vhaudiquet/homeprod
1
0
Fork 0
mirror of https://github.com/vhaudiquet/homeprod.git synced 2026-08-03 11:30:44 +00:00
Code Issues Packages Projects Releases Wiki Activity
957 Commits 23 Branches 0 Tags
ebbea692889717e2462b91ca4e3f3e2e0f34121a
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
vhaudiquet ebbea69288 infra/p330: add p330 talos node 2026-07-21 17:56:06 +02:00
vhaudiquet 71ddb95d2f kube: migrate to longhorn by default 2026-07-18 16:22:16 +02:00
vhaudiquet b10ca16816 coredns: move etcd pvc from nfs-csi to longhorn 2026-07-17 11:07:04 +02:00
vhaudiquet ae42ca3a1f longhorn: deploy longhorn to kube 2026-07-11 00:54:08 +02:00
vhaudiquet a513f0dc2e refactor: remove old certificate secret file 2026-07-10 07:13:33 +02:00
vhaudiquet b225fd1057 fix: tryfix secret read permissions 2026-07-10 07:06:52 +02:00
vhaudiquet 97fc11e001 fix: fix ovh webhook solver credentials (clusterissuer) 2026-07-10 06:51:14 +02:00
vhaudiquet abd186b1a1 fix: fix ovh webgook solver values.yaml 2026-07-10 00:31:08 +02:00
vhaudiquet 81d4e5c310 fix: update missing issuer 2026-07-10 00:26:17 +02:00
vhaudiquet 2c43aacf91 fix: update missing kustomization 2026-07-10 00:25:15 +02:00
vhaudiquet c6b706a136 fix: fix semery.fr ovh webhook provider 2026-07-10 00:21:08 +02:00
vhaudiquet ba0df1c484 semery.fr: add OVH-specific webhook solver 2026-07-10 00:12:21 +02:00
vhaudiquet 001d4adbed semery.fr: automatic certificate renewal 2026-07-09 23:17:09 +02:00
vhaudiquet b424f2972f vhaudiquet.fr: update namespace to allow privileged container 2026-07-09 19:54:13 +02:00
vhaudiquet b6541a018f vhaudiquet.fr: update to allow deploying without NFS 2026-07-09 16:43:04 +02:00
vhaudiquet a9178f6209 infra/r740/proxmox: bump kube vm base image 2026-07-09 16:42:52 +02:00
vhaudiquet c8c6e3fefc tubearchivist: reverse proxy rule .local -> .lan 2026-07-08 18:04:45 +02:00
vhaudiquet ea64255153 Merge branch 'main' of https://github.com/vhaudiquet/homeprod 
* 'main' of https://github.com/vhaudiquet/homeprod:
  build(deps): bump esphome/esphome in /docker/home/esphome
  build(deps): bump koenkk/zigbee2mqtt in /docker/home/zigbee2mqtt
  build(deps): bump roundcube/roundcubemail
  build(deps): bump hotio/jackett
  build(deps): bump jellyfin/jellyfin
  build(deps): bump wizarrrr/wizarr
  build(deps): bump vabene1111/recipes in /docker/personal/tandoor
 2026-07-08 18:03:54 +02:00
vhaudiquet 3ffc9836e3 r740/proxmox: add more network card to kube vm 2026-07-08 18:03:49 +02:00
vhaudiquet 2a90a6d718 stalwart: remove from docker, bye! 2026-07-07 21:20:07 +02:00
vhaudiquet 3efa9deb34 photoprism: truenas .local .lan artifact migration 2026-07-06 21:30:14 +02:00
vhaudiquet 32397ced96 stalwart: use OnRootMismatch groupChangePolicy 2026-07-03 15:00:45 +02:00
vhaudiquet b3047cbe3e dns: update TLSA records for stalwart 2026-07-03 09:43:00 +02:00
vhaudiquet c9af935148 stalwart: disable recovery mode 2026-07-03 00:38:44 +02:00
vhaudiquet bac134e2d4 stalwart: deploy to kube 2026-07-02 22:57:39 +02:00
vhaudiquet 30276fa4fb kube: expand ip pool allocation 2026-07-02 22:42:12 +02:00
vhaudiquet aa9452354a stalwart: restore 0.15.x for pre-migration phase 
v0.16 introduced compatibility break with below. we will migrate to v0.16 on kube. for pre-migration we restore working setup.
 2026-07-02 22:40:27 +02:00
vhaudiquet f8f7ae6047 buildpath: add memory limits for mongo, update 2026-06-27 12:39:22 +02:00
vhaudiquet 102d1a1a68 gitea: remove stale "redis" reference, update to "valkey" 2026-06-27 12:20:07 +02:00
vhaudiquet 2eb4568682 gitea: add resource limits 2026-06-27 12:09:03 +02:00
vhaudiquet ea680f6363 fix: remove trailing newline from Cloudflare API token 2026-06-16 12:24:35 +02:00
vhaudiquet 4774208668 feat(caddy): use cert-manager for TLS certificates 
- Add Certificate CRDs for vhaudiquet.fr, wildcard, and buildpath.win
- Keep semery.fr certs in certificates-secret.yaml (manual until OVH API)
- Update Caddyfile to use new TLS certificate paths (tls.crt/tls.key)
- Update values.yaml to mount cert-manager secrets for Cloudflare domains
- Mount semery.fr certs from caddy-certificates secret with item mappings

Certificates for Cloudflare domains will be auto-renewed by cert-manager.
