ahmza.com/k8s-starter-pack
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
75 Commits 1 Branch 0 Tags
b45f9a19a279067856c51cb74cb702c1443ed97a
Commit Graph
65 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
ahmza b45f9a19a2 deploy lidarr 2026-10-22 08:08:53 +00:00
ahmza e9b199aca0 updated entry for auth.ahmza.com as well as info for ingress one being the gateway for netbird 2026-10-16 23:06:30 +00:00
ahmza c1437d9199 Complete Authentik Kubernetes cutover 2026-10-16 17:05:38 +00:00
ahmza 9b5dff602a Require encryption for PostgreSQL backups 2026-10-16 17:03:41 +00:00
ahmza 1f26627488 Begin Authentik final cutover 2026-10-16 16:50:43 +00:00
ahmza db3c8e4694 Enable production TLS for Authentik 2026-10-16 16:46:10 +00:00
ahmza a8431d15c6 Fix cert-manager checks with split DNS 2026-10-16 16:42:46 +00:00
ahmza 0663196fa0 Expose Authentik through staging HTTPS 2026-10-16 16:38:43 +00:00
ahmza 5101df740d Start isolated Authentik trial server 2026-10-16 16:27:46 +00:00
ahmza f56c6719da Stage Authentik database and backups 2026-10-16 16:03:02 +00:00
ahmza 019039126a Add CloudNativePG for Authentik 2026-10-16 15:50:56 +00:00
ahmza aa1bb9d838 scrape Longhorn metrics 2026-10-16 02:17:40 +00:00
ahmza faebef6c58 use internal DNS name for VictoriaMetrics endpoint 2026-10-16 01:39:57 +00:00
ahmza f79691f838 skip Talos localhost-only control-plane metric scrapes 2026-10-16 01:07:28 +00:00
ahmza c7fce94b04 add VictoriaMetrics cluster metrics collection 2026-10-16 00:56:05 +00:00
ahmza 6f43b5e343 add NetBird connectivity to Talos nodes 2026-10-16 00:51:47 +00:00
ahmza fc195c5379 remove temporary credential recovery job 2026-10-15 23:17:52 +00:00
ahmza e9574e3317 add temporary credential recovery job 2026-10-15 23:09:09 +00:00
ahmza 2ba48aa313 update soulsync to 3.5.4 2026-10-14 15:50:12 +00:00
ahmza fbae9b0fc3 changed volume names to fit standard 2026-10-09 13:33:22 +00:00
ahmza 029ff24479 added extra download paths for usenet and torrent to match indexer as well as download paths 2026-10-09 13:31:53 +00:00
ahmza 0b13c02899 fix type in nfs mount from Audiobooks to AudioBooks 2026-10-09 10:46:47 +00:00
ahmza 4ddc5e0151 added soulsync 3.5.3 2026-10-09 10:41:17 +00:00
ahmza 397c4ec5f1 move to letsencrypt-prod cert 2026-09-11 10:26:12 +00:00
ahmza 6e49cc860c Fix Bazarr NFS media mounts 2026-09-11 10:21:07 +00:00
ahmza a48787f39e Merge pull request 'Bazarr' (#1) from bazarr into main 
Reviewed-on: #1
 2026-09-11 10:12:08 +00:00
ahmza c466da1fe0 complete bazarr manifests for testing 2026-09-11 10:10:45 +00:00
ahmza 781673bb47 inital work for seerr 2026-09-11 09:04:38 +00:00
ahmza cf61c8f96d updated network docs 2026-09-11 09:04:38 +00:00
ahmza 9baa07dacb inital work on bazarr app 2026-09-11 10:01:18 +01:00
ahmza bf506882a9 fix mcpacks topology spread scheduling 2026-09-04 22:38:02 +00:00
ahmza 9932ecf6de move mcpacks from letsencrypt-staging, to prod certs 2026-09-04 13:48:14 +00:00
ahmza 03954366ba move mcpacks from letsencrypt-staging, to prod certs 2026-09-04 13:39:52 +00:00
