vhaudiquet/homeprod
1
0
Fork 1
mirror of https://github.com/vhaudiquet/homeprod.git synced 2026-10-19 13:07:14 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,136 Commits 16 Branches 0 Tags
e33b82671ab70ded6e021fa52f748179149efe87
Commit Graph
60 Commits
Author SHA1 Message Date
vhaudiquet e33b82671a revert: restore the caddy values gutted by a bad s3 volume edit 2026-10-16 09:04:31 +02:00
vhaudiquet 844c8f8abe fix(caddy): the s3 certificate volume references its secret 2026-10-16 09:03:55 +02:00
vhaudiquet 93054f962a feat(caddy): mount the s3.rhema.rs certificate 2026-10-16 09:01:46 +02:00
vhaudiquet 9aeecee770 feat(get-rhema): expose the S3 API publicly for release uploads 
The release runners cannot resolve the in-cluster Service name, so the
binary uploads died on DNS. s3.rhema.rs fronts the same Garage through
Caddy and Traefik, with its own certificate, matching the web face's
shape (Caddy terminates, Traefik routes, bucket by path).
 2026-10-16 08:56:34 +02:00
vhaudiquet 9d53dd0fc6 rhema(kube): deploy rhema.rs and get.rhema.rs 2026-10-15 22:32:14 +02:00
renovate[bot]andvhaudiquet 7ac3b46b3c chore(kube): bump caddy Docker tag to v2.11.7 2026-10-11 00:03:43 +02:00
renovate[bot]andvhaudiquet bc905c78bc chore(kube): bump chart Helm release cert-manager-webhook-ovh to v0.9.18 2026-10-11 00:03:34 +02:00
renovate[bot]andvhaudiquet 60759d4e4a chore(kube): bump stalwartlabs/stalwart Docker tag to v0.16.25 2026-10-11 00:03:05 +02:00
renovate[bot]andvhaudiquet 992415e4f1 chore(kube): bump caddy Docker tag to v2.11.6 2026-10-04 23:39:17 +02:00
renovate[bot]andvhaudiquet d21f92eb4b chore(kube): bump chart Helm release stalwart to v0.7.21 2026-10-04 23:39:03 +02:00
renovate[bot]andvhaudiquet a8ff5d1b10 chore(kube): bump stalwartlabs/stalwart Docker tag to v0.16.24 2026-10-04 23:38:53 +02:00
vhaudiquet 9629597703 get-saggar(kube): deploy 
The saggar-dist chart: a single-node Garage hosting the distribution
bucket — public read-only website on get.saggar.dev (the host label
is what Garage's vhost routing resolves the bucket from), S3 write
surface staying cluster-internal for the publish workflow. Same edge
path as the other saggar hosts: dns A record, cert-manager
certificate, caddy route. Chart repo and packages auth carry over
from the saggar release.
 2026-10-04 23:14:09 +02:00
vhaudiquet b8879b2025 saggar(kube): expose docs.saggar.dev 
The chart's docs book (static nginx) was up in-cluster only: give its
ingress a host, with the same edge path as the api host — dns A
record, cert-manager certificate and caddy route.
 2026-10-01 19:39:26 +02:00
vhaudiquet e6ab21317a traefik(kube): raise web entrypoint read timeout to 5m 
Traefik v3 defaults respondingTimeouts.readTimeout to 60s counted
over the whole request body, so large HTTP git pushes get a 504 the
moment they pass one minute. writeTimeout stays unset: a cap there
would cut long-lived SSE streams mid-flight.
 2026-09-30 23:03:42 +02:00
vhaudiquet ae8a4ddb27 saggar(kube): deploy 
Flux HelmRelease of the saggar hub (chart saggar-hub >=0.2.0-0,
CI-published on the gitea saggar org, appVersion pinned to the image
commit) with the web UI. Engine on api.saggar.dev for the CLI and the
docker/apt registries, UI on saggar.dev — new cert, caddy route and
dns A record for the api host, TLS terminating at Caddy as usual.
Login via the home Gitea as an OIDC provider; private registry and
helm repo auth share one packages token.
 2026-09-30 22:30:47 +02:00
vhaudiquet c83b4550ed Merge branch 'main' of https://github.com/vhaudiquet/homeprod 
* 'main' of https://github.com/vhaudiquet/homeprod:
  chore(kube): bump chart Helm release cert-manager-webhook-ovh to v0.9.17
  chore(kube): bump chart Helm release notesnook to v1.0.38
  chore(kube): bump chart Helm release stalwart to v0.7.19
  chore(kube): bump chart postgres Docker tag to v0.20.6
  chore(kube): bump chart redis Docker tag to v0.35.4
  chore(kube): bump stalwartlabs/stalwart Docker tag to v0.16.23
 2026-09-28 01:24:28 +02:00
vhaudiquet 50d992b727 saggar.dev(kube): deploy 
- cert-manager-webhook-porkbun via Flux (chart 2.0.7, octabits fork)
- porkbun DNS-01 solver on letsencrypt-production for saggar.dev
- porkbun API credentials secret (sops)
- saggar.dev apex Certificate + Caddy site block -> traefik
 2026-09-28 01:14:58 +02:00
renovate[bot]andvhaudiquet 7e5fa8a5b5 chore(kube): bump chart Helm release cert-manager-webhook-ovh to v0.9.17 2026-09-26 19:34:36 +02:00
renovate[bot]andvhaudiquet 52ac77a74e chore(kube): bump chart Helm release stalwart to v0.7.19 2026-09-26 19:34:04 +02:00
renovate[bot]andvhaudiquet 82d646d399 chore(kube): bump stalwartlabs/stalwart Docker tag to v0.16.23 2026-09-26 14:19:15 +02:00
vhaudiquet b2f656c757 pkgatlas(kube): deploy 
Flux HelmRelease tracking the CI-published chart (>=0.4.0-0, timestamped
versions, appVersion pinned to the image commit). Ingress host
pkgatlas.vhaudiquet.fr via traefik; TLS terminates at Caddy with the
*.vhaudiquet.fr wildcard, so the new @pkgatlas route proxies to Traefik
like the other public vhosts.
