589 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
forust	c139d700f1	feat(adguard,traefik,cert-manager,reloader): foundation for adguard cert sync ... - traefik: enable kubernetesIngress provider (needed for cert-manager HTTP-01) - adguard: add reloader auto annotation for secret-driven restarts - cert-manager: namespace, helm values (crds), staging+prod ClusterIssuers - reloader: namespace manifest	2026-09-23 13:19:26 +02:00
forust	67b9996911	fix(renovate): default endpoint to gitea API URL ... Fall back to https://gitea.forust.xyz/api/v1 when RENOVATE_ENDPOINT is unset, in both local config and in-cluster ConfigMap.	2026-09-23 13:06:19 +02:00
forust	4e9ee567ca	Merge pull request 'chore(deps): update renovate/renovate docker tag to v44.106.0' (#41) from renovate/renovate-renovate-44.x into main ... Reviewed-on: https://gitea.forust.xyz/forust/homelab/pulls/41	2026-09-21 20:03:24 +00:00
renovate-bot	4863e13596	chore(deps): update renovate/renovate docker tag to v44.106.0	2026-09-21 16:18:03 +00:00
forust	9c4580a522	fix(prometheus): exclude xui services from TraefikServiceHighLatency ... Long-lived VPN WebSocket sessions inflate P95 request duration; keep 5xx/down/cert alerts for xui unchanged.	2026-09-19 19:06:42 +02:00
forust	4e3ad00202	feat(xui): add 3x-ui VPN panel behind cloudflared tunnel ... VLESS+WS inbound (port 10000) via Traefik IngressRoute, panel on internal domains only with public route commented out. gitignore now covers nested k8s secrets and local-only grafana values.	2026-09-19 19:06:37 +02:00
forust	86ac43567d	chore(renovate): sync pins to 44.103.0	2026-09-18 22:21:48 +02:00
forust	35bf980bda	Merge branch 'main' of https://gitea.forust.xyz/forust/homelab	2026-09-18 22:19:57 +02:00
forust	51677ae184	ci: run all lint jobs natively without docker	2026-09-18 22:18:59 +02:00
forust	c9e6fc0e2b	ci: run ruff and yamllint natively, cache npm ... Ruff and yamllint ship in Arch repos, drop their container pulls. Prettier keeps the node container but mounts persistent npm cache. Hadolint and kubeconform stay containerized (AUR-only / hermetic pin).	2026-09-18 19:41:02 +02:00
forust	ab386fc436	ci: keep gitea workflows only, harden and speed up pipelines ... Drop duplicated .github/workflows (helm blocks ported to .gitea deploy first). Add ci concurrency with cancel on branches, pin checkout to SHA and prettier to 3.9.8, registry layer cache for image builds. renovate-run gains config validation and dry-run input.	2026-09-18 19:38:56 +02:00
forust	7e17ae638a	Merge pull request 'chore(deps): update container patch updates' (#35) from renovate/container-patch-updates into main ... Reviewed-on: https://gitea.forust.xyz/forust/homelab/pulls/35	2026-09-18 17:20:48 +00:00
renovate-bot	872d9695c3	chore(deps): update container patch updates	2026-09-18 17:20:48 +00:00
forust	69e7df6a63	Merge pull request 'chore(deps): update renovate/renovate docker tag to v44.103.0' (#36) from renovate/renovate-renovate-44.x into main ... Reviewed-on: https://gitea.forust.xyz/forust/homelab/pulls/36	2026-09-18 17:20:39 +00:00
renovate-bot	98aceef192	chore(deps): update renovate/renovate docker tag to v44.103.0	2026-09-18 17:20:39 +00:00
forust	dfd9cc6fbf	Merge pull request 'chore(deps): update cloudflare/cloudflared docker tag to v2026.9.1' (#37) from renovate/cloudflare-cloudflared-2026.x into main ... Reviewed-on: https://gitea.forust.xyz/forust/homelab/pulls/37	2026-09-18 17:20:31 +00:00
renovate-bot	40e7499e7c	chore(deps): update cloudflare/cloudflared docker tag to v2026.9.1	2026-09-18 17:19:16 +00:00
forust	7f0bd5f609	feat(renovate): add manual run pipeline and sync configs ... renovate-run workflow_dispatch runs pinned renovate via docker on self-hosted runner. Sync helm-values manager into config.js/configmap, bump compose and validator pins to 44.97.2.	2026-09-18 19:15:11 +02:00
forust	043923fc64	style(crowdsec): fix prettier formatting in grafana dashboards	2026-09-18 19:07:46 +02:00
forust	f0f8a35b0f	Merge branch 'main' of https://gitea.forust.xyz/forust/homelab ... # Conflicts: # postgres/k8s/postgres.yaml	2026-09-18 19:05:56 +02:00
forust	f5f389b440	chore(ci): deploy loki alloy and track helm values in renovate ... Deploy hook installs loki 7.3.0 and alloy 1.12.1 when loki/k8s/active exists. Renovate watches k8s values files.	2026-09-18 19:02:46 +02:00
forust	7cca330438	feat(crowdsec): switch agent to loki acquisition with static identity ... Read traefik logs from Loki instead of file tail. Static machine identity via pre-created secret stops 403 register races. Add janitor cronjob, dashboards, whitelists and metrics.	2026-09-18 19:02:43 +02:00
forust	5936de3e56	fix(alertmanager): quote null receiver and wire telegram template ... Unquoted null parses as YAML null and breaks routing. Add shared telegram message template.	2026-09-18 19:02:41 +02:00
