 ahmza
|
2f0e10a10b
|
bump soulsync to 3.5.9, removed some media library types
|
2026-10-22 09:17:25 +00:00 |
|
|
ahmza
|
f3c0cf7060
|
added download NFS mountpoints
|
2026-10-22 08:18:44 +00:00 |
|
|
ahmza
|
b45f9a19a2
|
deploy lidarr
|
2026-10-22 08:08:53 +00:00 |
|
|
ahmza
|
e9b199aca0
|
updated entry for auth.ahmza.com as well as info for ingress one being the gateway for netbird
|
2026-10-16 23:06:30 +00:00 |
|
|
ahmza
|
c1437d9199
|
Complete Authentik Kubernetes cutover
|
2026-10-16 17:05:38 +00:00 |
|
|
ahmza
|
9b5dff602a
|
Require encryption for PostgreSQL backups
|
2026-10-16 17:03:41 +00:00 |
|
|
ahmza
|
1f26627488
|
Begin Authentik final cutover
|
2026-10-16 16:50:43 +00:00 |
|
|
ahmza
|
db3c8e4694
|
Enable production TLS for Authentik
|
2026-10-16 16:46:10 +00:00 |
|
|
ahmza
|
a8431d15c6
|
Fix cert-manager checks with split DNS
|
2026-10-16 16:42:46 +00:00 |
|
|
ahmza
|
0663196fa0
|
Expose Authentik through staging HTTPS
|
2026-10-16 16:38:43 +00:00 |
|
|
ahmza
|
5101df740d
|
Start isolated Authentik trial server
|
2026-10-16 16:27:46 +00:00 |
|
|
ahmza
|
f56c6719da
|
Stage Authentik database and backups
|
2026-10-16 16:03:02 +00:00 |
|
|
ahmza
|
019039126a
|
Add CloudNativePG for Authentik
|
2026-10-16 15:50:56 +00:00 |
|
|
ahmza
|
aa1bb9d838
|
scrape Longhorn metrics
|
2026-10-16 02:17:40 +00:00 |
|
|
ahmza
|
faebef6c58
|
use internal DNS name for VictoriaMetrics endpoint
|
2026-10-16 01:39:57 +00:00 |
|
|
ahmza
|
f79691f838
|
skip Talos localhost-only control-plane metric scrapes
|
2026-10-16 01:07:28 +00:00 |
|
|
ahmza
|
c7fce94b04
|
add VictoriaMetrics cluster metrics collection
|
2026-10-16 00:56:05 +00:00 |
|
|
ahmza
|
6f43b5e343
|
add NetBird connectivity to Talos nodes
|
2026-10-16 00:51:47 +00:00 |
|
|
ahmza
|
fc195c5379
|
remove temporary credential recovery job
|
2026-10-15 23:17:52 +00:00 |
|
|
ahmza
|
e9574e3317
|
add temporary credential recovery job
|
2026-10-15 23:09:09 +00:00 |
|
|
ahmza
|
2ba48aa313
|
update soulsync to 3.5.4
|
2026-10-14 15:50:12 +00:00 |
|
|
ahmza
|
fbae9b0fc3
|
changed volume names to fit standard
|
2026-10-09 13:33:22 +00:00 |
|
|
ahmza
|
029ff24479
|
added extra download paths for usenet and torrent to match indexer as well as download paths
|
2026-10-09 13:31:53 +00:00 |
|
|
ahmza
|
0b13c02899
|
fix type in nfs mount from Audiobooks to AudioBooks
|
2026-10-09 10:46:47 +00:00 |
|
|
ahmza
|
4ddc5e0151
|
added soulsync 3.5.3
|
2026-10-09 10:41:17 +00:00 |
|
|
ahmza
|
397c4ec5f1
|
move to letsencrypt-prod cert
|
2026-09-11 10:26:12 +00:00 |
|
|
ahmza
|
6e49cc860c
|
Fix Bazarr NFS media mounts
|
2026-09-11 10:21:07 +00:00 |
|
|
ahmza
|
a48787f39e
|
Merge pull request 'Bazarr' (#1) from bazarr into main
Reviewed-on: #1
|
2026-09-11 10:12:08 +00:00 |
|
|
ahmza
|
c466da1fe0
|
complete bazarr manifests for testing
|
2026-09-11 10:10:45 +00:00 |
|
|
ahmza
|
781673bb47
|
inital work for seerr
|
2026-09-11 09:04:38 +00:00 |
|
|
ahmza
|
cf61c8f96d
|
updated network docs
|
2026-09-11 09:04:38 +00:00 |
|
|
ahmza
|
9baa07dacb
|
inital work on bazarr app
|
2026-09-11 10:01:18 +01:00 |
|
|
ahmza
|
bf506882a9
|
fix mcpacks topology spread scheduling
|
2026-09-04 22:38:02 +00:00 |
|
|
ahmza
|
9932ecf6de
|
move mcpacks from letsencrypt-staging, to prod certs
|
2026-09-04 13:48:14 +00:00 |
|
|
ahmza
|
03954366ba
|
move mcpacks from letsencrypt-staging, to prod certs
|
2026-09-04 13:39:52 +00:00 |
|
|
ahmza
|
bdddf71132