ahmza bdddf71132 Move mcpacks image to organization namespace 2026-09-04 12:46:31 +00:00
ahmza dad8da6358 Update Argo CD repository endpoint 2026-09-04 12:42:43 +00:00
ahmza e08b9dccc7 added mcpacks application to server packwiz pack.toml files. initial 2026-09-04 11:56:08 +00:00
ahmza e5c018ce8f Make Ingress the default path for reaching new apps 2026-09-03 05:29:05 +01:00
ahmza ae278d8ba1 Mark demo.ahmza.com TLS as live in network map 2026-09-03 05:28:42 +01:00
ahmza e88819f222 Switch demo.ahmza.com to production Let's Encrypt certificate 2026-09-03 05:19:44 +01:00
ahmza a5f4041d47 Add encrypted Cloudflare API token for cert-manager 2026-09-03 04:07:53 +00:00
ahmza 4affbaf973 Add cert-manager with Cloudflare DNS-01 ClusterIssuers 2026-09-03 05:03:10 +01:00
ahmza e6a42a39a8 Reclaim demo's former dedicated address in network map 2026-09-03 04:57:47 +01:00
ahmza bb69db8041 Route demo app through Ingress at demo.ahmza.com 2026-09-03 04:44:41 +01:00
ahmza 923cdd5162 Add ingress-nginx 2026-09-03 04:37:04 +01:00
ahmza 4fe5a921ff Remove SOPS pipeline test secret 2026-09-03 03:34:53 +00:00
ahmza 2ca52e4829 Move test secret into Helm templates/ so Argo CD actually applies it 2026-09-03 03:33:51 +00:00
ahmza 095e7b3244 Add end-to-end SOPS pipeline test secret 2026-09-03 03:32:41 +00:00
ahmza 7e9406dff0 Fix .sops.yaml to scope encryption to secret payload fields only 2026-09-03 04:31:03 +01:00
ahmza 0a733a7d76 Add SOPS+age secrets pipeline 2026-09-03 04:24:38 +01:00
ahmza 41dfd195a1 Align 09-growing-up with actual control-plane/worker split 2026-09-03 04:01:12 +01:00
ahmza c34b58e0b2 Add cascade-delete finalizer to stateless apps; document the distinction 2026-09-03 03:58:47 +01:00
ahmza 8037f24e82 delete whoami 2026-09-03 02:56:28 +00:00
ahmza f5cb20ad6b Add whoami as a second real app (docs/08 hands-on exercise) 2026-09-03 03:52:11 +01:00
ahmza 574d3032db Align 08-adding-new-apps with Gitea repo and Pod Security lesson 2026-09-03 03:50:43 +01:00
ahmza b45a633b99 update the demo page header 2026-09-03 02:39:15 +00:00
ahmza a8d26a946f Fix Longhorn default StorageClass to actually use 2 replicas 2026-09-03 03:33:14 +01:00
ahmza 170ef2d116 Give demo app a real Longhorn-backed PVC 2026-09-03 03:29:28 +01:00
ahmza 39e04e43d0 Update Longhorn docs for two-worker topology 2026-09-03 03:28:13 +01:00
ahmza 9bb29eee5a Allow Longhorn's privileged storage Pods via namespace Pod Security labels 2026-09-03 03:09:39 +01:00
ahmza 49d3f5c092 Fix BGPPeer nodeSelector to match empty-string node-role label convention 2026-09-03 03:04:17 +01:00
ahmza 3d2aea2d1f Allow MetalLB's privileged networking Pods via namespace Pod Security labels 2026-09-03 02:37:13 +01:00
ahmza 502de4fdf0 Configure MetalLB BGP service network 2026-09-03 02:19:46 +01:00
ahmza 4cb6bc9ec4 Persist worker and Longhorn node labels 2026-09-03 02:00:24 +01:00
ahmza b6f8f36c5b Point Argo CD at Gitea and configure storage workers 2026-09-03 01:54:37 +01:00
ahmza a5ddf11992 Adapt Talos config for five-node mixed architecture cluster 2026-09-02 22:50:34 +01:00