 2026-06-16 12:08:07 +02:00
vhaudiquet 86023b3721 fix: correct kustomizeconfig nameReference for cert-manager values secret 
The Secret is generated with a hash suffix by secretGenerator, so the
nameReference needs to update HelmRelease to point to the generated name.
 2026-06-16 11:42:32 +02:00
vhaudiquet 23840b5948 fix: add CiliumLoadBalancerIPPool to Flux deployment 2026-06-16 11:24:09 +02:00
vhaudiquet 3dfc7badb4 fix: add required prune field to Flux Kustomizations 2026-06-16 11:14:31 +02:00
vhaudiquet 8c91323d32 feat: validate kustomize build in pre-commit 2026-06-16 11:10:26 +02:00
vhaudiquet 852ff844c4 fix: resolve cert-manager CRD dependency for cluster redeployability 
- Add root kustomization.yaml to explicitly list included paths
- Exclude cert-manager and cert-manager-issuer from root kustomization
- Add Flux Kustomizations in system/flux/ to manage deployment order
- cert-manager Flux Kustomization includes health checks for CRDs
- cert-manager-issuer depends on cert-manager being ready
 2026-06-16 11:06:05 +02:00
vhaudiquet a03bbee9e2 fix: remove OVH secret reference from cert-manager kustomization 2026-06-16 10:26:13 +02:00
vhaudiquet e9ab217466 cert-manager: add cert-manager for automatic certificate renewal 
Add cert-manager with DNS-01 challenge support:
- Cloudflare (vhaudiquet.fr, buildpath.win)
 2026-06-16 10:15:53 +02:00
vhaudiquet 68d024de92 build(deps): bump buildpath 2026-06-15 18:03:13 +02:00
vhaudiquet 0c37889831 fix(gitea): increase postgresql liveness probe tolerance for slow NFS I/O 2026-06-05 22:21:52 +02:00
vhaudiquet 011c05e745 fix(authentik): increase postgresql liveness probe tolerance for slow NFS I/O 2026-06-05 22:13:59 +02:00
vhaudiquet 125afb9e43 fix(caddy): use FQDN trailing dot to avoid .lan search domain timeout 2026-06-05 22:11:41 +02:00
vhaudiquet 94814a2e4a gitea: update git path to fast_app_data 2026-06-05 22:03:48 +02:00
vhaudiquet 65a9b26dec fix(blocky): remove all in-addr.arpa conditional rules to break PTR loop 2026-06-05 18:01:35 +02:00
vhaudiquet 5ba85841c6 blocky: tryfix dns flooding issue 2026-06-05 17:19:07 +02:00
vhaudiquet 5bf347e31d mosquitto: bump down to 2.0.22 2026-06-05 12:00:36 +02:00
vhaudiquet 41e1450dd9 mosquitto: bump to non-alpine version 2026-06-05 11:56:50 +02:00
vhaudiquet e184f159dc mosquitto: version-pin mosquitto and update to latest 2026-06-05 11:42:48 +02:00
vhaudiquet 651c8019c2 updated readme 2026-06-02 21:06:35 +02:00
vhaudiquet 11d345f810 dns: fix local dns entry for bw-r740 machine 2026-05-28 17:36:36 +02:00
vhaudiquet 3ac26e7a9d gitea: pin chart version 2026-05-28 17:36:10 +02:00
vhaudiquet 3c6357014e build(deps): bump gitea/gitea from 1.25.5 to 1.26.2 2026-05-28 17:35:49 +02:00
vhaudiquet d623cbb60c infra/r740/kube: values/components 2026-05-27 00:25:28 +02:00
vhaudiquet a2ba97109b infra/pve: remove pve, bye! 
