Vegard Hagen
3634e29a6b
fix(grafana): add admin credentials
...
admin credentials are needed by the sidecards in order to update datasources and dashboards
Signed-off-by: Vegard Hagen <[email protected]
2025-07-31 21:02:22 +02:00
Vegard Hagen
004c3cf1e2
fix(authelia): obfuscate smtp relay username to avoid getting "leaked" credentials emails
...
Also rotate both username and password
Signed-off-by: Vegard Hagen <[email protected]
2025-07-31 20:05:45 +02:00
Vegard Hagen
0ff3a46685
fix(email): change provider to mailersend
...
Mail from Brevo includes a tracking pixel that you can't get rid of. To quote Lemongrab: "Unacceptable!"
Signed-off-by: Vegard Hagen <[email protected]
2025-07-29 23:40:36 +02:00
Vegard Hagen
08c01b3fbc
fix(email): change provider to brevo
...
SendGrid started charging money for basic functionality, so changing to free tier in Brevo
Signed-off-by: Vegard Hagen <[email protected]
2025-07-29 22:36:32 +02:00
Vegard Hagen
285d9b075e
feat(monitoring): enable nodeExporter
...
Signed-off-by: Vegard Hagen <[email protected]
2025-07-28 18:21:58 +02:00
Vegard Hagen
5c3395210a
feat(argocd): add metrics and grafana dashboard
...
Signed-off-by: Vegard Hagen <[email protected]
2025-07-26 15:38:49 +02:00
Vegard Hagen
9fc5f0f0c4
feat(grafana): oauth/oidc integration
...
Signed-off-by: Vegard Hagen <[email protected]
2025-07-26 14:34:36 +02:00
Vegard Hagen
559b4c3d24
feat(cilium): add grafana dashboards
...
Signed-off-by: Vegard Hagen <[email protected]
2025-07-25 22:29:24 +02:00
Vegard Hagen
e864098520
fix(monitoring): try server-side apply of kube-prometheus-stack again
...
Try without an extra Application resource again
Signed-off-by: Vegard Hagen <[email protected]
2025-07-25 17:18:08 +02:00
Vegard Hagen
09966b457c
fix(qbit): change port
...
Signed-off-by: Vegard Hagen <[email protected]
2025-07-24 20:34:25 +02:00
Vegard Hagen
c1b1719e8c
fix(cilium): disable alpn
...
I have a hunch that this somehow interferes with Argo CD.
The Argo CD login page shows up in Safari 18.5, Brave 1.80.120 and
Firefox 140.0.4.
After logging in using Authelia (OIDC), Argo CD starts to display 404
error in Brave and Firefox, but it works in Safari.
Clearing site data makes the login page show up in Brave and Firefox
again.
Signed-off-by: Vegard Hagen <[email protected]
2025-07-21 10:27:13 +02:00
Vegard Hagen
cb66358a0e
fix(argocd): remove grpcroute
...
the tlsroute should be able to handle grpc-connections, having both seem to create some trouble
Signed-off-by: Vegard Hagen <[email protected]
2025-07-20 13:30:16 +02:00
Vegard Hagen
3d2de963b5
fix(netbird): clean up configuration
...
Signed-off-by: Vegard Hagen <[email protected]
2025-07-20 13:18:31 +02:00
Vegard Hagen
eea1d4a58b
fix(adguard): update config schema version
...
Signed-off-by: Vegard Hagen <[email protected]
2025-07-20 13:18:31 +02:00
Vegard Hagen
907c9876fe
fix(dns): remove special entries for proxmox and truenas
...
Signed-off-by: Vegard Hagen <[email protected]
2025-07-20 13:18:31 +02:00
Vegard Hagen
a2d0e263f0
fix(gateway): remove separate tls-passthrough gateway
...
It appears to work without a separate Gateway now. Should investigate if https://github.com/cilium/cilium/issues/32371 can be closed
Signed-off-by: Vegard Hagen <[email protected]
2025-07-20 13:18:31 +02:00
Vegard Hagen
a788e2e12c
feat(argocd): enable argocd cli
...
