Commit Graph
435 Commits
Author SHA1 Message Date
Vegard Hagen 88c39b2b50 feat(devcontainer): add kubeconform
Signed-off-by: Vegard Hagen <[email protected]>
2025-07-18 19:56:18 +02:00
Vegard Hagen b1214dc993 feat(devcontainer): add Node
Many GitHub actions rely on Node. If we want to run the actions inside this image we need it

Signed-off-by: Vegard Hagen <[email protected]>
2025-07-18 19:09:49 +02:00
Vegard Stenhjem Hagen eaf7c15a8f feat(ci): only run tofu fmt when necessary
Signed-off-by: Vegard Hagen <[email protected]>
2025-07-16 23:54:47 +02:00
Vegard Hagen 53ef70cc44 feat(devcontainer): absorb common-utils feature into Containerfile
This will hopefully cut down on build-time and was an interesting exercise

Signed-off-by: Vegard Hagen <[email protected]>
2025-07-16 23:54:42 +02:00
Vegard Hagen a3c5313f74 feat(devcontainer): do more in Containerfile for thinner image
Signed-off-by: Vegard Hagen <[email protected]>
2025-07-14 23:26:34 +02:00
Vegard Hagen cdea7e1719 fix(ci): use devcontainer image directly for tofu checks
Signed-off-by: Vegard Hagen <[email protected]>
2025-07-14 18:52:39 +02:00
Vegard Hagen 66dad81d84 feat(devcontainer): split into build and run configfiles
Signed-off-by: Vegard Hagen <[email protected]>
2025-07-14 13:38:30 +02:00
Vegard Hagen da7d2d4a54 fix(devcontainer): add timeout for build job
Signed-off-by: Vegard Hagen <[email protected]>
2025-07-14 08:24:10 +02:00
Vegard Stenhjem HagenandGitHub 1deb5aced1 feat(devcontainer): build a Devcontainer with useful tools for this project
Also use said devcontainer i GitHub workflows to validate config.

* feat(devcontainer): build devcontainer

Signed-off-by: Vegard Hagen <[email protected]>

* feat(ci): validate tofu files on push

Signed-off-by: Vegard Hagen <[email protected]>

* feat(devcontainer): simplify devcontainer

Signed-off-by: Vegard Hagen <[email protected]>

* fix(devcontainer): don't cache package index

This will reduce the final image size.

Signed-off-by: Vegard Hagen <[email protected]>

* feat(devcontainer): switch to ubuntu and use devcontainer features as much as possible

Signed-off-by: Vegard Hagen <[email protected]>

---------

Signed-off-by: Vegard Hagen <[email protected]>
2025-07-13 23:18:26 +02:00
Vegard Hagen f5841b4a3b fix(authelia): explicit custom attribute configuration
Signed-off-by: Vegard Hagen <[email protected]>
2025-07-13 15:46:41 +02:00
Vegard Hagen 838a335ecc feat(authelia): description of custom claims
Signed-off-by: Vegard Hagen <[email protected]>
2025-07-12 17:17:42 +02:00
Vegard Hagen 5de4066796 feat(authelia): custom argocd claim
Signed-off-by: Vegard Hagen <[email protected]>
2025-07-12 15:45:23 +02:00
Vegard Hagen aa884cd9d2 fix(authelia): clean up configuration
Signed-off-by: Vegard Hagen <[email protected]>
2025-07-11 20:51:00 +02:00
Vegard Hagen 9fa04832e4 fix(unbound): use default config
Experiencing some issues with using Unbound as a recursive solver, so reverting to default config

Signed-off-by: Vegard Hagen <[email protected]>
2025-07-11 19:47:37 +02:00
Vegard Hagen 992c6a52a0 chore(lldap): edit config
Signed-off-by: Vegard Hagen <[email protected]>
2025-06-25 20:56:34 +02:00
karteekiitgandGitHub b46838873a feat: Github actions to check for formatting of tofu files. (#296)
Tofu format check for changed files in pr and all files scheduled

Signed-off-by: Karteek <[email protected]>
2025-06-09 21:27:42 +02:00
0e448bc5f9 fix: Added missing subnet mask (#298)
Signed-off-by: Karteek <[email protected]>
Co-authored-by: Vegard Stenhjem Hagen <[email protected]>
2025-06-09 21:26:44 +02:00
Vegard Hagen 3d68e49d4d fix(tofu): allow multiple nodes on the same host again
A bug reported in #299 resulted in it not being possible to schedule two Talos nodes on the same host machine with the same schematic ID and image version

