renovate[bot] and Vegard Hagen
acd6052af7
chore(deps): merge renovate PRs
...
chore(deps): update keycloak docker tag to v24
chore(deps): update sealed-secrets docker tag to v2.4.11
chore(deps): update ghcr.io/lldap/lldap docker tag to v2024-11-17-debian-rootless
chore(deps): update helm release argo-cd to v7.7.3
chore(deps): update netbird to v0.32.0
chore(deps): update dependency siderolabs/talos to v1.8.3
chore(deps): update media containers
2024-11-17 17:03:36 +01:00
Sebastian Klamar and Vegard Hagen
1d3f025625
feat(renovate): rebase stale PRs
...
use renovate's :rebaseStalePrs option for rebasing existing PRs any time the base branch has been updated
2024-11-17 17:03:36 +01:00
Milos Milosavljevic and Vegard Hagen
1a46529d96
fix(cert-manager): remove deprecated flag
...
cert-manager deprecated flag
Gateway API CRDs
Correction
2024-11-17 17:03:35 +01:00
Vegard Stenhjem Hagen
694d56b32d
fix: update renovate syntax
2024-11-17 17:03:35 +01:00
renovate[bot] and Vegard Hagen
d898ef76e9
chore(deps): renovate bonanza
...
chore(deps): update helm release intel-device-plugins-operator to v0.31.1
chore(deps): update helm release intel-device-plugins-gpu to v0.31.1
chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.53
chore(deps): update sealed-secrets docker tag to v2.4.9
chore(deps): update ghcr.io/lldap/lldap docker tag to v2024-11-04-debian-rootless
chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.54
chore(deps): update cloudflare/cloudflared docker tag to v2024.11.0
chore(deps): update ghcr.io/authelia/authelia docker tag to v4.38.17
chore(deps): update helm release authelia to v0.9.9
chore(deps): update helm release cert-manager to v1.16.1
chore(deps): update dependency cilium/cilium to v1.16.3
chore(deps): update dependency intel/intel-device-plugins-for-kubernetes to v0.31.1
chore(deps): update helm release cloudnative-pg to v0.22.1
chore(deps): update dependency umputun/remark42 to v1.14.0
chore(deps): update helm release node-feature-discovery to v0.16.6
chore(deps): update terraform talos to v0.6.1
chore(deps): update dependency siderolabs/talos to v1.8.2
chore(deps): update terraform proxmox to v0.66.3
chore(deps): update helm release argo-cd to v7.7.0
chore(deps): update terraform kubernetes to v2.33.0
chore(deps): update registry.k8s.io/git-sync/git-sync docker tag to v4.3.0
chore(deps): update docker.io/mvance/unbound docker tag to v1.22.0
chore(deps): update helm release crossplane to v1.18.0
chore(deps): update media containers
chore(deps): update netbird
chore(deps): update ghcr.io/onedr0p/qbittorrent docker tag to v5
chore(deps): update helm release coturn to v1
chore(config): migrate config renovate.json
2024-11-17 17:03:35 +01:00
Vegard Hagen
4dd769fdf7
feat: add extra admin user
2024-11-17 17:03:35 +01:00
Vegard Hagen
237a321ec3
chore(qBit): downgrade to 4.6.5
2024-11-17 17:03:35 +01:00
Vegard Hagen
0c19b80b75
feat(authelia): add "optional" secrets in config
2024-11-17 17:03:35 +01:00
Vegard Hagen
403d32b9ed
feat(authelia): make cert-manager generate jwks
2024-11-17 17:03:35 +01:00
Vegard Hagen
140fbc249b
feat(tofu): use new talos_image_factory_schematic resource
...
talos provider 0.6 added a new resource for generating the image schematic id
2024-11-17 17:03:34 +01:00
Vegard Hagen
8d8e0ca87a
fix(authelia): add access_control policy rule
2024-11-17 17:03:34 +01:00
Vegard Hagen
996bf85daf
chore(talos): upgrade last node ctrl-00
...
Regular 'terraform apply' was enough this time
We're now on Talos 1.8.1 and Kubernetes 1.31.1
2024-11-17 17:03:34 +01:00
Vegard Hagen
4c8066a130
chore(talos): upgrade node ctrl-02
...
It worked with 'tofu apply -refresh=false'! Still had to manually shut down the VM though. Still scary!
