297 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Vegard Hagen	0c19b80b75	feat(authelia): add "optional" secrets in config	2024-11-17 17:03:35 +01:00
Vegard Hagen	403d32b9ed	feat(authelia): make cert-manager generate jwks	2024-11-17 17:03:35 +01:00
Vegard Hagen	140fbc249b	feat(tofu): use new talos_image_factory_schematic resource ... talos provider 0.6 added a new resource for generating the image schematic id	2024-11-17 17:03:34 +01:00
Vegard Hagen	8d8e0ca87a	fix(authelia): add access_control policy rule	2024-11-17 17:03:34 +01:00
Vegard Hagen	996bf85daf	chore(talos): upgrade last node ctrl-00 ... Regular 'terraform apply' was enough this time We're now on Talos 1.8.1 and Kubernetes 1.31.1	2024-11-17 17:03:34 +01:00
Vegard Hagen	4c8066a130	chore(talos): upgrade node ctrl-02 ... It worked with 'tofu apply -refresh=false'! Still had to manually shut down the VM though. Still scary!	2024-11-17 17:03:34 +01:00
Vegard Hagen	094d72abdf	chore(talos): upgrade node ctrl-01 ... start manual talos upgrade process Issue with upgrading 'endppoint' node (ctrl-02) since API becomes unresponsive. Either do proper LB or maybe 'tofu apply -refresh=false'	2024-11-17 17:03:34 +01:00
renovate[bot]	d291132624	chore(deps): merge renovate PRs ... chore(deps): update netbird chore(deps): update helm release crossplane to v1.17.1 chore(deps): update media containers chore(deps): update dependency crossplane-contrib/function-auto-ready to v0.3.0 chore(deps): update helm release argo-cd to v7.6.8 chore(deps): update ghcr.io/lldap/lldap docker tag to v2024-10-10-debian-rootless chore(deps): update proxmox-csi-plugin docker tag to v0.2.13 chore(deps): update ghcr.io/authelia/authelia docker tag to v4.38.16 chore(deps): update terraform proxmox to v0.66.1 chore(deps): update terraform talos to v0.6.0 chore(deps): update dependency cilium/cilium to v1.16.2 chore(deps): update dependency siderolabs/talos to v1.8.1	2024-11-17 17:03:34 +01:00
Vegard Hagen	6d137906d1	feat(authelia): add ES256 jwk and use it	2024-11-17 17:03:34 +01:00
Vegard Hagen	cbf1210859	fix(cert-manager): update API token	2024-11-17 17:03:34 +01:00
Vegard Hagen	9a92b48c97	feat(authelia): enable 2FA	2024-11-17 17:03:33 +01:00
Vegard Hagen	d077f4b035	feat(authelia): add ES256 jwk	2024-11-17 17:03:33 +01:00
Vegard Hagen	e0ce01c80f	fix(oidc): conceal jwks signing key	2024-11-17 17:03:33 +01:00
Vegard Hagen	53855a6d27	fix(oidc): conceal argo cd client secret	2024-11-17 17:03:33 +01:00
Vegard Hagen	86395edc1f	feat(authelia): add Argo CD client	2024-11-17 17:03:33 +01:00
Vegard Hagen	c88403691b	feat(lldap): create and use own authelia user	2024-11-17 17:03:33 +01:00
Vegard Hagen	ba69146b4b	feat(auth): add Authelia for OIDC ... Use Authelia in an attempt to replace Keycloak. Kanidm is another alternative we're going to try later.	2024-11-17 17:03:33 +01:00
Vegard Hagen	6ac8652e24	chore(torrent): change torrent ports	2024-11-17 17:03:32 +01:00
Vegard Hagen	c524a6ab65	feat(cilium): enable maglev loadBalancer ... Maglev Consistent Hashing should improve resiliency in case of failures https://docs.cilium.io/en/stable/network/kubernetes/kubeproxy-free/\#maglev-consistent-hashing	2024-11-17 17:03:32 +01:00
