1 Commits

Author SHA1 Message Date
feisar-bot[bot]
2053124a42 ⬆️ Update spegel ( 0.1.1 → 0.2.0 )
| datasource | package                               | from  | to    |
| ---------- | ------------------------------------- | ----- | ----- |
| docker     | ghcr.io/spegel-org/helm-charts/spegel | 0.1.1 | 0.2.0 |
2025-05-11 06:29:56 +00:00
324 changed files with 1851 additions and 1724 deletions

View File

@@ -24,7 +24,7 @@ jobs:
fail-fast: false
steps:
- name: Generate Token
uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2
uses: actions/create-github-app-token@df432ceedc7162793a195dd1713ff69aefc7379e # v2
id: app-token
with:
app-id: "${{ secrets.BOT_APP_ID }}"
@@ -48,7 +48,7 @@ jobs:
path: pull
- name: Diff Resources
uses: docker://ghcr.io/allenporter/flux-local:v7.8.0@sha256:e8cd431e824eddd169763e02ef73ebb76c40740f1e1e67f6234a29b28304ce9c
uses: docker://ghcr.io/allenporter/flux-local:v7.5.0@sha256:2111f5e96e65bfdb7cee71f3384cdfae0de1a6a2ce5b95d0fa6de8142c3314d1
with:
args: >-
diff ${{ matrix.resources }}
@@ -58,7 +58,7 @@ jobs:
--strip-attrs "helm.sh/chart,checksum/config,app.kubernetes.io/version,chart"
--limit-bytes 10000
--all-namespaces
--sources "flux-system"
--sources "home-ops-kubernetes"
--output-file diff.patch
- name: Generate Diff

View File

@@ -21,7 +21,7 @@ jobs:
matrix: ${{ steps.extract-images.outputs.images }}
steps:
- name: Generate Token
uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2
uses: actions/create-github-app-token@df432ceedc7162793a195dd1713ff69aefc7379e # v2
id: app-token
with:
app-id: "${{ secrets.BOT_APP_ID }}"
@@ -48,7 +48,7 @@ jobs:
path: pull
- name: Gather Images in Default Branch
uses: docker://ghcr.io/allenporter/flux-local:v7.8.0@sha256:e8cd431e824eddd169763e02ef73ebb76c40740f1e1e67f6234a29b28304ce9c
uses: docker://ghcr.io/allenporter/flux-local:v7.5.0@sha256:2111f5e96e65bfdb7cee71f3384cdfae0de1a6a2ce5b95d0fa6de8142c3314d1
with:
args: >-
get cluster
@@ -58,7 +58,7 @@ jobs:
--output-file default.yaml
- name: Gather Images in Pull Request Branch
uses: docker://ghcr.io/allenporter/flux-local:v7.8.0@sha256:e8cd431e824eddd169763e02ef73ebb76c40740f1e1e67f6234a29b28304ce9c
uses: docker://ghcr.io/allenporter/flux-local:v7.5.0@sha256:2111f5e96e65bfdb7cee71f3384cdfae0de1a6a2ce5b95d0fa6de8142c3314d1
with:
args: >-
get cluster

View File

@@ -16,7 +16,7 @@ jobs:
pull-requests: write
steps:
- name: Generate Token
uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2
uses: actions/create-github-app-token@df432ceedc7162793a195dd1713ff69aefc7379e # v2
id: app-token
with:
app-id: "${{ secrets.BOT_APP_ID }}"

View File

@@ -16,7 +16,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Generate Token
uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2
uses: actions/create-github-app-token@df432ceedc7162793a195dd1713ff69aefc7379e # v2
id: app-token
with:
app-id: "${{ secrets.BOT_APP_ID }}"

View File

@@ -19,7 +19,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Generate Token
uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2
uses: actions/create-github-app-token@df432ceedc7162793a195dd1713ff69aefc7379e # v2
id: app-token
with:
app-id: "${{ secrets.BOT_APP_ID }}"
@@ -31,7 +31,7 @@ jobs:
token: "${{ steps.app-token.outputs.token }}"
- name: Scan For Broken Links
uses: lycheeverse/lychee-action@5c4ee84814c983aa7164eaee476f014e53ff3963 # v2
uses: lycheeverse/lychee-action@82202e5e9c2f4ef1a55a3d02563e1cb6041e5332 # v2
env:
GITHUB_TOKEN: "${{ steps.app-token.outputs.token }}"
with:

View File

@@ -41,7 +41,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Generate Token
uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2
uses: actions/create-github-app-token@df432ceedc7162793a195dd1713ff69aefc7379e # v2
id: app-token
with:
app-id: "${{ secrets.BOT_APP_ID }}"
@@ -59,7 +59,7 @@ jobs:
echo "LOG_LEVEL=${{ github.event.inputs.logLevel || env.WORKFLOW_RENOVATE_LOG_LEVEL }}" >> "${GITHUB_ENV}"
- name: Renovate
uses: renovatebot/github-action@85b17ebd5abf43d1c34c01bd4c8dbb8d45bbc2c7 # v43.0.7
uses: renovatebot/github-action@8ac70de2fe55752c573155866e30735411e3b61c # v41.0.22
with:
configurationFile: "${{ env.RENOVATE_ONBOARDING_CONFIG_FILE_NAME }}"
token: "${{ steps.app-token.outputs.token }}"

View File

@@ -157,7 +157,7 @@ tasks:
.suspend:
internal: true
cmds:
- flux -n {{.ns}} suspend kustomization {{.app}}
- flux -n flux-system suspend kustomization {{.app}}
- flux -n {{.ns}} suspend helmrelease {{.app}}
- kubectl -n {{.ns}} scale {{.controller}} --replicas 0
- kubectl -n {{.ns}} wait pod --for delete --selector="app.kubernetes.io/name={{.app}}" --timeout=2m
@@ -189,5 +189,5 @@ tasks:
internal: true
cmds:
- flux -n {{.ns}} resume helmrelease {{.app}}
- flux -n {{.ns}} resume kustomization {{.app}}
- flux -n flux-system resume kustomization {{.app}}
env: *env

View File

@@ -1,4 +1,4 @@
{
"$schema": "https://raw.githubusercontent.com/jetify-com/devbox/0.12.0/.schema/devbox.schema.json",
"packages": ["ansible@2.18.6", "sshpass@latest"]
"packages": ["ansible@2.18.4", "sshpass@latest"]
}