 2026-09-24 21:57:42 +02:00
renovate[bot]andvhaudiquet 23748ee4fc chore(kube): bump chart Helm release stalwart to v0.7.18 2026-09-19 20:54:40 +02:00
renovate[bot]andvhaudiquet fdb2634a46 chore(kube): bump stalwartlabs/stalwart Docker tag to v0.16.22 2026-09-19 20:54:03 +02:00
renovate[bot]andvhaudiquet 69c59daf5e chore(kube): bump caddy Docker tag to v2.11.4 2026-09-01 01:05:29 +02:00
renovate[bot]andvhaudiquet a2a97180c9 chore(kube): bump chart Helm release cert-manager-webhook-ovh to v0.9.16 2026-09-01 01:05:19 +02:00
renovate[bot]andvhaudiquet 2c4b3127b4 chore(kube): bump stalwartlabs/stalwart Docker tag to v0.16.20 2026-09-01 01:04:00 +02:00
renovate[bot]andvhaudiquet 372dbff681 chore(kube): bump chart Helm release stalwart to v0.7.16 2026-09-01 01:03:46 +02:00
vhaudiquet a80b45618c renovate: deploy renovate on kube 2026-08-26 21:35:02 +02:00
vhaudiquet 972d4d1510 blocky: update coredns service ip 2026-08-21 18:53:47 +02:00
vhaudiquet 0ef10e278e trafik: pin loadbalancerip 2026-08-20 23:32:22 +02:00
vhaudiquet ac3a6a1b60 network: fix previous ips 2026-08-20 23:26:03 +02:00
vhaudiquet 207aa84670 network: allocate new ips on final segment 2026-08-20 22:31:57 +02:00
vhaudiquet bc6f92e145 flux: re-order certificates for right dependencies 2026-08-19 16:56:23 +02:00
vhaudiquet fd309e4f94 network: release old IPs, allocate new IPs, swap DNS 
Migrating houses is never easy...
 2026-08-17 20:27:08 +02:00
semerysandvhaudiquet dcdc0bf138 caddy: move semeryfr to kube 2026-08-15 16:46:33 +02:00
vhaudiquet eaa47c9b6d notesnook: updated chart, added inbox API 2026-08-13 18:55:06 +02:00
vhaudiquet a8f7ff538c caddy: move buildpath from docker to kube 2026-08-13 00:52:49 +02:00
vhaudiquet 68ba23768e photoprism: moved to photos.vhaudiquet.fr 2026-08-10 23:40:33 +02:00
vhaudiquet c183f17606 fix(observability,photoprism): add resource limits to prevent OOM kills and sidecar crash-loops 
- photoprism: add requests (200m/1Gi) and limits (2/4Gi) for RAW indexing
- grafana: add requests (100m/256Mi) and limits (500m/512Mi) to prevent OOMKill
- kube-state-metrics: add requests (50m/128Mi) and limits (200m/256Mi)
- node-exporter: add requests (50m/50Mi) and limits (200m/128Mi)
- vm-operator: add requests (50m/64Mi) and limits (200m/256Mi)
- loki sidecar (rules): add REQ_TIMEOUT=120, retry env vars, and small resources
- grafana sidecars (dashboards+datasources): add REQ_TIMEOUT=120 and retry env vars
 2026-08-10 22:52:47 +02:00
vhaudiquet 88146579c0 refactor: consolidate kubernetes categories 2026-08-09 19:58:18 +02:00
vhaudiquet 00357f376e obs,loki: remove redundant values 2026-08-01 22:19:41 +02:00
vhaudiquet 5a77fa64e5 obs,loki: fix 'from' value 2026-07-31 11:43:02 +02:00
vhaudiquet 3ae88775da obs,vicm: fix values for storageclass 2026-07-28 18:39:08 +02:00
vhaudiquet e68316a20d obs,vicm: fix crd declared externally 2026-07-28 18:25:59 +02:00
vhaudiquet b6b6cbacfd obs,vicm,loki: fix chart version, config values 2026-07-28 18:09:30 +02:00
vhaudiquet 36146904a2 obs,alloy: fix alloy config 2026-07-28 16:17:16 +02:00
vhaudiquet 38ceb887a7 observability: deploy observability stack 2026-07-28 15:46:52 +02:00
vhaudiquet 92a358b907 authentik: tryfix tolerations 2026-07-25 14:48:03 +02:00
vhaudiquet 2200877166 gitea,authentik,notesnook,home-assistant: tolerate failover 
renamed "home-assistant" folder
 2026-07-25 14:44:32 +02:00
vhaudiquet 71ddb95d2f kube: migrate to longhorn by default 2026-07-18 16:22:16 +02:00