p330 server fully empty and gone, only r740 remains :)
 2026-05-27 00:25:07 +02:00
vhaudiquet 4f1e69cd05 blocky: update limits to give more memory/cpu 2026-05-27 00:01:34 +02:00
vhaudiquet 2df007dec1 infra/r740/kube: use kube dns as main dns resolver, fallback to 1.1.1.1 2026-05-26 23:42:03 +02:00
vhaudiquet 543fc8a47e traefik: trust cluster network 2026-05-26 13:18:08 +02:00
vhaudiquet f78296d55f traefik: trust caddy reverse proxy 2026-05-26 13:11:44 +02:00
vhaudiquet ead4450fc4 caddy: revert 66212c922a 2026-05-26 13:10:56 +02:00
vhaudiquet 66212c922a caddy: enable websockets for authentik 2026-05-26 12:06:27 +02:00
vhaudiquet a480212804 trust caddy reverse proxy 2026-05-26 12:06:12 +02:00
vhaudiquet 348455fb59 dns: disable buildpath.win cloudflare proxy 2026-05-25 18:50:23 +02:00
vhaudiquet cd56789d53 dns: update local network entries for nodered 2026-05-16 01:09:53 +02:00
vhaudiquet 11b59bd812 vhaudiquet.fr: remove from docker 2026-05-14 19:03:30 +02:00
vhaudiquet a58fe56404 vhaudiquet-fr: fix version constraint on kube 2026-05-14 12:13:34 +02:00
vhaudiquet 5768898f37 generate-*: make sure to git add automatically on modification 2026-05-14 11:35:13 +02:00
vhaudiquet 274e476a7f vhaudiquet.fr: deploy vhaudiquet.fr to kube 2026-05-14 11:34:50 +02:00
vhaudiquet aa05aba4a7 build(deps): bump buildpath 2026-05-14 00:22:26 +02:00
vhaudiquet 9dd6cb2b85 build(deps): bump buildpath 2026-05-11 22:56:01 +02:00
vhaudiquet 3a6a621193 Merge branch 'main' of https://github.com/vhaudiquet/homeprod 
* 'main' of https://github.com/vhaudiquet/homeprod:
  build(deps): bump tomsquest/docker-radicale in /docker/personal/radicale
 2026-05-08 18:15:38 +02:00
vhaudiquet 17ab87e276 infra: update VMs 
- kube: add NIC, bump up memory
- ai: set to off by default
- docker: bump up memory to absorb buildpath importer consumption
 2026-05-08 18:15:16 +02:00
vhaudiquet 524d0d7d3c caddy: listen on port 80 2026-05-08 13:43:42 +02:00
vhaudiquet 51b22d769e caddy: fix external ip annotation 2026-05-08 10:49:26 +02:00
vhaudiquet 4bd0274714 caddy: fix caddyfile syntax 2026-05-08 10:28:56 +02:00
vhaudiquet 69e3a793c8 caddy: change security context to fix permission error 2026-05-08 10:21:43 +02:00
vhaudiquet d5831fd1e3 caddy: deploy caddy as edge reverse proxy (on kube) 2026-05-08 00:48:55 +02:00
vhaudiquet cbf7842e8b dns: fix dns file 2026-05-06 19:14:04 +02:00
vhaudiquet 0d5d688c18 fireshare: deploy fireshare, hello! 2026-05-06 19:08:33 +02:00
vhaudiquet 46c897e865 build(deps): bump buildpath 2026-05-04 18:34:04 +02:00
vhaudiquet 10d97e09bd readme: update readme to add pre-commit hooks installation instruction 2026-05-04 00:22:07 +02:00
vhaudiquet dcbef2cd0a blocky: use the right health probe 2026-05-02 19:51:38 +02:00
vhaudiquet 7465ecedf8 infra: update docker VM RAM to 22222 (16 GiB is actually what it uses at regular load, so it crashes without more) 2026-05-02 19:18:23 +02:00
vhaudiquet 256c337db4 blocky, coredns: set replicaCount to 2, and enable blue/green 'RollingUpdate' 2026-05-02 18:59:49 +02:00
vhaudiquet 0ddeb75508 coredns: re-add file plugin with fallthrough 2026-05-02 18:45:19 +02:00
vhaudiquet 896002da8c coredns: remove file plugin alltogether, change version 2026-05-02 18:43:31 +02:00
vhaudiquet ef892b38a7 coredns: retry fix values.yaml 2026-05-02 18:36:22 +02:00
vhaudiquet 20d8e07a24 coredns: invert fallthrough in config 2026-05-02 18:32:06 +02:00
vhaudiquet d9a1063630 coredns: try reversing order 2026-05-02 18:29:41 +02:00
vhaudiquet 3860f5849c coredns: retry fallthrough in file plugin 2026-05-02 18:28:36 +02:00
vhaudiquet f732f7247f coredns: fix chart version 2026-05-02 18:27:38 +02:00
vhaudiquet 883330996a coredns: fix values.yaml 2026-05-02 18:24:24 +02:00
vhaudiquet c90caed623 coredns: set dnspolicy to clusterfirst 2026-05-02 18:20:53 +02:00
vhaudiquet cfd521f502 coredns: try adding a different zone for kube resolution 2026-05-02 18:12:54 +02:00
vhaudiquet f71faa0ae8 coredns: set zone to . 2026-05-02 18:04:52 +02:00
vhaudiquet ce30776eeb coredns: add kubernetes plugin 2026-05-02 17:28:07 +02:00
vhaudiquet be092af161 coredns: add zone parameter for file plugin 2026-05-02 17:23:15 +02:00
vhaudiquet 0b75f66f30 coredns: add fallthrough to file plugin 2026-05-02 17:19:12 +02:00
vhaudiquet e595bb2c45 coredns: add debug plugin 2026-05-02 17:14:06 +02:00
vhaudiquet d82ce7a80f coredns: tryfix etcd config with zone parameter 2026-05-02 16:52:21 +02:00