forust	c98ea8b957	feat(monitoring): align storage to live pvc, add loki datasource and alerts ... Match grafana/alertmanager storageClass to live PVCs to avoid immutable-field failures. Add Loki datasource and LokiDown/AlloyDown alerts.	2026-09-18 19:02:38 +02:00
forust	34c33697bb	feat(loki): add single-binary loki and alloy stack ... Filesystem storage on local-path-retain, 14d retention. Alloy daemonset ships k8s pod logs to loki-gateway.	2026-09-18 19:02:36 +02:00
forust	92bd920113	Merge pull request 'chore(deps): update postgres docker tag to v17.11' (#34) from renovate/postgres-17.x into main ... Reviewed-on: https://gitea.forust.xyz/forust/homelab/pulls/34	2026-09-17 18:04:58 +00:00
renovate-bot	8007f82d52	chore(deps): update postgres docker tag to v17.11	2026-09-17 17:59:25 +00:00
forust	60b9766449	Merge pull request 'chore(deps): update ghcr.io/henriquesebastiao/downtify docker tag to v2.13.0' (#32) from renovate/ghcr.io-henriquesebastiao-downtify-2.x into main ... Reviewed-on: https://gitea.forust.xyz/forust/homelab/pulls/32	2026-09-17 17:58:27 +00:00
renovate-bot	0ebb7264bc	chore(deps): update ghcr.io/henriquesebastiao/downtify docker tag to v2.13.0	2026-09-17 17:58:27 +00:00
forust	ce21c60eba	Merge pull request 'chore(deps): update renovate/renovate docker tag to v44.97.2' (#33) from renovate/renovate-renovate-44.x into main ... Reviewed-on: https://gitea.forust.xyz/forust/homelab/pulls/33	2026-09-17 17:58:15 +00:00
renovate-bot	53638f831d	chore(deps): update renovate/renovate docker tag to v44.97.2	2026-09-17 17:57:23 +00:00
forust	4953da2dd7	Merge pull request 'Feat/centralized postgres' (#26) from feat/centralized-postgres into main ... Reviewed-on: https://gitea.forust.xyz/forust/homelab/pulls/26	2026-09-17 17:55:58 +00:00
forust	4ac65f743c	lint(postgres): 126:77 error no new line character at the end of file (new-line-at-end-of-file)	2026-09-17 17:55:50 +00:00
forust	8f2e9d66c8	chore(gite): updated deprecated access log config	2026-09-17 17:55:50 +00:00
forust	c7d42fb90a	feat(postgres): migrate gitea to shared postgres database	2026-09-17 17:55:50 +00:00
forust	003b1e5dca	feat(postgres): upgrade shared database to PostgreSQL 17 ... Move the shared postgres service from 15.19 to 17.6 as the postgres17 StatefulSet with its own PVC, extend the initdb and ingress policy with the statuspage database, and drop the now-unused per-app postgres manifests for authentik, gitea and netronome.	2026-09-17 17:55:50 +00:00
forustandCopilot	b3463705c3	feat(postgres): migrate apps to shared database ... Move Authentik and Netronome to the shared PostgreSQL service after logical dump and restore. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-09-17 17:55:50 +00:00
forust	52e1f50a80	feat(postgres): add shared database deployments	2026-09-17 17:55:50 +00:00
forust	cdc2f10fe8	Merge pull request 'chore(deps): update container patch updates' (#30) from renovate/container-patch-updates into main ... Reviewed-on: https://gitea.forust.xyz/forust/homelab/pulls/30	2026-09-17 17:55:32 +00:00
renovate-bot	89fbdef10e	chore(deps): update container patch updates	2026-09-17 17:55:32 +00:00
forust	ac795feeed	Merge pull request 'chore(deps): update ghcr.io/alexta69/metube docker tag to v2026.09.15' (#31) from renovate/ghcr.io-alexta69-metube-2026.x into main ... Reviewed-on: https://gitea.forust.xyz/forust/homelab/pulls/31	2026-09-17 17:55:11 +00:00
renovate-bot	3af5ecd07f	chore(deps): update ghcr.io/alexta69/metube docker tag to v2026.09.15	2026-09-17 17:54:43 +00:00
forust	82949613db	fix(cloudflared): drop bogus exec livenessProbe that SIGTERMed the tunnel	2026-09-17 19:34:28 +02:00
forust	47d788ca13	feat(cloudflared): add Cloudflare Tunnel deployment (token-based, cfddns-style)	2026-09-17 19:09:02 +02:00
forust	77be606912	Merge pull request 'chore(deps): update grafana/grafana docker tag to v13.2.2' (#28) from renovate/container-patch-updates into main ... Reviewed-on: https://gitea.forust.xyz/forust/homelab/pulls/28	2026-09-15 12:07:56 +00:00
renovate-bot	4eab6a43c8	chore(deps): update grafana/grafana docker tag to v13.2.2	2026-09-15 12:07:56 +00:00
forust	6c24d4fb17	Merge pull request 'chore(deps): update renovate/renovate docker tag to v44.91.0' (#27) from renovate/renovate-renovate-44.x into main ... Reviewed-on: https://gitea.forust.xyz/forust/homelab/pulls/27	2026-09-15 12:07:44 +00:00
renovate-bot	e36595a045	chore(deps): update renovate/renovate docker tag to v44.91.0	2026-09-15 12:07:44 +00:00
forust	e07537ff8b	Merge pull request 'chore(deps): update docker.n8n.io/n8nio/n8n docker tag to v2.40.0' (#29) from renovate/docker.n8n.io-n8nio-n8n-2.x into main ... Reviewed-on: https://gitea.forust.xyz/forust/homelab/pulls/29	2026-09-15 12:07:27 +00:00
renovate-bot	303eaaa71b	chore(deps): update docker.n8n.io/n8nio/n8n docker tag to v2.40.0	2026-09-15 10:18:03 +00:00