341fba89fa
chore(deps): renovate 2025-03-30
...
chore(deps): update netbird to v0.39.2 (#265 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update sealed-secrets docker tag to v2.5.8 (#264 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update terraform proxmox to v0.74.0 (#263 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update helm release crossplane to v1.19.1 (#262 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update helm release argo-cd to v7.8.15 (#261 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v70.3.0 (#259 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update media containers (#258 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-30 16:16:32 +02:00
Vegard Hagen
68d8cfb798
fix(renovate): group Netbird updates
...
Signed-off-by: Vegard Hagen <[email protected]
2025-03-30 16:02:43 +02:00
Vegard Hagen
481b224f22
feat(authelia): upgrade to 4.39 and fix OIDC configuration
...
Signed-off-by: Vegard Hagen <[email protected]
2025-03-30 15:48:12 +02:00
Vegard Hagen
057b203214
fix(jellyfin): recover jellyfin data
...
something went wrong when mounting the disk, trying to mount a copy of a zfs snapshot
Signed-off-by: Vegard Hagen <[email protected]
2025-03-24 18:44:09 +01:00
Vegard Hagen
84d86e3880
fix(authelia): downgrade authelia
...
Signed-off-by: Vegard Hagen <[email protected]
2025-03-24 18:02:14 +01:00
Vegard Hagen
fc63899f1d
fix(qBit): clean up ports used
...
Signed-off-by: Vegard Hagen <[email protected]
2025-03-24 16:03:05 +01:00
Vegard Hagen
c555e84f7a
fix(utils): argocd project
...
Signed-off-by: Vegard Hagen <[email protected]
2025-03-24 15:48:58 +01:00
3aa55c6ae2
chore(deps): update media containers ( #254 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-24 15:42:40 +01:00
Vegard Hagen
b8201c456d
fix: change to home-operations registry from onedr0p
...
this solves issue #239
Signed-off-by: Vegard Hagen <[email protected]
2025-03-24 15:38:53 +01:00
Vegard Hagen
3bb7d5dd52
fix(adguard): remove creation timestamp field i secret
2025-03-24 15:05:35 +01:00
Vegard Hagen
51910d0e36
fix(authelia): new config parameters after update
2025-03-24 15:03:17 +01:00
9d7325498a
chore(deps): renovate 2025-03-24
...
chore(deps): update helm release cert-manager to v1.17.1 (#216 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update terraform proxmox to v0.73.2 (#218 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v69.8.2 (#219 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update helm release crossplane to v1.19.0 (#220 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update media containers (#221 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update netbird (#222 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update netbirdio/relay docker tag to v0.39.1 (#223 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update helm release authelia to v0.10.4 (#224 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update cilium to v1.17.2 (#225 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update cloudflare/cloudflared docker tag to v2025.2.1 (#240 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update dependency crossplane-contrib/function-auto-ready to v0.4.2 (#241 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update dependency crossplane-contrib/function-go-templating to v0.9.2 (#242 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.59 (#243 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update helm release argo-cd to v7.8.13 (#244 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update helm release cloudnative-pg to v0.23.2 (#245 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update helm release node-feature-discovery to v0.17.2 (#246 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update keycloak docker tag to v24.4.13 (#247 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update sealed-secrets docker tag to v2.5.7 (#248 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update dependency crossplane-contrib/provider-keycloak to v1.13.0 (#249 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update ghcr.io/authelia/authelia docker tag to v4.39.1 (#250 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update terraform kubernetes to v2.36.0 (#251 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update dependency crossplane-contrib/provider-keycloak to v2 (#252 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v70 (#253 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-24 12:17:36 +01:00
Vegard Hagen
25cfa2bbb6
chore(gateway): update to gateway api v1.2.1
2025-02-10 20:18:45 +01:00
Vegard Hagen
38542b6bdb
fix(argo cd): disable dex
...
