100 Commits
Author SHA1 Message Date
oleksandr b07a1de547 feat(k8s/infrastructure/authelia): update configuration 2026-08-19 22:17:42 +03:00
oleksandr 60e9ab39d5 feat(mon/synology): add Grafana dashboard + full-coverage snmp.yml 2026-06-29 15:12:28 +03:00
oleksandr 2a7c0030ff feat(mon/synology): scrape DS1821+ via snmp_exporter 2026-06-29 14:58:06 +03:00
oleksandr 58ad6f1162 feat(mon/hyperhdr): scrape node exporter metrics 2026-06-28 15:43:07 +03:00
oleksandr 1c28249258 feat(mon/coreelec): scrape node exporter metrics 2026-06-28 15:40:09 +03:00
oleksandr 247eebc63e fix(podsync): enable yt-dlp self_update to fix SABR streaming errors 2026-06-22 22:20:14 +03:00
oleksandr bf2077b19c feat(mon/homeassistant): scrape Home Assistant Prometheus metrics 2026-06-20 11:30:27 +03:00
oleksandr 8783bc086a feat(mon/unpoller): scrape UniFi controller metrics into Grafana 2026-06-19 21:31:02 +03:00
oleksandr 1d24966003 feat(monitoring): victoria-logs syslog listener for unifi 2026-06-19 17:35:09 +03:00
oleksandr 77ac732143 feat(mon/victoria-logs): enable bundled Grafana dashboards 2026-06-19 15:27:39 +03:00
oleksandr bd3b1eb18d feat(mon/grafana): install victoriametrics-metrics-datasource plugin 2026-06-19 15:23:36 +03:00
oleksandr 4dcdcd0017 refactor(mon): rename victoria-metrics app dir to monitoring 2026-06-19 15:18:53 +03:00
oleksandr 82b3c68597 fix(mon/grafana): use Recreate strategy and disable initChownData 2026-06-19 15:15:12 +03:00
oleksandr 268fa1c5af feat(mon/victoria-logs): add log storage with Grafana datasource 2026-06-19 15:09:38 +03:00
oleksandr 74b85e0f42 feat(mon/victoria-metrics): add metrics, alerting and Grafana stack 2026-06-19 14:50:01 +03:00
oleksandr 5b59c0758d fix(k8s/blog): use relative redirects in nginx 2026-05-17 17:18:44 +03:00
oleksandr d3f0714bc7 fix(k8s/authelia): pin redis chart to 25.5.3 2026-05-12 21:56:59 +03:00
oleksandr 2bd0f29ac6 feat(k8s/gitea): add renovate support 2026-05-12 01:29:19 +03:00
oleksandr d703a633ce feat(k8s/blog): add static blog served via git-sync + nginx 2026-05-11 23:42:06 +03:00
oleksandr 85b5328dd1 feat(k8s/gitea): add act_runner with DinD for Gitea Actions 2026-05-11 22:22:36 +03:00
oleksandr 3715d1af73 feat(k8s/gitea): enable Actions and split packages/actions into extra PVC 2026-05-11 21:14:30 +03:00
oleksandr 7051b8e2ad feat(renovate): switch from GitHub to self-hosted Gitea 2026-05-09 12:04:40 +03:00
oleksandr c97e3b286c fix(k8s/archmirror): two-pass rsync to prevent db/package 404 race 2026-05-09 11:38:11 +03:00
oleksandr 23e748b699 fix(k8s/archmirror): force 664 perms on synced files to fix nginx 403 2026-05-05 21:40:15 +03:00
oleksandr fa61316abf feat(k8s/gitea): add Gitea with PostgreSQL, backups, and Authelia OIDC 2026-04-30 22:28:39 +03:00
oleksandr db633544c6 fix(k8s/authelia): disable Redis persistence to prevent NFS-caused AOF corruption 2026-04-29 23:45:55 +03:00
oleksandr 4a7eec321e feat(k8s/firefly): add ProtonMail SMTP configuration 2026-04-29 23:45:54 +03:00
oleksandr f65bc8505b feat(k8s/firefly): add Firefly III with PostgreSQL and backups 2026-04-29 23:45:51 +03:00
oleksandr af039ad3be fix(k8s/immich): enable force-inactive-lock for backup profiles 2026-04-15 14:39:20 +03:00
oleksandr 71ac4882b2 feat(k8s/immich): add persistent NFS cache for library backup 2026-04-14 23:43:00 +03:00
oleksandr 5948beee1d feat(k8s/pihole): enable IPv6 (AAAA) resolution in DNSCrypt 2026-04-07 18:48:26 +03:00
oleksandr d997b5c568 feat(k8s/podsync): update config 2026-04-05 17:06:26 +03:00
oleksandr ea437714f0 fix(k8s/lubelogger): remove duplicate port in db backup repository URL 2026-04-02 20:55:58 +03:00
oleksandr 155bf75f7f feat(k8s/prowlarr): migrate to PostgreSQL, increase probe timeouts 2026-03-31 22:20:17 +03:00
oleksandr 600d1a728f fix(k8s/jellyfin): skip kodisyncqueue.db in local storage migration (LiteDB symlink incompatible) 2026-03-29 21:56:46 +03:00
