik 3da1b8e693 fix(postgres): use correct file paths 2024-09-19 19:07:11 -04:00
SeanOMik 4fd71c59d0 feat: add postgres 2024-09-19 19:07:11 -04:00
SeanOMik d7c8537074 fix(whoami): specifiy internal ingress class 2024-09-19 19:07:11 -04:00
SeanOMik f02811f4f2 fix: use correct name and path of kustomization 2024-09-19 19:07:11 -04:00
SeanOMik 3209590082 feat: add snapshot-system and openebs mayastor 2024-09-19 19:07:11 -04:00
SeanOMik daa10b10e1 fix: change load balancer subnet, make certs valid for '*.internal' domains 2024-09-19 19:07:11 -04:00
SeanOMik bed6a15588 fix: specify bgp label on traefik services 2024-09-19 19:07:11 -04:00
SeanOMik d2be6e6cc9 fix: use correct path of thin cluster traefik 2024-09-19 19:07:11 -04:00
SeanOMik 6bb2b612a8 feat: add internal ingress, generate internal certs, setup cilium bgp, create whoami deployment 2024-09-19 19:07:11 -04:00
SeanOMik 41a06897c3 chore: remove metallb from thin cluster 2024-09-19 19:07:11 -04:00
SeanOMik 219b416fb4 fix: use correct file path 2024-09-19 19:07:11 -04:00
SeanOMik 63ad2c9c31 feat: move metallb to common, install it in thin cluster 2024-09-19 19:07:11 -04:00
SeanOMik 3a8639f80d feat: reorganize cert-manager to avoid crds race condition 2024-09-19 19:07:11 -04:00
SeanOMik 9134f887a7 feat: move cert-manager to common, add it to thin cluster 2024-09-19 19:07:11 -04:00
SeanOMik 2ec21aa757 fix(nfd, intel-gpu): use correct kustomization path 2024-09-19 19:07:11 -04:00
SeanOMik 8c224b4464 fix(traefik): add substituteFrom config map and secrets 2024-09-19 19:07:11 -04:00
SeanOMik 18c99ba347 fix: traefik crds race condition 2024-09-19 19:07:11 -04:00
SeanOMik ea0ba61a26 fix: remove metallb, use cilium load balancer ip pool instead 2024-09-19 19:07:11 -04:00
SeanOMik d54748b324 chore: remove unused traefik entrypoint 2024-09-19 19:07:11 -04:00
SeanOMik 9c3743714c fix: enable metallb crds 2024-09-19 19:07:11 -04:00
SeanOMik 9dcb7c6d90 fix: remove dependsOn: core for thin cluster 2024-09-19 19:07:11 -04:00
SeanOMik 14216829c9 feat: add new cluster, create common directory 2024-09-19 19:07:06 -04:00
SeanOMik 5917341e26 Merge pull request 'feat(github-release)!: Update traefik-crd-source to v31.1.0' (#385) from renovate/traefik-crd-source-31.x into main
Reviewed-on: #385
2024-09-19 09:40:12 -04:00
Renovate Bot b0e4718047 feat(github-release)!: Update traefik-crd-source to v31.1.0 2024-09-19 09:40:12 -04:00
SeanOMik f1132025cc Merge pull request 'fix(container): update image alpine to v3.20.3' (#395) from renovate/alpine-3.x into main
Reviewed-on: #395
2024-09-19 09:39:03 -04:00
Renovate Bot 4abd76770a fix(container): update image alpine to v3.20.3 2024-09-19 09:39:03 -04:00
SeanOMik 8ef1659f35 Merge pull request 'feat(container): update image temporalio/auto-setup to v1.25' (#389) from renovate/temporalio-auto-setup-1.x into main
Reviewed-on: #389
2024-09-19 09:38:47 -04:00
Renovate Bot f22cf45dfa feat(container): update image temporalio/auto-setup to v1.25 2024-09-19 09:38:47 -04:00
SeanOMik 11f2fbde57 Merge pull request 'fix(container): update image ghcr.io/advplyr/audiobookshelf to v2.13.4' (#370) from renovate/ghcr.io-advplyr-audiobookshelf-2.x into main
Reviewed-on: #370
2024-09-19 09:38:21 -04:00
Renovate Bot b389d60b02 fix(container): update image ghcr.io/advplyr/audiobookshelf to v2.13.4 2024-09-19 09:38:21 -04:00
