Commit Graph
193 Commits
Author SHA1 Message Date
renovate[bot]Vegard Hagenrenovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
c9d054231e chore(deps): renovate 2025-10-25
chore(deps): update netbird (#408)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update cilium (#411)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release argo-cd to v9 (#412)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release kube-prometheus-stack to v77.14.0 (#410)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update ghcr.io/authelia/authelia docker tag to v4.39.13 (#407)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.68 (#404)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update media containers (#401)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update docker/login-action action to v3.6.0 (#403)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release node-feature-discovery to v0.18.2 (#409)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update docker.io/grafana/grafana docker tag to v12.2.1 (#414)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update ghcr.io/home-operations/lidarr docker tag to v3 (#425)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release kube-prometheus-stack to v78 (#426)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release cert-manager to v1.19.1 (#424)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release authelia to v0.10.47 (#415)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release cloudnative-pg to v0.26.1 (#416)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update proxmox-csi-plugin docker tag to v0.3.16 (#417)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update cloudflare/cloudflared docker tag to v2025.10.0 (#418)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update grafana-operator docker tag to v5.20.0 (#423)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update ghcr.io/advplyr/audiobookshelf docker tag to v2.30.0 (#422)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-10-25 15:13:54 +02:00
renovate[bot]Vegard Hagenrenovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
6fd4d4b15c chore(deps): renovate 2025-09-28
chore(deps): update dependency grafana/grafana-operator to v5.19.4 (#368)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update dependency unpoller/unpoller to v2.15.4 (#380)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update github actions (#369)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Vegard Stenhjem Hagen <[email protected]>

chore(deps): update helm release kube-prometheus-stack to v75.18.1 (#370)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update terraform google to ~> 6.50.0 (#372)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update netbird (#373)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update sealed-secrets docker tag to v2.5.19 (#374)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update cloudflare/cloudflared docker tag to v2025.9.1 (#375)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update cilium (#379)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update media containers (#377)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.66 (#381)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update docker.io/lldap/lldap docker tag to v0.6.2 (#382)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update ghcr.io/authelia/authelia docker tag to v4.39.10 (#383)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release authelia to v0.10.46 (#384)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release node-feature-discovery to v0.17.4 (#385)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update proxmox-csi-plugin docker tag to v0.3.14 (#386)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update dependency kubernetes/kubernetes to v1.34.1 (#387)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update dependency siderolabs/talos to v1.11.2 (#388)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update docker.io/grafana/grafana docker tag to v12.2.0 (#389)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update ghcr.io/advplyr/audiobookshelf docker tag to v2.29.0 (#390)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release argo-cd to v8.5.7 (#391)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release cloudnative-pg to v0.26.0 (#392)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update intel device plugins to v0.34.0 (#393)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update registry.k8s.io/git-sync/git-sync docker tag to v4.5.0 (#394)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update terraform proxmox to v0.84.0 (#395)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update terraform talos to v0.9.0 (#396)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update actions/checkout action to v5 (#397)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update ghcr.io/home-operations/radarr docker tag to v6 (#398)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release kube-prometheus-stack to v77 (#399)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update terraform google to v7 (#400)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Vegard Hagen <[email protected]>
2025-09-28 17:59:30 +02:00
Vegard Hagen 0fd26062c1 feat(cert-manager): enable service monitor and add dashboard
Signed-off-by: Vegard Hagen <[email protected]>
2025-08-05 21:17:56 +02:00
Vegard Hagen 7853de1ede feat(unpoller): add monitoring of unifi equipment
Signed-off-by: Vegard Hagen <[email protected]>
2025-08-05 21:15:27 +02:00
Vegard Hagen b605d48ec3 fix(netbird): update config after update
Default config moved with introduction of profiles in 0.52.
config.json is now called default.json. Removed env-var for config and
it resolves itself.