dex is not needed and it keeps crashing in latest update
2025-02-08 22:26:31 +01:00
Vegard Hagen
063b5da94f
fix(cilium): use legacy host routing
...
requirement for running on talos
2025-02-08 22:10:10 +01:00
renovate[bot] and Vegard Hagen
77923604f2
chore(deps): renovate 2025-02-08
...
chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v68
chore(deps): update helm release argo-cd to v7.8.2
chore(deps): update helm release argo-cd to v7.8.2
chore(deps): update netbird to v0.36.5
chore(deps): update netbirdio/relay docker tag to v0.36.5
chore(deps): update dependency crossplane-contrib/function-auto-ready to v0.4.1
chore(deps): update dependency crossplane-contrib/function-go-templating to v0.9.1
chore(deps): update dependency siderolabs/talos to v1.9.3
chore(deps): update keycloak docker tag to v24.4.9
chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v68.5.0
chore(deps): update intel device plugins to v0.32.0
chore(deps): update cloudflare/cloudflared docker tag to v2025.2.0
chore(deps): update helm release authelia to v0.9.15
chore(deps): update proxmox-csi-plugin docker tag to v0.3.5
chore(deps): update sealed-secrets docker tag to v2.5.6
chore(deps): update terraform proxmox to v0.70.1
chore(deps): update cilium to v1.17.0
chore(deps): update dependency cert-manager/cert-manager to v1.17.0
chore(deps): update dependency crossplane-contrib/provider-keycloak to v1.11.0
chore(deps): update ghcr.io/onedr0p/radarr docker tag to v5.18.4
chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v69
2025-02-08 22:08:28 +01:00
renovate[bot] and Vegard Hagen
f54aadd9fa
chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v68
2025-01-26 22:19:57 +01:00
Vegard Hagen
ab473a5e08
fix(monitoring): add renavate rule for updating chart
2025-01-26 20:55:58 +01:00
Vegard Hagen
53b332cb28
feat(monitoring): add http-routes for prometheus and alertmanager
2025-01-26 20:51:12 +01:00
Vegard Hagen
4c9dc0f2b4
fix(monitoring): disable nodeExporter
...
nodeExporter doesn't work on Talos
2025-01-26 20:39:36 +01:00
Vegard Hagen
d523d128c4
fix(authelia): disable html emails
2025-01-26 18:10:36 +01:00
Vegard Hagen
24743bf9c2
fix(cnpg): rename db volumes
2025-01-26 17:58:36 +01:00
renovate[bot] and Vegard Hagen
1efb017ef0
chore(deps): renovate 2025-01-26
...
chore(deps): update helm release argo-cd to v7.7.17
chore(deps): update keycloak docker tag to v24.4.6
chore(deps): update helm release node-feature-discovery to v0.17.1
chore(deps): update sealed-secrets docker tag to v2.5.4
chore(deps): update proxmox-csi-plugin docker tag to v0.3.4
chore(deps): update dependency cert-manager/cert-manager to v1.16.3
chore(deps): update dependency siderolabs/talos to v1.9.2
chore(deps): update netbird
chore(deps): update netbirdio/relay docker tag to v0.36.3
chore(deps): update cilium to v1.16.6
chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.56
chore(deps): update media containers
chore(deps): update terraform talos to v0.7.1
chore(deps): update dependency crossplane-contrib/provider-keycloak to v1.10.1
chore(deps): update terraform proxmox to v0.70.0
2025-01-26 15:59:50 +01:00
Vegard Hagen
ee741467dd
fix(lldap): add tmp-volume for bootstrapping
2025-01-26 15:43:41 +01:00
Vegard Hagen
5ae1a6d829
fix(lldap): add hash seed
2025-01-25 15:34:28 +01:00
Vegard Hagen
e071e10538
refactor(lldap): use alpine rootless image
2025-01-20 21:46:11 +01:00
Vegard Hagen
a7ea9468e8
feat(authelia): use ldaps with lldap
...
