dependabot[bot]
8b44c803f9
build(deps): bump caddy in /kubernetes/system/caddy
...
Bumps caddy from 2.11.2 to 2.11.4.
---
updated-dependencies:
- dependency-name: caddy
dependency-version: 2.11.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-16 10:10:31 +00:00
vhaudiquet
4774208668
feat(caddy): use cert-manager for TLS certificates
...
- Add Certificate CRDs for vhaudiquet.fr, wildcard, and buildpath.win
- Keep semery.fr certs in certificates-secret.yaml (manual until OVH API)
- Update Caddyfile to use new TLS certificate paths (tls.crt/tls.key)
- Update values.yaml to mount cert-manager secrets for Cloudflare domains
- Mount semery.fr certs from caddy-certificates secret with item mappings
Certificates for Cloudflare domains will be auto-renewed by cert-manager.
2026-06-16 12:08:07 +02:00
vhaudiquet
86023b3721
fix: correct kustomizeconfig nameReference for cert-manager values secret
...
The Secret is generated with a hash suffix by secretGenerator, so the
nameReference needs to update HelmRelease to point to the generated name.
2026-06-16 11:42:32 +02:00
vhaudiquet
23840b5948
fix: add CiliumLoadBalancerIPPool to Flux deployment
2026-06-16 11:24:09 +02:00
vhaudiquet
3dfc7badb4
fix: add required prune field to Flux Kustomizations
2026-06-16 11:14:31 +02:00
vhaudiquet
852ff844c4
fix: resolve cert-manager CRD dependency for cluster redeployability
...
- Add root kustomization.yaml to explicitly list included paths
- Exclude cert-manager and cert-manager-issuer from root kustomization
- Add Flux Kustomizations in system/flux/ to manage deployment order
- cert-manager Flux Kustomization includes health checks for CRDs
- cert-manager-issuer depends on cert-manager being ready
2026-06-16 11:06:05 +02:00
vhaudiquet
a03bbee9e2
fix: remove OVH secret reference from cert-manager kustomization
2026-06-16 10:26:13 +02:00
vhaudiquet
e9ab217466
cert-manager: add cert-manager for automatic certificate renewal
...
Add cert-manager with DNS-01 challenge support:
- Cloudflare (vhaudiquet.fr, buildpath.win)
2026-06-16 10:15:53 +02:00
vhaudiquet
0c37889831
fix(gitea): increase postgresql liveness probe tolerance for slow NFS I/O
2026-06-05 22:21:52 +02:00
vhaudiquet
011c05e745
fix(authentik): increase postgresql liveness probe tolerance for slow NFS I/O
2026-06-05 22:13:59 +02:00
vhaudiquet
125afb9e43
fix(caddy): use FQDN trailing dot to avoid .lan search domain timeout
2026-06-05 22:11:41 +02:00
vhaudiquet
94814a2e4a
gitea: update git path to fast_app_data
2026-06-05 22:03:48 +02:00
vhaudiquet
65a9b26dec
fix(blocky): remove all in-addr.arpa conditional rules to break PTR loop
2026-06-05 18:01:35 +02:00
vhaudiquet
5ba85841c6
blocky: tryfix dns flooding issue
2026-06-05 17:19:07 +02:00
vhaudiquet
11d345f810
dns: fix local dns entry for bw-r740 machine
2026-05-28 17:36:36 +02:00
vhaudiquet
3ac26e7a9d
gitea: pin chart version
2026-05-28 17:36:10 +02:00
vhaudiquet
3c6357014e
build(deps): bump gitea/gitea from 1.25.5 to 1.26.2
2026-05-28 17:35:49 +02:00
vhaudiquet
4f1e69cd05
blocky: update limits to give more memory/cpu
2026-05-27 00:01:34 +02:00
vhaudiquet
543fc8a47e
traefik: trust cluster network
2026-05-26 13:18:08 +02:00
vhaudiquet
ead4450fc4
caddy: revert 66212c922a
2026-05-26 13:10:56 +02:00
vhaudiquet
66212c922a
caddy: enable websockets for authentik
2026-05-26 12:06:27 +02:00
vhaudiquet
a480212804
trust caddy reverse proxy
2026-05-26 12:06:12 +02:00
vhaudiquet
cd56789d53
dns: update local network entries for nodered
2026-05-16 01:09:53 +02:00
vhaudiquet
11b59bd812
vhaudiquet.fr: remove from docker
2026-05-14 19:03:30 +02:00
vhaudiquet
a58fe56404
vhaudiquet-fr: fix version constraint on kube
2026-05-14 12:13:34 +02:00
vhaudiquet
274e476a7f
vhaudiquet.fr: deploy vhaudiquet.fr to kube
2026-05-14 11:34:50 +02:00
vhaudiquet
524d0d7d3c
caddy: listen on port 80
2026-05-08 13:43:42 +02:00
vhaudiquet
51b22d769e
caddy: fix external ip annotation
2026-05-08 10:49:26 +02:00
vhaudiquet
4bd0274714
caddy: fix caddyfile syntax
2026-05-08 10:28:56 +02:00
vhaudiquet
69e3a793c8
caddy: change security context to fix permission error
2026-05-08 10:21:43 +02:00
vhaudiquet
d5831fd1e3
caddy: deploy caddy as edge reverse proxy (on kube)
2026-05-08 00:48:55 +02:00
vhaudiquet
dcbef2cd0a
blocky: use the right health probe
2026-05-02 19:51:38 +02:00
vhaudiquet
256c337db4
blocky, coredns: set replicaCount to 2, and enable blue/green 'RollingUpdate'
2026-05-02 18:59:49 +02:00
vhaudiquet
0ddeb75508
coredns: re-add file plugin with fallthrough
2026-05-02 18:45:19 +02:00
vhaudiquet
896002da8c
coredns: remove file plugin alltogether, change version
2026-05-02 18:43:31 +02:00
vhaudiquet
ef892b38a7
coredns: retry fix values.yaml
2026-05-02 18:36:22 +02:00
vhaudiquet
20d8e07a24
coredns: invert fallthrough in config
2026-05-02 18:32:06 +02:00
vhaudiquet
d9a1063630
coredns: try reversing order
2026-05-02 18:29:41 +02:00
vhaudiquet
3860f5849c
coredns: retry fallthrough in file plugin
2026-05-02 18:28:36 +02:00
vhaudiquet
f732f7247f
coredns: fix chart version
2026-05-02 18:27:38 +02:00
vhaudiquet
883330996a
coredns: fix values.yaml
2026-05-02 18:24:24 +02:00
vhaudiquet
c90caed623
coredns: set dnspolicy to clusterfirst
2026-05-02 18:20:53 +02:00
vhaudiquet
cfd521f502
coredns: try adding a different zone for kube resolution
2026-05-02 18:12:54 +02:00
vhaudiquet
f71faa0ae8
coredns: set zone to .
2026-05-02 18:04:52 +02:00
vhaudiquet
ce30776eeb
coredns: add kubernetes plugin
2026-05-02 17:28:07 +02:00
vhaudiquet
be092af161
coredns: add zone parameter for file plugin
2026-05-02 17:23:15 +02:00
vhaudiquet
0b75f66f30
coredns: add fallthrough to file plugin
2026-05-02 17:19:12 +02:00
vhaudiquet
e595bb2c45
coredns: add debug plugin
2026-05-02 17:14:06 +02:00
vhaudiquet
d82ce7a80f
coredns: tryfix etcd config with zone parameter
2026-05-02 16:52:21 +02:00
vhaudiquet
901a5e1a9a
coredns: tryfix config
2026-05-02 16:39:49 +02:00