View File

@@ -1,67 +1,67 @@
{
"lockfile_version": "1",
"packages": {
"ansible@2.18.6": {
"last_modified": "2025-05-24T21:46:02Z",
"resolved": "github:NixOS/nixpkgs/edb3633f9100d9277d1c9af245a4e9337a980c07#ansible",
"ansible@latest": {
"last_modified": "2024-07-07T07:43:47Z",
"resolved": "github:NixOS/nixpkgs/b60793b86201040d9dee019a05089a9150d08b5b#ansible",
"source": "devbox-search",
"version": "2.18.6",
"version": "2.16.5",
"systems": {
"aarch64-darwin": {
"outputs": [
{
"name": "out",
"path": "/nix/store/gnls4kcmy9fr5a3x7kqrsqwq2m96rrsg-python3.12-ansible-core-2.18.6",
"path": "/nix/store/iib6zk86p80bnhp0yshswrlb4n7jwa27-python3.12-ansible-core-2.16.5",
"default": true
},
{
"name": "dist",
"path": "/nix/store/8k2zgmsdlpxk759rxlgfzsqss0gqxhvp-python3.12-ansible-core-2.18.6-dist"
"path": "/nix/store/9parf4f1ysgrxnv627b42q4i3g43y6xn-python3.12-ansible-core-2.16.5-dist"
}
],
"store_path": "/nix/store/gnls4kcmy9fr5a3x7kqrsqwq2m96rrsg-python3.12-ansible-core-2.18.6"
"store_path": "/nix/store/iib6zk86p80bnhp0yshswrlb4n7jwa27-python3.12-ansible-core-2.16.5"
},
"aarch64-linux": {
"outputs": [
{
"name": "out",
"path": "/nix/store/nj97yd3bivyxs5a2j3q9gyg8304av07q-python3.12-ansible-core-2.18.6",
"path": "/nix/store/karakqxirk7fzqcqrk76q908gxrhqbdj-python3.12-ansible-core-2.16.5",
"default": true
},
{
"name": "dist",
"path": "/nix/store/m89q34vq01hrd0immb0ibqgln30pg0zs-python3.12-ansible-core-2.18.6-dist"
"path": "/nix/store/2yja52manchr4pl09xpz5xc7f0717n8g-python3.12-ansible-core-2.16.5-dist"
}
],
"store_path": "/nix/store/nj97yd3bivyxs5a2j3q9gyg8304av07q-python3.12-ansible-core-2.18.6"
"store_path": "/nix/store/karakqxirk7fzqcqrk76q908gxrhqbdj-python3.12-ansible-core-2.16.5"
},
"x86_64-darwin": {
"outputs": [
{
"name": "out",
"path": "/nix/store/17x48nrxx7lc60c201bv5kjxw7zvgbzf-python3.12-ansible-core-2.18.6",
"path": "/nix/store/rda1qbxlmz6djni83pndqw9gxbbr85cg-python3.12-ansible-core-2.16.5",
"default": true
},
{
"name": "dist",
"path": "/nix/store/c9dzvapldzam22w76fxdjqjqmv2vizw8-python3.12-ansible-core-2.18.6-dist"
"path": "/nix/store/mc7l7avn2za2rl6hv69jzs31ybi4m7dc-python3.12-ansible-core-2.16.5-dist"
}
],
"store_path": "/nix/store/17x48nrxx7lc60c201bv5kjxw7zvgbzf-python3.12-ansible-core-2.18.6"
"store_path": "/nix/store/rda1qbxlmz6djni83pndqw9gxbbr85cg-python3.12-ansible-core-2.16.5"
},
"x86_64-linux": {
"outputs": [
{
"name": "out",
"path": "/nix/store/xpzn3bbrzvqbqnm5bgkwg87v2wcbmyfg-python3.12-ansible-core-2.18.6",
"path": "/nix/store/whq5kfbhx2ci4hrm6bl8z98fpi33mvkd-python3.12-ansible-core-2.16.5",
"default": true
},
{
"name": "dist",
"path": "/nix/store/04m7w60ygl176rrw3lyj87vsk1zbf0m6-python3.12-ansible-core-2.18.6-dist"
"path": "/nix/store/ih4c11ss3d96ljawj0ywyfyia70g8v2j-python3.12-ansible-core-2.16.5-dist"
}
],
"store_path": "/nix/store/xpzn3bbrzvqbqnm5bgkwg87v2wcbmyfg-python3.12-ansible-core-2.18.6"
"store_path": "/nix/store/whq5kfbhx2ci4hrm6bl8z98fpi33mvkd-python3.12-ansible-core-2.16.5"
}
}
},

View File

@@ -1,11 +0,0 @@
# 📚 Documentation Index
Welcome to the home-ops documentation! This directory contains guides and references for various infrastructure components.
## 🗄️ Storage Server
### [STORAGE.md](./STORAGE.md)
📋 **Complete guide for deploying a custom storage server**
This document provides step-by-step instructions for creating a bootable ISO that automatically installs and configures a dedicated storage server using **bootc-image-builder**

View File

@@ -1,67 +0,0 @@
# 🗄️ Storage Installation Guide
> 📋 **Overview**: This guide walks you through creating a custom bootable ISO for deploying storage.feisar.ovh server using bootc-image-builder.
## ⚙️ Step 1: Create Configuration File
Create a `config.toml` file with the following content:
```toml
[customizations.installer.kickstart]
contents = """
text
zerombr
clearpart --all --initlabel --disklabel=gpt
autopart --type=lvm --fstype=xfs --noswap
network --hostname storage.${SECRET_INTERNAL_DOMAIN} --bootproto=dhcp --device=link --activate --onboot=on
timezone UTC
rootpw --lock
user --name=core --homedir=/var/home/core --password="password" --plaintext --groups=wheel
bootloader --append="console=tty0 console=ttyS0,115200"
"""
[customizations.installer.modules]
enable = [
"org.fedoraproject.Anaconda.Modules.Localization",
"org.fedoraproject.Anaconda.Modules.Storage",
"org.fedoraproject.Anaconda.Modules.Timezone",
"org.fedoraproject.Anaconda.Modules.Users",
"org.fedoraproject.Anaconda.Modules.Network",
]
disable = [
"org.fedoraproject.Anaconda.Modules.Security",
"org.fedoraproject.Anaconda.Modules.Services",
"org.fedoraproject.Anaconda.Modules.Subscription"
]
```
## 🚀 Step 2: Build the ISO
Run the bootc-image-builder using [bootc-image-builder](https://github.com/osbuild/bootc-image-builder):
```bash
sudo podman pull ghcr.io/ublue-os/cayo:centos10
mkdir output
sudo podman run \
--rm \
-it \
--privileged \
--security-opt label=type:unconfined_t \
-v ./config.toml:/config.toml:ro \
-v ./output:/output \
-v /var/lib/containers/storage:/var/lib/containers/storage \
quay.io/centos-bootc/bootc-image-builder:latest \
--type anaconda-iso \
--use-librepo=True \
ghcr.io/ublue-os/cayo:centos10
```
## 📍 Step 3: Locate Your ISO
After successful completion, look for the `.iso` file in `./output` directory
---
📚 **References**:
- [Kickstart Documentation](https://pykickstart.readthedocs.io/en/latest/kickstart-docs.html)
- [bootc-image-builder GitHub](https://github.com/osbuild/bootc-image-builder)
- [Universal Blue Cayo](https://github.com/ublue-os/cayo)

