Vegard Hagen
505a18cf38
fix(netbird): use internal dns to resolve auth admin-endpoint to internal gateway
2024-11-17 17:03:31 +01:00
renovate[bot]
101b19a729
chore(deps): update keycloak docker tag to v22.1.2
2024-11-17 17:03:30 +01:00
renovate[bot]
5b893c87f4
chore(deps): update ghcr.io/onedr0p/qbittorrent docker tag to v4.6.6
2024-11-17 17:03:30 +01:00
Vegard Hagen
91e389dc0e
fix(netbird): allow required endpoint from keycloak
2024-11-17 17:03:30 +01:00
Vegard Hagen
d74b811d84
chore(docs): update readme
2024-11-17 17:03:30 +01:00
Vegard Hagen
9a7894a7ab
feat(vpn): split gateway into external and internal services
2024-11-17 17:03:30 +01:00
renovate[bot]
174cce0845
chore(deps): merge renovate PRs
...
chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.52
chore(deps): update helm release cert-manager to v1.15.3
chore(deps): update registry.k8s.io/git-sync/git-sync docker tag to v4.2.4
chore(deps): update dependency corewire/images/crossplane/function-keycloak-builtin-objects to v2
chore(deps): update helm release argo-cd to v7.4.4
2024-11-17 17:03:30 +01:00
Vegard Hagen
0e0a356fd1
fix(oidc): add 'basic' scope to netbird client and update keycloak
...
Change in Keycloak 25.0.0
https://www.keycloak.org/docs/25.0.0/upgrading/\#new-default-client-scope-basic
Thanks to Olav 14dac2b576
2024-11-17 17:03:30 +01:00
Vegard Hagen
872f33c295
feat(adguard): mount config-file for declarative configuration
2024-11-17 17:03:30 +01:00
Vegard Hagen
9dec025db7
feat(dns): use Unbound and AdGuardHome for DNS
...
Unbound as a recursive resolver and AdGuardHome as main DNS backed by
Unbound
2024-11-17 17:03:29 +01:00
Vegard Hagen
38f118fa17
fix(jellyfin): use Memory for /cache to avoid NodeDiskPressure
2024-11-17 17:03:29 +01:00
Vegard Hagen
653d3e946c
feat(whoami): add simple whoami-app for testing
2024-11-17 17:03:29 +01:00
Vegard Hagen
5c0c3366b2
feat(netbird): add netbird router agent
...
This should allow me to connect to services from a Netbird VPN connection
2024-11-17 17:03:29 +01:00
Vegard Hagen
0048da7ffa
chore(oidc): collect all oidc-clients under keycloak
2024-11-17 17:03:29 +01:00
Vegard Hagen
d79f57efd3
chore(ingress): remove all ingress resources in favour of http-routes
2024-11-17 17:03:29 +01:00
Vegard Hagen
1602202137
feat(vuetorrent): use git-sync to fetch vuetorrent theme
2024-11-17 17:03:29 +01:00
renovate[bot]
89c0a27364
chore(deps): merge renovate PRs
...
chore(deps): update helm release node-feature-discovery to v0.16.4
chore(deps): update helm release argo-cd to v7.4.3
chore(deps): update keycloak docker tag to v22.1.1
chore(deps): update dependency umputun/remark42 to v1.13.1
chore(deps): update cloudflare/cloudflared docker tag to v2024.8.2
chore(deps): update ghcr.io/jellyfin/jellyfin docker tag to v10.9.9
chore(deps): update ghcr.io/onedr0p/sonarr docker tag to v4.0.8
chore(deps): update ghcr.io/onedr0p/prowlarr docker tag to v1.21.2
fix(renovate): explicitly set versioning scheme for plex
chore(deps): update ghcr.io/onedr0p/radarr docker tag to v5.8.3
chore(deps): update dependency cilium/cilium to v1.16.1
chore(deps): update terraform kubernetes to v2.32.0
chore(deps): update ghcr.io/onedr0p/plex docker tag to v1.40.5.8854-f36c552fd
chore(deps): update helm release cilium to v1.16.1
2024-11-17 17:03:28 +01:00
Vegard Hagen
9de3a6ba0f
chore(cloudflared): clean up cloudflared deployment
...
remove unused config and enable renovate
2024-11-17 17:03:28 +01:00
Vegard Hagen
11cba23ae2
chore(renovate): add renovate comments on deployments
...
This should allow Renovate to pick up the image versions automatically and create update PRs
2024-11-17 17:03:28 +01:00
Vegard Hagen
e03f701119
chore(nas): update TrueNAS IP after router change
...
New router is trash and can't set static IPs, some device stole the old one
2024-11-17 17:03:28 +01:00
Vegard Hagen
5abde08753
fix: conflicting svc name
2024-11-17 17:03:28 +01:00
Vegard Hagen
e6a8ad12c8
chore(plex): use Memory for /tmp and /transcode
...
Try to fix NodeDiskPressure issue where I think Plex filling up ephemeral storage
2024-11-17 17:03:28 +01:00
Vegard Hagen
dbb66ba93d
chore: rename svc for arr-stack applications
...