this is kind of a pointless change, but kinda cool to try
2025-01-19 13:41:43 +01:00
Vegard Hagen
035d42adb8
test(lldap): enable ldaps
2025-01-19 11:51:17 +01:00
Vegard Hagen
5563a63f56
feat(lldap): add cnpg database for persistence
2025-01-19 10:24:12 +01:00
Vegard Hagen
baa30f0e03
feat(lldap): add a test user
2025-01-18 15:41:38 +01:00
Vegard Hagen
7a949afadd
feat(authelia): add smtp integration
2025-01-18 14:45:28 +01:00
Vegard Hagen
8da8d82bf4
feat(lldap): add smtp integration
2025-01-17 16:28:31 +01:00
renovate[bot] and Vegard Hagen
ab7a292b60
chore(deps): renovate 2025-01-12
...
chore(deps): update keycloak docker tag to v24.4.0
chore(deps): update keycloak docker tag to v24.4.0
chore(deps): update terraform proxmox to v0.69.1
chore(deps): update terraform proxmox to v0.69.1
chore(deps): update helm release argo-cd to v7.7.15
chore(deps): update cloudflare/cloudflared docker tag to v2025
chore(deps): update media containers
2025-01-17 15:15:00 +01:00
Vegard Hagen
d816953b98
feat(authelia): harden oidc clients
2025-01-11 10:43:34 +01:00
Vegard Hagen
ae355bb427
fix(netbird): clean up configuration
2025-01-10 21:34:06 +01:00
Vegard Hagen
e658857bf8
fix(netbird): change user_id claim
2025-01-09 19:45:27 +01:00
Vegard Hagen
c483d0fa5a
feat(netbird): change oidc provider to authelia
...
This makes it possible to decommission keycloak and crossplane
2025-01-09 19:26:27 +01:00
Vegard Hagen
fee02d4b16
fix(netbird): change oidc clientId
2025-01-08 20:31:07 +01:00
Vegard Hagen
0195f99252
feat(netbird): use built-in mechanism for jwk sign key refresh
...
https://github.com/netbirdio/netbird/pull/808
2025-01-08 20:23:54 +01:00
Vegard Hagen
037fc29129
feat(netbird): remove idp-integration
...
IDP integration is not needed. Removing it might allow Authelia-integration
2025-01-08 20:16:13 +01:00
Vegard Hagen
2ec6244fca
fix(netbird): change dashboard redirect URLs
...
default callback url contains a fragment component in violation OAuth2.0 spec
https://github.com/authelia/authelia/discussions/7185#discussioncomment-11613126
https://github.com/netbirdio/dashboard/blob/14d2d688198a633e745f59c2d0bed9de146d2be5/src/utils/config.ts#L26-L27
2025-01-08 18:57:12 +01:00
Vegard Hagen
2674d91a48
feat(auth): enable kubectl oidc auth
2025-01-06 21:30:23 +01:00
Vegard Hagen
edd0a15345
fix(authelia): increase db disk size
2025-01-06 21:27:16 +01:00
Vegard Hagen
3c2c08b367
fix(authelia): clean up values-file
2025-01-06 20:33:26 +01:00
Vegard Hagen
ce5fc25504
feat(authelia): use a cnpg managed db
...
use a database for presistent storage of users and sessions
2025-01-06 20:14:45 +01:00
Vegard Hagen
2eacd07803
chore: format code
2025-01-05 20:01:44 +01:00
Vegard Hagen
b090a54d75
fix(coturn): only use tls-port
2025-01-05 19:53:53 +01:00
Vegard Hagen
a535a76c31
feat(coturn): use plain manifests instead of helm chart
2025-01-05 19:28:43 +01:00
Vegard Hagen
3cbc35aaf9
fix(netbird-signal): harden security
2025-01-05 15:43:44 +01:00
Vegard Hagen
c35ba49135
fix(netbird-relay): harden security
2025-01-05 15:40:20 +01:00