SeanOMik 679f61756e Merge pull request 'fix(container): update image ghcr.io/onedr0p/qbittorrent to v4.6.7' (#371) from renovate/ghcr.io-onedr0p-qbittorrent-4.x into main
Reviewed-on: #371
2024-09-19 09:37:55 -04:00
Renovate Bot 1817bfd41c fix(container): update image ghcr.io/onedr0p/qbittorrent to v4.6.7 2024-09-19 09:37:55 -04:00
SeanOMik d3d6f0e9bf Merge pull request 'fix(container): update image ghcr.io/onedr0p/radarr-develop to v5.10.3.9178' (#372) from renovate/ghcr.io-onedr0p-radarr-develop-5.x into main
Reviewed-on: #372
2024-09-19 09:37:32 -04:00
Renovate Bot b34c9d5bb3 fix(container): update image ghcr.io/onedr0p/radarr-develop to v5.10.3.9178 2024-09-19 09:37:32 -04:00
SeanOMik 09dc2632f5 Merge pull request 'fix(container): update image ghcr.io/onedr0p/sonarr-develop to v4.0.9.2386' (#373) from renovate/ghcr.io-onedr0p-sonarr-develop-4.x into main
Reviewed-on: #373
2024-09-19 09:37:05 -04:00
Renovate Bot 60cef12727 fix(container): update image ghcr.io/onedr0p/sonarr-develop to v4.0.9.2386 2024-09-19 09:37:05 -04:00
SeanOMik 45bf2d5495 Merge pull request 'fix(container): update image ghcr.io/zibbp/ganymede-frontend to v3.0.1' (#374) from renovate/ghcr.io-zibbp-ganymede-frontend-3.x into main
Reviewed-on: #374
2024-09-19 09:36:42 -04:00
Renovate Bot dee1286dcb fix(container): update image ghcr.io/zibbp/ganymede-frontend to v3.0.1 2024-09-19 09:36:42 -04:00
SeanOMik f0e997d8e7 Merge pull request 'feat(container): update image gotson/komga to v1.13.0' (#375) from renovate/gotson-komga-1.x into main
Reviewed-on: #375
2024-09-19 09:35:32 -04:00
Renovate Bot 1589ac5ec8 feat(container): update image gotson/komga to v1.13.0 2024-09-19 09:35:32 -04:00
SeanOMik fd8e63ba5d Merge pull request 'fix(github-release): update local-path-provisioner to v0.0.29' (#376) from renovate/local-path-provisioner-0.x into main
Reviewed-on: #376
2024-09-19 09:34:15 -04:00
Renovate Bot e7bfe2e240 fix(github-release): update local-path-provisioner to v0.0.29 2024-09-19 09:34:15 -04:00
SeanOMik 87a28dc58e Merge pull request 'fix(helm): update chart grafana to 8.5.1' (#377) from renovate/grafana-8.x into main
Reviewed-on: #377
2024-09-19 09:33:53 -04:00
Renovate Bot dd89ee09e8 fix(helm): update chart grafana to 8.5.1 2024-09-19 09:33:53 -04:00
SeanOMik 746e48c3de Merge pull request 'fix(helm): update chart longhorn to 1.7.1' (#378) from renovate/longhorn-1.x into main
Reviewed-on: #378
2024-09-19 09:33:33 -04:00
Renovate Bot 7d8a75c6f0 fix(helm): update chart longhorn to 1.7.1 2024-09-19 09:33:33 -04:00
SeanOMik fefad39b44 Merge pull request 'fix(helm): update chart mysql to 11.1.17' (#379) from renovate/mysql-11.x into main
Reviewed-on: #379
2024-09-19 09:33:12 -04:00
Renovate Bot d3fc019ff3 fix(helm): update chart mysql to 11.1.17 2024-09-19 09:33:12 -04:00
SeanOMik e8c01c01b8 Merge pull request 'fix(helm): update chart victoria-metrics-single to 0.11.2' (#380) from renovate/victoria-metrics-single-0.x into main
Reviewed-on: #380
2024-09-19 09:32:50 -04:00
Renovate Bot 7f870f9d1b fix(helm): update chart victoria-metrics-single to 0.11.2 2024-09-19 09:32:50 -04:00
SeanOMik 7f78457843 Merge pull request 'feat(container): update image ghcr.io/onedr0p/prowlarr-develop to v1.24.0.4721' (#381) from renovate/ghcr.io-onedr0p-prowlarr-develop-1.x into main
Reviewed-on: #381
2024-09-19 09:32:37 -04:00
Renovate Bot 6d5e8ec895 feat(container): update image ghcr.io/onedr0p/prowlarr-develop to v1.24.0.4721 2024-09-19 09:32:37 -04:00