Vegard Hagen	af79c5b906	fix(argocd): turn on server-side diff ... https://argo-cd.readthedocs.io/en/latest/user-guide/diff-strategies/\#server-side-diff This should solve out-of-sync for e.g. Cilium ref https://github.com/argoproj/argo-cd/issues/19038	2024-11-17 17:03:32 +01:00
renovate[bot]	d6d5a2ad02	chore(deps): merge renovate PRs ... chore(deps): update terraform restapi to v1.20.0 chore(deps): update cloudflare/cloudflared docker tag to v2024.9.1 chore(deps): update terraform proxmox to v0.64.0 chore(deps): update keycloak docker tag to v22.2.3 chore(deps): update sealed-secrets docker tag to v2.4.6 chore(deps): update ghcr.io/lldap/lldap docker tag to v2024-09-11 chore(deps): update media containers chore(deps): update terraform talos to v0.6.0-beta.0 chore(deps): update helm release argo-cd to v7.5.2 chore(deps): update helm release crossplane to v1.17.0	2024-11-17 17:03:32 +01:00
Vegard Hagen	ddb7f0fd9f	feat(lldap): bootstrap lldap users with script	2024-11-17 17:03:32 +01:00
Vegard Hagen	2a3f01736d	feat(ldap): add lldap as ldap server	2024-11-17 17:03:32 +01:00
Vegard Hagen	1d0ae6d437	feat(cnpg): configure test-database for external connection	2024-11-17 17:03:32 +01:00
Vegard Hagen	f1a11669a6	feat(renovate): group related containers for fewer renovate PRs	2024-11-17 17:03:32 +01:00
Vegard Hagen	e5b3cd91d3	feat(unrar): add an image for unrar tool	2024-11-17 17:03:31 +01:00
renovate[bot]	7695584a63	chore(deps): update ghcr.io/onedr0p/plex docker tag to v1.40.5.8921-836b34c27	2024-11-17 17:03:31 +01:00
Vegard Stenhjem Hagen	944f4a92ba	fix(netbird): expose netbird dashboard	2024-11-17 17:03:31 +01:00
Vegard Hagen	5d69e82eb7	fix: route plex and jellyfin through gateway for tls-termination	2024-11-17 17:03:31 +01:00
renovate[bot]	e1224e95da	chore(deps): update ghcr.io/onedr0p/sonarr docker tag to v4.0.9	2024-11-17 17:03:31 +01:00
Vegard Hagen	d3338da90a	feat(database): add cnpg for database management	2024-11-17 17:03:31 +01:00
renovate[bot]	cb1c2cdebb	chore(deps): merge renovate PRs ... chore(deps): update netbird to v0.28.9 chore(deps): update netbirdio/management docker tag to v0.28.9 chore(deps): update netbirdio/netbird docker tag to v0.28.9 chore(deps): update netbirdio/signal docker tag to v0.28.9 chore(deps): update cloudflare/cloudflared docker tag to v2024.8.3 chore(deps): update ghcr.io/onedr0p/radarr docker tag to v5.9.1 chore(deps): update ghcr.io/onedr0p/plex docker tag to v1.40.5.8897-e5987a19d chore(deps): update helm release argo-cd to v7.4.5 chore(deps): update terraform proxmox to v0.63.0 chore(deps): update dependency corewire/images/crossplane/function-keycloak-builtin-objects to v3 chore(deps): update keycloak docker tag to v22.1.3 chore(deps): update ghcr.io/jellyfin/jellyfin docker tag to v10.9.10 chore(deps): update proxmox-csi-plugin docker tag to v0.2.9	2024-11-17 17:03:31 +01:00
Vegard Hagen	505a18cf38	fix(netbird): use internal dns to resolve auth admin-endpoint to internal gateway	2024-11-17 17:03:31 +01:00
renovate[bot]	101b19a729	chore(deps): update keycloak docker tag to v22.1.2	2024-11-17 17:03:30 +01:00
