286 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Vegard Hagen	d077f4b035	feat(authelia): add ES256 jwk	2024-11-17 17:03:33 +01:00
Vegard Hagen	e0ce01c80f	fix(oidc): conceal jwks signing key	2024-11-17 17:03:33 +01:00
Vegard Hagen	53855a6d27	fix(oidc): conceal argo cd client secret	2024-11-17 17:03:33 +01:00
Vegard Hagen	86395edc1f	feat(authelia): add Argo CD client	2024-11-17 17:03:33 +01:00
Vegard Hagen	c88403691b	feat(lldap): create and use own authelia user	2024-11-17 17:03:33 +01:00
Vegard Hagen	ba69146b4b	feat(auth): add Authelia for OIDC ... Use Authelia in an attempt to replace Keycloak. Kanidm is another alternative we're going to try later.	2024-11-17 17:03:33 +01:00
Vegard Hagen	6ac8652e24	chore(torrent): change torrent ports	2024-11-17 17:03:32 +01:00
Vegard Hagen	c524a6ab65	feat(cilium): enable maglev loadBalancer ... Maglev Consistent Hashing should improve resiliency in case of failures https://docs.cilium.io/en/stable/network/kubernetes/kubeproxy-free/\#maglev-consistent-hashing	2024-11-17 17:03:32 +01:00
Vegard Hagen	af79c5b906	fix(argocd): turn on server-side diff ... https://argo-cd.readthedocs.io/en/latest/user-guide/diff-strategies/\#server-side-diff This should solve out-of-sync for e.g. Cilium ref https://github.com/argoproj/argo-cd/issues/19038	2024-11-17 17:03:32 +01:00
renovate[bot]	d6d5a2ad02	chore(deps): merge renovate PRs ... chore(deps): update terraform restapi to v1.20.0 chore(deps): update cloudflare/cloudflared docker tag to v2024.9.1 chore(deps): update terraform proxmox to v0.64.0 chore(deps): update keycloak docker tag to v22.2.3 chore(deps): update sealed-secrets docker tag to v2.4.6 chore(deps): update ghcr.io/lldap/lldap docker tag to v2024-09-11 chore(deps): update media containers chore(deps): update terraform talos to v0.6.0-beta.0 chore(deps): update helm release argo-cd to v7.5.2 chore(deps): update helm release crossplane to v1.17.0	2024-11-17 17:03:32 +01:00
Vegard Hagen	ddb7f0fd9f	feat(lldap): bootstrap lldap users with script	2024-11-17 17:03:32 +01:00
Vegard Hagen	2a3f01736d	feat(ldap): add lldap as ldap server	2024-11-17 17:03:32 +01:00
Vegard Hagen	1d0ae6d437	feat(cnpg): configure test-database for external connection	2024-11-17 17:03:32 +01:00
Vegard Hagen	f1a11669a6	feat(renovate): group related containers for fewer renovate PRs	2024-11-17 17:03:32 +01:00
Vegard Hagen	e5b3cd91d3	feat(unrar): add an image for unrar tool	2024-11-17 17:03:31 +01:00
renovate[bot]	7695584a63	chore(deps): update ghcr.io/onedr0p/plex docker tag to v1.40.5.8921-836b34c27	2024-11-17 17:03:31 +01:00
Vegard Stenhjem Hagen	944f4a92ba	fix(netbird): expose netbird dashboard	2024-11-17 17:03:31 +01:00
Vegard Hagen	5d69e82eb7	fix: route plex and jellyfin through gateway for tls-termination	2024-11-17 17:03:31 +01:00
renovate[bot]	e1224e95da	chore(deps): update ghcr.io/onedr0p/sonarr docker tag to v4.0.9	2024-11-17 17:03:31 +01:00
Vegard Hagen	d3338da90a	feat(database): add cnpg for database management	2024-11-17 17:03:31 +01:00
renovate[bot]	cb1c2cdebb	chore(deps): merge renovate PRs ... chore(deps): update netbird to v0.28.9 chore(deps): update netbirdio/management docker tag to v0.28.9 chore(deps): update netbirdio/netbird docker tag to v0.28.9 chore(deps): update netbirdio/signal docker tag to v0.28.9 chore(deps): update cloudflare/cloudflared docker tag to v2024.8.3 chore(deps): update ghcr.io/onedr0p/radarr docker tag to v5.9.1 chore(deps): update ghcr.io/onedr0p/plex docker tag to v1.40.5.8897-e5987a19d chore(deps): update helm release argo-cd to v7.4.5 chore(deps): update terraform proxmox to v0.63.0 chore(deps): update dependency corewire/images/crossplane/function-keycloak-builtin-objects to v3 chore(deps): update keycloak docker tag to v22.1.3 chore(deps): update ghcr.io/jellyfin/jellyfin docker tag to v10.9.10 chore(deps): update proxmox-csi-plugin docker tag to v0.2.9	2024-11-17 17:03:31 +01:00
Vegard Hagen	505a18cf38	fix(netbird): use internal dns to resolve auth admin-endpoint to internal gateway	2024-11-17 17:03:31 +01:00
renovate[bot]	101b19a729	chore(deps): update keycloak docker tag to v22.1.2	2024-11-17 17:03:30 +01:00
renovate[bot]	5b893c87f4	chore(deps): update ghcr.io/onedr0p/qbittorrent docker tag to v4.6.6	2024-11-17 17:03:30 +01:00
Vegard Hagen	91e389dc0e	fix(netbird): allow required endpoint from keycloak	2024-11-17 17:03:30 +01:00
Vegard Hagen	d74b811d84	chore(docs): update readme	2024-11-17 17:03:30 +01:00
Vegard Hagen	9a7894a7ab	feat(vpn): split gateway into external and internal services	2024-11-17 17:03:30 +01:00
