Compare commits

..

1 Commits

54 changed files with 154 additions and 318 deletions

View File

@ -8,7 +8,7 @@ spec:
chart:
spec:
chart: cert-manager
version: v1.16.1
version: v1.15.3
sourceRef:
kind: HelmRepository
name: jetstack-charts

View File

@ -9,7 +9,7 @@ spec:
chart:
spec:
chart: intel-device-plugins-gpu
version: 0.31.1
version: 0.31.0
sourceRef:
kind: HelmRepository
name: intel

View File

@ -9,7 +9,7 @@ spec:
chart:
spec:
chart: intel-device-plugins-operator
version: 0.31.1
version: 0.31.0
sourceRef:
kind: HelmRepository
name: intel

View File

@ -9,7 +9,7 @@ spec:
chart:
spec:
chart: node-feature-discovery
version: 0.16.6
version: 0.16.4
sourceRef:
kind: HelmRepository
name: nfd-charts

View File

@ -8,7 +8,7 @@ spec:
chart:
spec:
chart: volsync
version: 0.11.0
version: 0.10.0
sourceRef:
kind: HelmRepository
name: backube

View File

@ -11,7 +11,7 @@ spec:
chart:
spec:
chart: authentik
version: 2024.10.1
version: 2024.8.3
sourceRef:
kind: HelmRepository
name: authentik-charts

View File

@ -8,7 +8,7 @@ spec:
chart:
spec:
chart: mysql
version: 11.1.20
version: 11.1.17
sourceRef:
kind: HelmRepository
name: bitnami-charts

View File

@ -10,7 +10,7 @@ spec:
chart:
spec:
chart: cloudnative-pg
version: 0.22.1
version: 0.22.0
sourceRef:
kind: HelmRepository
name: cloudnative-pg

View File

@ -8,7 +8,7 @@ spec:
chart:
spec:
chart: redis
version: 20.2.x
version: 20.1.x
sourceRef:
kind: HelmRepository
name: bitnami-charts

File diff suppressed because one or more lines are too long

View File

@ -122,7 +122,7 @@ spec:
nginx:
image:
repository: nginxinc/nginx-unprivileged
tag: 1.27.2-alpine
tag: 1.27.1-alpine
securityContext:
allowPrivilegeEscalation: false

View File

@ -30,7 +30,7 @@ spec:
main:
image:
repository: ghcr.io/mealie-recipes/mealie
tag: v2.1.0
tag: v1.12.0
env:
ALLOW_SIGNUP: true

View File

@ -30,7 +30,7 @@ spec:
main:
image:
repository: lscr.io/linuxserver/piwigo
tag: 15.0.0
tag: 14.5.0
env:
PUID: 9000

View File

@ -23,7 +23,7 @@ spec:
main:
image:
repository: nginxinc/nginx-unprivileged
tag: 1.27.2-alpine
tag: 1.27.1-alpine
service:
app:

View File

@ -17,7 +17,7 @@ spec:
values:
image:
repository: ghcr.io/onedr0p/prowlarr-develop
tag: "1.26.0.4833"
tag: "1.24.3.4754"
# Metrics sidecar
sidecars:

View File

@ -35,7 +35,7 @@ spec:
image:
repository: bobokun/qbit_manage
tag: "v4.1.12"
tag: "v4.1.10"
env:
QBT_STARTUP_DELAY: 45 # seconds

View File

@ -28,7 +28,7 @@ spec:
app:
image:
repository: ghcr.io/onedr0p/qbittorrent
tag: 5.0.2
tag: 5.0.1
env:
QBITTORRENT__PORT: 8080

View File

@ -35,7 +35,7 @@ spec:
app:
image:
repository: ghcr.io/onedr0p/radarr-develop
tag: 5.15.0.9412
tag: 5.12.0.9255
envFrom: *envFrom
env:
TZ: America/New_York

View File

@ -35,7 +35,7 @@ spec:
app:
image:
repository: ghcr.io/onedr0p/sonarr-develop
tag: 4.0.10.2624
tag: 4.0.9.2457
envFrom: *envFrom
env:
TZ: America/New_York