renovate[bot]	5b893c87f4	chore(deps): update ghcr.io/onedr0p/qbittorrent docker tag to v4.6.6	2024-11-17 17:03:30 +01:00
Vegard Hagen	91e389dc0e	fix(netbird): allow required endpoint from keycloak	2024-11-17 17:03:30 +01:00
Vegard Hagen	d74b811d84	chore(docs): update readme	2024-11-17 17:03:30 +01:00
Vegard Hagen	9a7894a7ab	feat(vpn): split gateway into external and internal services	2024-11-17 17:03:30 +01:00
renovate[bot]	174cce0845	chore(deps): merge renovate PRs ... chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.52 chore(deps): update helm release cert-manager to v1.15.3 chore(deps): update registry.k8s.io/git-sync/git-sync docker tag to v4.2.4 chore(deps): update dependency corewire/images/crossplane/function-keycloak-builtin-objects to v2 chore(deps): update helm release argo-cd to v7.4.4	2024-11-17 17:03:30 +01:00
Vegard Hagen	0e0a356fd1	fix(oidc): add 'basic' scope to netbird client and update keycloak ... Change in Keycloak 25.0.0 https://www.keycloak.org/docs/25.0.0/upgrading/\#new-default-client-scope-basic Thanks to Olav 14dac2b576	2024-11-17 17:03:30 +01:00
Vegard Hagen	872f33c295	feat(adguard): mount config-file for declarative configuration	2024-11-17 17:03:30 +01:00
Vegard Hagen	9dec025db7	feat(dns): use Unbound and AdGuardHome for DNS ... Unbound as a recursive resolver and AdGuardHome as main DNS backed by Unbound	2024-11-17 17:03:29 +01:00
Vegard Hagen	38f118fa17	fix(jellyfin): use Memory for /cache to avoid NodeDiskPressure	2024-11-17 17:03:29 +01:00
Vegard Hagen	653d3e946c	feat(whoami): add simple whoami-app for testing	2024-11-17 17:03:29 +01:00
Vegard Hagen	5c0c3366b2	feat(netbird): add netbird router agent ... This should allow me to connect to services from a Netbird VPN connection	2024-11-17 17:03:29 +01:00
Vegard Hagen	0048da7ffa	chore(oidc): collect all oidc-clients under keycloak	2024-11-17 17:03:29 +01:00
Vegard Hagen	d79f57efd3	chore(ingress): remove all ingress resources in favour of http-routes	2024-11-17 17:03:29 +01:00
Vegard Hagen	1602202137	feat(vuetorrent): use git-sync to fetch vuetorrent theme	2024-11-17 17:03:29 +01:00
renovate[bot]	89c0a27364	chore(deps): merge renovate PRs ... chore(deps): update helm release node-feature-discovery to v0.16.4 chore(deps): update helm release argo-cd to v7.4.3 chore(deps): update keycloak docker tag to v22.1.1 chore(deps): update dependency umputun/remark42 to v1.13.1 chore(deps): update cloudflare/cloudflared docker tag to v2024.8.2 chore(deps): update ghcr.io/jellyfin/jellyfin docker tag to v10.9.9 chore(deps): update ghcr.io/onedr0p/sonarr docker tag to v4.0.8 chore(deps): update ghcr.io/onedr0p/prowlarr docker tag to v1.21.2 fix(renovate): explicitly set versioning scheme for plex chore(deps): update ghcr.io/onedr0p/radarr docker tag to v5.8.3 chore(deps): update dependency cilium/cilium to v1.16.1 chore(deps): update terraform kubernetes to v2.32.0 chore(deps): update ghcr.io/onedr0p/plex docker tag to v1.40.5.8854-f36c552fd chore(deps): update helm release cilium to v1.16.1	2024-11-17 17:03:28 +01:00
Vegard Hagen	9de3a6ba0f	chore(cloudflared): clean up cloudflared deployment ... remove unused config and enable renovate	2024-11-17 17:03:28 +01:00