oleksandr 4782ea439e feat(k8s/immich): migrate library to NVMe SSD volume 2026-03-24 09:44:37 +02:00
oleksandr 53f87b1ecb fix(k8s/pihole): pin image tags and set IfNotPresent pull policy 2026-03-23 23:06:48 +02:00
oleksandr 31680f83c7 fix(k8s/authelia): add startupProbe to PostgreSQL for crash recovery tolerance 2026-03-23 22:48:52 +02:00
oleksandr aaba82275c feat(k8s): add noatime to all NFS PVs, standardize mount options 2026-03-23 22:40:53 +02:00
oleksandr 8b8fe5f314 feat(k8s/archmirror): run sync once daily at 3AM, reduce timeouts 2026-03-23 22:37:19 +02:00
oleksandr a3ccd0c430 feat(k8s/pihole): whitelist client 2026-03-22 19:13:43 +02:00
oleksandr a28a69df76 feat(k8s/pihole): improve dnscrypt-proxy config 2026-03-22 18:48:01 +02:00
oleksandr e828d6dd37 feat(k8s/pihole): fully stateless setup with ConfigMap-driven config and adlists 2026-03-22 18:48:00 +02:00
oleksandr 8df7e38744 feat(k8s/media): migrate backups from rclone to restic, add seerr-db backup 2026-03-22 11:08:40 +02:00
oleksandr a7aad86538 fix(k8s/media): fix db backup cronjobs - wrong rclone remote name, add verbose logging 2026-03-20 20:40:33 +02:00
oleksandr a705573925 feat(k8s/media): add Seerr media request manager 2026-03-20 00:20:19 +02:00
oleksandr 923ebfba51 feat(k8s/immich): add Renovate config for automated patch/minor updates 2026-03-19 23:17:00 +02:00
oleksandr 8d35b000ca feat(k8s/media): add Renovate config for automated patch/minor updates 2026-03-19 22:17:38 +02:00
oleksandr e3866d19dd feat(k8s/jellyfin): add Renovate config for automated patch updates 2026-03-19 22:17:35 +02:00
oleksandr 4504edcf5c feat(k8s/infrastructure): add self-hosted Renovate CronJob 2026-03-19 22:17:31 +02:00
oleksandr 0d58b82f3e fix(k8s/infrastructure/traefik): use correct updateStrategy value path for Recreate 2026-03-16 00:59:24 +02:00
oleksandr 325d15a446 feat(k8s/infrastructure/traefik): configure TLS options 2026-03-16 00:40:11 +02:00
oleksandr 68baf37627 feat(k8s/infrastructure/traefik): add HSTS middleware on websecure entrypoint 2026-03-16 00:38:35 +02:00
oleksandr b2842f055a feat(k8s/infrastructure): add metrics-server 2026-03-15 23:06:31 +02:00
oleksandr cccab99fe3 feat(k8s/cryptpad): set admin key 2026-03-13 22:03:10 +02:00
oleksandr 827402e097 fix(k8s/infrastructure/authelia): cryptpad configuration 2026-03-13 21:53:53 +02:00
oleksandr 0517e2b4b8 feat(k8s/infrastructure/authelia): migrate storage from SQLite to PostgreSQL 2026-03-13 21:53:52 +02:00
oleksandr a7bb66a183 feat(k8s/cryptpad): add cryptpad stack 2026-03-13 21:53:51 +02:00
oleksandr 3af951d6ff fix(terraform): align VM config with real Proxmox state 2026-03-12 20:41:40 +02:00
oleksandr bae73611c9 docs: rewrite READMEs to reflect Kubernetes migration 2026-03-12 20:25:03 +02:00
oleksandr 33d0df77bf feat(docker): deprecate docker-based services 2026-03-12 20:14:20 +02:00
oleksandr bd155efe9d feat(k8s/lubelogger): migrate to Helm + PostgreSQL with OIDC 2026-03-12 20:01:38 +02:00
oleksandr 5d0e50b39b feat(k8s/homepage): add homepage stack 2026-03-12 12:13:45 +02:00
oleksandr 03bb6ab9b4 feat(k8s/immich): use restic for all backups 2026-03-11 22:05:26 +02:00
oleksandr 3c8a627c7e refactor(k8s/immich): minor tweaks to match new schema 2026-03-11 22:05:25 +02:00
oleksandr b829b3295b feat(k8s/grocy): scale deployment to 1 after data migration 2026-03-11 21:29:01 +02:00
oleksandr 3598969583 feat(k8s/grocy): add grocy stack (deployment scaled to 0 for data migration) 2026-03-11 21:29:00 +02:00
oleksandr 6d1373abc5 feat(k8s/paperless): scale deployment to 1 after data migration 2026-03-11 17:24:27 +02:00
oleksandr 09caddd10a feat(k8s/paperless): add paperless-ngx stack (deployment scaled to 0 for data migration) 2026-03-11 17:24:26 +02:00
oleksandr 07fa20795f feat(k8s/infrastructure): enable NFD NodeFeatureRule for Intel GPU plugin 2026-03-10 23:04:42 +02:00
