new cluster

cluster/data/_volumes.yaml

@@ -53,19 +53,6 @@ spec:
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
-metadata:
-  name: bitwarden-config
-  namespace: data
-spec:
-  accessModes:
-    - ReadWriteOnce
-  storageClassName: longhorn-backups
-  resources:
-    requests:
-      storage: 1Gi
----
-apiVersion: v1
-kind: PersistentVolumeClaim
 metadata:
   name: freshrss-config
   namespace: data
@@ -79,19 +66,6 @@ spec:
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
-metadata:
-  name: unifi-config
-  namespace: data
-spec:
-  accessModes:
-    - ReadWriteOnce
-  storageClassName: longhorn-backups
-  resources:
-    requests:
-      storage: 10Gi
----
-apiVersion: v1
-kind: PersistentVolumeClaim
 metadata:
   name: recipes-media
   namespace: data

cluster/data/archivebox.yaml

@@ -74,7 +74,7 @@ spec:
       port: 8000
   selector:
     app: archivebox
-  type: LoadBalancer
+  type: ClusterIP
 ---
 apiVersion: networking.k8s.io/v1
 kind: Ingress

cluster/data/bitwardenrs.yaml

@@ -23,6 +23,7 @@ spec:
       pullPolicy: IfNotPresent
     env:
       SIGNUPS_ALLOWED: "false"
+      DOMAIN: "https://bitwarden.k3s.xpander.ovh/"
     bitwardenrs:
       domain: ""
       signupsAllowed: false
@@ -44,9 +45,16 @@ spec:
       enabled: true
       annotations:
         kubernetes.io/ingress.class: "nginx"
+      hosts:
+        - host: bitwarden.k3s.xpander.ovh
+          paths:
+            - /
+      tls:
+        - hosts:
+            - "bitwarden.k3s.xpander.ovh"
     persistence:
-      enabled: true
+      enabled: false
       existingClaim: bitwarden-config
   valuesFrom:
-  - kind: ConfigMap
-    name: helmrelease-data-bitwardenrs
+    - kind: ConfigMap
+      name: bitwardenrs-helmrelease

cluster/data/bookstack.yaml

@@ -22,6 +22,8 @@ spec:
       pullPolicy: IfNotPresent
       # Overrides the image tag whose default is the chart appVersion.
       tag: "v0.31.8-ls126"
+    env:
+      APP_URL: https://bookstack.k3s.xpander.ovh/
     service:
       port:
         port: 80
@@ -33,11 +35,19 @@ spec:
       annotations:
         kubernetes.io/ingress.class: "nginx"
         nginx.ingress.kubernetes.io/whitelist-source-range: 0.0.0.0/0
+      hosts:
+        - host: bookstack.k3s.xpander.ovh
+          paths:
+            - path: /
+              pathType: Prefix
+      tls:
+        - hosts:
+            - "bookstack.k3s.xpander.ovh"
     persistence:
       config:
         enabled: true
         mountPath: /config
         existingClaim: bookstack-config
   valuesFrom:
-  - kind: ConfigMap
-    name: helmrelease-data-bookstack
+    - kind: ConfigMap
+      name: bookstack-helmrelease

cluster/data/freshrss.yaml

@@ -27,6 +27,7 @@ spec:
     env:
       TZ: Europe/Paris
       CRON_MIN: "18,48"
+      DOMAIN: "https://freshrss.k3s.xpander.ovh/"
     service:
       port:
         port: 80
@@ -37,6 +38,14 @@ spec:
       enabled: true
       annotations:
         kubernetes.io/ingress.class: "nginx"
+      hosts:
+        - host: freshrss.k3s.xpander.ovh
+          paths:
+            - path: /
+              pathType: Prefix
+      tls:
+        - hosts:
+            - "freshrss.k3s.xpander.ovh"
     persistence:
       config:
         enabled: true
@@ -46,6 +55,3 @@ spec:
       requests:
         cpu: 50m
         memory: 256Mi
-  valuesFrom:
-  - kind: ConfigMap
-    name: helmrelease-data-freshrss

cluster/data/homer.yaml

@@ -36,6 +36,17 @@ spec:
       enabled: true
       annotations:
         kubernetes.io/ingress.class: "nginx"
+      nginx.ingress.kubernetes.io/auth-url: "http://authelia.auth.svc.cluster.local/api/verify"
+      nginx.ingress.kubernetes.io/auth-signin: "https://login.k3s.xpander.ovh/"
+    hosts:
+      - host: homer.k3s.xpander.ovh
+        paths:
+          - path: /
+            pathType: Prefix
+    tls:
+      - hosts:
+          - "homer.k3s.xpander.ovh"
+
     persistence:
       config:
         enabled: false
@@ -315,6 +326,3 @@ spec:
       - name: assets-taskcafe
         configMap:
           name: homer-taskcafe.png
-  valuesFrom:
-    - kind: ConfigMap
-      name: helmrelease-data-homer