|
Move mcpacks image to organization namespace
|
2026-09-04 12:46:31 +00:00 |
|
|
ahmza
|
dad8da6358
|
Update Argo CD repository endpoint
|
2026-09-04 12:42:43 +00:00 |
|
|
ahmza
|
e08b9dccc7
|
added mcpacks application to server packwiz pack.toml files. initial
|
2026-09-04 11:56:08 +00:00 |
|
|
ahmza
|
e5c018ce8f
|
Make Ingress the default path for reaching new apps
|
2026-09-03 05:29:05 +01:00 |
|
|
ahmza
|
ae278d8ba1
|
Mark demo.ahmza.com TLS as live in network map
|
2026-09-03 05:28:42 +01:00 |
|
|
ahmza
|
e88819f222
|
Switch demo.ahmza.com to production Let's Encrypt certificate
|
2026-09-03 05:19:44 +01:00 |
|
|
ahmza
|
a5f4041d47
|
Add encrypted Cloudflare API token for cert-manager
|
2026-09-03 04:07:53 +00:00 |
|
|
ahmza
|
4affbaf973
|
Add cert-manager with Cloudflare DNS-01 ClusterIssuers
|
2026-09-03 05:03:10 +01:00 |
|
|
ahmza
|
e6a42a39a8
|
Reclaim demo's former dedicated address in network map
|
2026-09-03 04:57:47 +01:00 |
|
|
ahmza
|
bb69db8041
|
Route demo app through Ingress at demo.ahmza.com
|
2026-09-03 04:44:41 +01:00 |
|
|
ahmza
|
923cdd5162
|
Add ingress-nginx
|
2026-09-03 04:37:04 +01:00 |
|
|
ahmza
|
4fe5a921ff
|
Remove SOPS pipeline test secret
|
2026-09-03 03:34:53 +00:00 |
|
|
ahmza
|
2ca52e4829
|
Move test secret into Helm templates/ so Argo CD actually applies it
|
2026-09-03 03:33:51 +00:00 |
|
|
ahmza
|
095e7b3244
|
Add end-to-end SOPS pipeline test secret
|
2026-09-03 03:32:41 +00:00 |
|
|
ahmza
|
7e9406dff0
|
Fix .sops.yaml to scope encryption to secret payload fields only
|
2026-09-03 04:31:03 +01:00 |
|
|
ahmza
|
0a733a7d76
|
Add SOPS+age secrets pipeline
|
2026-09-03 04:24:38 +01:00 |
|
|
ahmza
|
41dfd195a1
|
Align 09-growing-up with actual control-plane/worker split
|
2026-09-03 04:01:12 +01:00 |
|
|
ahmza
|
c34b58e0b2
|
Add cascade-delete finalizer to stateless apps; document the distinction
|
2026-09-03 03:58:47 +01:00 |
|
|
ahmza
|
8037f24e82
|
delete whoami
|
2026-09-03 02:56:28 +00:00 |
|
|
ahmza
|
f5cb20ad6b
|
Add whoami as a second real app (docs/08 hands-on exercise)
|
2026-09-03 03:52:11 +01:00 |
|
|
ahmza
|
574d3032db
|
Align 08-adding-new-apps with Gitea repo and Pod Security lesson
|
2026-09-03 03:50:43 +01:00 |
|
|
ahmza
|
b45a633b99
|
update the demo page header
|
2026-09-03 02:39:15 +00:00 |
|
|
ahmza
|
a8d26a946f
|
Fix Longhorn default StorageClass to actually use 2 replicas
|
2026-09-03 03:33:14 +01:00 |
|
|
ahmza
|
170ef2d116
|
Give demo app a real Longhorn-backed PVC
|
2026-09-03 03:29:28 +01:00 |
|
|
ahmza
|
39e04e43d0
|
Update Longhorn docs for two-worker topology
|
2026-09-03 03:28:13 +01:00 |
|
|
ahmza
|
9bb29eee5a
|
Allow Longhorn's privileged storage Pods via namespace Pod Security labels
|
2026-09-03 03:09:39 +01:00 |
|
|
ahmza
|
49d3f5c092
|
Fix BGPPeer nodeSelector to match empty-string node-role label convention
|
2026-09-03 03:04:17 +01:00 |
|
|
ahmza
|
3d2aea2d1f
|
Allow MetalLB's privileged networking Pods via namespace Pod Security labels
|
2026-09-03 02:37:13 +01:00 |
|
|
ahmza
|
502de4fdf0
|
Configure MetalLB BGP service network
|
2026-09-03 02:19:46 +01:00 |
|
|
ahmza
|
4cb6bc9ec4
|
Persist worker and Longhorn node labels
|
2026-09-03 02:00:24 +01:00 |
|
|
ahmza
|
b6f8f36c5b
|
Point Argo CD at Gitea and configure storage workers
|
2026-09-03 01:54:37 +01:00 |
|
|
ahmza
|
a5ddf11992
|
Adapt Talos config for five-node mixed architecture cluster
|
2026-09-02 22:50:34 +01:00 |
|