oleksandr bcafcac813 feat(k8s/infrastructure): add Node Feature Discovery for automatic hardware labeling 2026-03-10 23:02:12 +02:00
oleksandr a3601cc7e5 feat(k8s/storage): convert all stateful PVCs to static NFS PVs 2026-03-10 22:36:35 +02:00
oleksandr 83970f5d56 feat(k8s/jellyfin): migrate SQLite databases to local-path storage 2026-03-10 21:23:49 +02:00
oleksandr c5d9ed1e6b feat(k8s/infrastructure): add local-path-provisioner for node-local SQLite storage 2026-03-10 21:11:09 +02:00
oleksandr 1dac3e8eb1 feat(k8s/pihole): scale deployment to 1 after data migration 2026-03-01 13:44:16 +02:00
oleksandr cbc34c699d feat(k8s/pihole): add Pi-hole stack (deployment scaled to 0 for data migration) 2026-03-01 13:34:58 +02:00
oleksandr 92d8546c10 feat(k8s/infrastructure): add MetalLB with pool 10.127.1.200-10.127.1.249 2026-03-01 13:34:57 +02:00
oleksandr fd58435c16 feat(k8s/podsync): scale deployment to 1 after data migration 2026-02-28 23:00:59 +02:00
oleksandr 10fe26e993 feat(k8s/podsync): add Podsync stack (deployment scaled to 0 for data migration) 2026-02-28 22:47:16 +02:00
oleksandr 59aa229d19 feat(config): update cluster vars 2026-02-27 22:25:04 +02:00
oleksandr edf7895639 feat(k8s/infrastructure/authelia): update configuration 2026-02-27 22:25:03 +02:00
oleksandr 46d505fca0 feat(k8s/infrastructure/authelia): update users database 2026-02-27 20:07:06 +02:00
oleksandr b40b8a9ff9 feat(k8s/archmirror): add Arch Linux mirror stack 2026-02-26 00:18:36 +02:00
oleksandr a7773d5c05 feat(k8s/traefik): allow ExternalName services 2026-02-23 19:45:36 +02:00
oleksandr ca9a4c3566 feat(k8s/external): add Home Assistant external routing via Traefik 2026-02-23 19:45:35 +02:00
oleksandr 931d95224d feat(k8s/jellyfin): add internal HTTP ingress for LAN access without TLS 2026-02-23 19:45:34 +02:00
oleksandr e146238ce7 feat(k8s/jellyfin): scale deployment to 1 after data migration 2026-02-23 19:45:33 +02:00
oleksandr 6a13c209c4 feat(k8s/jellyfin): add Jellyfin stack (deployment scaled to 0 for data migration)
Jellyfin media server with Intel GPU hardware transcoding, NFS media
volume, and UDP discovery/DLNA ports. OIDC auth handled internally
by Jellyfin (no Authelia middleware on ingress).
2026-02-23 19:45:32 +02:00
oleksandr 6f833d7d7a feat(k8s/infrastructure): add Intel GPU device plugin for hardware transcoding 2026-02-23 19:45:31 +02:00
oleksandr bac800cdd3 feat(k8s/infrastructure/traefik): enable dashboard for port-forward access 2026-02-23 19:45:30 +02:00
oleksandr 0d87d7409e feat(k8s/immich): unsuspend HelmRelease after data migration 2026-02-23 19:45:29 +02:00
oleksandr 46e82016af feat(k8s/immich): add immich stack (HelmRelease suspended for migration) 2026-02-23 19:45:29 +02:00
oleksandr 2b299b6f73 feat(k8s/infrastructure/authelia): add Redis for session persistence 2026-02-23 19:45:28 +02:00
oleksandr 5e7a81c9cd feat(k8s/media): scale apps to 1 after data migration 2026-02-23 19:45:27 +02:00
oleksandr 942887c997 feat(k8s/media): implement and scale apps to zero for migration 2026-02-23 19:45:26 +02:00
oleksandr 43031e7484 feat(k8s/infrastructure/authelia): update configuration 2026-02-23 19:45:25 +02:00
oleksandr 7561421b92 fix: update nfs server hostname 2026-02-23 19:45:24 +02:00
oleksandr db16af0d27 fix(k8s/infra): split infrastructure into controllers and configs stages
ClusterIssuer dry-run fails because cert-manager CRDs are not yet
installed when the single infrastructure Kustomization is applied.
Split into infrastructure-controllers (Helm charts that install CRDs)
and infrastructure-configs (CRD-dependent resources like ClusterIssuer)
with a dependency between them.
2026-02-23 19:45:23 +02:00
oleksandr a36a925451 refactor: drop prod/dev separation 2026-02-23 19:45:22 +02:00
oleksandr ddb1d133fd feat(k8s/infrastructure/authelia): add Authelia deployment 2026-02-23 19:45:21 +02:00