View File

@@ -48,7 +48,7 @@ spec:
spec:
containers:
- name: runner
image: ghcr.io/actions/actions-runner:2.325.0@sha256:deb54a88ead0a86beedec6ac949e8b28f77478835b9c6434ccc237390a6e3e4f
image: ghcr.io/actions/actions-runner:2.323.0@sha256:831a2607a2618e4b79d9323b4c72330f3861768a061c2b92a845e9d214d80e5b
command: ["/home/runner/run.sh"]
controllerServiceAccount:
name: actions-runner-controller-gha-rs-controller

View File

@@ -2,8 +2,8 @@
# yaml-language-server: $schema=https://raw.githubusercontent.com/SchemaStore/schemastore/master/src/schemas/json/kustomization.json
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: actions-runner-system
components:
- ../../components/common
resources:
- ./landing-page/ks.yaml
- ./actions-runner-controller/ks.yaml

View File

@@ -1,6 +1,6 @@
---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/source.toolkit.fluxcd.io/ocirepository_v1beta2.json
apiVersion: source.toolkit.fluxcd.io/v1
apiVersion: source.toolkit.fluxcd.io/v1beta2
kind: OCIRepository
metadata:
name: cert-manager

View File

@@ -25,7 +25,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m

View File

@@ -106,10 +106,6 @@ spec:
- radarr_main
- radarr_log
password: *password
- name: radarr-archive
databases:
- radarr_archive_main
- radarr_archive_log
- name: sonarr
databases:
- sonarr_main

View File

@@ -31,7 +31,7 @@ spec:
claimName: "pg-${PG_APP_NAME}-${PG_DB_NAME}-dump-local"
containers:
- name: "postgres-backup"
image: "docker.io/prodrigestivill/postgres-backup-local:16@sha256:e7182c0dac78540405e954597fcb3f4cfa67955d5df008152ab41ce166fe6014"
image: "docker.io/prodrigestivill/postgres-backup-local:16@sha256:73f18e914cb6ffb29840b3fc5be0763f48eb1ca05f093c769ccd13982a634544"
imagePullPolicy: "IfNotPresent"
command: ["/backup.sh"]
volumeMounts:

View File

@@ -18,7 +18,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m
@@ -47,7 +47,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m
@@ -76,7 +76,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m
@@ -103,7 +103,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m
@@ -130,7 +130,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m

View File

@@ -1,35 +1,24 @@
---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/source.toolkit.fluxcd.io/ocirepository_v1.json
apiVersion: source.toolkit.fluxcd.io/v1
kind: OCIRepository
metadata:
name: pgo
spec:
interval: 5m
layerSelector:
mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
operation: copy
ref:
tag: 5.8.2
url: oci://registry.developers.crunchydata.com/crunchydata/pgo
---
# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/helmrelease-helm-v2.json
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: crunchy-postgres-operator
spec:
interval: 1h
chartRef:
kind: OCIRepository
name: pgo
interval: 30m
chart:
spec:
chart: pgo
version: 5.8.1
sourceRef:
kind: HelmRepository
name: crunchydata
namespace: flux-system
interval: 5m
install:
remediation:
retries: -1
crds: CreateReplace
upgrade:
cleanupOnFail: true
remediation:
retries: 3
crds: CreateReplace
dependsOn:
- name: openebs
namespace: openebs-system

View File

@@ -5,15 +5,16 @@ kind: Ingress
metadata:
name: pgadmin
annotations:
gethomepage.dev/enabled: "true"
gethomepage.dev/name: pgAdmin
gethomepage.dev/description: PostgreSQL management tool.
gethomepage.dev/group: Infrrastructure
gethomepage.dev/icon: pgadmin.png
gethomepage.dev/pod-selector: >-
app in (
pgadmin
)
hajimari.io/icon: mdi:database
gethomepage.dev/enabled: "true"
gethomepage.dev/name: pgAdmin
gethomepage.dev/description: PostgreSQL management tool.
gethomepage.dev/group: Infrrastructure
gethomepage.dev/icon: pgadmin.png
gethomepage.dev/pod-selector: >-
app in (
pgadmin
)
spec:
ingressClassName: internal
tls:

View File

@@ -9,6 +9,7 @@ spec:
chartRef:
kind: OCIRepository
name: app-template
namespace: flux-system
install:
remediation:
retries: 3

View File

@@ -5,7 +5,7 @@ kind: Dragonfly
metadata:
name: dragonfly
spec:
image: ghcr.io/dragonflydb/dragonfly:v1.32.0@sha256:868bb35e6c8a039e8207c8bbf3688530fb7413f494b8fa5e15fc1bca6bfb6655
image: ghcr.io/dragonflydb/dragonfly:v1.29.0@sha256:714c979a384513febdb751749db33125894ba834a0d7847d88d1abea501e669d
replicas: 4 # set to the number of nodes in the cluster
env:
- name: MAX_MEMORY

View File

@@ -17,7 +17,7 @@ spec:
prune: true
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
wait: true
interval: 30m
@@ -41,7 +41,7 @@ spec:
prune: true
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
wait: true
interval: 30m

View File

@@ -9,6 +9,7 @@ spec:
chartRef:
kind: OCIRepository
name: app-template
namespace: flux-system
install:
remediation:
retries: 3
@@ -28,7 +29,7 @@ spec:
app:
image:
repository: docker.io/library/influxdb
tag: 2.7-alpine@sha256:d948cd7aa274696d76ccc3f7ef732180d9f9a4229aace3cf68ae008693665137
tag: 2.7-alpine@sha256:07af6d463e5bd458a7c2a8ad9373144ecf3051b7fa75a758567345589240eaee
resources:
requests:
cpu: 100m

View File

@@ -16,7 +16,7 @@ spec:
prune: true
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
dependsOn:
- name: external-secrets-stores

View File

@@ -8,5 +8,5 @@ components:
resources:
- ./crunchy-postgres-operator/ks.yaml
- ./dragonfly/ks.yaml
- ./emqx/ks.yaml
- ./influx/ks.yaml
- ./mosquitto/ks.yaml

