vhaudiquet/homeprod
1
0
Fork 0
mirror of https://github.com/vhaudiquet/homeprod.git synced 2026-09-13 20:51:14 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,033 Commits 16 Branches 0 Tags
d8970a5f4b26e7c69e7f89c68c6001b9bc72ce7b
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
vhaudiquet d8970a5f4b obsidian-livesync: set couchdb shards to 1 2026-08-16 23:50:13 +02:00
vhaudiquet 7b6d8f3dc4 obsidian-livesync: update ingress 2026-08-16 22:29:08 +02:00
vhaudiquet 7d32e91b9c obsidian-livesync: add couchdb uuid 2026-08-16 22:25:52 +02:00
vhaudiquet 8c83e6c7ab obsidian-livesync: deploy to kube 2026-08-16 22:16:47 +02:00
vhaudiquet f553e19af4 p330: remove dedicated=failover taint 2026-08-16 20:40:15 +02:00
vhaudiquet 5e9bebc4f0 paperless: remove from docker 2026-08-16 12:10:27 +02:00
vhaudiquet 5a3984c0b2 dns(local): remove old paperless dns entry 2026-08-16 11:46:25 +02:00
vhaudiquet 48608bc59e paperless: deploy on kube 2026-08-16 11:07:01 +02:00
vhaudiquet 2d05743c6d dns(local): update p330 ip 2026-08-15 14:49:50 +02:00
vhaudiquet fe98f670cf infra/rpi4: set CNI to none for cilium 2026-08-14 20:31:46 +02:00
vhaudiquet 2a024821d2 infra/p330: set CNI to none for cilium 2026-08-14 18:36:28 +02:00
vhaudiquet 00859be72a notesnook: tryfix, remove know_proxies 2026-08-13 19:31:25 +02:00
vhaudiquet c1f4a57570 notesnook: add minio ingress path 2026-08-13 19:21:15 +02:00
vhaudiquet eaa47c9b6d notesnook: updated chart, added inbox API 2026-08-13 18:55:06 +02:00
vhaudiquet f2cd5f2d98 buildpath: update memory limits 2026-08-13 12:55:04 +02:00
vhaudiquet be88bbcd93 buildpath: remove from docker, bye! 2026-08-13 01:16:17 +02:00
vhaudiquet a8f7ff538c caddy: move buildpath from docker to kube 2026-08-13 00:52:49 +02:00
vhaudiquet b5a48584f0 gitea: go back to rootless 2026-08-13 00:43:19 +02:00
vhaudiquet c89ee33798 gitea: tryfix running non-rootless image 2026-08-12 23:24:09 +02:00
vhaudiquet 1e9a9080e9 gitea: add env override for HOME 2026-08-12 22:59:54 +02:00
vhaudiquet 50b68bf569 buildpath: specify kube chart version 2026-08-12 18:31:38 +02:00
vhaudiquet 2a95f8129b buildpath: update repository for kube 2026-08-12 18:28:05 +02:00
vhaudiquet 2a988f1a7c gitea: bump to latest 2026-08-12 18:22:39 +02:00
vhaudiquet 8604e270e1 buildpath: update kustomizeconfig 2026-08-12 18:17:10 +02:00
vhaudiquet 99639b1052 buildpath: fix kube chart repository 2026-08-12 18:14:26 +02:00
vhaudiquet 51d234157d buildpath: fix kube chart kind 2026-08-12 18:12:26 +02:00
vhaudiquet b8104d982b buildpath: fix kube chart 2026-08-12 18:11:08 +02:00
vhaudiquet 0fcfc016a6 buildpath: deploy on kube 2026-08-12 18:02:38 +02:00
vhaudiquet 315a7d79ea build(deps): bump buildpath 2026-08-12 00:53:11 +02:00
vhaudiquet 314b51313e photoprism: bump storage to 10G 2026-08-11 11:25:09 +02:00
vhaudiquet 8f8fa75099 photoprism: bump memory to 8G and limit to 1 worker 2026-08-11 00:49:57 +02:00
vhaudiquet 68ba23768e photoprism: moved to photos.vhaudiquet.fr 2026-08-10 23:40:33 +02:00
vhaudiquet 98cb3b8a52 infra/r740/proxmox: remove floating memory on kube VM 2026-08-10 23:12:47 +02:00
vhaudiquet 91adc68fd1 sshportal: remove sshportal, bye! 2026-08-10 23:07:22 +02:00
vhaudiquet 9411e860f9 matter-server: remove matter-server, bye! 2026-08-10 23:05:44 +02:00
vhaudiquet c183f17606 fix(observability,photoprism): add resource limits to prevent OOM kills and sidecar crash-loops 
- photoprism: add requests (200m/1Gi) and limits (2/4Gi) for RAW indexing
- grafana: add requests (100m/256Mi) and limits (500m/512Mi) to prevent OOMKill
- kube-state-metrics: add requests (50m/128Mi) and limits (200m/256Mi)
- node-exporter: add requests (50m/50Mi) and limits (200m/128Mi)
- vm-operator: add requests (50m/64Mi) and limits (200m/256Mi)
- loki sidecar (rules): add REQ_TIMEOUT=120, retry env vars, and small resources