View File

@ -17,7 +17,7 @@ spec:
values:
image:
repository: goofball222/factorio
tag: "2.0.15"
tag: "1.1.110"
service:
main:

View File

@ -23,7 +23,7 @@ spec:
main:
image:
repository: ghcr.io/advplyr/audiobookshelf
tag: 2.16.2
tag: 2.13.4
service:
app:

View File

@ -22,7 +22,7 @@ spec:
app:
image:
repository: linuxserver/jellyfin
tag: 10.10.1
tag: 10.9.11
env:
PUID: 10000

View File

@ -17,7 +17,7 @@ spec:
values:
image:
repository: gotson/komga
tag: "1.14.1"
tag: "1.14.0"
env:
TZ: America/New_York

View File

@ -11,5 +11,4 @@ resources:
#- ./plex
- ./tautulli
- ./ombi
- ./freshrss
- ./navidrome/ks.yaml
- ./freshrss

View File

@ -1,103 +0,0 @@
# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2beta2.schema.json
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: navidrome
spec:
interval: 5m
chart:
spec:
chart: app-template
version: 3.4.0
sourceRef:
kind: HelmRepository
name: bjws-charts
namespace: flux-system
values:
controllers:
navidrome:
containers:
app:
image:
repository: deluan/navidrome
tag: 0.53.3
env:
ND_SCANSCHEDULE: 1h
ND_LOGLEVEL: info
probes:
liveness: &probes
enabled: true
custom: true
spec:
httpGet:
path: /
port: &port 4533
initialDelaySeconds: 0
periodSeconds: 10
timeoutSeconds: 1
failureThreshold: 3
readiness: *probes
startup:
enabled: true
spec:
failureThreshold: 30
periodSeconds: 10
# securityContext:
# allowPrivilegeEscalation: false
# readOnlyRootFilesystem: true
# capabilities: { drop: ["ALL"] }
defaultPodOptions:
securityContext:
# runAsNonRoot: true
runAsUser: 10000
runAsGroup: 10000
fsGroup: 10000
fsGroupChangePolicy: OnRootMismatch
service:
app:
controller: navidrome
ports:
http:
port: *port
ingress:
app:
annotations:
cert-manager.io/cluster-issuer: letsencrypt-production
traefik.ingress.kubernetes.io/router.entrypoints: websecure
#className: external
hosts:
- host: "navidrome.${SECRET_NEW_DOMAIN}"
paths:
- path: /
service:
identifier: app
port: http
persistence:
data:
existingClaim: navidrome
globalMounts:
- path: /data
cache:
type: persistentVolumeClaim
size: 15Gi
retain: true
storageClass: mainpool-hostpath
accessMode: ReadWriteOnce
globalMounts:
- path: /data/cache
music:
type: hostPath
hostPath: /mnt/MainPool/Media/Media/Music
globalMounts:
- path: /music
readOnly: true

View File

@ -1,5 +0,0 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- ../../../../../common/templates/volsync
- ./helm-release.yaml

View File

@ -1,31 +0,0 @@
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/kustomize.toolkit.fluxcd.io/kustomization_v1.json
apiVersion: kustomize.toolkit.fluxcd.io/v1
kind: Kustomization
metadata:
name: &app navidrome
namespace: flux-system
spec:
timeout: 5m
interval: 10m
targetNamespace: media
path: ./kubernetes/main/apps/media/navidrome/app
prune: true
sourceRef:
kind: GitRepository
name: home-cluster
decryption:
provider: sops
secretRef:
name: sops-gpg
dependsOn:
- name: openebs
- name: openebs-sc
postBuild:
substituteFrom:
- kind: ConfigMap
name: cluster-settings
- kind: Secret
name: cluster-secrets
substitute:
APP: *app
VOLSYNC_CAPACITY: 15Gi

View File

@ -18,7 +18,7 @@ spec:
image:
repository: ghcr.io/onedr0p/tautulli
tag: 2.14.6@sha256:267de8bb88e82d9814e9374b0cc847d771cb83a4c5296e4bc083ab6fbac60a22
tag: 2.13.4@sha256:633a57b2f8634feb67811064ec3fa52f40a70641be927fdfda6f5d91ebbd5d73
env:
TZ: "America/New_York"