View File

@@ -1,101 +0,0 @@
---
# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s-labs/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2.schema.json
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: &app mosquitto
spec:
chartRef:
kind: OCIRepository
name: app-template
interval: 30m
values:
configMaps:
config:
data:
mosquitto-0.conf: |
listener 1883
allow_anonymous true
log_type error
log_type warning
mosquitto-1.conf: |
listener 1883
allow_anonymous true
log_type error
log_type warning
connection mosquitto-bridge
address mosquitto-0.mosquitto.database.svc.cluster.local:1883
clientid mosquitto-bridge
topic # both 0
controllers:
mosquitto:
type: statefulset
replicas: 2
pod:
securityContext:
runAsUser: 2000
runAsGroup: 2000
runAsNonRoot: true
fsGroup: 2000
containers:
app:
image:
repository: public.ecr.aws/docker/library/eclipse-mosquitto
tag: 2.0.22
command:
- sh
- -c
args:
- exec mosquitto -c "/config/$(hostname).conf"
probes:
liveness:
enabled: true
custom: true
spec:
exec:
command:
- /bin/sh
- -c
- >-
/usr/bin/mosquitto_pub -h localhost -p 1883 -t mosquitto/healthcheck/$(hostname)/liveness -m "ok $(date)" -r -q 0
readiness:
enabled: true
resources:
limits:
memory: 256Mi
requests:
cpu: 2m
memory: 16Mi
securityContext:
allowPrivilegeEscalation: false
readOnlyRootFilesystem: true
capabilities:
drop:
- ALL
persistence:
config:
type: configMap
identifier: config
globalMounts:
- path: /config
service:
app:
controller: *app
type: LoadBalancer
loadBalancerIP: 192.168.169.123
externalTrafficPolicy: Local
ports:
mqtt:
port: 1883
mosquitto:
controller: *app
type: LoadBalancer
externalTrafficPolicy: Local
annotations:
external-dns.alpha.kubernetes.io/hostname: "mqtt.${SECRET_EXTERNAL_DOMAIN}"
ports:
mqtt:
port: 1883

View File

@@ -9,6 +9,7 @@ spec:
chartRef:
kind: OCIRepository
name: app-template
namespace: flux-system
install:
remediation:
retries: 3
@@ -68,21 +69,12 @@ spec:
ports:
http:
port: *port
# route:
# app:
# hostnames: ["sh.${SECRET_EXTERNAL_DOMAIN}"]
# parentRefs:
# - name: internal
# namespace: network
# sectionName: https
# rules:
# - backendRefs:
# - name: app
# port: *port
ingress:
app:
enabled: true
className: internal
annotations:
hajimari.io/icon: mdi:powershell
hosts:
- host: &host "sh.${SECRET_EXTERNAL_DOMAIN}"
paths:

View File

@@ -23,7 +23,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m

View File

@@ -9,6 +9,7 @@ spec:
chartRef:
kind: OCIRepository
name: app-template
namespace: flux-system
install:
remediation:
retries: 3
@@ -37,7 +38,7 @@ spec:
app:
image:
repository: ghcr.io/authelia/authelia
tag: 4.39.5@sha256:023e02e5203dfa0ebaee7a48b5bae34f393d1f9cada4a9df7fbf87eb1759c671
tag: 4.39.1@sha256:e325963609cc928861ffe8130c09111862df88dd8fcafbcd2c47e5ff0a4ae268
env:
AUTHELIA_LOG_LEVEL: info
AUTHELIA_NOTIFIER_SMTP_SENDER: "Authelia <authelia@${SECRET_DOMAIN}>"
@@ -104,6 +105,7 @@ spec:
add_header Pragma "no-cache";
add_header X-Frame-Options "SAMEORIGIN";
add_header X-XSS-Protection "1; mode=block";
hajimari.io/icon: mdi:shield-account
gethomepage.dev/enabled: "true"
gethomepage.dev/group: Infrastructure
gethomepage.dev/name: Authelia

View File

@@ -28,7 +28,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m

View File

@@ -10,6 +10,7 @@ spec:
chartRef:
kind: OCIRepository
name: app-template
namespace: flux-system
install:
remediation:
retries: 3
@@ -39,7 +40,7 @@ spec:
app:
image:
repository: ghcr.io/home-operations/bazarr
tag: 1.5.2@sha256:dbc87e5ce9e199709188e152e82b3ff5d33e6521a1b3d61e465aa75b4b739e7f
tag: 1.5.1@sha256:7ff7af1a8588569f6d9a2870e3658650379ead5082d68c5e5a7c1f01e0814a86
env:
TZ: "${TIMEZONE}"
envFrom:
@@ -73,7 +74,7 @@ spec:
subcleaner:
image:
repository: registry.k8s.io/git-sync/git-sync
tag: v4.4.2@sha256:3089d9787b89bdc5af01d9f6e8d515aefb9672e8aea3972d7ff67478112bacb3
tag: v4.4.0@sha256:0330739a707a2969d617e859f096659ab6d149212658ac0ad7e550b59482ebf0
pullPolicy: IfNotPresent
args:
- --repo=https://github.com/KBlixt/subcleaner
@@ -96,6 +97,7 @@ spec:
nginx.ingress.kubernetes.io/auth-signin: https://auth.${SECRET_EXTERNAL_DOMAIN}?rm=$request_method
nginx.ingress.kubernetes.io/auth-response-headers: Remote-User,Remote-Name,Remote-Groups,Remote-Email
nginx.ingress.kubernetes.io/auth-snippet: proxy_set_header X-Forwarded-Method $request_method;
hajimari.io/icon: mdi:subtitles-outline
gethomepage.dev/enabled: "true"
gethomepage.dev/group: Media
gethomepage.dev/name: Bazarr

View File

@@ -31,7 +31,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m

View File

@@ -9,6 +9,7 @@ spec:
chartRef:
kind: OCIRepository
name: app-template
namespace: flux-system
install:
remediation:
retries: 3
@@ -24,7 +25,7 @@ spec:
app:
image:
repository: ghcr.io/linuxserver/calibre
tag: version-v8.8.0@sha256:4ab09dbeaa4d658289c7e7edf61c1f9224a316df48d38be7f8c70d0745082930
tag: version-v8.3.0@sha256:e37f35451c6f8ab2cec48c38dd332e86f6abf0935b1c720854eac7498b39cb69
env:
TZ: "${TIMEZONE}"
PUID: "1026"
@@ -51,6 +52,7 @@ spec:
nginx.ingress.kubernetes.io/auth-signin: https://auth.${SECRET_EXTERNAL_DOMAIN}?rm=$request_method
nginx.ingress.kubernetes.io/auth-response-headers: Remote-User,Remote-Name,Remote-Groups,Remote-Email
nginx.ingress.kubernetes.io/auth-snippet: proxy_set_header X-Forwarded-Method $request_method;
hajimari.io/icon: mdi:bookshelf
gethomepage.dev/enabled: "true"
gethomepage.dev/group: Media
gethomepage.dev/name: Calibre

View File

@@ -29,7 +29,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m

View File

@@ -9,6 +9,7 @@ spec:
chartRef:
kind: OCIRepository
name: app-template
namespace: flux-system
install:
remediation:
retries: 3
@@ -52,6 +53,7 @@ spec:
nginx.ingress.kubernetes.io/auth-signin: https://auth.${SECRET_EXTERNAL_DOMAIN}?rm=$request_method
nginx.ingress.kubernetes.io/auth-response-headers: Remote-User,Remote-Name,Remote-Groups,Remote-Email
nginx.ingress.kubernetes.io/auth-snippet: proxy_set_header X-Forwarded-Method $request_method;
hajimari.io/icon: mdi:radio
gethomepage.dev/enabled: "true"
gethomepage.dev/name: exercisediary
gethomepage.dev/description: Workout diary with GitHub-style year visualization.

