41 Commits

Include renames

Author	SHA1	Message	Date
forust	7ce727bc8a	chore(renovate): move config under renovate/ and validate it in CI ... The config lived in renovate.json at the repo root while everything else Renovate-related sat under renovate/, and renovate/config.js was a second, unused source of truth. Both are gone: renovate/renovate.json is now the only config file. Because the CronJob in the cluster cannot read the repository, its ConfigMap carries an inlined copy of the config. That copy is generated, and sync-renovate-configmap.sh --check now fails the build when it drifts from the source file. The workflows also stop carrying a copy of the renovate/renovate image tag. They read it from renovate/k8s/cronjob.yaml, so the version validated in CI is the version that actually runs in the cluster. ci.yaml validates the config with renovate-config-validator, checks the generated ConfigMap, and kubeconforms the CronJob's own manifests.	2026-09-26 20:09:13 +02:00
forust	f22793e32e	ci: lint workflows and shell scripts, validate k8s against the API server ... Adds three lint jobs (actionlint, shellcheck, compose) and a server-side dry-run of the active manifests. Previously the only k8s check was kubeconform, which has no schemas for CRDs, so every IngressRoute, Certificate, PrometheusRule and Middleware was silently skipped. The server-side pass needs the live API server because that is the only place the real CRD schemas and the cert-manager / Traefik admission webhooks exist. It is scoped to services carrying a k8s/active marker, since dry-run needs the target namespace to exist. userbot/ is excluded from shellcheck: it is a git subtree, and linting upstream's scripts would let a routine subtree pull turn the deploy gate red on code we do not own. kubeconform, shellcheck and actionlint are now installed from pinned versions in tool-versions.env rather than picked up from the runner's PATH. The Compose helper is shared with the deploy workflow so both check the same file set the same way.	2026-09-26 20:09:09 +02:00
forust	b625d30568	ci(deploy): cancel superseded deploys on new push ... Queued deploy runs were deploying origin/main at start anyway (preflight reset), so waiting runs duplicated the newest deploy instead of their own commit. Cancel them.	2026-09-26 17:42:36 +02:00
forust	a2ff9515a3	fix(deploy): validate compose without workstation secrets ... docker compose config required real values for gitignored .env files and secrets, so validate always failed on stacks with :? guards (netbird, netbox). Validate structure only via --no-interpolate, --no-env-resolution and --no-path-resolution, keeping normalization and consistency checks.	2026-09-26 17:00:43 +02:00
forust	648b354951	refactor(deploy): marker-driven selection (k8s/active, root active); enable headscale/nextcloud hybrid, disable dockmon/kener/downtify/n8n	2026-09-23 18:11:51 +02:00
forust	b0a9b3476d	fix(deploy): drop broken %q quoting that wrapped remote vars in literal quotes	2026-09-23 16:33:51 +02:00
forust	ac3bf4a55a	fix(deploy): strip quotes and CR from DEPLOY_PATH	2026-09-23 16:31:06 +02:00
forust	90a452a253	feat(deploy): auto-rollout on push to main (gated by branch protection)	2026-09-23 15:58:15 +02:00
forust	46c7e99b1d	chore(deploy): rework k8s pipeline, monitoring and postgres 17 ... Deploy workflow uses git-tracked manifests, DISABLED flag and kustomize overlays; add webinar-checker metrics with ServiceMonitor and alerts; upgrade shared postgres to 17 with statuspage DB and probes/resources.	2026-09-23 15:47:26 +02:00
forust	86ac43567d	chore(renovate): sync pins to 44.103.0	2026-09-18 22:21:48 +02:00
forust	51677ae184	ci: run all lint jobs natively without docker	2026-09-18 22:18:59 +02:00
forust	c9e6fc0e2b	ci: run ruff and yamllint natively, cache npm ... Ruff and yamllint ship in Arch repos, drop their container pulls. Prettier keeps the node container but mounts persistent npm cache. Hadolint and kubeconform stay containerized (AUR-only / hermetic pin).	2026-09-18 19:41:02 +02:00