SeanOMik bc1149f243 Merge pull request 'feat(helm): update chart authentik to 2024.8.2' (#382) from renovate/authentik-2024.x into main
Reviewed-on: #382
2024-09-19 09:32:14 -04:00
Renovate Bot f1abdfbb0e feat(helm): update chart authentik to 2024.8.2 2024-09-19 09:32:14 -04:00
SeanOMik 739f3c8e6c Merge pull request 'feat(helm): update chart kube-prometheus-stack to 62.7.0' (#383) from renovate/kube-prometheus-stack-62.x into main
Reviewed-on: #383
2024-09-19 09:31:55 -04:00
Renovate Bot 09fe06eff6 feat(helm): update chart kube-prometheus-stack to 62.7.0 2024-09-19 09:31:55 -04:00
SeanOMik f62690f18a Merge pull request 'feat(helm): update chart pgadmin4 to 1.29.0' (#384) from renovate/pgadmin4-1.x into main
Reviewed-on: #384
2024-09-19 09:31:23 -04:00
Renovate Bot c6a94e76d0 feat(helm): update chart pgadmin4 to 1.29.0 2024-09-19 09:31:23 -04:00
SeanOMik 3c0566d981 feat(helm)!: Update chart traefik to 31.1.0 (#386) 2024-09-19 09:29:06 -04:00
Renovate Bot d0a46c4ee2 feat(helm)!: Update chart traefik to 31.1.0 2024-09-19 09:29:06 -04:00
SeanOMik 624d26c435 fix(container): update image bobokun/qbit_manage to v4.1.9 (#387) 2024-09-19 09:28:54 -04:00
Renovate Bot fcf78e64c6 fix(container): update image bobokun/qbit_manage to v4.1.9 2024-09-19 09:28:54 -04:00
SeanOMik 42a970b65e fix(container): update image linuxserver/freshrss to v1.24.3 (#388) 2024-09-19 09:28:24 -04:00
Renovate Bot 91f0423f7e fix(container): update image linuxserver/freshrss to v1.24.3 2024-09-19 09:28:24 -04:00
SeanOMik 8afa7376f1 fix(container): update image linuxserver/jellyfin to v10.9.11 (#391) 2024-09-19 09:26:42 -04:00
Renovate Bot b40999472a fix(container): update image linuxserver/jellyfin to v10.9.11 2024-09-19 09:26:42 -04:00
SeanOMik 298ef2620f fix(container): update image goofball222/factorio to v1.1.110 (#392) 2024-09-19 09:26:28 -04:00
Renovate Bot ba8aaf37e2 fix(container): update image goofball222/factorio to v1.1.110 2024-09-19 09:26:28 -04:00
SeanOMik c36eabc91e feat(helm): update chart redis to 20.1.4 (#393) 2024-09-19 09:26:08 -04:00
Renovate Bot fa68e1d42f feat(helm): update chart redis to 20.1.0 2024-09-19 09:26:08 -04:00
SeanOMik c380710973 fix(container): update image matrixdotorg/dendrite-monolith to v0.13.8 (#394) 2024-09-19 09:25:42 -04:00
Renovate Bot 92a6b9cb82 fix(container): update image matrixdotorg/dendrite-monolith to v0.13.8 2024-09-19 09:25:42 -04:00
SeanOMik 581f2e5f01 fix(container): update image ghcr.io/onedr0p/bazarr to v1.4.4 (#396) 2024-09-19 09:25:02 -04:00
Renovate Bot 96f0fd9874 fix(container): update image ghcr.io/onedr0p/bazarr to v1.4.4 2024-09-19 09:25:02 -04:00
SeanOMik cd7a0ee7b7 fix(container): update image prompve/prometheus-pve-exporter to v3.4.5 (#397) 2024-09-19 09:24:40 -04:00
Renovate Bot daffc5df08 fix(container): update image prompve/prometheus-pve-exporter to v3.4.5 2024-09-19 09:24:40 -04:00
SeanOMik 340bbd55f4 feat(helm): update chart woodpecker to 1.6.0 (#398) 2024-09-19 09:22:50 -04:00
Renovate Bot 94e4747f20 feat(helm): update chart woodpecker to 1.6.0 2024-09-18 19:07:11 +00:00
SeanOMik d119ac6206
chore: remove domain name 2024-09-14 23:43:09 -04:00
SeanOMik 1e602ec8e7
fix(ganymede): fix after update broke it 2024-09-14 23:38:54 -04:00
SeanOMik d4e5a254a7
fix(cdn): use custom nonroot nginx container with fancy index 2024-09-14 23:08:48 -04:00
29 changed files with 95 additions and 88 deletions

