48 Commits

Include renames

Author	SHA1	Message	Date
forust	b8512c6033	feat(postgres): migrate gitea to shared postgres database	2026-09-14 11:56:23 +00:00
forust	3e057ea18d	feat(postgres): upgrade shared database to PostgreSQL 17 ... Move the shared postgres service from 15.19 to 17.6 as the postgres17 StatefulSet with its own PVC, extend the initdb and ingress policy with the statuspage database, and drop the now-unused per-app postgres manifests for authentik, gitea and netronome.	2026-09-14 11:56:23 +00:00
forustandCopilot	abfbc04067	fix(infra): align monitoring and Gitea database config ... Keep CrowdSec scraping explicit and define Gitea's database name. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-09-14 09:16:01 +02:00
forustandCopilot	23ed72826a	chore(images): pin service image updates ... Replace floating service images with reviewable tags or digests. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-09-14 09:16:01 +02:00
forustandCopilot	ed1ddaad5d	feat(crowdsec): restore web traffic protection ... Protect public Traefik routes with CrowdSec HTTP decisions and restore access logging for web traffic analysis. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-09-12 21:05:12 +02:00
forust	861d89d36a	ci(deploy): split runtime by k8s/active marker ... services marked k8s/active are applied via kubectl; the rest via docker compose. inactive services with k8s/ keep only routing manifests (external Services, EndpointSlices, Ingresses) to reach docker backends. headscale/nextcloud routing moved to k8s/routing/. validations: compose config --quiet + kubectl apply --dry-run=client. namespace manifests applied first. pull_policy:build stacks get build+push before up so the registry image stays fresh.	2026-09-06 20:39:12 +02:00
forust	587611ca88	chore: remove empty middlewares blocks from k8s ingresses	2026-09-02 12:17:04 +02:00
forust	ace23ad1f9	fix: remove www.xdfnx.cfd from ingress, add Gitea access log config	2026-07-20 11:40:41 +02:00
forust	92aa731e44	deleted crowdsec stack from the repo. will figure something else ... Signed-off-by: mr-forust <vzlomdsisma@gmail.com>	2026-07-19 23:16:14 +02:00
forust	a128523c24	Fix CrowdSec middleware references in Traefik ingresses	2026-06-29 22:47:21 +02:00
forust	bacb2f4b9f	fix: correct Traefik rule syntax for local IngressRoutes ... Move parentheses outside Host() calls so that || and && operators are properly grouped in Traefik rule expressions.	2026-06-28 11:59:52 +02:00
forust	6363d050b0	Add YAML validation workflows	2026-06-21 21:27:31 +02:00
forust	1762962f32	chore(k8s): fix indentation in ingress manifests (3-space -> 2-space)	2026-06-19 12:03:02 +02:00
forust	d53b14b1de	chore: apply yaml lint fixes across compose files ... - Fix trailing whitespace in compose files - Add missing final newlines (EOF) - Fix indentation in dockmon (3-space -> 2-space) and glance monitor.yml - Align comments consistently	2026-06-19 11:57:14 +02:00
forust	0803f3efff	chore(k8s): returned to Host || Host standart instead of regexp. ... Yaml lint (yamllint)	2026-06-18 21:02:40 +02:00
forust	4ca3ccdad3	chore(k8s): router rewrite ... - returned to Host matcher instead of Hostregexp - switched dockercompose labels to letsencrypt - renamed DoH route	2026-06-16 12:34:15 +02:00
forust	c648dfd147	chore(k8s): renamed gitea ingressroute to ingress	2026-06-14 23:24:24 +02:00
forust	68c5eac164	chore: compact ingress rules with regex	2026-06-11 14:20:03 +02:00
forust	30f0f05150	chore(k8): system requirements fine-tuning ... - reduced at homepages - reduced at netronome - reduced at dockmon - reduced at gitea - reduced at kener	2026-06-11 03:51:16 +02:00
forust	18d1e21690	fix(k8s): traefik log spam for non-existing local-tls secret, because of namespace isolation	2026-06-10 21:14:10 +02:00