Also re-enabled the sysctls after getting related error in log

Signed-off-by: Vegard Hagen <[email protected]>
2025-08-05 21:05:34 +02:00
Vegard Hagen 3f90c83f26 chore(cilium): upgrade CiliumLoadBalancerIPPool to v2
Signed-off-by: Vegard Hagen <[email protected]>
2025-08-05 21:05:34 +02:00
Vegard Hagen 7a7b53c56c chore(cilium): remove deprecated option in values
Signed-off-by: Vegard Hagen <[email protected]>
2025-08-05 21:05:34 +02:00
renovate[bot]Vegard Hagenrenovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
fb5337c772 chore(deps): renovate 2025-08-03
chore(deps): update proxmox-csi-plugin docker tag to v0.3.13 (#351)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release argo-cd to v8.2.5 (#352)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update ghcr.io/advplyr/audiobookshelf docker tag to v2.27.0 (#353)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update netbird (#354)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update terraform kubernetes to v2.38.0 (#355)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update terraform google to ~> 6.46.0 (#357)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update media containers (#358)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release cloudnative-pg to v0.25.0 (#360)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release kube-prometheus-stack to v75.15.1 (#361)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.64 (#362)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update dependency siderolabs/talos to v1.10.6 (#363)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update docker.io/grafana/grafana docker tag to v12 (#367)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update terraform proxmox to v0.81.0 (#366)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update cilium (#364)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-08-05 21:05:34 +02:00
Vegard Hagen 3452ba1cb2 feat(grafana): install grafana using grafana-operator
Decommission kube-prometheus-stack installed Grafana and use
grafana-operator instead.

Signed-off-by: Vegard Hagen <[email protected]>
2025-08-05 21:05:28 +02:00
Vegard Hagen ca7e368c41 fix(monitoring): increase volume size
Signed-off-by: Vegard Hagen <[email protected]>
2025-08-03 15:59:03 +02:00
Vegard Hagen a21783e706 fix(plex): volume won't mount
Signed-off-by: Vegard Hagen <[email protected]>
2025-08-03 15:59:03 +02:00
Vegard Hagen c4f7010759 feat(kube): enable metrics
Enable kube-controller-manager, etcd, and kube-scheduler metrics
Also disable kube-proxy metrics since Cilium replaces it

Signed-off-by: Vegard Hagen <[email protected]>
2025-07-31 23:24:03 +02:00
Vegard Hagen 537c4756e8 feat(authelia): add metrics and grafana dashboard
Signed-off-by: Vegard Hagen <[email protected]>
2025-07-31 21:22:38 +02:00
Vegard Hagen 3634e29a6b fix(grafana): add admin credentials
admin credentials are needed by the sidecards in order to update datasources and dashboards

Signed-off-by: Vegard Hagen <[email protected]>
2025-07-31 21:02:22 +02:00
Vegard Hagen 004c3cf1e2 fix(authelia): obfuscate smtp relay username to avoid getting "leaked" credentials emails
Also rotate both username and password

Signed-off-by: Vegard Hagen <[email protected]>
2025-07-31 20:05:45 +02:00
Vegard Hagen 0ff3a46685 fix(email): change provider to mailersend
Mail from Brevo includes a tracking pixel that you can't get rid of. To quote Lemongrab: "Unacceptable!"

Signed-off-by: Vegard Hagen <[email protected]>
2025-07-29 23:40:36 +02:00
Vegard Hagen 08c01b3fbc fix(email): change provider to brevo
SendGrid started charging money for basic functionality, so changing to free tier in Brevo

Signed-off-by: Vegard Hagen <[email protected]>
2025-07-29 22:36:32 +02:00
Vegard Hagen 285d9b075e feat(monitoring): enable nodeExporter
Signed-off-by: Vegard Hagen <[email protected]>
2025-07-28 18:21:58 +02:00
Vegard Hagen 5c3395210a feat(argocd): add metrics and grafana dashboard
Signed-off-by: Vegard Hagen <[email protected]>
2025-07-26 15:38:49 +02:00
Vegard Hagen 9fc5f0f0c4 feat(grafana): oauth/oidc integration
Signed-off-by: Vegard Hagen <[email protected]>
2025-07-26 14:34:36 +02:00
Vegard Hagen 559b4c3d24 feat(cilium): add grafana dashboards
Signed-off-by: Vegard Hagen <[email protected]>
2025-07-25 22:29:24 +02:00
Vegard Hagen e864098520 fix(monitoring): try server-side apply of kube-prometheus-stack again
Try without an extra Application resource again