Also change Argo CD to use a proper certificate
Signed-off-by: Vegard Hagen <[email protected]
2025-07-20 13:18:31 +02:00
Vegard Hagen
f13ee5e73f
feat(lldap): clean up config
...
Signed-off-by: Vegard Hagen <[email protected]
2025-07-20 13:18:19 +02:00
7e388f55d7
chore(renovate): renovate 2025-07-18
...
chore(deps): update helm release cert-manager to v1.18.2 (#293 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update proxmox-csi-plugin docker tag to v0.3.11 (#311 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update cloudflare/cloudflared docker tag to v2025.7.0 (#314 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update dependency siderolabs/talos to v1.10.5 (#331 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update media containers (#328 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v73.2.3 (#332 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update cilium (#333 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update actions/checkout action to v4.2.2 (#336 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.63 (#338 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update dependency kubernetes/kubernetes to v1.33.3 (#335 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update ghcr.io/authelia/authelia docker tag to v4.39.5 (#339 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update ghcr.io/home-operations/qbittorrent docker tag to v5.1.2 (#340 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update helm release authelia to v0.10.39 (#341 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update registry.k8s.io/git-sync/git-sync docker tag to v4.4.2 (#342 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update sealed-secrets docker tag to v2.5.16 (#343 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update ghcr.io/advplyr/audiobookshelf docker tag to v2.26.1 (#344 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update netbird (#345 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update terraform proxmox to v0.80.0 (#346 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update ghcr.io/home-operations/prowlarr docker tag to v2 (#347 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v75 (#348 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Vegard Hagen <[email protected] #349 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-19 18:51:55 +02:00
Vegard Stenhjem Hagen and GitHub
1deb5aced1
feat(devcontainer): build a Devcontainer with useful tools for this project
...
Also use said devcontainer i GitHub workflows to validate config.
* feat(devcontainer): build devcontainer
Signed-off-by: Vegard Hagen <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2025-07-13 23:18:26 +02:00
Vegard Hagen
f5841b4a3b
fix(authelia): explicit custom attribute configuration
...
Signed-off-by: Vegard Hagen <[email protected]
2025-07-13 15:46:41 +02:00
Vegard Hagen
838a335ecc
feat(authelia): description of custom claims
...
Signed-off-by: Vegard Hagen <[email protected]
2025-07-12 17:17:42 +02:00
Vegard Hagen
5de4066796
feat(authelia): custom argocd claim
...
Signed-off-by: Vegard Hagen <[email protected]
2025-07-12 15:45:23 +02:00
Vegard Hagen
aa884cd9d2
fix(authelia): clean up configuration
...
Signed-off-by: Vegard Hagen <[email protected]
2025-07-11 20:51:00 +02:00
Vegard Hagen
9fa04832e4
fix(unbound): use default config
...
Experiencing some issues with using Unbound as a recursive solver, so reverting to default config
Signed-off-by: Vegard Hagen <[email protected]
2025-07-11 19:47:37 +02:00
Vegard Hagen
992c6a52a0
chore(lldap): edit config
...
Signed-off-by: Vegard Hagen <[email protected]
2025-06-25 20:56:34 +02:00
Vegard Hagen
2a2606d178
fix(netbird): use renvsubst container to create configuration
...
Signed-off-by: Vegard Hagen <[email protected]
2025-06-08 22:23:47 +02:00
Vegard Hagen
e1cabbf2bb
fix(gateway): use the addresses field instead of infrastructure annotation
...
See GH issue #94
This was fixed in https://github.com/cilium/cilium/issues/32865
Signed-off-by: Vegard Hagen <[email protected]
2025-06-08 22:23:47 +02:00
be9b1ac24e
chore(deps): renovate 2025-06-08
...