forust	7a3708f70c	lint: yaml spaces and tabs	2026-06-09 12:59:36 +02:00
forust	1cdbfb2d7b	chore: secrets example for gitea	2026-06-09 09:03:39 +02:00
forust	17b2dfdc2e	fix: gitea ssh tcp router, dns over tls adguard router	2026-06-08 14:20:28 +02:00
forust	e19660fdf4	feat(k8s): standardize IngressRoutes — LE prod certs, prod→local→dev order, Traefik values fix	2026-06-08 12:27:55 +02:00
forust	36922a177c	feat(k8s): add K8s manifests for all homelab services ... traefik, gitea, adguard, nextcloud, errorpages, homepages, uptime-kuma, kener, checkmk, headscale, dockmon, metube, downtify, portainer, netronome, userbot Includes Helm values, deployments, services, ingress routes, configmaps, secrets (placeholders), postgres statefulsets, kustomize overlays, and Traefik dynamic configuration.	2026-06-08 10:54:03 +02:00
forust	bdcdb1cb3d	feat: router for gitea container registry (unproxied)	2026-06-07 14:37:53 +02:00
forust	fe2b80b51f	fix: errorpages intercepted gitea container registry endpoint ... gitea registry introduced	2026-06-07 13:39:54 +02:00
forust	8362f45bdc	upd: updated image tags for services: ... - gitea 1.25.1 --> 1.26 - portainer-ce latest --> 2.41.0 - traefik latest --> 3.6.15	2026-05-08 16:37:26 +02:00
forust	d7a68237e5	chore: remove redundant or unnececary traefik labels ... - traefik.docker.network= (defined by traefik cli) - traefik.http.routers.<routername>.middlewares=security-headers@file" (applied globally by traefik cli)	2026-02-04 22:26:27 +01:00
forust	45ce789f58	chore: compose cleanup: ... - Remove TZ envs - +- unified compose structure - Minify where possible - Remove <service>.internal routers - Remove service specifications where possible Affected services: - adguardhome - authentik - cfddns - checkmk - dockmon - downtify - gitea - glance - headscale - homepages - metube - nextcloud - penpot - portainer - termix - traefik - uptime-kuma TODO: Move data from directory to volumes	2026-01-19 23:33:50 +01:00
forust	26f5fb2fb9	Revert "feat: add gitea-basic-runner" ... This reverts commit f0682319a7.	2026-01-02 00:38:04 +01:00
forust	fb2f420520	refactor: update network refs form "traefik-proxy" to "proxy" ... - To allow testing dev vers of other services	2025-12-30 14:14:24 +01:00
forust	60c7d4ff17	feat: add mailer support and credentials for gitea	2025-12-28 23:35:31 +01:00
forust	d20ec696a3	tcp router for gite ssh	2025-12-26 21:02:47 +01:00
forust	c030b4cffa	Merge branch 'main' into fix/gitea-ssh	2025-12-26 20:58:22 +01:00
forust	f0682319a7	feat: add gitea-basic-runner	2025-12-25 19:58:38 +01:00
forust	a767107277	fix: refering to file-defined middlewares	2025-12-05 14:36:57 +01:00
forust	e68e37c285	refactor: use internal tld according to ICAAN	2025-12-05 04:30:51 +01:00
forust	fc6a11397b	refactor: move traefik configuration to docker-compose files via labels	2025-12-05 04:03:24 +01:00
forust	6843befac3	fix: temp labels for routing SSH for gitea	2025-11-16 00:01:35 +01:00
forust	0dfb09590d	fix: added ssh domain	2025-11-15 23:55:02 +01:00
forust	625eb9561b	testing: removed https:// from root url	2025-11-15 23:48:35 +01:00
forust	b367b64879	fix: removed ssh port-forwarding for gitea	2025-11-15 23:42:03 +01:00
forust	6667971359	fix: update Gitea and PostgreSQL environment variables for consistency	2025-11-15 16:37:31 +01:00
forust	de8834254a	fix: updated network name for gitea-db	2025-11-15 13:52:57 +01:00
forust	b51a1c7ee6	moved and renamed adguard, dockmon to their directories ... +gitea rename	2025-11-15 12:54:56 +01:00
forust	e93963ddab	.env for gitea with fallbacks	2025-11-15 12:31:17 +01:00
forust	1203dea5b7	moved gitea compose file to a sepparated directory ... update gitignore accordingly &cleanup	2025-11-15 11:11:55 +01:00