renovate[bot]	174cce0845	chore(deps): merge renovate PRs ... chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.52 chore(deps): update helm release cert-manager to v1.15.3 chore(deps): update registry.k8s.io/git-sync/git-sync docker tag to v4.2.4 chore(deps): update dependency corewire/images/crossplane/function-keycloak-builtin-objects to v2 chore(deps): update helm release argo-cd to v7.4.4	2024-11-17 17:03:30 +01:00
Vegard Hagen	0e0a356fd1	fix(oidc): add 'basic' scope to netbird client and update keycloak ... Change in Keycloak 25.0.0 https://www.keycloak.org/docs/25.0.0/upgrading/\#new-default-client-scope-basic Thanks to Olav 14dac2b576	2024-11-17 17:03:30 +01:00
Vegard Hagen	872f33c295	feat(adguard): mount config-file for declarative configuration	2024-11-17 17:03:30 +01:00
Vegard Hagen	9dec025db7	feat(dns): use Unbound and AdGuardHome for DNS ... Unbound as a recursive resolver and AdGuardHome as main DNS backed by Unbound	2024-11-17 17:03:29 +01:00
Vegard Hagen	38f118fa17	fix(jellyfin): use Memory for /cache to avoid NodeDiskPressure	2024-11-17 17:03:29 +01:00
Vegard Hagen	653d3e946c	feat(whoami): add simple whoami-app for testing	2024-11-17 17:03:29 +01:00
Vegard Hagen	5c0c3366b2	feat(netbird): add netbird router agent ... This should allow me to connect to services from a Netbird VPN connection	2024-11-17 17:03:29 +01:00
Vegard Hagen	0048da7ffa	chore(oidc): collect all oidc-clients under keycloak	2024-11-17 17:03:29 +01:00
Vegard Hagen	d79f57efd3	chore(ingress): remove all ingress resources in favour of http-routes	2024-11-17 17:03:29 +01:00
Vegard Hagen	1602202137	feat(vuetorrent): use git-sync to fetch vuetorrent theme	2024-11-17 17:03:29 +01:00
renovate[bot]	89c0a27364	chore(deps): merge renovate PRs ... chore(deps): update helm release node-feature-discovery to v0.16.4 chore(deps): update helm release argo-cd to v7.4.3 chore(deps): update keycloak docker tag to v22.1.1 chore(deps): update dependency umputun/remark42 to v1.13.1 chore(deps): update cloudflare/cloudflared docker tag to v2024.8.2 chore(deps): update ghcr.io/jellyfin/jellyfin docker tag to v10.9.9 chore(deps): update ghcr.io/onedr0p/sonarr docker tag to v4.0.8 chore(deps): update ghcr.io/onedr0p/prowlarr docker tag to v1.21.2 fix(renovate): explicitly set versioning scheme for plex chore(deps): update ghcr.io/onedr0p/radarr docker tag to v5.8.3 chore(deps): update dependency cilium/cilium to v1.16.1 chore(deps): update terraform kubernetes to v2.32.0 chore(deps): update ghcr.io/onedr0p/plex docker tag to v1.40.5.8854-f36c552fd chore(deps): update helm release cilium to v1.16.1	2024-11-17 17:03:28 +01:00
Vegard Hagen	9de3a6ba0f	chore(cloudflared): clean up cloudflared deployment ... remove unused config and enable renovate	2024-11-17 17:03:28 +01:00
Vegard Hagen	11cba23ae2	chore(renovate): add renovate comments on deployments ... This should allow Renovate to pick up the image versions automatically and create update PRs	2024-11-17 17:03:28 +01:00
Vegard Hagen	e03f701119	chore(nas): update TrueNAS IP after router change ... New router is trash and can't set static IPs, some device stole the old one	2024-11-17 17:03:28 +01:00
Vegard Hagen	5abde08753	fix: conflicting svc name	2024-11-17 17:03:28 +01:00
Vegard Hagen	e6a8ad12c8	chore(plex): use Memory for /tmp and /transcode ... Try to fix NodeDiskPressure issue where I think Plex filling up ephemeral storage	2024-11-17 17:03:28 +01:00
Vegard Hagen	dbb66ba93d	chore: rename svc for arr-stack applications ... Dropping -web postfix since it doesn't mean anything and I think it just clutters	2024-11-17 17:03:28 +01:00
Vegard Hagen	8668f58a38	chore(gateway): update to Gateway API 1.1.0	2024-11-17 17:03:28 +01:00
renovate[bot]	42c7fe1e12	chore(deps): merge renovate PRs ... chore(deps): update helm release argo-cd to v7.4.2 chore(deps): update sealed-secrets docker tag to v2.4.5 chore(deps): update terraform proxmox to v0.62.0 chore(deps): update keycloak docker tag to v22 chore(deps): update helm release cilium to v1.16.0 chore(deps): update dependency cilium/cilium to v1.16.0 chore(deps): update helm release cert-manager to v1.15.2	2024-11-17 17:03:27 +01:00
Vegard Hagen	25f977126b	fix(cert): ask for cert for both *.stonegarden.dev and stonegarden.dev ... try to bypass letsenrypt rate-limiting for exact set of domains	2024-11-17 17:03:27 +01:00
Vegard Hagen	ba2ab6435b	chore(cleanup): Cleanup after cluster rebuild	2024-11-17 17:03:27 +01:00
Vegard Hagen	1c602200c7	chore(pv): consistent naming scheme	2024-11-17 17:03:27 +01:00
Vegard Hagen	69d56e8e71	feat: install Netbird as a VPN solution ... Also configure Netbird OIDC client in Keycloak using Crossplane	2024-11-17 17:03:27 +01:00