View File

@@ -27,7 +27,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m

View File

@@ -9,6 +9,7 @@ spec:
chartRef:
kind: OCIRepository
name: app-template
namespace: flux-system
install:
remediation:
retries: 3
@@ -24,7 +25,7 @@ spec:
app:
image:
repository: ghcr.io/flaresolverr/flaresolverr
tag: v3.3.25@sha256:68160ec125e5cde23bc45549a443da0da0223cf4f0de7571ed2c6851cf6e1561
tag: v3.3.21@sha256:f104ee51e5124d83cf3be9b37480649355d223f7d8f9e453d0d5ef06c6e3b31b
resources:
requests:
cpu: 10m

View File

@@ -18,7 +18,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m

View File

@@ -9,6 +9,7 @@ spec:
chartRef:
kind: OCIRepository
name: app-template
namespace: flux-system
install:
remediation:
retries: 3
@@ -32,7 +33,7 @@ spec:
app:
image:
repository: jesec/flood
tag: master@sha256:e949ba083d9d2be05852f2380863a6e02ff750ba02a31b5f0e1186b6dbee3c7d
tag: master@sha256:bd9c14e86520bdf0443039fa161b152bd2c09243d6fc8cd44b3352e12629836a
env:
FLOOD_OPTION_RUNDIR: /data
FLOOD_OPTION_AUTH: none
@@ -62,6 +63,7 @@ spec:
nginx.ingress.kubernetes.io/auth-signin: https://auth.${SECRET_EXTERNAL_DOMAIN}?rm=$request_method
nginx.ingress.kubernetes.io/auth-response-headers: Remote-User,Remote-Name,Remote-Groups,Remote-Email
nginx.ingress.kubernetes.io/auth-snippet: proxy_set_header X-Forwarded-Method $request_method;
hajimari.io/icon: mdi:download
gethomepage.dev/enabled: "true"
gethomepage.dev/group: Media
gethomepage.dev/name: qBittorrent

View File

@@ -28,7 +28,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m

View File

@@ -9,6 +9,7 @@ spec:
chartRef:
kind: OCIRepository
name: app-template
namespace: flux-system
install:
remediation:
retries: 3
@@ -27,7 +28,7 @@ spec:
app:
image:
repository: freshrss/freshrss
tag: 1.26.3@sha256:f9733e2cdf754d82e25826324fb4cbf3d736d82e2d36bf8e379dd4f0eeee0932
tag: 1.26.1@sha256:bca4407f1f3ecb2e02bd57f704593c64f89bbf3fad53f03ebcf4baecb0122de6
env:
TZ: ${TIMEZONE}
CRON_MIN: 18,48
@@ -56,6 +57,7 @@ spec:
enabled: true
className: internal
annotations:
hajimari.io/icon: mdi:rss
gethomepage.dev/enabled: "true"
gethomepage.dev/name: FreshRSS
gethomepage.dev/description: Developer platform to turn scripts into workflows and UIs

View File

@@ -24,7 +24,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m

View File

@@ -11,9 +11,10 @@ tls:
enabled: false
mqtt:
host: mosquitto.database.svc.cluster.local
port: 1883
host: emqx.database.svc.cluster.local
topic_prefix: frigate
user: "{FRIGATE_MQTT_USERNAME}"
password: "{FRIGATE_MQTT_PASSWORD}"
database:
path: /data/frigate.db

View File

@@ -18,9 +18,14 @@ spec:
# PLUS_API_KEY: "{{ .PLUS_API_KEY }}"
FRIGATE_CAMERA_USER: "{{ .FRIGATE_CAMERA_USER }}"
FRIGATE_CAMERA_PASSWORD: "{{ .FRIGATE_CAMERA_PASSWORD }}"
# EMQX
FRIGATE_MQTT_USERNAME: "{{ .EMQX_MQTT_USER }}"
FRIGATE_MQTT_PASSWORD: "{{ .EMQX_MQTT_PASSWORD }}"
# GENERIC
FRIGATE_SECRET_DOMAIN: "{{ .SECRET_INTERNAL_DOMAIN }}"
dataFrom:
- extract:
key: emqx
- extract:
key: frigate
- extract:

View File

@@ -9,6 +9,7 @@ spec:
chartRef:
kind: OCIRepository
name: app-template
namespace: flux-system
install:
remediation:
retries: 3
@@ -20,7 +21,7 @@ spec:
dependsOn:
- name: intel-device-plugin-gpu
namespace: kube-system
- name: mosquitto
- name: emqx
namespace: database
- name: rook-ceph-cluster
namespace: rook-ceph
@@ -39,7 +40,7 @@ spec:
app:
image:
repository: ghcr.io/blakeblackshear/frigate
tag: 0.16.0-beta3@sha256:944dbf199f1cbe99cfedc74b7cd9791daa68a334d4e9f74214a06dde58c1458a
tag: 0.15.0-beta3@sha256:6c8e87b6d9f767e3acf950943cc45c4201a889bf0b672302ed1ef8efc6373db2
env:
TZ: ${TIMEZONE}
LIBVA_DRIVER_NAME: i965
@@ -92,6 +93,7 @@ spec:
nginx.ingress.kubernetes.io/auth-signin: https://auth.${SECRET_EXTERNAL_DOMAIN}?rm=$request_method
nginx.ingress.kubernetes.io/auth-response-headers: Remote-User,Remote-Name,Remote-Groups,Remote-Email
nginx.ingress.kubernetes.io/auth-snippet: proxy_set_header X-Forwarded-Method $request_method;
hajimari.io/icon: mdi:cctv
gethomepage.dev/enabled: "true"
gethomepage.dev/name: Frigate
gethomepage.dev/description: NVR with realtime local object detection for IP cameras