View File

@ -8,7 +8,7 @@ spec:
chart:
spec:
chart: traefik
version: '30.1.0'
version: '31.1.0'
sourceRef:
kind: HelmRepository
name: traefik-charts

View File

@ -10,7 +10,7 @@ spec:
chart:
spec:
chart: authentik
version: 2024.6.4
version: 2024.8.2
sourceRef:
kind: HelmRepository
name: authentik-charts

View File

@ -8,7 +8,7 @@ spec:
chart:
spec:
chart: mysql
version: 11.1.15
version: 11.1.17
sourceRef:
kind: HelmRepository
name: bitnami-charts

View File

@ -8,7 +8,7 @@ spec:
chart:
spec:
chart: pgadmin4
version: "1.28.0"
version: "1.29.0"
sourceRef:
kind: HelmRepository
name: runix-charts

View File

@ -8,7 +8,7 @@ spec:
chart:
spec:
chart: redis
version: 20.0.x
version: 20.1.x
sourceRef:
kind: HelmRepository
name: bitnami-charts

View File

@ -1,3 +1,4 @@
# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2beta2.schema.json
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
@ -8,58 +9,68 @@ spec:
chart:
spec:
chart: app-template
version: 1.3.x
version: 3.4.0
sourceRef:
kind: HelmRepository
name: bjws-charts
namespace: flux-system
values:
image:
repository: oci.seedno.de/seednode/nginx
tag: latest
controllers:
main:
pod:
securityContext:
runAsNonRoot: true
runAsUser: 65534
runAsGroup: 65533
fsGroup: 10000
fsGroupChangePolicy: OnRootMismatch
args:
- -c
- /config/nginx.conf
containers:
main:
image:
repository: git.${SECRET_NEW_DOMAIN}/seanomik/nginx
tag: 1.27.1
pullPolicy: Always
resources:
requests:
memory: 500Mi
securityContext:
allowPrivilegeEscalation: false
capabilities: { drop: ["ALL"] }
service:
main:
app:
controller: main
ports:
http:
port: 6544
probes:
liveness:
enabled: false
ingress:
main:
enabled: true
annotations:
cert-manager.io/cluster-issuer: letsencrypt-production
traefik.ingress.kubernetes.io/router.entrypoints: websecure
hosts:
- host: &host "cdn.${SECRET_NEW_DOMAIN}"
paths:
- path: /
pathType: Prefix
tls:
- hosts:
- *host
- host: "cdn.${SECRET_NEW_DOMAIN}"
paths:
- path: /
service:
identifier: app
port: http
persistence:
data:
enabled: true
type: hostPath
hostPath: /mnt/MainPool/Kubernetes/cdn/data
readOnly: true
mountPath: /data
config:
enabled: true
type: configMap
name: nginx-cdn-configmap
globalMounts:
- path: /etc/nginx/nginx.conf
subPath: nginx.conf
resources:
requests:
cpu: 1m
storage:
type: hostPath
hostPath: /mnt/MainPool/Kubernetes/cdn/data
globalMounts:
- path: /data

