From 2319a2eecd7333806cb9d2cf16da62868c7b591a Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Thu, 5 Feb 2026 05:20:20 -0600 Subject: [PATCH 01/49] update --- infra/renovate/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/infra/renovate/values.yaml b/infra/renovate/values.yaml index bc5d1d8..adec42f 100644 --- a/infra/renovate/values.yaml +++ b/infra/renovate/values.yaml @@ -577,7 +577,7 @@ renovate-personal: # -- Environment variables to set on the renovate container env: RENOVATE_AUTODISCOVER: true - LOG_LEVEL: debug + #LOG_LEVEL: debug # env: # VARIABLE_NAME: "value" From 3907301d135019de50586e690a2b4b2876b4b713 Mon Sep 17 00:00:00 2001 From: RenovateBot Date: Thu, 5 Feb 2026 11:21:01 +0000 Subject: [PATCH 02/49] Update Helm release portainer to v2.33.6 --- infra/portainer/Chart.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/infra/portainer/Chart.yaml b/infra/portainer/Chart.yaml index 1813d7a..6bedd0a 100644 --- a/infra/portainer/Chart.yaml +++ b/infra/portainer/Chart.yaml @@ -9,4 +9,4 @@ appVersion: "1.16.0" dependencies: - name: portainer repository: https://portainer.github.io/k8s/ - version: 2.33.5 + version: 2.33.6 From 38475db228782af052b1adce2ea6e17238b7bc1e Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Thu, 5 Feb 2026 05:26:47 -0600 Subject: [PATCH 03/49] update --- infra/renovate/templates/secrets.yaml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/infra/renovate/templates/secrets.yaml b/infra/renovate/templates/secrets.yaml index 5ee1d1f..d42ab7e 100644 --- a/infra/renovate/templates/secrets.yaml +++ b/infra/renovate/templates/secrets.yaml @@ -56,3 +56,7 @@ spec: remoteRef: key: kv/renoatePersonal property: RENOVATE_TOKEN + - secretKey: RENOVATE_GITHUB_COM_TOKEN + remoteRef: + key: kv/renoatePersonal + property: RENOVATE_GITHUB_COM_TOKEN From 1b37247b5219ec4bec4910e20f24de56d38651e7 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Thu, 5 Feb 2026 05:35:41 -0600 Subject: [PATCH 04/49] update to personal gitlab --- infra/argocd/templates/argocd.yaml | 2 +- infra/argocd/templates/authentik.yaml | 4 ++-- infra/argocd/templates/bitwarden.yaml | 2 +- infra/argocd/templates/cert-manager.yaml | 4 ++-- infra/argocd/templates/external-dns.yaml | 2 +- infra/argocd/templates/external-secrets.yaml | 4 ++-- infra/argocd/templates/gitlab-runner.yaml | 2 +- infra/argocd/templates/internalproxy.yaml | 2 +- infra/argocd/templates/istio.yaml | 4 ++-- infra/argocd/templates/kube-prometheus-stack.yaml | 2 +- infra/argocd/templates/litellm.yaml | 2 +- infra/argocd/templates/littlelink.yaml | 2 +- infra/argocd/templates/longhorn.yaml | 4 ++-- infra/argocd/templates/metallb-system.yaml | 6 +++--- infra/argocd/templates/nebula-sync.yaml | 2 +- infra/argocd/templates/nfs.yaml | 2 +- infra/argocd/templates/openclarity.yaml | 2 +- infra/argocd/templates/openspeedtest.yaml | 2 +- infra/argocd/templates/portainer.yaml | 2 +- infra/argocd/templates/redlib.yaml | 2 +- infra/argocd/templates/searxng.yaml | 2 +- infra/argocd/templates/traefik.yaml | 6 +++--- infra/argocd/templates/vault.yaml | 4 ++-- 23 files changed, 33 insertions(+), 33 deletions(-) diff --git a/infra/argocd/templates/argocd.yaml b/infra/argocd/templates/argocd.yaml index 54e36bd..14141da 100644 --- a/infra/argocd/templates/argocd.yaml +++ b/infra/argocd/templates/argocd.yaml @@ -6,7 +6,7 @@ metadata: spec: project: default source: - repoURL: https://gitlab.com/developerdurp/homelab.git + repoURL: https://gitlab.durp.info/durfy/homelab/gitops.git targetRevision: main path: infra/argocd destination: diff --git a/infra/argocd/templates/authentik.yaml