forust	ab386fc436	ci: keep gitea workflows only, harden and speed up pipelines ... Drop duplicated .github/workflows (helm blocks ported to .gitea deploy first). Add ci concurrency with cancel on branches, pin checkout to SHA and prettier to 3.9.8, registry layer cache for image builds. renovate-run gains config validation and dry-run input.	2026-09-18 19:38:56 +02:00
forust	7f0bd5f609	feat(renovate): add manual run pipeline and sync configs ... renovate-run workflow_dispatch runs pinned renovate via docker on self-hosted runner. Sync helm-values manager into config.js/configmap, bump compose and validator pins to 44.97.2.	2026-09-18 19:15:11 +02:00
forust	7799b676ca	ci: validate Renovate manifests with kubeconform	2026-09-14 10:51:40 +02:00
forustandCopilot	24d3686f60	ci: fix formatting and YAML lint scope ... Lint tracked YAML files without scanning generated dependencies. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-09-14 09:30:55 +02:00
forustandCopilot	7288058df6	feat(renovate): add Gitea update automation ... Run Renovate in Kubernetes to create reviewed image update PRs. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-09-14 09:16:01 +02:00
forust	fcc7b0d611	ci(deploy): gate redeploy behind manual workflow_dispatch ... removes automatic redeploy on push to main; deploy now runs only on explicit manual trigger	2026-09-06 20:55:40 +02:00
forust	9633fe3a10	style(ci): add trailing newline to deploy workflows	2026-09-06 20:45:30 +02:00
forust	d9f1c8325a	feat(userbot): prereqs at startup, SPA path guard, provision lock ... - ensure_prerequisites runs on startup, not per-request; kube config errors surface as 503 PanelError - serialize provisioning with a lock; drop per-endpoint prereq checks - guard SPA fallback against path traversal (relative_to) - add backend tests for auth flow, k8s service, spa routing; ci comment for legacy userbot deployments	2026-09-06 20:39:12 +02:00
forust	861d89d36a	ci(deploy): split runtime by k8s/active marker ... services marked k8s/active are applied via kubectl; the rest via docker compose. inactive services with k8s/ keep only routing manifests (external Services, EndpointSlices, Ingresses) to reach docker backends. headscale/nextcloud routing moved to k8s/routing/. validations: compose config --quiet + kubectl apply --dry-run=client. namespace manifests applied first. pull_policy:build stacks get build+push before up so the registry image stays fresh.	2026-09-06 20:39:12 +02:00
forust	71cddd6a91	feat(userbot): add Kubernetes control panel ... Manage Telegram instances through Kubernetes with legacy adoption for forust and anna. Build and deploy the panel image alongside the runtime.	2026-09-06 20:39:12 +02:00
forust	620262d98c	ci: fetch full history for change detection after rebase	2026-07-04 00:55:46 +02:00
forust	f7902e74e8	ci: require lint and validate before build	2026-06-30 01:23:53 +02:00
forust	eb8d1b361e	ci: add branch tags to docker builds	2026-06-30 01:20:51 +02:00
forust	6e2cafb206	ci: merge lint validate and docker builds	2026-06-30 01:17:31 +02:00
forust	67b0c0824f	ci: restore docker-based lint and validate jobs	2026-06-30 01:12:23 +02:00
forust	8e72e0a920	ci: run lint and validate tools locally	2026-06-30 00:14:14 +02:00
forust	f424d91405	Tighten lint workflow scope	2026-06-21 21:51:20 +02:00
forust	88a8f2987f	Unify workflow job naming	2026-06-21 21:46:22 +02:00
forust	17027b232b	Rename workflows to yaml	2026-06-21 21:45:16 +02:00
forust	6ecbbb39b4	Fix yamllint workflow invocation	2026-06-21 21:40:11 +02:00
forust	175cbc8860	Fix validation workflows for self-hosted runner	2026-06-21 21:37:30 +02:00
forust	6363d050b0	Add YAML validation workflows	2026-06-21 21:27:31 +02:00
forust	2de6131ba7	chore: apply prettier formatting across compose files and configs	2026-06-19 12:03:11 +02:00
forust	414d17d839	deleted test gitea workflow	2026-02-22 03:53:51 +01:00
forust	f8620349a9	fix deploy pipeline to prevent logspam	2026-02-20 20:38:39 +01:00
forust	b1acff5c85	ci: add run-name to deployment workflow	2026-02-20 20:25:17 +01:00
forust	73684af21b	ci: deploy workflow with local act_runner	2026-02-20 20:09:26 +01:00
forust	400e7b6595	Starting learning cicd from scratch ... Demo gitea action	2026-02-19 00:36:02 +01:00
forust	1a09a62a4c	chore: deploy and lint workflows	2026-02-05 02:17:47 +01:00