35 Commits

Include renames

Author	SHA1	Message	Date
forust	648b354951	refactor(deploy): marker-driven selection (k8s/active, root active); enable headscale/nextcloud hybrid, disable dockmon/kener/downtify/n8n	2026-09-23 18:11:51 +02:00
renovate-bot	66eacd86d1	chore(deps): update darthnorse/dockmon docker tag to v2.5.0	2026-09-23 14:16:21 +00:00
forust	bc1e69ebe0	feat(tls): internal CA wildcard for *.internal routes ... Selfsigned root (10y) + internal-ca issuer; per-namespace internal-wildcard-tls certs referenced by all -local routers. Root public cert committed for client trust stores.	2026-09-23 14:45:05 +02:00
forust	ef325cd3b1	feat(tls): migrate public ingress TLS from Traefik ACME to cert-manager ... All prod IngressRoutes switch tls.certResolver to tls.secretName backed by per-router Certificates (HTTP-01, letsencrypt-prod). adguard-prod reuses the shared adguard-certs secret (also feeds DoT :853); sync CronJob removed as redundant. Traefik certificatesResolvers removed: its internal acme-http@internal router hijacks HTTP-01 for every host while enabled, blocking external solvers. Dormant files (kener, downtify) converted for consistency but not applied; n8n untouched per live-only rule.	2026-09-23 14:12:36 +02:00
forustandCopilot	23ed72826a	chore(images): pin service image updates ... Replace floating service images with reviewable tags or digests. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-09-14 09:16:01 +02:00
forustandCopilot	ed1ddaad5d	feat(crowdsec): restore web traffic protection ... Protect public Traefik routes with CrowdSec HTTP decisions and restore access logging for web traffic analysis. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-09-12 21:05:12 +02:00
forust	861d89d36a	ci(deploy): split runtime by k8s/active marker ... services marked k8s/active are applied via kubectl; the rest via docker compose. inactive services with k8s/ keep only routing manifests (external Services, EndpointSlices, Ingresses) to reach docker backends. headscale/nextcloud routing moved to k8s/routing/. validations: compose config --quiet + kubectl apply --dry-run=client. namespace manifests applied first. pull_policy:build stacks get build+push before up so the registry image stays fresh.	2026-09-06 20:39:12 +02:00
forust	92aa731e44	deleted crowdsec stack from the repo. will figure something else ... Signed-off-by: mr-forust <vzlomdsisma@gmail.com>	2026-07-19 23:16:14 +02:00
forust	a128523c24	Fix CrowdSec middleware references in Traefik ingresses	2026-06-29 22:47:21 +02:00
forust	1762962f32	chore(k8s): fix indentation in ingress manifests (3-space -> 2-space)	2026-06-19 12:03:02 +02:00
forust	d53b14b1de	chore: apply yaml lint fixes across compose files ... - Fix trailing whitespace in compose files - Add missing final newlines (EOF) - Fix indentation in dockmon (3-space -> 2-space) and glance monitor.yml - Align comments consistently	2026-06-19 11:57:14 +02:00
forust	0803f3efff	chore(k8s): returned to Host || Host standart instead of regexp. ... Yaml lint (yamllint)	2026-06-18 21:02:40 +02:00
forust	b9b8474455	feat(k8s): protect all prod routers with crowdsec middleware	2026-06-17 01:50:33 +02:00
forust	4ca3ccdad3	chore(k8s): router rewrite ... - returned to Host matcher instead of Hostregexp - switched dockercompose labels to letsencrypt - renamed DoH route	2026-06-16 12:34:15 +02:00
forust	68c5eac164	chore: compact ingress rules with regex	2026-06-11 14:20:03 +02:00
forust	30f0f05150	chore(k8): system requirements fine-tuning ... - reduced at homepages - reduced at netronome - reduced at dockmon - reduced at gitea - reduced at kener	2026-06-11 03:51:16 +02:00
forust	18d1e21690	fix(k8s): traefik log spam for non-existing local-tls secret, because of namespace isolation	2026-06-10 21:14:10 +02:00
forust	5f88ecf02b	chore(k8s): make dockmon statefulset ... + adjusted userbot sys reqs	2026-06-10 19:40:45 +02:00
forust	7a3708f70c	lint: yaml spaces and tabs	2026-06-09 12:59:36 +02:00
forust	d85b3f02f5	k8s: fixes and formating ... - Add checkmk secrets example - space-tab fixes (linter) - switcher kener redis to statefulset - disabled netronome voulme mount (not needed). postgres statefulset instead - switched naio to 8888 port (traefik port conflict) - changed nextcloud ips and ports to prod	2026-06-08 17:39:32 +02:00
forust	e19660fdf4	feat(k8s): standardize IngressRoutes — LE prod certs, prod→local→dev order, Traefik values fix	2026-06-08 12:27:55 +02:00
forust	36922a177c	feat(k8s): add K8s manifests for all homelab services ... traefik, gitea, adguard, nextcloud, errorpages, homepages, uptime-kuma, kener, checkmk, headscale, dockmon, metube, downtify, portainer, netronome, userbot Includes Helm values, deployments, services, ingress routes, configmaps, secrets (placeholders), postgres statefulsets, kustomize overlays, and Traefik dynamic configuration.	2026-06-08 10:54:03 +02:00
forust	6f77b7d845	switch to embedded dockmon login page	2026-05-27 20:11:48 +02:00
forust	d7a68237e5	chore: remove redundant or unnececary traefik labels ... - traefik.docker.network= (defined by traefik cli) - traefik.http.routers.<routername>.middlewares=security-headers@file" (applied globally by traefik cli)	2026-02-04 22:26:27 +01:00
forust	72aa022048	fix: "http plaintext sent to https"	2026-01-20 00:05:10 +01:00
forust	f18d4d9be4	chore: use volumes to store data of ... - portainer - headscale - termix - uptime-kuma - dockmon	2026-01-19 23:58:26 +01:00
forust	45ce789f58	chore: compose cleanup: ... - Remove TZ envs - +- unified compose structure - Minify where possible - Remove <service>.internal routers - Remove service specifications where possible Affected services: - adguardhome - authentik - cfddns - checkmk - dockmon - downtify - gitea - glance - headscale - homepages - metube - nextcloud - penpot - portainer - termix - traefik - uptime-kuma TODO: Move data from directory to volumes	2026-01-19 23:33:50 +01:00
forust	fb2f420520	refactor: update network refs form "traefik-proxy" to "proxy" ... - To allow testing dev vers of other services	2025-12-30 14:14:24 +01:00
forust	f4c695f95e	feat: security-chain (authentik) on no-login services, SSO traefik dashboard	2025-12-09 15:14:42 +01:00
forust	a767107277	fix: refering to file-defined middlewares	2025-12-05 14:36:57 +01:00
forust	e68e37c285	refactor: use internal tld according to ICAAN	2025-12-05 04:30:51 +01:00
forust	fc6a11397b	refactor: move traefik configuration to docker-compose files via labels	2025-12-05 04:03:24 +01:00
forust	b51a1c7ee6	moved and renamed adguard, dockmon to their directories ... +gitea rename	2025-11-15 12:54:56 +01:00
forust	0403524992	Remove deprecated Docker Compose files and configurations for various services including edu_master, glance, homer, and traefik. Introduce new Docker Compose files for dockmon, glance, homer, and traefik with updated configurations and environment variables. Ensure all services are integrated with Traefik for routing and TLS management.	2025-11-11 01:32:14 +01:00
forust	32aac89fdf	init, .gitignore	2025-11-11 00:02:49 +01:00