This commit fixes #299

Signed-off-by: Vegard Hagen <[email protected]>
2025-06-09 21:21:41 +02:00
renovate[bot]andVegard Hagen e3e8de2137 chore(deps): update dependency kubernetes-sigs/gateway-api to v1.3.0
Reference GH issue #94 for updating article
2025-06-08 22:23:47 +02:00
Vegard Hagen 9aae3a5aa6 chore(talos): update talos to 1.10.3
Signed-off-by: Vegard Hagen <[email protected]>
2025-06-08 22:23:47 +02:00
renovate[bot]andVegard Hagen 71dc835717 chore(deps): update dependency siderolabs/talos to v1.10.3 2025-06-08 22:23:47 +02:00
renovate[bot]andVegard Hagen 1e137986d8 chore(deps): update dependency kubernetes/kubernetes to v1.33.1 2025-06-08 22:23:47 +02:00
Vegard Hagen 2a2606d178 fix(netbird): use renvsubst container to create configuration
Signed-off-by: Vegard Hagen <[email protected]>
2025-06-08 22:23:47 +02:00
Vegard Hagen e1cabbf2bb fix(gateway): use the addresses field instead of infrastructure annotation
See GH issue #94
This was fixed in https://github.com/cilium/cilium/issues/32865

Signed-off-by: Vegard Hagen <[email protected]>
2025-06-08 22:23:47 +02:00
Vegard Hagen b3752260e7 fix(cilium): use cilium-cli image instead of cilium-cli-ci image to install cilium
Following Talos docs: https://www.talos.dev/v1.10/kubernetes-guides/network/deploying-cilium/#method-5-using-a-job

Signed-off-by: Vegard Hagen <[email protected]>
2025-06-08 22:23:46 +02:00
renovate[bot]Vegard Hagenrenovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
be9b1ac24e chore(deps): renovate 2025-06-08
chore(deps): update media containers

chore(deps): update netbird

chore(deps): update netbird

chore(deps): update dependency cert-manager/cert-manager to v1.17.2

chore(deps): update helm release authelia to v0.10.11

chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.62

chore(deps): update helm release node-feature-discovery to v0.17.3

chore(deps): update helm release argo-cd to v7.9.1

chore(deps): update cilium to v1.17.4

chore(deps): update ghcr.io/authelia/authelia docker tag to v4.39.4

chore(deps): update helm release argo-cd to v8

chore(deps): update helm release cloudnative-pg to v0.24.0

chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v73

chore(deps): update ghcr.io/home-operations/qbittorrent docker tag to v5.1.0

chore(deps): update ghcr.io/advplyr/audiobookshelf docker tag to v2.24.0

chore(deps): update cloudflare/cloudflared docker tag to v2025.5.0

chore(deps): update registry.k8s.io/git-sync/git-sync docker tag to v4.4.1

chore(deps): update proxmox-csi-plugin docker tag to v0.3.7

chore(deps): update sealed-secrets docker tag to v2.5.13

chore(deps): update intel device plugins to v0.32.1

chore(deps): update terraform talos to v0.8.1 (#324)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update terraform kubernetes to v2.37.1 (#322)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update terraform proxmox to v0.78.1 (#323)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-06-08 22:23:30 +02:00
Vegard Hagen 7adf4cb1ff fix(renovate): add .tofu extension for terraform providers
Signed-off-by: Vegard Hagen <[email protected]>
2025-06-08 22:23:24 +02:00
renovate[bot]GitHubrenovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2b400a3d4a chore(config): migrate renovate config (#307)
chore(config): migrate config renovate.json

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-06-08 16:59:56 +02:00
Vegard Hagen 1fbe9fb6bd feat(auth): add custom user properties for audiobookshelf
Add custom user schema in LLDAP which maps to a custom attribute in
Authelia which we then again map to a custom claim which we include in a
custom scope which audiobookshelf requests

Signed-off-by: Vegard Hagen <[email protected]>
2025-05-03 19:15:27 +02:00
Vegard Hagen e0fdbafa35 feat(authelia): add audiobookshelf OIDC client
Signed-off-by: Vegard Hagen <[email protected]>
2025-05-03 11:47:25 +02:00
Vegard Hagen 4c1ad3e223 feat(app): add audiobookshelf application
Signed-off-by: Vegard Hagen <[email protected]>
2025-04-29 21:10:39 +02:00
Vegard Hagen 4f694ce8c5 chore(tofu): run tofu fmt on configuration 2025-04-18 17:28:51 +02:00
Vegard Hagen f47309b3d1 fix(tofu): switching to .tofu extension
Picking sides

No real functional change except the cute tofu icon in my IDE instead of the purple T
2025-04-18 17:19:15 +02:00
Vegard Hagen 1cb8c03fe8 chore(keycloak): remove unused volume 2025-04-18 16:47:00 +02:00
Vegard Hagen 919ccdff30 feat(gateway): remove extra install of Gateway API CRDs
Gateway API CRDs are installed using Talos machine config
`extra_manifests`.

