vhaudiquet
844c8f8abe
fix(caddy): the s3 certificate volume references its secret
2026-10-16 09:03:55 +02:00
vhaudiquet
93054f962a
feat(caddy): mount the s3.rhema.rs certificate
2026-10-16 09:01:46 +02:00
vhaudiquet
9aeecee770
feat(get-rhema): expose the S3 API publicly for release uploads
...
The release runners cannot resolve the in-cluster Service name, so the
binary uploads died on DNS. s3.rhema.rs fronts the same Garage through
Caddy and Traefik, with its own certificate, matching the web face's
shape (Caddy terminates, Traefik routes, bucket by path).
2026-10-16 08:56:34 +02:00
vhaudiquet
9d53dd0fc6
rhema(kube): deploy rhema.rs and get.rhema.rs
2026-10-15 22:32:14 +02:00
renovate[bot] and vhaudiquet
7ac3b46b3c
chore(kube): bump caddy Docker tag to v2.11.7
2026-10-11 00:03:43 +02:00
renovate[bot] and vhaudiquet
bc905c78bc
chore(kube): bump chart Helm release cert-manager-webhook-ovh to v0.9.18
2026-10-11 00:03:34 +02:00
renovate[bot] and vhaudiquet
60759d4e4a
chore(kube): bump stalwartlabs/stalwart Docker tag to v0.16.25
2026-10-11 00:03:05 +02:00
renovate[bot] and vhaudiquet
992415e4f1
chore(kube): bump caddy Docker tag to v2.11.6
2026-10-04 23:39:17 +02:00
renovate[bot] and vhaudiquet
d21f92eb4b
chore(kube): bump chart Helm release stalwart to v0.7.21
2026-10-04 23:39:03 +02:00
renovate[bot] and vhaudiquet
a8ff5d1b10
chore(kube): bump stalwartlabs/stalwart Docker tag to v0.16.24
2026-10-04 23:38:53 +02:00
vhaudiquet
9629597703
get-saggar(kube): deploy
...
The saggar-dist chart: a single-node Garage hosting the distribution
bucket — public read-only website on get.saggar.dev (the host label
is what Garage's vhost routing resolves the bucket from), S3 write
surface staying cluster-internal for the publish workflow. Same edge
path as the other saggar hosts: dns A record, cert-manager
certificate, caddy route. Chart repo and packages auth carry over
from the saggar release.
2026-10-04 23:14:09 +02:00
vhaudiquet
b8879b2025
saggar(kube): expose docs.saggar.dev
...
The chart's docs book (static nginx) was up in-cluster only: give its
ingress a host, with the same edge path as the api host — dns A
record, cert-manager certificate and caddy route.
2026-10-01 19:39:26 +02:00
vhaudiquet
e6ab21317a
traefik(kube): raise web entrypoint read timeout to 5m
...
Traefik v3 defaults respondingTimeouts.readTimeout to 60s counted
over the whole request body, so large HTTP git pushes get a 504 the
moment they pass one minute. writeTimeout stays unset: a cap there
would cut long-lived SSE streams mid-flight.
2026-09-30 23:03:42 +02:00
vhaudiquet
ae8a4ddb27
saggar(kube): deploy
...
Flux HelmRelease of the saggar hub (chart saggar-hub >=0.2.0-0,
CI-published on the gitea saggar org, appVersion pinned to the image
commit) with the web UI. Engine on api.saggar.dev for the CLI and the
docker/apt registries, UI on saggar.dev — new cert, caddy route and
dns A record for the api host, TLS terminating at Caddy as usual.
Login via the home Gitea as an OIDC provider; private registry and
helm repo auth share one packages token.
2026-09-30 22:30:47 +02:00
vhaudiquet
c83b4550ed
Merge branch 'main' of https://github.com/vhaudiquet/homeprod
...
* 'main' of https://github.com/vhaudiquet/homeprod :
chore(kube): bump chart Helm release cert-manager-webhook-ovh to v0.9.17
chore(kube): bump chart Helm release notesnook to v1.0.38
chore(kube): bump chart Helm release stalwart to v0.7.19
chore(kube): bump chart postgres Docker tag to v0.20.6
chore(kube): bump chart redis Docker tag to v0.35.4
chore(kube): bump stalwartlabs/stalwart Docker tag to v0.16.23
2026-09-28 01:24:28 +02:00
vhaudiquet
50d992b727
saggar.dev(kube): deploy
...
- cert-manager-webhook-porkbun via Flux (chart 2.0.7, octabits fork)
- porkbun DNS-01 solver on letsencrypt-production for saggar.dev
- porkbun API credentials secret (sops)
- saggar.dev apex Certificate + Caddy site block -> traefik
2026-09-28 01:14:58 +02:00
renovate[bot] and vhaudiquet
7e5fa8a5b5
chore(kube): bump chart Helm release cert-manager-webhook-ovh to v0.9.17
2026-09-26 19:34:36 +02:00
renovate[bot] and vhaudiquet
52ac77a74e
chore(kube): bump chart Helm release stalwart to v0.7.19
2026-09-26 19:34:04 +02:00
renovate[bot] and vhaudiquet
82d646d399
chore(kube): bump stalwartlabs/stalwart Docker tag to v0.16.23
2026-09-26 14:19:15 +02:00
vhaudiquet
b2f656c757
pkgatlas(kube): deploy
...
