Commit Graph
258 Commits
Author SHA1 Message Date
Vegard Hagen 0e0a356fd1 fix(oidc): add 'basic' scope to netbird client and update keycloak
Change in Keycloak 25.0.0

https://www.keycloak.org/docs/25.0.0/upgrading/\#new-default-client-scope-basic

Thanks to Olav https://github.com/olav-st/homelab/commit/14dac2b576adad90306f9b23026a9048f66b38b7
2024-11-17 17:03:30 +01:00
Vegard Hagen 872f33c295 feat(adguard): mount config-file for declarative configuration 2024-11-17 17:03:30 +01:00
Vegard Hagen 9dec025db7 feat(dns): use Unbound and AdGuardHome for DNS
Unbound as a recursive resolver and AdGuardHome as main DNS backed by
Unbound
2024-11-17 17:03:29 +01:00
Vegard Hagen 38f118fa17 fix(jellyfin): use Memory for /cache to avoid NodeDiskPressure 2024-11-17 17:03:29 +01:00
Vegard Hagen 653d3e946c feat(whoami): add simple whoami-app for testing 2024-11-17 17:03:29 +01:00
Vegard Hagen 5c0c3366b2 feat(netbird): add netbird router agent
This should allow me to connect to services from a Netbird VPN connection
2024-11-17 17:03:29 +01:00
Vegard Hagen 0048da7ffa chore(oidc): collect all oidc-clients under keycloak 2024-11-17 17:03:29 +01:00
Vegard Hagen d79f57efd3 chore(ingress): remove all ingress resources in favour of http-routes 2024-11-17 17:03:29 +01:00
Vegard Hagen 1602202137 feat(vuetorrent): use git-sync to fetch vuetorrent theme 2024-11-17 17:03:29 +01:00
renovate[bot]andVegard Hagen 89c0a27364 chore(deps): merge renovate PRs
chore(deps): update helm release node-feature-discovery to v0.16.4

chore(deps): update helm release argo-cd to v7.4.3

chore(deps): update keycloak docker tag to v22.1.1

chore(deps): update dependency umputun/remark42 to v1.13.1

chore(deps): update cloudflare/cloudflared docker tag to v2024.8.2

chore(deps): update ghcr.io/jellyfin/jellyfin docker tag to v10.9.9

chore(deps): update ghcr.io/onedr0p/sonarr docker tag to v4.0.8

chore(deps): update ghcr.io/onedr0p/prowlarr docker tag to v1.21.2

fix(renovate): explicitly set versioning scheme for plex

chore(deps): update ghcr.io/onedr0p/radarr docker tag to v5.8.3

chore(deps): update dependency cilium/cilium to v1.16.1

chore(deps): update terraform kubernetes to v2.32.0

chore(deps): update ghcr.io/onedr0p/plex docker tag to v1.40.5.8854-f36c552fd

chore(deps): update helm release cilium to v1.16.1
2024-11-17 17:03:28 +01:00
Vegard Hagen 9de3a6ba0f chore(cloudflared): clean up cloudflared deployment
remove unused config and enable renovate
2024-11-17 17:03:28 +01:00
Vegard Hagen 11cba23ae2 chore(renovate): add renovate comments on deployments
This should allow Renovate to pick up the image versions automatically and create update PRs
2024-11-17 17:03:28 +01:00
Vegard Hagen e03f701119 chore(nas): update TrueNAS IP after router change
New router is trash and can't set static IPs, some device stole the old one
2024-11-17 17:03:28 +01:00
Vegard Hagen 5abde08753 fix: conflicting svc name 2024-11-17 17:03:28 +01:00
Vegard Hagen e6a8ad12c8 chore(plex): use Memory for /tmp and /transcode
Try to fix NodeDiskPressure issue where I think Plex filling up ephemeral storage
2024-11-17 17:03:28 +01:00
Vegard Hagen dbb66ba93d chore: rename svc for arr-stack applications
Dropping -web postfix since it doesn't mean anything and I think it just clutters
2024-11-17 17:03:28 +01:00
Vegard Hagen 8668f58a38 chore(gateway): update to Gateway API 1.1.0 2024-11-17 17:03:28 +01:00
renovate[bot]andVegard Hagen 42c7fe1e12 chore(deps): merge renovate PRs
chore(deps): update helm release argo-cd to v7.4.2