View File

@@ -27,7 +27,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m

View File

@@ -9,6 +9,7 @@ spec:
chartRef:
kind: OCIRepository
name: app-template
namespace: flux-system
install:
remediation:
retries: 3
@@ -28,7 +29,7 @@ spec:
app:
image:
repository: docker.io/ghostfolio/ghostfolio
tag: 2.175.0@sha256:1344c505b05346625d1217877f0e2abc30534e5eaa7bb39d589443dc99fcdf58
tag: 2.152.1@sha256:80d9b9ff5e00b1d34c276c81a27a21eee3bc380c3f21d62ea50451f4164448eb
env:
NODE_ENV: production
REDIS_HOST: dragonfly.database.svc.cluster.local.
@@ -68,6 +69,7 @@ spec:
enabled: true
className: internal
annotations:
hajimari.io/icon: mdi:cash-multiple
gethomepage.dev/enabled: "true"
gethomepage.dev/name: Ghostfolio
gethomepage.dev/description: Open Source Wealth Management Software

View File

@@ -27,7 +27,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m

View File

@@ -21,7 +21,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m

View File

@@ -9,6 +9,7 @@ spec:
chartRef:
kind: OCIRepository
name: app-template
namespace: flux-system
install:
remediation:
retries: 3
@@ -35,7 +36,7 @@ spec:
app:
image:
repository: ghcr.io/home-operations/home-assistant
tag: 2025.8.0@sha256:f418461e9481e7ad27a0d01ba201b810ce1a7f117ae3fe78d0529db4f15c244f
tag: 2025.4.3@sha256:a9288407a81e19b67b9155b1ac4e0273e10492be572008dda38cf0f311a18722
env:
TZ: "${TIMEZONE}"
envFrom:
@@ -69,6 +70,8 @@ spec:
app:
enabled: true
className: internal
annotations:
hajimari.io/icon: mdi:home-assistant
hosts:
- host: &host "hass.${SECRET_EXTERNAL_DOMAIN}"
paths:

View File

@@ -9,6 +9,7 @@ spec:
chartRef:
kind: OCIRepository
name: app-template
namespace: flux-system
install:
remediation:
retries: 3
@@ -32,7 +33,7 @@ spec:
app:
image:
repository: ghcr.io/coder/code-server
tag: 4.102.2@sha256:8c2aaafb74a2978f48d193135eb3ea6fc0e24563dd59c028b9f1808cefd0fa33
tag: 4.99.3@sha256:e822acb286dca144f1a10ef847bc8f905d92ea79998f4f021802064badcae5fe
env:
TZ: ${TIMEZONE}
GIT_SSH_COMMAND: ssh -i /config/.ssh/id_ed25519 -o IdentitiesOnly=yes

View File

@@ -30,7 +30,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m
@@ -60,7 +60,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m

View File

@@ -9,6 +9,7 @@ spec:
chartRef:
kind: OCIRepository
name: app-template
namespace: flux-system
install:
remediation:
retries: 3
@@ -47,6 +48,11 @@ spec:
enabled: true
className: internal
annotations:
hajimari.io/enable: "true"
hajimari.io/appName: *app
hajimari.io/info: Inventory management system
hajimari.io/icon: devices
hajimari.io/targetBlank: "true"
gethomepage.dev/enabled: "true"
gethomepage.dev/name: Homebox
gethomepage.dev/description: Inventory and organization system built for the Home User

View File

@@ -22,7 +22,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m

View File

@@ -9,6 +9,7 @@ spec:
chartRef:
kind: OCIRepository
name: app-template
namespace: flux-system
install:
remediation:
retries: 3
@@ -28,7 +29,7 @@ spec:
app:
image:
repository: ghcr.io/auricom/github-notifier
tag: rolling@sha256:b9f6e52d1b5aa1a44728573a5a9c442b14cc202d72ea4e542fae5c835b131eb8
tag: rolling@sha256:8eda83ca23b184f496aec3846b48a3b3f9b8d5459f55488e05c86842c12f0d58
command:
- python
- /app/github-notifier.py

View File

@@ -18,7 +18,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m
@@ -43,7 +43,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m
@@ -68,7 +68,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m
@@ -93,7 +93,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m

View File

@@ -9,6 +9,7 @@ spec:
chartRef:
kind: OCIRepository
name: app-template
namespace: flux-system
install:
remediation:
retries: 3
@@ -28,7 +29,7 @@ spec:
app:
image:
repository: ghcr.io/auricom/freac
tag: 1.1.7@sha256:7fbeae2add57a6a60d34cc20b352c552fc5c861d009340e403e001e559b624ef
tag: 1.1.7@sha256:f9f82373d334d4caff540ab0c7abff778a9fe84e610f61b721777a0fe232c388
command:
- /bin/bash
- -c
@@ -38,19 +39,10 @@ spec:
set -o errexit
set -o nounset
if [[ -n "$HEALTHCHECKS_ID" ]]; then
wget "https://hc-ping.com/$HEALTHCHECKS_ID/start" -T 10 -t 5 -O /dev/null
fi
cd /app
/app/transcode.sh -c
/app/transcode.sh -r
# Send completion ping to healthchecks
if [[ -n "$HEALTHCHECKS_ID" ]]; then
wget "https://hc-ping.com/$HEALTHCHECKS_ID" -T 10 -t 5 -O /dev/null
fi
env:
TRANSCODE_INPUT_DIR: /mnt/music/
TRANSCODE_OUTPUT_DIR: /mnt/music_transcoded/

View File

@@ -9,6 +9,7 @@ spec:
chartRef:
kind: OCIRepository
name: app-template
namespace: flux-system
install:
remediation:
retries: 3
@@ -28,7 +29,7 @@ spec:
app:
image:
repository: ghcr.io/auricom/kubectl
tag: 1.33@sha256:bcc3bbe7fda29055ddfbb8742a1a5a4e31ae8b1934072374c02081018f8dc6e9
tag: 1.32.1@sha256:33ff33f4d00dc6779198b0da0200caddad8c191c59fe427dcaebe89695298ff0
command:
- /bin/bash
- /app/backup.sh

View File

@@ -9,6 +9,7 @@ spec:
chartRef:
kind: OCIRepository
name: app-template
namespace: flux-system
install:
remediation:
retries: 3
@@ -28,7 +29,7 @@ spec:
app:
image:
repository: ghcr.io/gethomepage/homepage
tag: v1.4.4@sha256:cd8da3c81ede2a072510930defdcf44c7a0473f72a6d5216beea3b13b3093afe
tag: v1.1.1@sha256:be49a60307fcce7909acdaf2f3b2f3d168a0468d62869bf72d380625dde91fb9
env:
TZ: ${TIMEZONE}
envFrom:

View File

@@ -20,7 +20,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m

View File

@@ -10,6 +10,7 @@ spec:
chartRef:
kind: OCIRepository
name: app-template
namespace: flux-system
install:
remediation:
retries: 3
@@ -20,29 +21,29 @@ spec:
retries: 3
values:
defaultPodOptions:
affinity:
nodeAffinity:
preferredDuringSchedulingIgnoredDuringExecution:
- weight: 1
preference:
matchExpressions:
# Intel N100
- key: feature.node.kubernetes.io/cpu-model.id
operator: In
values:
- "190"
requiredDuringSchedulingIgnoredDuringExecution:
nodeSelectorTerms:
- matchExpressions:
# affinity:
# nodeAffinity:
# preferredDuringSchedulingIgnoredDuringExecution:
# - weight: 1
# preference:
# matchExpressions:
# # Intel N100
# - key: feature.node.kubernetes.io/cpu-model.id
# operator: In
# values:
# - "190"
- key: intel.feature.node.kubernetes.io/gpu
operator: In
values:
- "true"
# requiredDuringSchedulingIgnoredDuringExecution:
# nodeSelectorTerms:
# - matchExpressions:
# # Intel N100
# - key: feature.node.kubernetes.io/cpu-model.id
# operator: In
# values:
# - "190"
# - key: intel.feature.node.kubernetes.io/gpu
# operator: In
# values:
# - "true"
enableServiceLinks: false
securityContext:
runAsUser: 568
@@ -101,6 +102,8 @@ spec:
app:
enabled: true
className: external
annotations:
hajimari.io/icon: simple-icons:jellyfin
hosts:
- host: &host "{{ .Release.Name }}.${SECRET_EXTERNAL_DOMAIN}"
paths:

View File

@@ -30,7 +30,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m

View File

@@ -9,6 +9,7 @@ spec:
chartRef:
kind: OCIRepository
name: app-template
namespace: flux-system
install:
remediation:
retries: 3
@@ -26,7 +27,7 @@ spec:
app:
image:
repository: ghcr.io/fallenbagel/jellyseerr
tag: 2.7.2@sha256:d83fcc8478f53073008b0c452c87d94ff5182fce73c426c813301c402b6612de
tag: 2.5.2@sha256:2a611369ad1d0d501c2d051fc89b6246ff081fb4a30879fdc75642cf6a37b1a6
env:
TZ: ${TIMEZONE}
LOG_LEVEL: "info"
@@ -73,6 +74,8 @@ spec:
app:
enabled: true
className: external
annotations:
hajimari.io/icon: simple-icons:jellyfish-outline
hosts:
- host: &host1 "{{ .Release.Name }}.${SECRET_EXTERNAL_DOMAIN}"
paths: &paths

View File

@@ -29,7 +29,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m

View File

@@ -9,6 +9,7 @@ spec:
chartRef:
kind: OCIRepository
name: app-template
namespace: flux-system
install:
remediation:
retries: 3
@@ -28,7 +29,7 @@ spec:
app:
image:
repository: joplin/server
tag: 3.4.1
tag: 3.3.13
env:
APP_BASE_URL: https://joplin.${SECRET_EXTERNAL_DOMAIN}
APP_PORT: &port 8080
@@ -56,6 +57,7 @@ spec:
enabled: true
className: external
annotations:
hajimari.io/icon: mdi:text
gethomepage.dev/enabled: "true"
gethomepage.dev/name: Joplin
gethomepage.dev/description: Secure note taking and to-do app with synchronisation capabilities

View File

@@ -25,7 +25,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m

View File

@@ -10,6 +10,7 @@ spec:
chartRef:
kind: OCIRepository
name: app-template
namespace: flux-system
install:
remediation:
retries: 3
@@ -29,7 +30,7 @@ spec:
app:
image:
repository: sndxr/komf
tag: 1.6.0@sha256:0aaa1079e8c6e4b4f7b7d3c2f631cdc275625ca9018a75325289a49776bcdd65
tag: 1.3.0@sha256:166e3dbf2a97c65916ad915abecf8d191515d6c7ffa6c7c0e1ab3f4419f9d559
env:
KOMF_KOMGA_BASE_URI: http://komga.default.svc.cluster.local:8080
KOMF_LOG_LEVEL: INFO

View File

@@ -28,7 +28,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m

View File

@@ -9,6 +9,7 @@ spec:
chartRef:
kind: OCIRepository
name: app-template
namespace: flux-system
install:
remediation:
retries: 3
@@ -26,7 +27,7 @@ spec:
app:
image:
repository: gotson/komga
tag: 1.23.1@sha256:f91b6d5bf34aa36be33eb603117faafa723625fc1649dc992d140caeb56cf11a
tag: 1.21.2@sha256:ba587695d786f0e8f4de8598b8aa2785cc8c671098ef1cb624819c2bb812789c
env:
TZ: "${TIMEZONE}"
SERVER_PORT: &port 8080
@@ -47,6 +48,7 @@ spec:
enabled: true
className: internal
annotations:
hajimari.io/icon: mdi:ideogram-cjk-variant
gethomepage.dev/enabled: "true"
gethomepage.dev/name: Komga
gethomepage.dev/description: Media server for comics/mangas/BDs/magazines/eBooks with API and OPDS support

View File

@@ -29,7 +29,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m

View File

@@ -15,6 +15,8 @@ resources:
- ./flood/ks.yaml
- ./freshrss/ks.yaml
- ./frigate/ks.yaml
- ./ghostfolio/ks.yaml
- ./hajimari/ks.yaml
- ./home-assistant/ks.yaml
- ./homebox/ks.yaml
- ./homelab/ks.yaml
@@ -31,13 +33,11 @@ resources:
- ./lms/ks.yaml
- ./lychee/ks.yaml
- ./navidrome/ks.yaml
- ./opengist/ks.yaml
- ./outline/ks.yaml
- ./paperless/ks.yaml
- ./prowlarr/ks.yaml
- ./qbittorrent/ks.yaml
- ./radarr/ks.yaml
- ./radarr-archive/ks.yaml
- ./readeck/ks.yaml
- ./recyclarr/ks.yaml
- ./redlib/ks.yaml
@@ -53,5 +53,6 @@ resources:
- ./vikunja/ks.yaml
- ./webhook/ks.yaml
- ./zigbee2mqtt/ks.yaml
- ./zwave-js-ui/ks.yaml
# Default resources
- jobs-rbac.yaml

View File

@@ -9,6 +9,7 @@ spec:
chartRef:
kind: OCIRepository
name: app-template
namespace: flux-system
install:
remediation:
retries: 3
@@ -48,6 +49,7 @@ spec:
nginx.ingress.kubernetes.io/auth-signin: https://auth.${SECRET_EXTERNAL_DOMAIN}?rm=$request_method
nginx.ingress.kubernetes.io/auth-response-headers: Remote-User,Remote-Name,Remote-Groups,Remote-Email
nginx.ingress.kubernetes.io/auth-snippet: proxy_set_header X-Forwarded-Method $request_method;
hajimari.io/icon: mdi:file-document-arrow-right-outline
gethomepage.dev/enabled: "true"
gethomepage.dev/name: Libmedium
gethomepage.dev/description: Medium.com