Flux HelmRelease tracking the CI-published chart (>=0.4.0-0, timestamped
versions, appVersion pinned to the image commit). Ingress host
pkgatlas.vhaudiquet.fr via traefik; TLS terminates at Caddy with the
*.vhaudiquet.fr wildcard, so the new @pkgatlas route proxies to Traefik
like the other public vhosts.
2026-09-24 21:57:42 +02:00
renovate[bot] and vhaudiquet
23748ee4fc
chore(kube): bump chart Helm release stalwart to v0.7.18
2026-09-19 20:54:40 +02:00
renovate[bot] and vhaudiquet
fdb2634a46
chore(kube): bump stalwartlabs/stalwart Docker tag to v0.16.22
2026-09-19 20:54:03 +02:00
renovate[bot] and vhaudiquet
69c59daf5e
chore(kube): bump caddy Docker tag to v2.11.4
2026-09-01 01:05:29 +02:00
renovate[bot] and vhaudiquet
a2a97180c9
chore(kube): bump chart Helm release cert-manager-webhook-ovh to v0.9.16
2026-09-01 01:05:19 +02:00
renovate[bot] and vhaudiquet
2c4b3127b4
chore(kube): bump stalwartlabs/stalwart Docker tag to v0.16.20
2026-09-01 01:04:00 +02:00
renovate[bot] and vhaudiquet
372dbff681
chore(kube): bump chart Helm release stalwart to v0.7.16
2026-09-01 01:03:46 +02:00
vhaudiquet
a80b45618c
renovate: deploy renovate on kube
2026-08-26 21:35:02 +02:00
vhaudiquet
972d4d1510
blocky: update coredns service ip
2026-08-21 18:53:47 +02:00
vhaudiquet
0ef10e278e
trafik: pin loadbalancerip
2026-08-20 23:32:22 +02:00
vhaudiquet
ac3a6a1b60
network: fix previous ips
2026-08-20 23:26:03 +02:00
vhaudiquet
207aa84670
network: allocate new ips on final segment
2026-08-20 22:31:57 +02:00
vhaudiquet
bc6f92e145
flux: re-order certificates for right dependencies
2026-08-19 16:56:23 +02:00
vhaudiquet
fd309e4f94
network: release old IPs, allocate new IPs, swap DNS
...
Migrating houses is never easy...
2026-08-17 20:27:08 +02:00
semerys and vhaudiquet
dcdc0bf138
caddy: move semeryfr to kube
2026-08-15 16:46:33 +02:00
vhaudiquet
eaa47c9b6d
notesnook: updated chart, added inbox API
2026-08-13 18:55:06 +02:00
vhaudiquet
a8f7ff538c
caddy: move buildpath from docker to kube
2026-08-13 00:52:49 +02:00
vhaudiquet
68ba23768e
photoprism: moved to photos.vhaudiquet.fr
2026-08-10 23:40:33 +02:00
vhaudiquet
c183f17606
fix(observability,photoprism): add resource limits to prevent OOM kills and sidecar crash-loops
...
- photoprism: add requests (200m/1Gi) and limits (2/4Gi) for RAW indexing
- grafana: add requests (100m/256Mi) and limits (500m/512Mi) to prevent OOMKill
- kube-state-metrics: add requests (50m/128Mi) and limits (200m/256Mi)
- node-exporter: add requests (50m/50Mi) and limits (200m/128Mi)
- vm-operator: add requests (50m/64Mi) and limits (200m/256Mi)
- loki sidecar (rules): add REQ_TIMEOUT=120, retry env vars, and small resources
- grafana sidecars (dashboards+datasources): add REQ_TIMEOUT=120 and retry env vars
2026-08-10 22:52:47 +02:00
vhaudiquet
88146579c0
refactor: consolidate kubernetes categories
2026-08-09 19:58:18 +02:00
vhaudiquet
00357f376e
obs,loki: remove redundant values
2026-08-01 22:19:41 +02:00
vhaudiquet
5a77fa64e5
obs,loki: fix 'from' value
2026-07-31 11:43:02 +02:00
vhaudiquet
3ae88775da
obs,vicm: fix values for storageclass
2026-07-28 18:39:08 +02:00
vhaudiquet
e68316a20d
obs,vicm: fix crd declared externally
2026-07-28 18:25:59 +02:00
vhaudiquet
b6b6cbacfd
obs,vicm,loki: fix chart version, config values
2026-07-28 18:09:30 +02:00
vhaudiquet
36146904a2
obs,alloy: fix alloy config
2026-07-28 16:17:16 +02:00
vhaudiquet
38ceb887a7
observability: deploy observability stack
2026-07-28 15:46:52 +02:00
vhaudiquet
92a358b907
authentik: tryfix tolerations
2026-07-25 14:48:03 +02:00
vhaudiquet
2200877166
gitea,authentik,notesnook,home-assistant: tolerate failover
...
renamed "home-assistant" folder
2026-07-25 14:44:32 +02:00
vhaudiquet
71ddb95d2f
kube: migrate to longhorn by default
2026-07-18 16:22:16 +02:00
vhaudiquet
32397ced96
stalwart: use OnRootMismatch groupChangePolicy
2026-07-03 15:00:45 +02:00
vhaudiquet
renovate[bot]andvhaudiquet
semerysandvhaudiquet