2024-11-17 17:03:34 +01:00
Vegard Hagen
094d72abdf
chore(talos): upgrade node ctrl-01
...
start manual talos upgrade process
Issue with upgrading 'endppoint' node (ctrl-02) since API becomes unresponsive. Either do proper LB or maybe 'tofu apply -refresh=false'
2024-11-17 17:03:34 +01:00
renovate[bot] and Vegard Hagen
d291132624
chore(deps): merge renovate PRs
...
chore(deps): update netbird
chore(deps): update helm release crossplane to v1.17.1
chore(deps): update media containers
chore(deps): update dependency crossplane-contrib/function-auto-ready to v0.3.0
chore(deps): update helm release argo-cd to v7.6.8
chore(deps): update ghcr.io/lldap/lldap docker tag to v2024-10-10-debian-rootless
chore(deps): update proxmox-csi-plugin docker tag to v0.2.13
chore(deps): update ghcr.io/authelia/authelia docker tag to v4.38.16
chore(deps): update terraform proxmox to v0.66.1
chore(deps): update terraform talos to v0.6.0
chore(deps): update dependency cilium/cilium to v1.16.2
chore(deps): update dependency siderolabs/talos to v1.8.1
2024-11-17 17:03:34 +01:00
Vegard Hagen
6d137906d1
feat(authelia): add ES256 jwk and use it
2024-11-17 17:03:34 +01:00
Vegard Hagen
cbf1210859
fix(cert-manager): update API token
2024-11-17 17:03:34 +01:00
Vegard Hagen
9a92b48c97
feat(authelia): enable 2FA
2024-11-17 17:03:33 +01:00
Vegard Hagen
d077f4b035
feat(authelia): add ES256 jwk
2024-11-17 17:03:33 +01:00
Vegard Hagen
e0ce01c80f
fix(oidc): conceal jwks signing key
2024-11-17 17:03:33 +01:00
Vegard Hagen
53855a6d27
fix(oidc): conceal argo cd client secret
2024-11-17 17:03:33 +01:00
Vegard Hagen
86395edc1f
feat(authelia): add Argo CD client
2024-11-17 17:03:33 +01:00
Vegard Hagen
c88403691b
feat(lldap): create and use own authelia user
2024-11-17 17:03:33 +01:00
Vegard Hagen
ba69146b4b
feat(auth): add Authelia for OIDC
...
Use Authelia in an attempt to replace Keycloak. Kanidm is another alternative we're going to try later.
2024-11-17 17:03:33 +01:00
Vegard Hagen
6ac8652e24
chore(torrent): change torrent ports
2024-11-17 17:03:32 +01:00
Vegard Hagen
c524a6ab65
feat(cilium): enable maglev loadBalancer
...
Maglev Consistent Hashing should improve resiliency in case of failures https://docs.cilium.io/en/stable/network/kubernetes/kubeproxy-free/\#maglev-consistent-hashing
2024-11-17 17:03:32 +01:00
Vegard Hagen
af79c5b906
fix(argocd): turn on server-side diff
...
https://argo-cd.readthedocs.io/en/latest/user-guide/diff-strategies/\#server-side-diff
This should solve out-of-sync for e.g. Cilium ref https://github.com/argoproj/argo-cd/issues/19038
2024-11-17 17:03:32 +01:00
renovate[bot] and Vegard Hagen
d6d5a2ad02
chore(deps): merge renovate PRs
...
chore(deps): update terraform restapi to v1.20.0
chore(deps): update cloudflare/cloudflared docker tag to v2024.9.1
chore(deps): update terraform proxmox to v0.64.0
chore(deps): update keycloak docker tag to v22.2.3
chore(deps): update sealed-secrets docker tag to v2.4.6
chore(deps): update ghcr.io/lldap/lldap docker tag to v2024-09-11
chore(deps): update media containers
chore(deps): update terraform talos to v0.6.0-beta.0
chore(deps): update helm release argo-cd to v7.5.2
chore(deps): update helm release crossplane to v1.17.0
2024-11-17 17:03:32 +01:00
Vegard Hagen
ddb7f0fd9f
feat(lldap): bootstrap lldap users with script
2024-11-17 17:03:32 +01:00
Vegard Hagen
2a3f01736d
feat(ldap): add lldap as ldap server
2024-11-17 17:03:32 +01:00
Vegard Hagen
1d0ae6d437
feat(cnpg): configure test-database for external connection
2024-11-17 17:03:32 +01:00
Vegard Hagen
f1a11669a6
feat(renovate): group related containers for fewer renovate PRs
2024-11-17 17:03:32 +01:00
Vegard Hagen
e5b3cd91d3
feat(unrar): add an image for unrar tool
2024-11-17 17:03:31 +01:00
renovate[bot] and Vegard Hagen
7695584a63
chore(deps): update ghcr.io/onedr0p/plex docker tag to v1.40.5.8921-836b34c27
2024-11-17 17:03:31 +01:00
Vegard Stenhjem Hagen
944f4a92ba
fix(netbird): expose netbird dashboard
2024-11-17 17:03:31 +01:00
Vegard Hagen
5d69e82eb7
fix: route plex and jellyfin through gateway for tls-termination
2024-11-17 17:03:31 +01:00
renovate[bot] and Vegard Hagen
e1224e95da
chore(deps): update ghcr.io/onedr0p/sonarr docker tag to v4.0.9
2024-11-17 17:03:31 +01:00
Vegard Hagen
d3338da90a
feat(database): add cnpg for database management
2024-11-17 17:03:31 +01:00
renovate[bot] and Vegard Hagen
cb1c2cdebb
chore(deps): merge renovate PRs
...
