renovate[bot] and vhaudiquet
7ac3b46b3c
chore(kube): bump caddy Docker tag to v2.11.7
2026-10-11 00:03:43 +02:00
renovate[bot] and vhaudiquet
bc905c78bc
chore(kube): bump chart Helm release cert-manager-webhook-ovh to v0.9.18
2026-10-11 00:03:34 +02:00
renovate[bot] and vhaudiquet
60759d4e4a
chore(kube): bump stalwartlabs/stalwart Docker tag to v0.16.25
2026-10-11 00:03:05 +02:00
renovate[bot] and vhaudiquet
992415e4f1
chore(kube): bump caddy Docker tag to v2.11.6
2026-10-04 23:39:17 +02:00
renovate[bot] and vhaudiquet
d21f92eb4b
chore(kube): bump chart Helm release stalwart to v0.7.21
2026-10-04 23:39:03 +02:00
renovate[bot] and vhaudiquet
a8ff5d1b10
chore(kube): bump stalwartlabs/stalwart Docker tag to v0.16.24
2026-10-04 23:38:53 +02:00
vhaudiquet
9629597703
get-saggar(kube): deploy
...
The saggar-dist chart: a single-node Garage hosting the distribution
bucket — public read-only website on get.saggar.dev (the host label
is what Garage's vhost routing resolves the bucket from), S3 write
surface staying cluster-internal for the publish workflow. Same edge
path as the other saggar hosts: dns A record, cert-manager
certificate, caddy route. Chart repo and packages auth carry over
from the saggar release.
2026-10-04 23:14:09 +02:00
vhaudiquet
b8879b2025
saggar(kube): expose docs.saggar.dev
...
The chart's docs book (static nginx) was up in-cluster only: give its
ingress a host, with the same edge path as the api host — dns A
record, cert-manager certificate and caddy route.
2026-10-01 19:39:26 +02:00
vhaudiquet
e6ab21317a
traefik(kube): raise web entrypoint read timeout to 5m
...
Traefik v3 defaults respondingTimeouts.readTimeout to 60s counted
over the whole request body, so large HTTP git pushes get a 504 the
moment they pass one minute. writeTimeout stays unset: a cap there
would cut long-lived SSE streams mid-flight.
2026-09-30 23:03:42 +02:00
vhaudiquet
ae8a4ddb27
saggar(kube): deploy
...
Flux HelmRelease of the saggar hub (chart saggar-hub >=0.2.0-0,
CI-published on the gitea saggar org, appVersion pinned to the image
commit) with the web UI. Engine on api.saggar.dev for the CLI and the
docker/apt registries, UI on saggar.dev — new cert, caddy route and
dns A record for the api host, TLS terminating at Caddy as usual.
Login via the home Gitea as an OIDC provider; private registry and
helm repo auth share one packages token.
2026-09-30 22:30:47 +02:00
vhaudiquet
c83b4550ed
Merge branch 'main' of https://github.com/vhaudiquet/homeprod
...
* 'main' of https://github.com/vhaudiquet/homeprod :
chore(kube): bump chart Helm release cert-manager-webhook-ovh to v0.9.17
chore(kube): bump chart Helm release notesnook to v1.0.38
chore(kube): bump chart Helm release stalwart to v0.7.19
chore(kube): bump chart postgres Docker tag to v0.20.6
chore(kube): bump chart redis Docker tag to v0.35.4
chore(kube): bump stalwartlabs/stalwart Docker tag to v0.16.23
2026-09-28 01:24:28 +02:00
vhaudiquet
50d992b727
saggar.dev(kube): deploy
...
- cert-manager-webhook-porkbun via Flux (chart 2.0.7, octabits fork)
- porkbun DNS-01 solver on letsencrypt-production for saggar.dev
- porkbun API credentials secret (sops)
- saggar.dev apex Certificate + Caddy site block -> traefik
2026-09-28 01:14:58 +02:00
renovate[bot] and vhaudiquet
7e5fa8a5b5
chore(kube): bump chart Helm release cert-manager-webhook-ovh to v0.9.17
2026-09-26 19:34:36 +02:00
renovate[bot] and vhaudiquet
52ac77a74e
chore(kube): bump chart Helm release stalwart to v0.7.19
2026-09-26 19:34:04 +02:00
renovate[bot] and vhaudiquet
82d646d399
chore(kube): bump stalwartlabs/stalwart Docker tag to v0.16.23
2026-09-26 14:19:15 +02:00
vhaudiquet
b2f656c757
pkgatlas(kube): deploy
...
Flux HelmRelease tracking the CI-published chart (>=0.4.0-0, timestamped
versions, appVersion pinned to the image commit). Ingress host
pkgatlas.vhaudiquet.fr via traefik; TLS terminates at Caddy with the
*.vhaudiquet.fr wildcard, so the new @pkgatlas route proxies to Traefik
like the other public vhosts.