cluster/data/joplin-server.yaml

@@ -37,6 +37,7 @@ spec:
         prometheus.io/protocol: tcp
 
     env:
+      APP_BASE_URL: https://joplin.k3s.xpander.ovh
       APP_PORT: 22300
       DB_CLIENT: pg
 
@@ -52,7 +53,15 @@ spec:
       enabled: true
       annotations:
         kubernetes.io/ingress.class: "nginx"
+      hosts:
+        - host: joplin.k3s.xpander.ovh
+          paths:
+            - path: /
+              pathType: Prefix
+      tls:
+        - hosts:
+            - "joplin.k3s.xpander.ovh"
 
   valuesFrom:
     - kind: ConfigMap
-      name: helmrelease-data-joplin-server
+      name: joplin-server-helmrelease

cluster/data/recipes.yaml

@@ -44,6 +44,14 @@ spec:
       annotations:
         kubernetes.io/ingress.class: "nginx"
         nginx.ingress.kubernetes.io/client-body-buffer-size: "10m"
+      hosts:
+        - host: recipes.k3s.xpander.ovh
+          paths:
+            - path: /
+              pathType: Prefix
+      tls:
+        - hosts:
+            - "recipes.k3s.xpander.ovh"
     persistence:
       config:
         enabled: false
@@ -72,4 +80,4 @@ spec:
             readOnly: true
   valuesFrom:
     - kind: ConfigMap
-      name: helmrelease-data-recipes
+      name: recipes-helmrelease

cluster/data/resilio-sync.yaml

@@ -218,4 +218,43 @@ spec:
     app.kubernetes.io/instance: resilio-sync
     app.kubernetes.io/name: resilio-sync
   type: LoadBalancer
-  loadBalancerIP: 192.168.9.207
+  externalIPs:
+    - 192.168.169.106
+  externalTrafficPolicy: Local
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  annotations:
+    kubernetes.io/ingress.class: "nginx"
+  labels:
+    app.kubernetes.io/instance: resilio-sync
+    app.kubernetes.io/name: resilio-sync
+  name: resilio-sync
+  namespace: data
+spec:
+  rules:
+    - host: resilio-sync-claude.k3s.xpander.ovh
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: resilio-sync
+                port:
+                  number: 8888
+    - host: resilio-sync-helene.k3s.xpander.ovh
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: resilio-sync
+                port:
+                  number: 8889
+  tls:
+    - hosts:
+        - resilio-sync-claude.k3s.xpander.ovh
+        - resilio-sync-helene.k3s.xpander.ovh

cluster/data/searx.yaml

@@ -28,10 +28,22 @@ spec:
       annotations:
         prometheus.io/probe: "true"
         prometheus.io/protocol: http
+    searx:
+      baseUrl: https://searx.k3s.xpander.ovh
     ingress:
       enabled: true
       annotations:
         kubernetes.io/ingress.class: "nginx"
+        nginx.ingress.kubernetes.io/auth-url: "http://authelia.auth.svc.cluster.local/api/verify"
+        nginx.ingress.kubernetes.io/auth-signin: "https://login.k3s.xpander.ovh/"
+      hosts:
+        - host: searx.k3s.xpander.ovh
+          paths:
+            - path: /
+              pathType: Prefix
+      tls:
+        - hosts:
+            - "searx.k3s.xpander.ovh"
   valuesFrom:
-  - kind: ConfigMap
-    name: helmrelease-data-searx
+    - kind: ConfigMap
+      name: searx-helmrelease

cluster/data/sharry.yaml

@@ -17,7 +17,6 @@ spec:
         namespace: flux-system
       interval: 5m
   values:
-
     image:
       repository: eikek0/sharry
       tag: 1.6.0
@@ -38,9 +37,10 @@ spec:
         prometheus.io/protocol: http
 
     args:
-    - "/opt/sharry.conf"
+      - "/opt/sharry.conf"
 
     sharry:
+      baseUrl: "https://sharry.k3s.xpander.ovh"
       chunkSize: "512K"
       maxSize: "1.5G"
       maxValidity: "31 days"
@@ -55,13 +55,13 @@ spec:
     podAnnotations: {}
 