chore(deps): update netbird to v0.28.9
chore(deps): update netbirdio/management docker tag to v0.28.9
chore(deps): update netbirdio/netbird docker tag to v0.28.9
chore(deps): update netbirdio/signal docker tag to v0.28.9
chore(deps): update cloudflare/cloudflared docker tag to v2024.8.3
chore(deps): update ghcr.io/onedr0p/radarr docker tag to v5.9.1
chore(deps): update ghcr.io/onedr0p/plex docker tag to v1.40.5.8897-e5987a19d
chore(deps): update helm release argo-cd to v7.4.5
chore(deps): update terraform proxmox to v0.63.0
chore(deps): update dependency corewire/images/crossplane/function-keycloak-builtin-objects to v3
chore(deps): update keycloak docker tag to v22.1.3
chore(deps): update ghcr.io/jellyfin/jellyfin docker tag to v10.9.10
chore(deps): update proxmox-csi-plugin docker tag to v0.2.9
2024-11-17 17:03:31 +01:00
Vegard Hagen
505a18cf38
fix(netbird): use internal dns to resolve auth admin-endpoint to internal gateway
2024-11-17 17:03:31 +01:00
renovate[bot] and Vegard Hagen
101b19a729
chore(deps): update keycloak docker tag to v22.1.2
2024-11-17 17:03:30 +01:00
renovate[bot] and Vegard Hagen
5b893c87f4
chore(deps): update ghcr.io/onedr0p/qbittorrent docker tag to v4.6.6
2024-11-17 17:03:30 +01:00
Vegard Hagen
91e389dc0e
fix(netbird): allow required endpoint from keycloak
2024-11-17 17:03:30 +01:00
Vegard Hagen
d74b811d84
chore(docs): update readme
2024-11-17 17:03:30 +01:00
Vegard Hagen
9a7894a7ab
feat(vpn): split gateway into external and internal services
2024-11-17 17:03:30 +01:00
renovate[bot] and Vegard Hagen
174cce0845
chore(deps): merge renovate PRs
...
chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.52
chore(deps): update helm release cert-manager to v1.15.3
chore(deps): update registry.k8s.io/git-sync/git-sync docker tag to v4.2.4
chore(deps): update dependency corewire/images/crossplane/function-keycloak-builtin-objects to v2
chore(deps): update helm release argo-cd to v7.4.4
2024-11-17 17:03:30 +01:00
Vegard Hagen
0e0a356fd1
fix(oidc): add 'basic' scope to netbird client and update keycloak
...
Change in Keycloak 25.0.0
https://www.keycloak.org/docs/25.0.0/upgrading/\#new-default-client-scope-basic
Thanks to Olav https://github.com/olav-st/homelab/commit/14dac2b576adad90306f9b23026a9048f66b38b7
2024-11-17 17:03:30 +01:00
Vegard Hagen
872f33c295
feat(adguard): mount config-file for declarative configuration
2024-11-17 17:03:30 +01:00
Vegard Hagen
9dec025db7
feat(dns): use Unbound and AdGuardHome for DNS
...
Unbound as a recursive resolver and AdGuardHome as main DNS backed by
Unbound
2024-11-17 17:03:29 +01:00
Vegard Hagen
38f118fa17
fix(jellyfin): use Memory for /cache to avoid NodeDiskPressure
2024-11-17 17:03:29 +01:00