View File

@@ -24,7 +24,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m

View File

@@ -9,6 +9,7 @@ spec:
chartRef:
kind: OCIRepository
name: app-template
namespace: flux-system
install:
remediation:
retries: 3
@@ -34,7 +35,7 @@ spec:
app:
image:
repository: ghcr.io/crutonjohn/lidarr-plugins
tag: 2.12.0.4634@sha256:4bac3540b98aab19eb2828ea0dc91daee1351068e214e9f378d8fd4e6e5e6eef
tag: 2.11.2.4623@sha256:3d276b9f2b4f4d4ee94b4ae4e4f690782326fd92f9d99ee5b0d909fd1edeca95
env:
TZ: "${TIMEZONE}"
LIDARR__APP__INSTANCENAME: Lidarr
@@ -69,6 +70,7 @@ spec:
nginx.ingress.kubernetes.io/auth-signin: https://auth.${SECRET_EXTERNAL_DOMAIN}?rm=$request_method
nginx.ingress.kubernetes.io/auth-response-headers: Remote-User,Remote-Name,Remote-Groups,Remote-Email
nginx.ingress.kubernetes.io/auth-snippet: proxy_set_header X-Forwarded-Method $request_method;
hajimari.io/icon: mdi:headphones
hosts:
- host: *host
paths:

View File

@@ -31,7 +31,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m

View File

@@ -9,6 +9,7 @@ spec:
chartRef:
kind: OCIRepository
name: app-template
namespace: flux-system
install:
remediation:
retries: 3
@@ -26,7 +27,7 @@ spec:
app:
image:
repository: sissbruecker/linkding
tag: 1.41.0@sha256:49346ebe531db7034a4347b83bef82838af76b39695f096c50a3dc3064d5ac1f
tag: 1.39.1@sha256:f663de3765a89c96af5381e38cfbf8a75cabbb257716653a52163000421ca45a
envFrom:
- secretRef:
name: linkding-secret
@@ -60,6 +61,7 @@ spec:
enabled: true
className: internal
annotations:
hajimari.io/icon: link
gethomepage.dev/enabled: "true"
gethomepage.dev/name: Linkding
gethomepage.dev/description: Bookmark manager that is designed be to be minimal and fast

View File

@@ -26,7 +26,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m

View File

@@ -9,6 +9,7 @@ spec:
chartRef:
kind: OCIRepository
name: app-template
namespace: flux-system
install:
remediation:
retries: 3
@@ -58,6 +59,7 @@ spec:
app:
enabled: true
annotations:
hajimari.io/icon: mdi:account-multiple
gethomepage.dev/enabled: "true"
gethomepage.dev/name: lldap
gethomepage.dev/description: Light LDAP implementation

View File

@@ -23,7 +23,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m

View File

@@ -9,6 +9,7 @@ spec:
chartRef:
kind: OCIRepository
name: app-template
namespace: flux-system
install:
remediation:
retries: 3
@@ -62,6 +63,7 @@ spec:
enabled: true
className: internal
annotations:
hajimari.io/icon: mdi:file-music
gethomepage.dev/enabled: "true"
gethomepage.dev/name: Lyrion Music Server
gethomepage.dev/description: Stream not only your local music collection, but content from many music services and internet radio stations to your players.

View File

@@ -25,7 +25,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m

View File

@@ -9,6 +9,7 @@ spec:
chartRef:
kind: OCIRepository
name: app-template
namespace: flux-system
install:
remediation:
retries: 3
@@ -27,7 +28,7 @@ spec:
app:
image:
repository: lycheeorg/lychee-laravel
tag: v6.7.2@sha256:7062e81326122399b4cec3573e8407c9bdbcde0f2cc6a176f4b74466fec68134
tag: v6.5.1@sha256:e8ce27bc52effb04d54c9189202f8dd375a262c270ddafe75bcc3356a0d8b937
env:
TIMEZONE: ${TIMEZONE}
APP_NAME: Lychee
@@ -77,6 +78,7 @@ spec:
enabled: true
className: external
annotations:
hajimari.io/icon: mdi:camera
gethomepage.dev/enabled: "true"
gethomepage.dev/name: Lychee
gethomepage.dev/description: Photo-management tool.

View File

@@ -9,6 +9,7 @@ spec:
chartRef:
kind: OCIRepository
name: app-template
namespace: flux-system
install:
remediation:
retries: 3
@@ -28,7 +29,7 @@ spec:
main:
image:
repository: ghcr.io/auricom/kubectl
tag: 1.33@sha256:bcc3bbe7fda29055ddfbb8742a1a5a4e31ae8b1934072374c02081018f8dc6e9
tag: 1.32@sha256:c729e8e0ac8d62919c41ad8e41cd7b27196abd0472a48a6a2b1f95ed42572e51
command:
- /bin/bash
- -c

View File

@@ -34,7 +34,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m

View File

@@ -9,6 +9,7 @@ spec:
chartRef:
kind: OCIRepository
name: app-template
namespace: flux-system
install:
remediation:
retries: 3
@@ -29,7 +30,7 @@ spec:
app:
image:
repository: ghcr.io/navidrome/navidrome
tag: 0.58.0@sha256:2ae037d464de9f802d047165a13b1c9dc2bdbb14920a317ae4aef1233adc0a3c
tag: 0.55.2@sha256:3a66e262b7ea836faa06c08ad5b32076c49e9e63e2fa4de10080c8e9be9f0846
env:
TZ: "${TIMEZONE}"
ND_DATAFOLDER: /config
@@ -64,6 +65,7 @@ spec:
nginx.ingress.kubernetes.io/auth-signin: https://auth.${SECRET_EXTERNAL_DOMAIN}?rm=$request_method
nginx.ingress.kubernetes.io/auth-response-headers: Remote-User,Remote-Name,Remote-Groups,Remote-Email
nginx.ingress.kubernetes.io/auth-snippet: proxy_set_header X-Forwarded-Method $request_method;
hajimari.io/icon: mdi:music
gethomepage.dev/enabled: "true"
gethomepage.dev/name: Navidrome
gethomepage.dev/description: Modern music server and streamer compatible with subsonic/airsonic.

View File

@@ -29,7 +29,7 @@ spec:
retryInterval: 2m
sourceRef:
kind: GitRepository
name: flux-system
name: home-ops-kubernetes
namespace: flux-system
targetNamespace: *namespace
timeout: 5m

Some files were not shown because too many files have changed in this diff Show More