chore(deps): update sealed-secrets docker tag to v2.4.5

chore(deps): update terraform proxmox to v0.62.0

chore(deps): update keycloak docker tag to v22

chore(deps): update helm release cilium to v1.16.0

chore(deps): update dependency cilium/cilium to v1.16.0

chore(deps): update helm release cert-manager to v1.15.2
2024-11-17 17:03:27 +01:00
Vegard Hagen 25f977126b fix(cert): ask for cert for both *.stonegarden.dev and stonegarden.dev
try to bypass letsenrypt rate-limiting for exact set of domains
2024-11-17 17:03:27 +01:00
Vegard Hagen ba2ab6435b chore(cleanup): Cleanup after cluster rebuild 2024-11-17 17:03:27 +01:00
Vegard Hagen 1c602200c7 chore(pv): consistent naming scheme 2024-11-17 17:03:27 +01:00
Vegard Hagen 69d56e8e71 feat: install Netbird as a VPN solution
Also configure Netbird OIDC client in Keycloak using Crossplane
2024-11-17 17:03:27 +01:00
Vegard Stenhjem Hagen 935a13038c fix(remark42): correct url
Wrong URL used from the old cluster. Made it impossible to log in due to a wrong redirect URL.
2024-11-17 17:03:27 +01:00
Vegard Hagen e2e30a91e2 fix: bind prometheus operator to same node with volume
No shared volumes (yet), so have to bind deployment to the node with the volume
2024-11-17 17:03:27 +01:00
Vegard Hagen c4ba7120dd feat(tofu): updated kubernetes setup
tried to to some tidying while writing an article based on the current
setup.
2024-11-17 17:03:27 +01:00
Vegard Hagen 0a265cbfd5 fix: crossed-wires in Plex and Jellyfin 2024-11-17 17:03:26 +01:00
Vegard Hagen 605e5ef181 fix: increase cpu and mem limits for Argo CD and cloudflared
This will hopefully alleviate issues with syncing and routing apparently hanging sometimes
2024-11-17 17:03:26 +01:00
Vegard Hagen 4cb40d3282 feat: configure keycloak using crossplane provider 2024-11-17 17:03:26 +01:00
Vegard Hagen 76ab7a71a2 feat: add crossplane.io
Planning to use Crossplane to declaratively create OIDC-clients for Keycloak
2024-11-17 17:03:26 +01:00
Vegard Hagen 628bdb53d6 feat(auth): add keycloak for auth 2024-11-17 17:03:26 +01:00
renovate[bot]andVegard Hagen 4d47d1c972 chore(deps): merge renovate PRs
chore(deps): update helm release node-feature-discovery to v0.16.3

chore(deps): update helm release argo-cd to v7.3.9

chore(deps): update dependency cilium/cilium to v1.15.7

chore(deps): update dependency intel/intel-device-plugins-for-kubernetes to v0.30.0

chore(deps): update terraform proxmox to v0.61.1

chore(deps): update sealed-secrets docker tag to v2.4.2
2024-11-17 17:03:16 +01:00
Vegard Hagen be08e101b2 feat: configure renovate 2024-07-22 01:05:36 +02:00
Vegard Hagen c80528ffbd chore: switch remodelling to main-branch 2024-07-21 23:40:10 +02:00
Vegard Hagen 207b1892bf feat: cleanup of remodelling
move remodel folder down to root and delete old unused manifests
2024-07-21 23:21:12 +02:00
Vegard Hagen f1797c94ec feat(monitoring): install kube-prometheus-stack 2024-07-21 23:20:31 +02:00
Vegard Hagen 4d2fe610e2 fix(proxmox-csi-plugin): fetch from Helm chart 2024-07-21 23:20:31 +02:00
Vegard Hagen 1eafca98b5 chore: enable Cilium Hubble 2024-07-21 23:20:31 +02:00
Vegard Hagen 7c492be433 chore: switch Argo CD over to main domain 2024-07-21 23:20:30 +02:00
Vegard Hagen aa6af35f48 feat: routes to cluster external services
Routes to Home Assistant, Proxmox and TrueNAS
2024-07-21 23:20:30 +02:00
Vegard Hagen 482c0368ea fix: stonegarden routing
added a listener for stonegarden.dev
2024-07-21 23:20:30 +02:00
Vegard Hagen 2c1e894af0 fix: media player services
Correct labels and svc type
2024-07-21 23:20:30 +02:00
Vegard Hagen bca0889c47 fix(cloudflared): correct routing to homepage 2024-07-21 23:20:30 +02:00
Vegard Hagen bf5f26da5a chore: restore remark42 backup 2024-07-21 23:20:30 +02:00
Vegard Hagen 32cee0d16e chore: move from euclid sub-domain to main domain 2024-07-21 23:20:30 +02:00
Vegard Hagen 731a16baf3 feat(homepage): add homepage and blog
Add Vue Homepage, Hugo blog and Remark 42 for comments
2024-07-21 23:20:30 +02:00
Vegard Hagen 3edf3260d6 feat(media): add media players
Adding both Plex and Jellyfin media players
2024-07-21 23:20:29 +02:00
Vegard Hagen 7780078984 chore(tofu): don't use variables for nodes and volumes in main module 2024-07-21 23:20:29 +02:00
Vegard Hagen ac16aed3d2 feat: add node-feature-discovery and intel-device-plugins
label nodes with features to enable e.g. Intel iGPU support
2024-07-21 23:20:29 +02:00
Vegard Hagen bd7ae1f091 feat(arr): implement arr stack
lidarr, prowlarr, radarr, sonarr, torrent
2024-07-21 23:20:29 +02:00
Vegard Hagen d7f90f34e1 fix: configure gateway
also add a cluster-issuer for ingresses
2024-07-21 23:20:29 +02:00