View File

@ -30,7 +30,7 @@ spec:
main:
image:
repository: matrixdotorg/dendrite-monolith
tag: v0.13.7
tag: v0.13.8
service:
app:

View File

@ -26,21 +26,21 @@ spec:
# fsGroup: 10000
# fsGroupChangePolicy: OnRootMismatch
initContainers:
copy-config:
image:
repository: alpine
tag: 3.20
command: [ "sh", "-c", "cat /ganymede-config.json && cp -v /ganymede-config.json /data/config.json" ]
containers:
api:
image:
repository: ghcr.io/zibbp/ganymede
tag: 3.0.1
securityContext:
#allowPrivilegeEscalation: false
#capabilities: { drop: ["ALL"] }
env:
- name: PUID
value: 555
- name: PGID
value: 555
- name: TZ
value: "America/New_York" # Set to your timezone
- name: DB_HOST
@ -103,7 +103,7 @@ spec:
frontend:
image:
repository: ghcr.io/zibbp/ganymede-frontend
tag: 3.0.0
tag: 3.0.1
env:
- name: API_URL
@ -124,6 +124,10 @@ spec:
repository: nginxinc/nginx-unprivileged
tag: 1.27.1-alpine
securityContext:
allowPrivilegeEscalation: false
capabilities: { drop: ["ALL"] }
service:
app:
controller: main
@ -155,7 +159,7 @@ spec:
service:
identifier: app
port: api
- path: /vods
- path: /data/videos
service:
identifier: app
port: nginx
@ -168,18 +172,18 @@ spec:
storageClass: mainpool-hostpath
accessMode: ReadWriteOnce
globalMounts:
- path: /vods
- path: /data/videos
ganymede-data:
type: persistentVolumeClaim
size: 5Gi
size: 15Gi
retain: true
storageClass: mainpool-hostpath
accessMode: ReadWriteOnce
advancedMounts:
main: # controller name
api: # container name
- path: /data
- path: /data/temp
ganymede-logs:
type: persistentVolumeClaim
@ -190,7 +194,7 @@ spec:
advancedMounts:
main: # controller name
api: # container name
- path: /logs
- path: /data/logs
nginx-conf:
name: ganymede-nginx-conf
@ -199,17 +203,8 @@ spec:
advancedMounts:
main: # controller name
nginx: # container name
- subPath: nginx.conf
path: /etc/nginx/nginx.conf
ganymede-temp-conf:
type: emptyDir
advancedMounts:
main: # controller name
api: # container name
- path: /data
copy-config: # container name
- path: /data
- path: /etc/nginx/nginx.conf
subPath: nginx.conf
ganymede-conf:
name: ganymede-conf
@ -217,6 +212,7 @@ spec:
defaultMode: 0777
advancedMounts:
main: # controller name
copy-config: # container name
- subPath: config.json
path: /ganymede-config.json
api: # container name
- path: /data/config/config.json
subPath: config.json

View File

@ -26,16 +26,16 @@ data:
server {
listen 8080;
root /vods;
root /data/videos;
add_header 'Access-Control-Allow-Origin' '*' always;
add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS' always;
add_header 'Access-Control-Allow-Headers' 'DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range' always;
add_header 'Access-Control-Expose-Headers' 'Content-Length,Content-Range' always;
location ^~ /vods {
location ^~ /data/videos {
autoindex on;
alias /vods;
alias /data/videos;
location ~* \.(ico|css|js|gif|jpeg|jpg|png|svg|webp)$ {
expires 30d;

View File

@ -22,7 +22,7 @@ spec:
main:
image:
repository: temporalio/auto-setup
tag: 1.24
tag: 1.25
env:
- name: DB