2026-09-24 21:57:42 +02:00
renovate[bot] and vhaudiquet
23748ee4fc
chore(kube): bump chart Helm release stalwart to v0.7.18
2026-09-19 20:54:40 +02:00
renovate[bot] and vhaudiquet
fdb2634a46
chore(kube): bump stalwartlabs/stalwart Docker tag to v0.16.22
2026-09-19 20:54:03 +02:00
renovate[bot] and vhaudiquet
69c59daf5e
chore(kube): bump caddy Docker tag to v2.11.4
2026-09-01 01:05:29 +02:00
renovate[bot] and vhaudiquet
a2a97180c9
chore(kube): bump chart Helm release cert-manager-webhook-ovh to v0.9.16
2026-09-01 01:05:19 +02:00
renovate[bot] and vhaudiquet
2c4b3127b4
chore(kube): bump stalwartlabs/stalwart Docker tag to v0.16.20
2026-09-01 01:04:00 +02:00
renovate[bot] and vhaudiquet
372dbff681
chore(kube): bump chart Helm release stalwart to v0.7.16
2026-09-01 01:03:46 +02:00
vhaudiquet
a80b45618c
renovate: deploy renovate on kube
2026-08-26 21:35:02 +02:00
vhaudiquet
972d4d1510
blocky: update coredns service ip
2026-08-21 18:53:47 +02:00
vhaudiquet
0ef10e278e
trafik: pin loadbalancerip
2026-08-20 23:32:22 +02:00
vhaudiquet
ac3a6a1b60
network: fix previous ips
2026-08-20 23:26:03 +02:00
vhaudiquet
207aa84670
network: allocate new ips on final segment
2026-08-20 22:31:57 +02:00
vhaudiquet
bc6f92e145
flux: re-order certificates for right dependencies
2026-08-19 16:56:23 +02:00
vhaudiquet
fd309e4f94
network: release old IPs, allocate new IPs, swap DNS
...
Migrating houses is never easy...
2026-08-17 20:27:08 +02:00
semerys and vhaudiquet
dcdc0bf138
caddy: move semeryfr to kube
2026-08-15 16:46:33 +02:00
vhaudiquet
eaa47c9b6d
notesnook: updated chart, added inbox API
2026-08-13 18:55:06 +02:00
vhaudiquet
a8f7ff538c
caddy: move buildpath from docker to kube
2026-08-13 00:52:49 +02:00
vhaudiquet
68ba23768e
photoprism: moved to photos.vhaudiquet.fr
2026-08-10 23:40:33 +02:00
vhaudiquet
c183f17606
fix(observability,photoprism): add resource limits to prevent OOM kills and sidecar crash-loops
...
- photoprism: add requests (200m/1Gi) and limits (2/4Gi) for RAW indexing
- grafana: add requests (100m/256Mi) and limits (500m/512Mi) to prevent OOMKill
- kube-state-metrics: add requests (50m/128Mi) and limits (200m/256Mi)
- node-exporter: add requests (50m/50Mi) and limits (200m/128Mi)
- vm-operator: add requests (50m/64Mi) and limits (200m/256Mi)
- loki sidecar (rules): add REQ_TIMEOUT=120, retry env vars, and small resources
- grafana sidecars (dashboards+datasources): add REQ_TIMEOUT=120 and retry env vars
2026-08-10 22:52:47 +02:00
vhaudiquet
88146579c0
refactor: consolidate kubernetes categories
2026-08-09 19:58:18 +02:00
vhaudiquet
00357f376e
obs,loki: remove redundant values
2026-08-01 22:19:41 +02:00
vhaudiquet
5a77fa64e5
obs,loki: fix 'from' value
2026-07-31 11:43:02 +02:00
vhaudiquet
3ae88775da
obs,vicm: fix values for storageclass
2026-07-28 18:39:08 +02:00
vhaudiquet
e68316a20d
obs,vicm: fix crd declared externally
2026-07-28 18:25:59 +02:00
vhaudiquet
b6b6cbacfd
obs,vicm,loki: fix chart version, config values
2026-07-28 18:09:30 +02:00
vhaudiquet
36146904a2
obs,alloy: fix alloy config
2026-07-28 16:17:16 +02:00
vhaudiquet
38ceb887a7
observability: deploy observability stack
2026-07-28 15:46:52 +02:00
vhaudiquet
92a358b907
authentik: tryfix tolerations
2026-07-25 14:48:03 +02:00
vhaudiquet
2200877166
gitea,authentik,notesnook,home-assistant: tolerate failover
...
renamed "home-assistant" folder
2026-07-25 14:44:32 +02:00
vhaudiquet
71ddb95d2f
kube: migrate to longhorn by default
2026-07-18 16:22:16 +02:00
vhaudiquet
32397ced96
stalwart: use OnRootMismatch groupChangePolicy
2026-07-03 15:00:45 +02:00
vhaudiquet
c9af935148
stalwart: disable recovery mode
2026-07-03 00:38:44 +02:00
vhaudiquet
bac134e2d4
stalwart: deploy to kube
2026-07-02 22:57:39 +02:00
vhaudiquet
011c05e745
fix(authentik): increase postgresql liveness probe tolerance for slow NFS I/O
2026-06-05 22:13:59 +02:00
vhaudiquet
2d2483adb0
authentik: set postgres args to null
2025-12-05 22:18:24 +01:00