Signed-off-by: Vegard Hagen <[email protected]>
2025-07-25 17:18:08 +02:00
Vegard Hagen 09966b457c fix(qbit): change port
Signed-off-by: Vegard Hagen <[email protected]>
2025-07-24 20:34:25 +02:00
Vegard Hagen c1b1719e8c fix(cilium): disable alpn
I have a hunch that this somehow interferes with Argo CD.

The Argo CD login page shows up in Safari 18.5, Brave 1.80.120 and
Firefox 140.0.4.
After logging in using Authelia (OIDC), Argo CD starts to display 404
error in Brave and Firefox, but it works in Safari.
Clearing site data makes the login page show up in Brave and Firefox
again.

Signed-off-by: Vegard Hagen <[email protected]>
2025-07-21 10:27:13 +02:00
Vegard Hagen cb66358a0e fix(argocd): remove grpcroute
the tlsroute should be able to handle grpc-connections, having both seem to create some trouble

Signed-off-by: Vegard Hagen <[email protected]>
2025-07-20 13:30:16 +02:00
Vegard Hagen 3d2de963b5 fix(netbird): clean up configuration
Signed-off-by: Vegard Hagen <[email protected]>
2025-07-20 13:18:31 +02:00
Vegard Hagen eea1d4a58b fix(adguard): update config schema version
Signed-off-by: Vegard Hagen <[email protected]>
2025-07-20 13:18:31 +02:00
Vegard Hagen 907c9876fe fix(dns): remove special entries for proxmox and truenas
Signed-off-by: Vegard Hagen <[email protected]>
2025-07-20 13:18:31 +02:00
Vegard Hagen a2d0e263f0 fix(gateway): remove separate tls-passthrough gateway
It appears to work without a separate Gateway now. Should investigate if https://github.com/cilium/cilium/issues/32371 can be closed

Signed-off-by: Vegard Hagen <[email protected]>
2025-07-20 13:18:31 +02:00
Vegard Hagen a788e2e12c feat(argocd): enable argocd cli
Also change Argo CD to use a proper certificate

Signed-off-by: Vegard Hagen <[email protected]>
2025-07-20 13:18:31 +02:00
Vegard Hagen f13ee5e73f feat(lldap): clean up config
Signed-off-by: Vegard Hagen <[email protected]>
2025-07-20 13:18:19 +02:00
renovate[bot]Vegard Hagenrenovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
7e388f55d7 chore(renovate): renovate 2025-07-18
chore(deps): update helm release cert-manager to v1.18.2 (#293)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update proxmox-csi-plugin docker tag to v0.3.11 (#311)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update cloudflare/cloudflared docker tag to v2025.7.0 (#314)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update dependency siderolabs/talos to v1.10.5 (#331)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update media containers (#328)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v73.2.3 (#332)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update cilium (#333)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update actions/checkout action to v4.2.2 (#336)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.63 (#338)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update dependency kubernetes/kubernetes to v1.33.3 (#335)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update ghcr.io/authelia/authelia docker tag to v4.39.5 (#339)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update ghcr.io/home-operations/qbittorrent docker tag to v5.1.2 (#340)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release authelia to v0.10.39 (#341)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update registry.k8s.io/git-sync/git-sync docker tag to v4.4.2 (#342)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update sealed-secrets docker tag to v2.5.16 (#343)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update ghcr.io/advplyr/audiobookshelf docker tag to v2.26.1 (#344)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update netbird (#345)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update terraform proxmox to v0.80.0 (#346)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update ghcr.io/home-operations/prowlarr docker tag to v2 (#347)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v75 (#348)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Vegard Hagen <[email protected]>

chore(deps): update helm release authelia to v0.10.41 (#349)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-19 18:51:55 +02:00
Vegard Stenhjem HagenandGitHub 1deb5aced1 feat(devcontainer): build a Devcontainer with useful tools for this project
Also use said devcontainer i GitHub workflows to validate config.