chore(deps): update media containers
chore(deps): update netbird
chore(deps): update netbird
chore(deps): update dependency cert-manager/cert-manager to v1.17.2
chore(deps): update helm release authelia to v0.10.11
chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.62
chore(deps): update helm release node-feature-discovery to v0.17.3
chore(deps): update helm release argo-cd to v7.9.1
chore(deps): update cilium to v1.17.4
chore(deps): update ghcr.io/authelia/authelia docker tag to v4.39.4
chore(deps): update helm release argo-cd to v8
chore(deps): update helm release cloudnative-pg to v0.24.0
chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v73
chore(deps): update ghcr.io/home-operations/qbittorrent docker tag to v5.1.0
chore(deps): update ghcr.io/advplyr/audiobookshelf docker tag to v2.24.0
chore(deps): update cloudflare/cloudflared docker tag to v2025.5.0
chore(deps): update registry.k8s.io/git-sync/git-sync docker tag to v4.4.1
chore(deps): update proxmox-csi-plugin docker tag to v0.3.7
chore(deps): update sealed-secrets docker tag to v2.5.13
chore(deps): update intel device plugins to v0.32.1
chore(deps): update terraform talos to v0.8.1 (#324 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update terraform kubernetes to v2.37.1 (#322 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update terraform proxmox to v0.78.1 (#323 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-06-08 22:23:30 +02:00
Vegard Hagen
1fbe9fb6bd
feat(auth): add custom user properties for audiobookshelf
...
Add custom user schema in LLDAP which maps to a custom attribute in
Authelia which we then again map to a custom claim which we include in a
custom scope which audiobookshelf requests
Signed-off-by: Vegard Hagen <[email protected]
2025-05-03 19:15:27 +02:00
Vegard Hagen
e0fdbafa35
feat(authelia): add audiobookshelf OIDC client
...
Signed-off-by: Vegard Hagen <[email protected]
2025-05-03 11:47:25 +02:00
Vegard Hagen
4c1ad3e223
feat(app): add audiobookshelf application
...
Signed-off-by: Vegard Hagen <[email protected]
2025-04-29 21:10:39 +02:00
Vegard Hagen
919ccdff30
feat(gateway): remove extra install of Gateway API CRDs
...
Gateway API CRDs are installed using Talos machine config
`extra_manifests`.
Signed-off-by: Vegard Hagen <[email protected]
2025-04-18 14:57:22 +02:00
Vegard Hagen
344b161c63
feat(crossplane): remove crossplane
...
Crossplane was only used to configure Keycloak, no need for it with Keycloak gone
Signed-off-by: Vegard Hagen <[email protected]
2025-04-18 14:55:15 +02:00
Vegard Hagen
b2c66e84d9
feat(keycloak): remove keycloak
...
Using Authelia instead of Keycloak now
Signed-off-by: Vegard Hagen <[email protected]
2025-04-18 14:53:25 +02:00
266aab34c0
chore(deps): renovate 2025-04-17
...
chore(deps): update terraform proxmox to v0.76.0 (#268 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update helm release argo-cd to v7.8.26 (#269 )
* chore(deps): update terraform proxmox to v0.76.0 (#268 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
* fix(tofu): volume-provisioning
A Proxmox update probably broke/changed the way API requests are handled, giving errors on UPDATE calls with parameters that aren't used
Error: unexpected response code '400': {"data":null,"errors":{"format":"property is not defined in schema and the schema does not allow additional properties","vmid":"property is not defined in schema and the schema does not allow additional properties","size":"property is not defined in schema and the schema does not allow additional properties","filename":"property is not defined in schema and the schema does not allow additional properties"}}
Also update Mastercard/restapi provider
* chore(deps): update helm release argo-cd to v7.8.26
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Vegard Hagen <[email protected] #270 )
* chore(deps): update terraform proxmox to v0.76.0 (#268 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
* fix(tofu): volume-provisioning
A Proxmox update probably broke/changed the way API requests are handled, giving errors on UPDATE calls with parameters that aren't used
Error: unexpected response code '400': {"data":null,"errors":{"format":"property is not defined in schema and the schema does not allow additional properties","vmid":"property is not defined in schema and the schema does not allow additional properties","size":"property is not defined in schema and the schema does not allow additional properties","filename":"property is not defined in schema and the schema does not allow additional properties"}}
Also update Mastercard/restapi provider
* chore(deps): update keycloak docker tag to v24.5.2
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Vegard Hagen <[email protected] #271 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update sealed-secrets docker tag to v2.5.9 (#272 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update cloudflare/cloudflared docker tag to v2025.4.0 (#273 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update media containers (#274 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update netbird to v0.41.3 (#275 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update dependency corewire/images/crossplane/function-keycloak-builtin-objects to v3.0.1 (#277 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update cilium to v1.17.3 (#278 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.60 (#279 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update helm release authelia to v0.10.5 (#280 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-17 18:57:50 +02:00
341fba89fa
chore(deps): renovate 2025-03-30
...