View File

@ -8,7 +8,7 @@ spec:
chart:
spec:
chart: grafana
version: "8.5.12"
version: "8.5.2"
sourceRef:
kind: HelmRepository
name: grafana-charts

View File

@ -8,7 +8,7 @@ spec:
chart:
spec:
chart: kube-prometheus-stack
version: "66.0.0"
version: "64.0.0"
sourceRef:
kind: HelmRepository
name: prometheus-community-charts

View File

@ -8,7 +8,7 @@ spec:
chart:
spec:
chart: victoria-metrics-single
version: 0.12.6
version: 0.11.2
sourceRef:
kind: HelmRepository
name: victoria-metrics-charts

View File

@ -4,6 +4,6 @@ resources:
- ./namespace.yaml
#- ./network_policy.yaml
- ./transfersh
- ./vaultwarden/ks.yaml
- ./vaultwarden
- ./hastebin
- ./gotify

View File

@ -1,51 +0,0 @@
# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2beta2.schema.json
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: vaultwarden
spec:
interval: 5m
chart:
spec:
chart: app-template
version: 3.4.0
sourceRef:
kind: HelmRepository
name: bjws-charts
namespace: flux-system
values:
controllers:
main:
containers:
main:
image:
repository: vaultwarden/server
tag: 1.32.3
service:
app:
controller: main
ports:
http:
port: 80
ingress:
main:
annotations:
cert-manager.io/cluster-issuer: letsencrypt-production
traefik.ingress.kubernetes.io/router.entrypoints: websecure
hosts:
- host: "bitwarden.${SECRET_NEW_DOMAIN}"
paths:
- path: /
service:
identifier: app
port: http
persistence:
data:
existingClaim: vaultwarden
globalMounts:
- path: /data

View File

@ -0,0 +1,60 @@
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: vaultwarden
namespace: tools
spec:
interval: 5m
chart:
spec:
chart: app-template
version: 1.3.x
sourceRef:
kind: HelmRepository
name: bjws-charts
namespace: flux-system
values:
image:
repository: vaultwarden/server
tag: "1.32.0"
service:
main:
ports:
http:
port: 80
probes:
liveness:
enabled: false
ingress:
main:
enabled: true
annotations:
cert-manager.io/cluster-issuer: letsencrypt-production
traefik.ingress.kubernetes.io/router.entrypoints: websecure
hosts:
- host: &host "bitwarden.${SECRET_NEW_DOMAIN}"
paths:
- path: /
pathType: Prefix
tls:
- hosts:
- *host
persistence:
data:
enabled: true
type: hostPath
hostPath: /mnt/MainPool/Kubernetes/vaultwarden
mountPath: /data
resources:
requests:
cpu: 1m
memory: 50Mi
limits:
memory: 200Mi

View File

@ -1,32 +0,0 @@
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/kustomize.toolkit.fluxcd.io/kustomization_v1.json
apiVersion: kustomize.toolkit.fluxcd.io/v1
kind: Kustomization
metadata:
name: &app vaultwarden
namespace: flux-system
spec:
timeout: 5m
interval: 10m
targetNamespace: tools
path: ./kubernetes/main/apps/tools/vaultwarden
prune: true
sourceRef:
kind: GitRepository
name: home-cluster
decryption:
provider: sops
secretRef:
name: sops-gpg
dependsOn:
- name: openebs
- name: openebs-sc
- name: volsync
postBuild:
substituteFrom:
- kind: ConfigMap
name: cluster-settings
- kind: Secret
name: cluster-secrets
substitute:
APP: *app
VOLSYNC_CAPACITY: 5Gi

View File

@ -1,5 +1,4 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- ../../../../../common/templates/volsync
- ./helm-release.yaml

View File

@ -25,7 +25,7 @@ data:
spec:
containers:
- name: helper-pod
image: rancher/mirrored-library-busybox:1.37.0
image: rancher/mirrored-library-busybox:1.36.1
setup: |-
#!/bin/sh
while getopts "m:s:p:" opt