Signed-off-by: Vegard Hagen <[email protected]>
2025-04-18 14:57:22 +02:00
Vegard Hagen 344b161c63 feat(crossplane): remove crossplane
Crossplane was only used to configure Keycloak, no need for it with Keycloak gone

Signed-off-by: Vegard Hagen <[email protected]>
2025-04-18 14:55:15 +02:00
Vegard Hagen b2c66e84d9 feat(keycloak): remove keycloak
Using Authelia instead of Keycloak now

Signed-off-by: Vegard Hagen <[email protected]>
2025-04-18 14:53:25 +02:00
Vegard Hagen 47079ecdfb chore(talos): update talos to 1.9.5
Signed-off-by: Vegard Hagen <[email protected]>
2025-04-18 14:50:18 +02:00
renovate[bot]GitHubrenovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
465b690d15 chore(deps): update dependency siderolabs/talos to v1.9.5 (#282)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-18 14:15:35 +02:00
Vegard Hagen b4922a3d79 feat(tofu): actually update kubernetes when saying so 2025-04-18 14:14:24 +02:00
renovate[bot]GitHubrenovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
98fa010384 chore(deps): update dependency kubernetes/kubernetes to v1.32.3 (#281)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-18 13:58:07 +02:00
Vegard Hagen e94a97e6f3 feat(tofu): refactor tofu-code
Tidying code and clarifying some sections

Signed-off-by: Vegard Hagen <[email protected]>
2025-04-18 13:56:14 +02:00
renovate[bot]Vegard Hagenrenovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
266aab34c0 chore(deps): renovate 2025-04-17
chore(deps): update terraform proxmox to v0.76.0 (#268)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release argo-cd to v7.8.26 (#269)

* chore(deps): update terraform proxmox to v0.76.0 (#268)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* fix(tofu): volume-provisioning

A Proxmox update probably broke/changed the way API requests are handled, giving errors on UPDATE calls with parameters that aren't used

Error: unexpected response code '400': {"data":null,"errors":{"format":"property is not defined in schema and the schema does not allow additional properties","vmid":"property is not defined in schema and the schema does not allow additional properties","size":"property is not defined in schema and the schema does not allow additional properties","filename":"property is not defined in schema and the schema does not allow additional properties"}}

Also update Mastercard/restapi provider

* chore(deps): update helm release argo-cd to v7.8.26

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Vegard Hagen <[email protected]>

chore(deps): update keycloak docker tag to v24.5.2 (#270)

* chore(deps): update terraform proxmox to v0.76.0 (#268)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* fix(tofu): volume-provisioning

A Proxmox update probably broke/changed the way API requests are handled, giving errors on UPDATE calls with parameters that aren't used

Error: unexpected response code '400': {"data":null,"errors":{"format":"property is not defined in schema and the schema does not allow additional properties","vmid":"property is not defined in schema and the schema does not allow additional properties","size":"property is not defined in schema and the schema does not allow additional properties","filename":"property is not defined in schema and the schema does not allow additional properties"}}

Also update Mastercard/restapi provider

* chore(deps): update keycloak docker tag to v24.5.2

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Vegard Hagen <[email protected]>

chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v70.7.0 (#271)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update sealed-secrets docker tag to v2.5.9 (#272)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update cloudflare/cloudflared docker tag to v2025.4.0 (#273)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update media containers (#274)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update netbird to v0.41.3 (#275)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update dependency corewire/images/crossplane/function-keycloak-builtin-objects to v3.0.1 (#277)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update cilium to v1.17.3 (#278)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.60 (#279)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release authelia to v0.10.5 (#280)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-17 18:57:50 +02:00
Vegard Hagen 67f160fea1 fix(tofu): volume-provisioning
A Proxmox update probably broke/changed the way API requests are handled, giving errors on UPDATE calls with parameters that aren't used

Error: unexpected response code '400': {"data":null,"errors":{"format":"property is not defined in schema and the schema does not allow additional properties","vmid":"property is not defined in schema and the schema does not allow additional properties","size":"property is not defined in schema and the schema does not allow additional properties","filename":"property is not defined in schema and the schema does not allow additional properties"}}

Also update Mastercard/restapi provider
2025-04-17 18:24:03 +02:00
karteekiitgandGitHub c17687a058 feat: Added docs and sample file to use remote GCS backend. (#260)
Signed-off-by: Karteek <[email protected]>
2025-04-17 11:26:32 +02:00
karteekiitgandGitHub eb15ae041c refactor: readme, gitignore and talos_machine_config_version changes
Signed-off-by: Karteek <[email protected]>
2025-04-17 11:21:38 +02:00
renovate[bot]Vegard Hagenrenovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
341fba89fa chore(deps): renovate 2025-03-30
chore(deps): update netbird to v0.39.2 (#265)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update sealed-secrets docker tag to v2.5.8 (#264)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update terraform proxmox to v0.74.0 (#263)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release crossplane to v1.19.1 (#262)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release argo-cd to v7.8.15 (#261)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v70.3.0 (#259)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update media containers (#258)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-30 16:16:32 +02:00
Vegard Hagen 68d8cfb798 fix(renovate): group Netbird updates
Signed-off-by: Vegard Hagen <[email protected]>
2025-03-30 16:02:43 +02:00
Vegard Hagen 481b224f22 feat(authelia): upgrade to 4.39 and fix OIDC configuration
Signed-off-by: Vegard Hagen <[email protected]>
2025-03-30 15:48:12 +02:00
Vegard Hagen 057b203214 fix(jellyfin): recover jellyfin data
something went wrong when mounting the disk, trying to mount a copy of a zfs snapshot

Signed-off-by: Vegard Hagen <[email protected]>
2025-03-24 18:44:09 +01:00