chore(deps): update netbird to v0.39.2 (#265 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update sealed-secrets docker tag to v2.5.8 (#264 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update terraform proxmox to v0.74.0 (#263 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update helm release crossplane to v1.19.1 (#262 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update helm release argo-cd to v7.8.15 (#261 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v70.3.0 (#259 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update media containers (#258 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-30 16:16:32 +02:00
Vegard Hagen
68d8cfb798
fix(renovate): group Netbird updates
...
Signed-off-by: Vegard Hagen <[email protected]
2025-03-30 16:02:43 +02:00
Vegard Hagen
481b224f22
feat(authelia): upgrade to 4.39 and fix OIDC configuration
...
Signed-off-by: Vegard Hagen <[email protected]
2025-03-30 15:48:12 +02:00
Vegard Hagen
057b203214
fix(jellyfin): recover jellyfin data
...
something went wrong when mounting the disk, trying to mount a copy of a zfs snapshot
Signed-off-by: Vegard Hagen <[email protected]
2025-03-24 18:44:09 +01:00
Vegard Hagen
84d86e3880
fix(authelia): downgrade authelia
...
Signed-off-by: Vegard Hagen <[email protected]
2025-03-24 18:02:14 +01:00
Vegard Hagen
fc63899f1d
fix(qBit): clean up ports used
...
Signed-off-by: Vegard Hagen <[email protected]
2025-03-24 16:03:05 +01:00
Vegard Hagen
c555e84f7a
fix(utils): argocd project
...
Signed-off-by: Vegard Hagen <[email protected]
2025-03-24 15:48:58 +01:00
3aa55c6ae2
chore(deps): update media containers ( #254 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-24 15:42:40 +01:00
Vegard Hagen
b8201c456d
fix: change to home-operations registry from onedr0p
...
this solves issue #239
Signed-off-by: Vegard Hagen <[email protected]
2025-03-24 15:38:53 +01:00
Vegard Hagen
3bb7d5dd52
fix(adguard): remove creation timestamp field i secret
2025-03-24 15:05:35 +01:00
Vegard Hagen
51910d0e36
fix(authelia): new config parameters after update
2025-03-24 15:03:17 +01:00
9d7325498a
chore(deps): renovate 2025-03-24
...
chore(deps): update helm release cert-manager to v1.17.1 (#216 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update terraform proxmox to v0.73.2 (#218 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v69.8.2 (#219 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update helm release crossplane to v1.19.0 (#220 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update media containers (#221 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update netbird (#222 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update netbirdio/relay docker tag to v0.39.1 (#223 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update helm release authelia to v0.10.4 (#224 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update cilium to v1.17.2 (#225 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update cloudflare/cloudflared docker tag to v2025.2.1 (#240 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update dependency crossplane-contrib/function-auto-ready to v0.4.2 (#241 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update dependency crossplane-contrib/function-go-templating to v0.9.2 (#242 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.59 (#243 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update helm release argo-cd to v7.8.13 (#244 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update helm release cloudnative-pg to v0.23.2 (#245 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update helm release node-feature-discovery to v0.17.2 (#246 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update keycloak docker tag to v24.4.13 (#247 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update sealed-secrets docker tag to v2.5.7 (#248 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update dependency crossplane-contrib/provider-keycloak to v1.13.0 (#249 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update ghcr.io/authelia/authelia docker tag to v4.39.1 (#250 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update terraform kubernetes to v2.36.0 (#251 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update dependency crossplane-contrib/provider-keycloak to v2 (#252 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v70 (#253 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-24 12:17:36 +01:00
Vegard Hagen
25cfa2bbb6
chore(gateway): update to gateway api v1.2.1
2025-02-10 20:18:45 +01:00
Vegard Hagen
38542b6bdb
fix(argo cd): disable dex
...
dex is not needed and it keeps crashing in latest update
2025-02-08 22:26:31 +01:00
Vegard Hagen