View File

@ -8,7 +8,7 @@ spec:
chart:
spec:
chart: longhorn
version: "1.7.2"
version: "1.7.1"
sourceRef:
kind: HelmRepository
name: longhorn-charts

View File

@ -8,7 +8,7 @@ spec:
chart:
spec:
chart: traefik
version: '33.0.0'
version: '32.0.0'
sourceRef:
kind: HelmRepository
name: traefik-charts

View File

@ -9,7 +9,7 @@ spec:
url: https://github.com/traefik/traefik-helm-chart.git
ref:
# renovate: registryUrl=https://helm.traefik.io/traefik chart=traefik
tag: v33.0.0
tag: v32.0.0
ignore: |
# exclude all
/*

View File

@ -8,7 +8,7 @@ spec:
chart:
spec:
chart: pgadmin4
version: "1.31.0"
version: "1.28.0"
sourceRef:
kind: HelmRepository
name: runix-charts

View File

@ -8,7 +8,7 @@ spec:
chart:
spec:
chart: redis
version: 20.2.1
version: 20.1.6
sourceRef:
kind: HelmRepository
name: bitnami-charts

View File

@ -24,7 +24,7 @@ spec:
app:
image:
repository: ghcr.io/onedr0p/home-assistant
tag: 2024.11.1
tag: 2024.9.3
env:
TZ: America/New_York #${SERVER_TIMEZONE}
HASS_HTTP_TRUSTED_PROXY_1: 192.168.0.0/16
@ -46,7 +46,7 @@ spec:
code-server:
image:
repository: ghcr.io/coder/code-server
tag: 4.95.1
tag: 4.93.1
args: [
"--auth", "none",
"--user-data-dir", "/config/.vscode",

View File

@ -23,7 +23,7 @@ spec:
nextcloud:
image:
repository: nextcloud
tag: 30.0.2
tag: 30.0.0
envFrom:
- secretRef:

View File

@ -9,7 +9,7 @@ spec:
chart:
spec:
chart: cilium
version: 1.16.3
version: 1.16.2
sourceRef:
kind: HelmRepository
name: cilium

View File

@ -8,7 +8,7 @@ spec:
chart:
spec:
chart: grafana
version: "8.5.12"
version: "8.5.2"
sourceRef:
kind: HelmRepository
name: grafana

View File

@ -8,7 +8,7 @@ spec:
chart:
spec:
chart: kube-prometheus-stack
version: "66.0.0"
version: "64.0.0"
sourceRef:
kind: HelmRepository
name: prometheus-community

View File

@ -8,7 +8,7 @@ spec:
chart:
spec:
chart: victoria-metrics-operator
version: 0.37.0
version: 0.35.2
sourceRef:
kind: HelmRepository
name: victoria-metrics-charts

View File

@ -6,7 +6,7 @@ metadata:
spec:
image:
repository: victoriametrics/vmagent
tag: v1.106.0
tag: v1.104.0
pullPolicy: IfNotPresent
selectAllByDefault: true

View File

@ -6,7 +6,7 @@ metadata:
spec:
image:
repository: victoriametrics/victoria-metrics
tag: v1.106.0
tag: v1.104.0
retentionPeriod: "6" # in months
replicaCount: 1

View File

@ -9,7 +9,7 @@ spec:
chart:
spec:
chart: ingress-nginx
version: 4.11.3
version: 4.11.2
sourceRef:
kind: HelmRepository
name: ingress-nginx

View File

@ -9,7 +9,7 @@ spec:
chart:
spec:
chart: ingress-nginx
version: 4.11.3
version: 4.11.2
sourceRef:
kind: HelmRepository
name: ingress-nginx

View File

@ -8,7 +8,7 @@ spec:
chart:
spec:
chart: traefik
version: '33.0.0'
version: '32.0.0'
sourceRef:
kind: HelmRepository
name: traefik-charts

View File

@ -8,7 +8,7 @@ spec:
chart:
spec:
chart: traefik
version: '33.0.0'
version: '32.0.0'
sourceRef:
kind: HelmRepository
name: traefik-charts