Dropping -web postfix since it doesn't mean anything and I think it just clutters
2024-11-17 17:03:28 +01:00
Vegard Hagen
8668f58a38
chore(gateway): update to Gateway API 1.1.0
2024-11-17 17:03:28 +01:00
renovate[bot]
42c7fe1e12
chore(deps): merge renovate PRs
...
chore(deps): update helm release argo-cd to v7.4.2
chore(deps): update sealed-secrets docker tag to v2.4.5
chore(deps): update terraform proxmox to v0.62.0
chore(deps): update keycloak docker tag to v22
chore(deps): update helm release cilium to v1.16.0
chore(deps): update dependency cilium/cilium to v1.16.0
chore(deps): update helm release cert-manager to v1.15.2
2024-11-17 17:03:27 +01:00
Vegard Hagen
25f977126b
fix(cert): ask for cert for both *.stonegarden.dev and stonegarden.dev
...
try to bypass letsenrypt rate-limiting for exact set of domains
2024-11-17 17:03:27 +01:00
Vegard Hagen
ba2ab6435b
chore(cleanup): Cleanup after cluster rebuild
2024-11-17 17:03:27 +01:00
Vegard Hagen
1c602200c7
chore(pv): consistent naming scheme
2024-11-17 17:03:27 +01:00
Vegard Hagen
69d56e8e71
feat: install Netbird as a VPN solution
...
Also configure Netbird OIDC client in Keycloak using Crossplane
2024-11-17 17:03:27 +01:00
Vegard Stenhjem Hagen
935a13038c
fix(remark42): correct url
...
Wrong URL used from the old cluster. Made it impossible to log in due to a wrong redirect URL.
2024-11-17 17:03:27 +01:00
Vegard Hagen
e2e30a91e2
fix: bind prometheus operator to same node with volume
...
No shared volumes (yet), so have to bind deployment to the node with the volume
2024-11-17 17:03:27 +01:00
Vegard Hagen
c4ba7120dd
feat(tofu): updated kubernetes setup
...
tried to to some tidying while writing an article based on the current
setup.
2024-11-17 17:03:27 +01:00
Vegard Hagen
0a265cbfd5
fix: crossed-wires in Plex and Jellyfin
2024-11-17 17:03:26 +01:00
Vegard Hagen
605e5ef181
fix: increase cpu and mem limits for Argo CD and cloudflared
...
This will hopefully alleviate issues with syncing and routing apparently hanging sometimes
2024-11-17 17:03:26 +01:00
Vegard Hagen
4cb40d3282
feat: configure keycloak using crossplane provider
2024-11-17 17:03:26 +01:00
Vegard Hagen
76ab7a71a2
feat: add crossplane.io
...
Planning to use Crossplane to declaratively create OIDC-clients for Keycloak
2024-11-17 17:03:26 +01:00
Vegard Hagen
628bdb53d6
feat(auth): add keycloak for auth
2024-11-17 17:03:26 +01:00
renovate[bot]
4d47d1c972
chore(deps): merge renovate PRs
...
chore(deps): update helm release node-feature-discovery to v0.16.3
chore(deps): update helm release argo-cd to v7.3.9
chore(deps): update dependency cilium/cilium to v1.15.7
chore(deps): update dependency intel/intel-device-plugins-for-kubernetes to v0.30.0
chore(deps): update terraform proxmox to v0.61.1
chore(deps): update sealed-secrets docker tag to v2.4.2
2024-11-17 17:03:16 +01:00
Vegard Hagen
be08e101b2
feat: configure renovate
2024-07-22 01:05:36 +02:00
Vegard Hagen
c80528ffbd
chore: switch remodelling to main-branch
2024-07-21 23:40:10 +02:00
Vegard Hagen
207b1892bf
feat: cleanup of remodelling
...
move remodel folder down to root and delete old unused manifests
2024-07-21 23:21:12 +02:00
Vegard Hagen
f1797c94ec
feat(monitoring): install kube-prometheus-stack
2024-07-21 23:20:31 +02:00
Vegard Hagen
4d2fe610e2
fix(proxmox-csi-plugin): fetch from Helm chart
2024-07-21 23:20:31 +02:00
Vegard Hagen
1eafca98b5
chore: enable Cilium Hubble
2024-07-21 23:20:31 +02:00
Vegard Hagen
7c492be433
chore: switch Argo CD over to main domain
2024-07-21 23:20:30 +02:00
Vegard Hagen
aa6af35f48
feat: routes to cluster external services
...
Routes to Home Assistant, Proxmox and TrueNAS
2024-07-21 23:20:30 +02:00
Vegard Hagen
482c0368ea
fix: stonegarden routing
...
added a listener for stonegarden.dev
2024-07-21 23:20:30 +02:00
Vegard Hagen
2c1e894af0
fix: media player services
...
Correct labels and svc type
2024-07-21 23:20:30 +02:00
Vegard Hagen
bca0889c47
fix(cloudflared): correct routing to homepage
2024-07-21 23:20:30 +02:00
Vegard Hagen
bf5f26da5a
chore: restore remark42 backup
2024-07-21 23:20:30 +02:00