View File

@ -8,7 +8,7 @@ spec:
chart:
spec:
chart: woodpecker
version: "1.5.1"
version: "1.6.0"
sourceRef:
kind: HelmRepository
name: woodpecker-charts

View File

@ -17,7 +17,7 @@ spec:
values:
image:
repository: ghcr.io/onedr0p/bazarr
tag: "1.4.3"
tag: "1.4.4"
env:
TZ: America/New_York

View File

@ -17,7 +17,7 @@ spec:
values:
image:
repository: ghcr.io/onedr0p/prowlarr-develop
tag: "1.21.2.4649"
tag: "1.24.0.4721"
# Metrics sidecar
sidecars:

View File

@ -35,7 +35,7 @@ spec:
image:
repository: bobokun/qbit_manage
tag: "v4.1.7"
tag: "v4.1.9"
env:
QBT_STARTUP_DELAY: 45 # seconds

View File

@ -28,7 +28,7 @@ spec:
app:
image:
repository: ghcr.io/onedr0p/qbittorrent
tag: 4.6.5
tag: 4.6.7
env:
QBITTORRENT__PORT: 8080

View File

@ -17,7 +17,7 @@ spec:
values:
image:
repository: ghcr.io/onedr0p/radarr-develop
tag: "5.10.0.9090"
tag: "5.10.3.9178"
# Metrics sidecar
sidecars:

View File

@ -17,7 +17,7 @@ spec:
values:
image:
repository: ghcr.io/onedr0p/sonarr-develop
tag: "4.0.9.2300"
tag: "4.0.9.2386"
# Metrics sidecar
sidecars:

View File

@ -17,7 +17,7 @@ spec:
values:
image:
repository: goofball222/factorio
tag: "1.1.109"
tag: "1.1.110"
service:
main:

View File

@ -21,7 +21,7 @@ spec:
# Add init container for pulling znc modules and putting them into the modules directory
initContainers:
pull-module-source:
image: alpine:3.20.2
image: alpine:3.20.3
command:
- "sh"
- "-c"

View File

@ -23,7 +23,7 @@ spec:
main:
image:
repository: ghcr.io/advplyr/audiobookshelf
tag: 2.13.2
tag: 2.13.4
service:
app:

View File

@ -17,7 +17,7 @@ spec:
values:
image:
repository: linuxserver/freshrss
tag: "1.24.2"
tag: "1.24.3"
env:
PUID: 10000

View File

@ -22,7 +22,7 @@ spec:
app:
image:
repository: linuxserver/jellyfin
tag: 10.9.10
tag: 10.9.11
env:
PUID: 10000

View File

@ -17,7 +17,7 @@ spec:
values:
image:
repository: gotson/komga
tag: "1.12.0"
tag: "1.13.0"
env:
TZ: America/New_York

View File

@ -8,7 +8,7 @@ spec:
chart:
spec:
chart: grafana
version: "8.5.0"
version: "8.5.1"
sourceRef:
kind: HelmRepository
name: grafana-charts

View File

@ -8,7 +8,7 @@ spec:
chart:
spec:
chart: kube-prometheus-stack
version: "62.3.1"
version: "62.7.0"
sourceRef:
kind: HelmRepository
name: prometheus-community-charts

View File

@ -17,7 +17,7 @@ spec:
values:
image:
repository: prompve/prometheus-pve-exporter
tag: "3.4.4"
tag: "3.4.5"
args:
- --config.file

View File

@ -8,7 +8,7 @@ spec:
chart:
spec:
chart: victoria-metrics-single
version: 0.11.0
version: 0.11.2
sourceRef:
kind: HelmRepository
name: victoria-metrics-charts

View File

@ -8,7 +8,7 @@ spec:
chart:
spec:
chart: longhorn
version: "1.7.0"
version: "1.7.1"
sourceRef:
kind: HelmRepository
name: longhorn-charts

View File

@ -9,7 +9,7 @@ spec:
url: https://github.com/traefik/traefik-helm-chart.git
ref:
# renovate: registryUrl=https://helm.traefik.io/traefik chart=traefik
tag: v30.1.0
tag: v31.1.0
ignore: |
# exclude all
/*