* feat(devcontainer): build devcontainer

Signed-off-by: Vegard Hagen <[email protected]>

* feat(ci): validate tofu files on push

Signed-off-by: Vegard Hagen <[email protected]>

* feat(devcontainer): simplify devcontainer

Signed-off-by: Vegard Hagen <[email protected]>

* fix(devcontainer): don't cache package index

This will reduce the final image size.

Signed-off-by: Vegard Hagen <[email protected]>

* feat(devcontainer): switch to ubuntu and use devcontainer features as much as possible

Signed-off-by: Vegard Hagen <[email protected]>

---------

Signed-off-by: Vegard Hagen <[email protected]>
2025-07-13 23:18:26 +02:00
Vegard Hagen f5841b4a3b fix(authelia): explicit custom attribute configuration
Signed-off-by: Vegard Hagen <[email protected]>
2025-07-13 15:46:41 +02:00
Vegard Hagen 838a335ecc feat(authelia): description of custom claims
Signed-off-by: Vegard Hagen <[email protected]>
2025-07-12 17:17:42 +02:00
Vegard Hagen 5de4066796 feat(authelia): custom argocd claim
Signed-off-by: Vegard Hagen <[email protected]>
2025-07-12 15:45:23 +02:00
Vegard Hagen aa884cd9d2 fix(authelia): clean up configuration
Signed-off-by: Vegard Hagen <[email protected]>
2025-07-11 20:51:00 +02:00
Vegard Hagen 9fa04832e4 fix(unbound): use default config
Experiencing some issues with using Unbound as a recursive solver, so reverting to default config

Signed-off-by: Vegard Hagen <[email protected]>
2025-07-11 19:47:37 +02:00
Vegard Hagen 992c6a52a0 chore(lldap): edit config
Signed-off-by: Vegard Hagen <[email protected]>
2025-06-25 20:56:34 +02:00
Vegard Hagen 2a2606d178 fix(netbird): use renvsubst container to create configuration
Signed-off-by: Vegard Hagen <[email protected]>
2025-06-08 22:23:47 +02:00
Vegard Hagen e1cabbf2bb fix(gateway): use the addresses field instead of infrastructure annotation
See GH issue #94
This was fixed in https://github.com/cilium/cilium/issues/32865

Signed-off-by: Vegard Hagen <[email protected]>
2025-06-08 22:23:47 +02:00
renovate[bot]Vegard Hagenrenovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
be9b1ac24e chore(deps): renovate 2025-06-08
chore(deps): update media containers

chore(deps): update netbird

chore(deps): update netbird

chore(deps): update dependency cert-manager/cert-manager to v1.17.2

chore(deps): update helm release authelia to v0.10.11

chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.62

chore(deps): update helm release node-feature-discovery to v0.17.3

chore(deps): update helm release argo-cd to v7.9.1

chore(deps): update cilium to v1.17.4

chore(deps): update ghcr.io/authelia/authelia docker tag to v4.39.4

chore(deps): update helm release argo-cd to v8

chore(deps): update helm release cloudnative-pg to v0.24.0

chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v73

chore(deps): update ghcr.io/home-operations/qbittorrent docker tag to v5.1.0

chore(deps): update ghcr.io/advplyr/audiobookshelf docker tag to v2.24.0

chore(deps): update cloudflare/cloudflared docker tag to v2025.5.0

chore(deps): update registry.k8s.io/git-sync/git-sync docker tag to v4.4.1

chore(deps): update proxmox-csi-plugin docker tag to v0.3.7

chore(deps): update sealed-secrets docker tag to v2.5.13

chore(deps): update intel device plugins to v0.32.1

chore(deps): update terraform talos to v0.8.1 (#324)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update terraform kubernetes to v2.37.1 (#322)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update terraform proxmox to v0.78.1 (#323)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-06-08 22:23:30 +02:00
Vegard Hagen 1fbe9fb6bd feat(auth): add custom user properties for audiobookshelf
Add custom user schema in LLDAP which maps to a custom attribute in
Authelia which we then again map to a custom claim which we include in a
custom scope which audiobookshelf requests