- grafana sidecars (dashboards+datasources): add REQ_TIMEOUT=120 and retry env vars
 2026-08-10 22:52:47 +02:00
vhaudiquet be6053f5a3 openwebui: deploy openwebui 2026-08-09 21:23:15 +02:00
vhaudiquet 88146579c0 refactor: consolidate kubernetes categories 2026-08-09 19:58:18 +02:00
vhaudiquet 434c1aa51e build(deps): bump buildpath 2026-08-08 22:51:26 +02:00
vhaudiquet 16240e0589 readme: add p330, rpi4, typos 2026-08-04 22:24:16 +02:00
vhaudiquet 00357f376e obs,loki: remove redundant values 2026-08-01 22:19:41 +02:00
vhaudiquet 49224e8cb4 infra/rpi4: add rpi4 as quorum node 2026-08-01 21:46:05 +02:00
vhaudiquet 5a77fa64e5 obs,loki: fix 'from' value 2026-07-31 11:43:02 +02:00
vhaudiquet 2c313d8d09 obs,alloy(docker): fix flag 2026-07-30 11:28:25 +02:00
vhaudiquet 3ae88775da obs,vicm: fix values for storageclass 2026-07-28 18:39:08 +02:00
vhaudiquet e68316a20d obs,vicm: fix crd declared externally 2026-07-28 18:25:59 +02:00
vhaudiquet b6b6cbacfd obs,vicm,loki: fix chart version, config values 2026-07-28 18:09:30 +02:00
vhaudiquet 36146904a2 obs,alloy: fix alloy config 2026-07-28 16:17:16 +02:00
vhaudiquet 38ceb887a7 observability: deploy observability stack 2026-07-28 15:46:52 +02:00
vhaudiquet 3cfef81f89 longhorn: tryfix backups 2026-07-26 10:44:08 +02:00
vhaudiquet 58d415de54 longhorn: set default replica count to 2 2026-07-25 14:52:04 +02:00
vhaudiquet 92a358b907 authentik: tryfix tolerations 2026-07-25 14:48:03 +02:00
vhaudiquet 2200877166 gitea,authentik,notesnook,home-assistant: tolerate failover 
renamed "home-assistant" folder
 2026-07-25 14:44:32 +02:00
vhaudiquet a8671b9423 caddy,blocky: set externalTrafficPolicy to Cluster 2026-07-25 14:06:27 +02:00
vhaudiquet afd3b79dc1 caddy,traefik: prefer non-failover nodes 2026-07-25 10:22:16 +02:00
vhaudiquet 0ab2f2eb2c cilium: tryfix l2a policy 2026-07-25 10:16:02 +02:00
vhaudiquet 090e08ffcb cilium: tryfix l2a policy 2026-07-25 10:14:22 +02:00
vhaudiquet 62d1110d38 failover: initial failover chain for vhaudiquet.fr 
- vhaudiquet.fr, caddy, cert-manager, coredns, traefik are now tolerating failover nodes
- l2 announcements policy should make vip really virtual
 2026-07-25 10:12:52 +02:00
vhaudiquet 2c944cbea6 caddy: tolerate failover node 2026-07-22 17:24:50 +02:00
vhaudiquet 3161f64391 longhorn: fix tolerations 2026-07-22 11:25:21 +02:00
vhaudiquet 204b675f50 longhorn: tolerate failover node 2026-07-21 22:19:40 +02:00
vhaudiquet ebbea69288 infra/p330: add p330 talos node 2026-07-21 17:56:06 +02:00
vhaudiquet 71ddb95d2f kube: migrate to longhorn by default 2026-07-18 16:22:16 +02:00
vhaudiquet b10ca16816 coredns: move etcd pvc from nfs-csi to longhorn 2026-07-17 11:07:04 +02:00
vhaudiquet ae42ca3a1f longhorn: deploy longhorn to kube 2026-07-11 00:54:08 +02:00
vhaudiquet a513f0dc2e refactor: remove old certificate secret file 2026-07-10 07:13:33 +02:00
vhaudiquet b225fd1057 fix: tryfix secret read permissions 2026-07-10 07:06:52 +02:00
vhaudiquet 97fc11e001 fix: fix ovh webhook solver credentials (clusterissuer) 2026-07-10 06:51:14 +02:00
vhaudiquet abd186b1a1 fix: fix ovh webgook solver values.yaml 2026-07-10 00:31:08 +02:00
vhaudiquet 81d4e5c310 fix: update missing issuer 2026-07-10 00:26:17 +02:00
vhaudiquet 2c43aacf91 fix: update missing kustomization 2026-07-10 00:25:15 +02:00
vhaudiquet c6b706a136 fix: fix semery.fr ovh webhook provider 2026-07-10 00:21:08 +02:00
vhaudiquet ba0df1c484 semery.fr: add OVH-specific webhook solver 2026-07-10 00:12:21 +02:00
vhaudiquet 001d4adbed semery.fr: automatic certificate renewal 2026-07-09 23:17:09 +02:00
vhaudiquet b424f2972f vhaudiquet.fr: update namespace to allow privileged container 2026-07-09 19:54:13 +02:00
vhaudiquet b6541a018f vhaudiquet.fr: update to allow deploying without NFS 2026-07-09 16:43:04 +02:00
vhaudiquet a9178f6209 infra/r740/proxmox: bump kube vm base image 2026-07-09 16:42:52 +02:00