     additionalVolumes:
-    - name: sharry-config
-      configMap:
-        name: sharry-config
+      - name: sharry-config
+        configMap:
+          name: sharry-config
     additionalVolumeMounts:
-    - name: sharry-config
-      mountPath: /opt/sharry.conf
-      subPath: sharry.conf
+      - name: sharry-config
+        mountPath: /opt/sharry.conf
+        subPath: sharry.conf
 
     ingress:
       enabled: true
@@ -71,7 +71,15 @@ spec:
         # -- Nginx Proxy Body Size
         nginx.ingress.kubernetes.io/proxy-body-size: "2048m"
         nginx.ingress.kubernetes.io/proxy-buffering: "off"
+      hosts:
+        - host: sharry.k3s.xpander.ovh
+          paths:
+            - path: /
+              pathType: Prefix
+      tls:
+        - hosts:
+            - "sharry.k3s.xpander.ovh"
 
   valuesFrom:
-  - kind: ConfigMap
-    name: helmrelease-data-sharry
+    - kind: ConfigMap
+      name: sharry-helmrelease

cluster/data/tinyfilemanager.yaml

@@ -80,3 +80,29 @@ spec:
     app.kubernetes.io/instance: tinyfilemanager
     app.kubernetes.io/name: tinyfilemanager
   type: ClusterIP
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  annotations:
+    kubernetes.io/ingress.class: "nginx"
+  labels:
+    app.kubernetes.io/instance: tinyfilemanager
+    app.kubernetes.io/name: tinyfilemanager
+  name: tinyfilemanager
+  namespace: data
+spec:
+  rules:
+    - host: tinyfilemanager.k3s.xpander.ovh
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: tinyfilemanager
+                port:
+                  number: 80
+  tls:
+    - hosts:
+        - tinyfilemanager.k3s.xpander.ovh

cluster/data/unifi.yaml

@@ -1,68 +0,0 @@
----
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
-kind: HelmRelease
-metadata:
-  name: unifi
-  namespace: data
-spec:
-  interval: 5m
-  chart:
-    spec:
-      # renovate: registryUrl=https://k8s-at-home.com/charts/
-      chart: unifi
-      version: 1.5.4
-      sourceRef:
-        kind: HelmRepository
-        name: k8s-at-home-charts
-        namespace: flux-system
-      interval: 5m
-  values:
-    controllerType: deployment
-    strategy:
-      type: Recreate
-    image:
-      repository: jacobalberty/unifi
-      tag: 6.0.45
-      pullPolicy: IfNotPresent
-    persistence:
-      enabled: true
-      existingClaim: unifi-config
-    timezone: "Europe/Paris"
-    runAsRoot: false
-    ingress:
-      enabled: true
-      annotations:
-        kubernetes.io/ingress.class: "nginx"
-        nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
-        nginx.ingress.kubernetes.io/proxy-body-size: 10m
-    guiService:
-      type: LoadBalancer
-      loadBalancerIP: 192.168.9.201
-      annotations:
-        metallb.universe.tf/allow-shared-ip: unifi
-        prometheus.io/probe: "true"
-        prometheus.io/protocol: tcp
-    controllerService:
-      type: LoadBalancer
-      loadBalancerIP: 192.168.9.201
-      annotations:
-        metallb.universe.tf/allow-shared-ip: unifi
-        prometheus.io/probe: "true"
-        prometheus.io/protocol: tcp
-    stunService:
-      type: LoadBalancer
-      loadBalancerIP: 192.168.9.201
-      annotations:
-        metallb.universe.tf/allow-shared-ip: unifi
-    discoveryService:
-      type: LoadBalancer
-      loadBalancerIP: 192.168.9.201
-      annotations:
-        metallb.universe.tf/allow-shared-ip: unifi
-    resources:
-      requests:
-        memory: 2Gi
-        cpu: 100m
-  valuesFrom:
-  - kind: ConfigMap
-    name: helmrelease-data-unifi

cluster/data/vikunja.yaml

@@ -56,7 +56,15 @@ spec:
       enabled: true
       annotations:
         kubernetes.io/ingress.class: "nginx"
+      hosts:
+        - host: vikunja.k3s.xpander.ovh
+          paths:
+            - path: /
+              pathType: Prefix
+      tls:
+        - hosts:
+            - "vikunja.k3s.xpander.ovh"
 
   valuesFrom:
     - kind: ConfigMap
-      name: helmrelease-data-vikunja
+      name: vikunja-helmrelease