Signed-off-by: Vegard Hagen <[email protected]>
2025-05-03 19:15:27 +02:00
Vegard Hagen e0fdbafa35 feat(authelia): add audiobookshelf OIDC client
Signed-off-by: Vegard Hagen <[email protected]>
2025-05-03 11:47:25 +02:00
Vegard Hagen 4c1ad3e223 feat(app): add audiobookshelf application
Signed-off-by: Vegard Hagen <[email protected]>
2025-04-29 21:10:39 +02:00
Vegard Hagen 919ccdff30 feat(gateway): remove extra install of Gateway API CRDs
Gateway API CRDs are installed using Talos machine config
`extra_manifests`.

Signed-off-by: Vegard Hagen <[email protected]>
2025-04-18 14:57:22 +02:00
Vegard Hagen 344b161c63 feat(crossplane): remove crossplane
Crossplane was only used to configure Keycloak, no need for it with Keycloak gone

Signed-off-by: Vegard Hagen <[email protected]>
2025-04-18 14:55:15 +02:00
Vegard Hagen b2c66e84d9 feat(keycloak): remove keycloak
Using Authelia instead of Keycloak now

Signed-off-by: Vegard Hagen <[email protected]>
2025-04-18 14:53:25 +02:00
renovate[bot]Vegard Hagenrenovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
266aab34c0 chore(deps): renovate 2025-04-17
chore(deps): update terraform proxmox to v0.76.0 (#268)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release argo-cd to v7.8.26 (#269)

* chore(deps): update terraform proxmox to v0.76.0 (#268)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* fix(tofu): volume-provisioning

A Proxmox update probably broke/changed the way API requests are handled, giving errors on UPDATE calls with parameters that aren't used

Error: unexpected response code '400': {"data":null,"errors":{"format":"property is not defined in schema and the schema does not allow additional properties","vmid":"property is not defined in schema and the schema does not allow additional properties","size":"property is not defined in schema and the schema does not allow additional properties","filename":"property is not defined in schema and the schema does not allow additional properties"}}

Also update Mastercard/restapi provider

* chore(deps): update helm release argo-cd to v7.8.26

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Vegard Hagen <[email protected]>

chore(deps): update keycloak docker tag to v24.5.2 (#270)

* chore(deps): update terraform proxmox to v0.76.0 (#268)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* fix(tofu): volume-provisioning

A Proxmox update probably broke/changed the way API requests are handled, giving errors on UPDATE calls with parameters that aren't used

Error: unexpected response code '400': {"data":null,"errors":{"format":"property is not defined in schema and the schema does not allow additional properties","vmid":"property is not defined in schema and the schema does not allow additional properties","size":"property is not defined in schema and the schema does not allow additional properties","filename":"property is not defined in schema and the schema does not allow additional properties"}}

Also update Mastercard/restapi provider

* chore(deps): update keycloak docker tag to v24.5.2

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Vegard Hagen <[email protected]>

chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v70.7.0 (#271)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update sealed-secrets docker tag to v2.5.9 (#272)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update cloudflare/cloudflared docker tag to v2025.4.0 (#273)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update media containers (#274)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update netbird to v0.41.3 (#275)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update dependency corewire/images/crossplane/function-keycloak-builtin-objects to v3.0.1 (#277)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update cilium to v1.17.3 (#278)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.60 (#279)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release authelia to v0.10.5 (#280)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-17 18:57:50 +02:00
renovate[bot]Vegard Hagenrenovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
341fba89fa chore(deps): renovate 2025-03-30
chore(deps): update netbird to v0.39.2 (#265)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update sealed-secrets docker tag to v2.5.8 (#264)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update terraform proxmox to v0.74.0 (#263)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release crossplane to v1.19.1 (#262)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release argo-cd to v7.8.15 (#261)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v70.3.0 (#259)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update media containers (#258)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-30 16:16:32 +02:00