vhaudiquet c8c6e3fefc tubearchivist: reverse proxy rule .local -> .lan 2026-07-08 18:04:45 +02:00
vhaudiquet ea64255153 Merge branch 'main' of https://github.com/vhaudiquet/homeprod 
* 'main' of https://github.com/vhaudiquet/homeprod:
  build(deps): bump esphome/esphome in /docker/home/esphome
  build(deps): bump koenkk/zigbee2mqtt in /docker/home/zigbee2mqtt
  build(deps): bump roundcube/roundcubemail
  build(deps): bump hotio/jackett
  build(deps): bump jellyfin/jellyfin
  build(deps): bump wizarrrr/wizarr
  build(deps): bump vabene1111/recipes in /docker/personal/tandoor
 2026-07-08 18:03:54 +02:00
vhaudiquet 3ffc9836e3 r740/proxmox: add more network card to kube vm 2026-07-08 18:03:49 +02:00
vhaudiquet 2a90a6d718 stalwart: remove from docker, bye! 2026-07-07 21:20:07 +02:00
vhaudiquet 3efa9deb34 photoprism: truenas .local .lan artifact migration 2026-07-06 21:30:14 +02:00
vhaudiquet 32397ced96 stalwart: use OnRootMismatch groupChangePolicy 2026-07-03 15:00:45 +02:00
vhaudiquet b3047cbe3e dns: update TLSA records for stalwart 2026-07-03 09:43:00 +02:00
vhaudiquet c9af935148 stalwart: disable recovery mode 2026-07-03 00:38:44 +02:00
vhaudiquet bac134e2d4 stalwart: deploy to kube 2026-07-02 22:57:39 +02:00
vhaudiquet 30276fa4fb kube: expand ip pool allocation 2026-07-02 22:42:12 +02:00
vhaudiquet aa9452354a stalwart: restore 0.15.x for pre-migration phase 
v0.16 introduced compatibility break with below. we will migrate to v0.16 on kube. for pre-migration we restore working setup.
 2026-07-02 22:40:27 +02:00
vhaudiquet f8f7ae6047 buildpath: add memory limits for mongo, update 2026-06-27 12:39:22 +02:00
vhaudiquet 102d1a1a68 gitea: remove stale "redis" reference, update to "valkey" 2026-06-27 12:20:07 +02:00
vhaudiquet 2eb4568682 gitea: add resource limits 2026-06-27 12:09:03 +02:00
vhaudiquet ea680f6363 fix: remove trailing newline from Cloudflare API token 2026-06-16 12:24:35 +02:00
vhaudiquet 4774208668 feat(caddy): use cert-manager for TLS certificates 
- Add Certificate CRDs for vhaudiquet.fr, wildcard, and buildpath.win
- Keep semery.fr certs in certificates-secret.yaml (manual until OVH API)
- Update Caddyfile to use new TLS certificate paths (tls.crt/tls.key)
- Update values.yaml to mount cert-manager secrets for Cloudflare domains
- Mount semery.fr certs from caddy-certificates secret with item mappings

Certificates for Cloudflare domains will be auto-renewed by cert-manager.
 2026-06-16 12:08:07 +02:00
vhaudiquet 86023b3721 fix: correct kustomizeconfig nameReference for cert-manager values secret 
The Secret is generated with a hash suffix by secretGenerator, so the
nameReference needs to update HelmRelease to point to the generated name.
 2026-06-16 11:42:32 +02:00
vhaudiquet 23840b5948 fix: add CiliumLoadBalancerIPPool to Flux deployment 2026-06-16 11:24:09 +02:00
vhaudiquet 3dfc7badb4 fix: add required prune field to Flux Kustomizations 2026-06-16 11:14:31 +02:00
vhaudiquet 8c91323d32 feat: validate kustomize build in pre-commit 2026-06-16 11:10:26 +02:00
vhaudiquet 852ff844c4 fix: resolve cert-manager CRD dependency for cluster redeployability 
- Add root kustomization.yaml to explicitly list included paths
- Exclude cert-manager and cert-manager-issuer from root kustomization
- Add Flux Kustomizations in system/flux/ to manage deployment order
- cert-manager Flux Kustomization includes health checks for CRDs
- cert-manager-issuer depends on cert-manager being ready
 2026-06-16 11:06:05 +02:00
vhaudiquet a03bbee9e2 fix: remove OVH secret reference from cert-manager kustomization 2026-06-16 10:26:13 +02:00
vhaudiquet e9ab217466 cert-manager: add cert-manager for automatic certificate renewal 
Add cert-manager with DNS-01 challenge support:
- Cloudflare (vhaudiquet.fr, buildpath.win)
 2026-06-16 10:15:53 +02:00