b/infra/argocd/templates/authentik.yaml index 42be478..ac5f8dc 100644 --- a/infra/argocd/templates/authentik.yaml +++ b/infra/argocd/templates/authentik.yaml @@ -6,7 +6,7 @@ metadata: spec: project: default source: - repoURL: https://gitlab.com/developerdurp/homelab.git + repoURL: https://gitlab.durp.info/durfy/homelab/gitops.git targetRevision: main path: infra/authentik destination: @@ -31,7 +31,7 @@ metadata: spec: project: default source: - repoURL: https://gitlab.com/developerdurp/homelab.git + repoURL: https://gitlab.durp.info/durfy/homelab/gitops.git targetRevision: main path: dmz/authentik destination: diff --git a/infra/argocd/templates/bitwarden.yaml b/infra/argocd/templates/bitwarden.yaml index e9b4905..a42abbc 100644 --- a/infra/argocd/templates/bitwarden.yaml +++ b/infra/argocd/templates/bitwarden.yaml @@ -6,7 +6,7 @@ metadata: spec: project: default source: - repoURL: https://gitlab.com/developerdurp/homelab.git + repoURL: https://gitlab.durp.info/durfy/homelab/gitops.git targetRevision: main path: infra/bitwarden destination: diff --git a/infra/argocd/templates/cert-manager.yaml b/infra/argocd/templates/cert-manager.yaml index e7ac95d..31ef868 100644 --- a/infra/argocd/templates/cert-manager.yaml +++ b/infra/argocd/templates/cert-manager.yaml @@ -6,7 +6,7 @@ metadata: spec: project: default source: - repoURL: https://gitlab.com/developerdurp/homelab.git + repoURL: https://gitlab.durp.info/durfy/homelab/gitops.git targetRevision: main path: infra/cert-manager destination: @@ -29,7 +29,7 @@ metadata: spec: project: default source: - repoURL: https://gitlab.com/developerdurp/homelab.git + repoURL: https://gitlab.durp.info/durfy/homelab/gitops.git targetRevision: main path: dmz/cert-manager destination: diff --git a/infra/argocd/templates/external-dns.yaml b/infra/argocd/templates/external-dns.yaml index 6edb645..caa32d9 100644 --- a/infra/argocd/templates/external-dns.yaml +++ b/infra/argocd/templates/external-dns.yaml @@ -6,7 +6,7 @@ metadata: spec: project: default source: - repoURL: https://gitlab.com/developerdurp/homelab.git + repoURL: https://gitlab.durp.info/durfy/homelab/gitops.git targetRevision: main path: dmz/external-dns destination: diff --git a/infra/argocd/templates/external-secrets.yaml b/infra/argocd/templates/external-secrets.yaml index 0583fea..7787a03 100644 --- a/infra/argocd/templates/external-secrets.yaml +++ b/infra/argocd/templates/external-secrets.yaml @@ -6,7 +6,7 @@ metadata: spec: project: default source: - repoURL: https://gitlab.com/developerdurp/homelab.git + repoURL: https://gitlab.durp.info/durfy/homelab/gitops.git targetRevision: main path: infra/external-secrets destination: @@ -29,7 +29,7 @@ metadata: spec: project: default source: - repoURL: https://gitlab.com/developerdurp/homelab.git + repoURL: https://gitlab.durp.info/durfy/homelab/gitops.git targetRevision: main path: dmz/external-secrets destination: diff --git a/infra/argocd/templates/gitlab-runner.yaml b/infra/argocd/templates/gitlab-runner.yaml index de73c0c..25b82bb 100644 --- a/infra/argocd/templates/gitlab-runner.yaml +++ b/infra/argocd/templates/gitlab-runner.yaml @@ -6,7 +6,7 @@ metadata: spec: project: default source: - repoURL: https://gitlab.com/developerdurp/homelab.git + repoURL: https://gitlab.durp.info/durfy/homelab/gitops.git targetRevision: main path: dmz/gitlab-runner destination: diff --git a/infra/argocd/templates/internalproxy.yaml b/infra/argocd/templates/internalproxy.yaml index 57e2c60..9381c2d 100644 --- a/infra/argocd/templates/internalproxy.yaml +++ b/infra/argocd/templates/internalproxy.yaml @@ -6,7 +6,7 @@ metadata: spec: project: default source: - repoURL: https://gitlab.com/developerdurp/homelab.git + repoURL: https://gitlab.durp.info/durfy/homelab/gitops.git targetRevision: main path: dmz/internalproxy destination: diff --git a/infra/argocd/templates/istio.yaml b/infra/argocd/templates/istio.yaml index 4d9d6d5..615a43f 100644 --- a/infra/argocd/templates/istio.yaml +++ b/infra/argocd/templates/istio.yaml @@ -6,7 +6,7 @@ metadata: spec: project: default source: - repoURL: https://gitlab.com/developerdurp/homelab.git + repoURL: https://gitlab.durp.info/durfy/homelab/gitops.git targetRevision: main path: infra/istio-system destination: @@ -36,7 +36,7 @@ metadata: spec: project: default source: - repoURL: https://gitlab.com/developerdurp/homelab.git + repoURL: https://gitlab.durp.info/durfy/homelab/gitops.git targetRevision: main path: dmz/istio-system destination: diff --git a/infra/argocd/templates/kube-prometheus-stack.yaml b/infra/argocd/templates/kube-prometheus-stack.yaml index d89dad1..bc52501 100644 --- a/infra/argocd/templates/kube-prometheus-stack.yaml +++ b/infra/argocd/templates/kube-prometheus-stack.yaml @@ -6,7 +6,7 @@ metadata: spec: project: default source: - repoURL: https://gitlab.com/developerdurp/homelab.git + repoURL: https://gitlab.durp.info/durfy/homelab/gitops.git targetRevision: main path: infra/kube-prometheus-stack destination: diff --git a/infra/argocd/templates/litellm.yaml b/infra/argocd/templates/litellm.yaml index 7c818dc..d8e225a 100644 --- a/infra/argocd/templates/litellm.yaml +++ b/infra/argocd/templates/litellm.yaml @@ -6,7 +6,7 @@ #spec: # project: default # source: -# repoURL: https://gitlab.com/developerdurp/homelab.git +# repoURL: https://gitlab.durp.info/durfy/homelab/gitops.git # targetRevision: main # path: infra/litellm # destination: diff --git a/infra/argocd/templates/littlelink.yaml b/infra/argocd/templates/littlelink.yaml index 5821718..2d6011f 100644 --- a/infra/argocd/templates/littlelink.yaml +++ b/infra/argocd/templates/littlelink.yaml @@ -6,7 +6,7 @@ metadata: spec: project: default source: - repoURL: https://gitlab.com/developerdurp/homelab.git + repoURL: https://gitlab.durp.info/durfy/homelab/gitops.git targetRevision: main path: dmz/littlelink directory: diff --git a/infra/argocd/templates/longhorn.yaml b/infra/argocd/templates/longhorn.yaml index 33eda6e..f28a74c 100644 --- a/infra/argocd/templates/longhorn.yaml +++ b/infra/argocd/templates/longhorn.yaml @@ -6,7 +6,7 @@ metadata: spec: project: default source: - repoURL: https://gitlab.com/developerdurp/homelab.git + repoURL: https://gitlab.durp.info/durfy/homelab/gitops.git targetRevision: main path: infra/longhorn destination: @@ -33,7 +33,7 @@ metadata: spec: project: default source: - repoURL: https://gitlab.com/developerdurp/homelab.git + repoURL: https://gitlab.durp.info/durfy/homelab/gitops.git targetRevision: main path: dmz/longhorn destination: diff --git a/infra/argocd/templates/metallb-system.yaml b/infra/argocd/templates/metallb-system.yaml index bac4be3..a9b33d0 100644 --- a/infra/argocd/templates/metallb-system.yaml +++ b/infra/argocd/templates/metallb-system.yaml @@ -6,7 +6,7 @@ metadata: spec: project: default source: - repoURL: https://gitlab.com/developerdurp/homelab.git + repoURL: https://gitlab.durp.info/durfy/homelab/gitops.git targetRevision: main path: infra/metallb-system destination: @@ -29,7 +29,7 @@ metadata: spec: project: default source: - repoURL: https://gitlab.com/developerdurp/homelab.git + repoURL: https://gitlab.durp.info/durfy/homelab/gitops.git targetRevision: main path: dmz/metallb-system destination: @@ -52,7 +52,7 @@ metadata: spec: project: default source: - repoURL: https://gitlab.com/developerdurp/homelab.git + repoURL: https://gitlab.durp.info/durfy/homelab/gitops.git targetRevision: main path: dev/metallb-system destination: diff --git a/infra/argocd/templates/nebula-sync.yaml b/infra/argocd/templates/nebula-sync.yaml index dea50a7..d19b024 100644 --- a/infra/argocd/templates/nebula-sync.yaml +++ b/infra/argocd/templates/nebula-sync.yaml @@ -6,7 +6,7 @@ metadata: spec: project: default source: - repoURL: https://gitlab.com/developerdurp/homelab.git + repoURL: https://gitlab.durp.info/durfy/homelab/gitops.git targetRevision: main path: infra/nebula-sync destination: diff --git a/infra/argocd/templates/nfs.yaml b/infra/argocd/templates/nfs.yaml index f7e964f..c006f32 100644 --- a/infra/argocd/templates/nfs.yaml +++ b/infra/argocd/templates/nfs.yaml @@ -6,7 +6,7 @@ metadata: spec: project: default source: - repoURL: https://gitlab.com/developerdurp/homelab.git + repoURL: https://gitlab.durp.info/durfy/homelab/gitops.git targetRevision: main path: infra/nfs destination: diff --git a/infra/argocd/templates/openclarity.yaml b/infra/argocd/templates/openclarity.yaml index 64307d6..57c1995 100644 --- a/infra/argocd/templates/openclarity.yaml +++ b/infra/argocd/templates/openclarity.yaml @@ -6,7 +6,7 @@ metadata: spec: project: default source: - repoURL: https://gitlab.com/developerdurp/homelab.git + repoURL: https://gitlab.durp.info/durfy/homelab/gitops.git targetRevision: main path: infra/openclarity destination: diff --git a/infra/argocd/templates/openspeedtest.yaml b/infra/argocd/templates/openspeedtest.yaml index 5d79f9c..ead0679 100644 --- a/infra/argocd/templates/openspeedtest.yaml +++ b/infra/argocd/templates/openspeedtest.yaml @@ -6,7 +6,7 @@ metadata: spec: project: default source: - repoURL: https://gitlab.com/developerdurp/homelab.git + repoURL: https://gitlab.durp.info/durfy/homelab/gitops.git targetRevision: main path: dmz/openspeedtest directory: diff --git a/infra/argocd/templates/portainer.yaml b/infra/argocd/templates/portainer.yaml index d8b5d32..22b2a9b 100644 --- a/infra/argocd/templates/portainer.yaml +++ b/infra/argocd/templates/portainer.yaml @@ -6,7 +6,7 @@ metadata: spec: project: default source: - repoURL: https://gitlab.com/developerdurp/homelab.git + repoURL: https://gitlab.durp.info/durfy/homelab/gitops.git targetRevision: main path: infra/portainer destination: diff --git a/infra/argocd/templates/redlib.yaml b/infra/argocd/templates/redlib.yaml index 901c316..3867fb7 100644 --- a/infra/argocd/templates/redlib.yaml +++ b/infra/argocd/templates/redlib.yaml @@ -6,7 +6,7 @@ metadata: spec: project: default source: - repoURL: https://gitlab.com/developerdurp/homelab.git + repoURL: https://gitlab.durp.info/durfy/homelab/gitops.git targetRevision: main path: dmz/redlib directory: diff --git a/infra/argocd/templates/searxng.yaml b/infra/argocd/templates/searxng.yaml index 174c060..9e05411 100644 --- a/infra/argocd/templates/searxng.yaml +++ b/infra/argocd/templates/searxng.yaml @@ -6,7 +6,7 @@ metadata: spec: project: default source: - repoURL: https://gitlab.com/developerdurp/homelab.git + repoURL: https://gitlab.durp.info/durfy/homelab/gitops.git targetRevision: main path: dmz/searxng directory: diff --git a/infra/argocd/templates/traefik.yaml b/infra/argocd/templates/traefik.yaml index 0136c94..0ea06aa 100644 --- a/infra/argocd/templates/traefik.yaml +++ b/infra/argocd/templates/traefik.yaml @@ -6,7 +6,7 @@ metadata: spec: project: default source: - repoURL: https://gitlab.com/developerdurp/homelab.git + repoURL: https://gitlab.durp.info/durfy/homelab/gitops.git targetRevision: main path: infra/traefik destination: @@ -32,7 +32,7 @@ metadata: spec: project: default source: - repoURL: https://gitlab.com/developerdurp/homelab.git + repoURL: https://gitlab.durp.info/durfy/homelab/gitops.git targetRevision: main path: dmz/traefik destination: @@ -58,7 +58,7 @@ metadata: spec: project: default source: - repoURL: https://gitlab.com/developerdurp/homelab.git + repoURL: https://gitlab.durp.info/durfy/homelab/gitops.git targetRevision: main path: dev/traefik destination: diff --git a/infra/argocd/templates/vault.yaml b/infra/argocd/templates/vault.yaml index 351d06f..b5f6a0b 100644 --- a/infra/argocd/templates/vault.yaml +++ b/infra/argocd/templates/vault.yaml @@ -6,7 +6,7 @@ metadata: spec: project: default source: - repoURL: https://gitlab.com/developerdurp/homelab.git + repoURL: https://gitlab.durp.info/durfy/homelab/gitops.git targetRevision: main path: infra/vault destination: @@ -34,7 +34,7 @@ metadata: spec: project: default source: - repoURL: https://gitlab.com/developerdurp/homelab.git + repoURL: https://gitlab.durp.info/durfy/homelab/gitops.git targetRevision: main path: dmz/vault destination: From 268e8b7af53cb1288797e069369a6aaf3e8a664f Mon Sep 17 00:00:00 2001 From: RenovateBot Date: Fri, 6 Feb 2026 07:01:19 +0000 Subject: [PATCH 05/49] Update docker.io/aquasec/trivy Docker tag to v0.69.1 --- infra/openclarity/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/infra/openclarity/values.yaml b/infra/openclarity/values.yaml index 099b435..e77ca5a 100644 --- a/infra/openclarity/values.yaml +++ b/infra/openclarity/values.yaml @@ -542,7 +542,7 @@ openclarity: # -- Trivy Server container repository repository: aquasec/trivy # -- Trivy Server container tag - tag: 0.64.1 + tag: 0.69.1 # -- Trivy Server image digest. If set will override the tag. digest: "" # -- Trivy Server image pull policy From 0af5e1f9c17b8c212aae95e6c21dfda3de3dc0fc Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Fri, 6 Feb 2026 05:37:36 -0600 Subject: [PATCH 06/49] update --- dmz/gitlab-runner/values.yaml | 46 +++++++++++++++++------------------ 1 file changed, 23 insertions(+), 23 deletions(-) diff --git a/dmz/gitlab-runner/values.yaml b/dmz/gitlab-runner/values.yaml index cbf56dc..3e7ddb6 100644 --- a/dmz/gitlab-runner/values.yaml +++ b/dmz/gitlab-runner/values.yaml @@ -18,15 +18,15 @@ gitlab-runner: podSecurityPolicy: enabled: false resourceNames: - - gitlab-runner + - gitlab-runner metrics: enabled: true serviceMonitor: - enabled: true + enabled: true service: enabled: true - annotations: {} + annotations: {} runners: config: | @@ -41,15 +41,15 @@ gitlab-runner: runUntagged: true privileged: true secret: gitlab-secret - #builds: + #builds: #cpuLimit: 200m #cpuLimitOverwriteMaxAllowed: 400m #memoryLimit: 256Mi #memoryLimitOverwriteMaxAllowed: 512Mi #cpuRequests: 100m #cpuRequestsOverwriteMaxAllowed: 200m - #memoryRequests: 128Mi - #memoryRequestsOverwriteMaxAllowed: 256Mi + #memoryRequests: 128Mi + #memoryRequestsOverwriteMaxAllowed: 256Mi securityContext: allowPrivilegeEscalation: false @@ -63,12 +63,12 @@ gitlab-runner: runAsUser: 100 fsGroup: 65533 - resources: + resources: limits: memory: 2Gi requests: memory: 128Mi - cpu: 500m + cpu: 50m personal: @@ -77,7 +77,7 @@ personal: image: gitlab-org/gitlab-runner imagePullPolicy: Always - gitlabUrl: https://gitlab.com/ + gitlabUrl: https://gitlab.durp.info/ unregisterRunner: false terminationGracePeriodSeconds: 3600 concurrent: 10 @@ -90,15 +90,15 @@ personal: podSecurityPolicy: enabled: false resourceNames: - - gitlab-runner + - gitlab-runner metrics: enabled: true serviceMonitor: - enabled: true + enabled: true service: enabled: true - annotations: {} + annotations: {} runners: config: | @@ -113,15 +113,15 @@ personal: runUntagged: true privileged: true secret: gitlab-secret-personal - #builds: - #cpuLimit: 200m - #cpuLimitOverwriteMaxAllowed: 400m - #memoryLimit: 256Mi - #memoryLimitOverwriteMaxAllowed: 512Mi - #cpuRequests: 100m - #cpuRequestsOverwriteMaxAllowed: 200m - #memoryRequests: 128Mi - #memoryRequestsOverwriteMaxAllowed: 256Mi + builds: + cpuLimit: 200m + cpuLimitOverwriteMaxAllowed: 400m + memoryLimit: 256Mi + memoryLimitOverwriteMaxAllowed: 512Mi + cpuRequests: 100m + cpuRequestsOverwriteMaxAllowed: 200m + memoryRequests: 128Mi + memoryRequestsOverwriteMaxAllowed: 256Mi securityContext: allowPrivilegeEscalation: false @@ -135,9 +135,9 @@ personal: runAsUser: 100 fsGroup: 65533 - resources: + resources: limits: memory: 2Gi requests: memory: 128Mi - cpu: 500m + cpu: 50m From 0e20657811fa124d4f69d0f0943d2b0374be5521 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 14 Feb 2026 04:57:57 -0600 Subject: [PATCH 07/49] update --- dmz/internalproxy/templates/nexus.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dmz/internalproxy/templates/nexus.yaml b/dmz/internalproxy/templates/nexus.yaml index 683fe8d..ed609d9 100644 --- a/dmz/internalproxy/templates/nexus.yaml +++ b/dmz/internalproxy/templates/nexus.yaml @@ -19,7 +19,7 @@ metadata: name: nexus subsets: - addresses: - - ip: 192.168.20.200 + - ip: 192.168.21.200 ports: - name: app port: 8081 From f7029a6329e3faf93cbd492e5f585da859280894 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Mon, 16 Feb 2026 04:46:14 -0600 Subject: [PATCH 08/49] add matrix server --- .gitignore | 4 ++- dmz/main.tf | 68 +++++++++++++++++++++++++++++++++++++++++++++++++++ dmz/matrix.tf | 57 ++++++++++++++++++++++++++++++++++++++++++ 3 files changed, 128 insertions(+), 1 deletion(-) create mode 100644 dmz/main.tf create mode 100644 dmz/matrix.tf diff --git a/.gitignore b/.gitignore index 723ef36..d32217b 100644 --- a/.gitignore +++ b/.gitignore @@ -1 +1,3 @@ -.idea \ No newline at end of file +*/.terraform +*/.terraform.lock.hcl +.idea diff --git a/dmz/main.tf b/dmz/main.tf new file mode 100644 index 0000000..eb23c67 --- /dev/null +++ b/dmz/main.tf @@ -0,0 +1,68 @@ +terraform { + backend "http" {} + required_providers { + proxmox = { + source = "Telmate/proxmox" + version = "3.0.1-rc9" + } + } +} + +provider "proxmox" { + pm_parallel = 1 + pm_tls_insecure = true + pm_api_url = var.pm_api_url + pm_user = var.pm_user + pm_password = var.pm_password + pm_debug = false +} + +locals { + sshkeys = "ssh-rsa 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 ansible" + template = "Debian12-Template" + storage = "cache-domains" + emulatessd = true + format = "raw" + dnsserver = "192.168.98.1" + vlan = 98 + k3smaster = { + tags = "k3s_dmz" + count = 3 + name = ["master01-dmz", "master02-dmz", "master03-dmz"] + cores = 2 + memory = "4096" + drive = 20 + node = ["mothership", "overlord", "vanguard"] + ip = ["11", "12", "13"] + } + k3sserver = { + tags = "k3s_dmz" + count = 3 + name = ["node01-dmz", "node02-dmz", "node03-dmz"] + cores = 4 + memory = "8192" + drive = 240 + node = ["mothership", "overlord", "vanguard"] + ip = ["21", "22", "23"] + } + openVPN = { + tags = "openVPN" + count = 1 + name = ["openVPN"] + cores = 2 + memory = "4096" + drive = 20 + node = ["mothership"] + ip = ["20"] + } + matrix = { + tags = "matrix" + count = 1 + name = ["matrix"] + cores = 2 + memory = "4096" + drive = 60 + node = ["vanguard"] + ip = ["21"] + } +} diff --git a/dmz/matrix.tf b/dmz/matrix.tf new file mode 100644 index 0000000..66dd4c7 --- /dev/null +++ b/dmz/matrix.tf @@ -0,0 +1,57 @@ +resource "proxmox_vm_qemu" "matrix" { + count = local.matrix.count + ciuser = "administrator" + vmid = "${local.vlan}${local.matrix.ip[count.index]}" + name = local.matrix.name[count.index] + target_node = local.matrix.node[count.index] + clone = local.template + tags = local.matrix.tags + qemu_os = "l26" + full_clone = true + os_type = "cloud-init" + agent = 1 + cores = local.matrix.cores + sockets = 1 + cpu_type = "host" + memory = local.matrix.memory + scsihw = "virtio-scsi-pci" + #bootdisk = "scsi0" + boot = "order=virtio0" + onboot = true + sshkeys = local.sshkeys + vga { + type = "serial0" + } + serial { + id = 0 + type = "socket" + } + disks { + ide { + ide2 { + cloudinit { + storage = local.storage + } + } + } + virtio { + virtio0 { + disk { + size = local.matrix.drive + format = local.format + storage = local.storage + } + } + } + } + network { + id = 0 + model = "virtio" + bridge = "vmbr0" + tag = local.vlan + } + #Cloud Init Settings + ipconfig0 = "ip=192.168.${local.vlan}.${local.matrix.ip[count.index]}/24,gw=192.168.${local.vlan}.1" + searchdomain = "durp.loc" + nameserver = local.dnsserver +} From b328e106dfbfdba499b93a479bcd03b088423b23 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Mon, 16 Feb 2026 04:51:57 -0600 Subject: [PATCH 09/49] update --- dmz/main.tf | 68 --------------------------------------------------- dmz/matrix.tf | 57 ------------------------------------------ 2 files changed, 125 deletions(-) delete mode 100644 dmz/main.tf delete mode 100644 dmz/matrix.tf diff --git a/dmz/main.tf b/dmz/main.tf deleted file mode 100644 index eb23c67..0000000 --- a/dmz/main.tf +++ /dev/null @@ -1,68 +0,0 @@ -terraform { - backend "http" {} - required_providers { - proxmox = { - source = "Telmate/proxmox" - version = "3.0.1-rc9" - } - } -} - -provider "proxmox" { - pm_parallel = 1 - pm_tls_insecure = true - pm_api_url = var.pm_api_url - pm_user = var.pm_user - pm_password = var.pm_password - pm_debug = false -} - -locals { - sshkeys = "ssh-rsa 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 ansible" - template = "Debian12-Template" - storage = "cache-domains" - emulatessd = true - format = "raw" - dnsserver = "192.168.98.1" - vlan = 98 - k3smaster = { - tags = "k3s_dmz" - count = 3 - name = ["master01-dmz", "master02-dmz", "master03-dmz"] - cores = 2 - memory = "4096" - drive = 20 - node = ["mothership", "overlord", "vanguard"] - ip = ["11", "12", "13"] - } - k3sserver = { - tags = "k3s_dmz" - count = 3 - name = ["node01-dmz", "node02-dmz", "node03-dmz"] - cores = 4 - memory = "8192" - drive = 240 - node = ["mothership", "overlord", "vanguard"] - ip = ["21", "22", "23"] - } - openVPN = { - tags = "openVPN" - count = 1 - name = ["openVPN"] - cores = 2 - memory = "4096" - drive = 20 - node = ["mothership"] - ip = ["20"] - } - matrix = { - tags = "matrix" - count = 1 - name = ["matrix"] - cores = 2 - memory = "4096" - drive = 60 - node = ["vanguard"] - ip = ["21"] - } -} diff --git a/dmz/matrix.tf b/dmz/matrix.tf deleted file mode 100644 index 66dd4c7..0000000 --- a/dmz/matrix.tf +++ /dev/null @@ -1,57 +0,0 @@ -resource "proxmox_vm_qemu" "matrix" { - count = local.matrix.count - ciuser = "administrator" - vmid = "${local.vlan}${local.matrix.ip[count.index]}" - name = local.matrix.name[count.index] - target_node = local.matrix.node[count.index] - clone = local.template - tags = local.matrix.tags - qemu_os = "l26" - full_clone = true - os_type = "cloud-init" - agent = 1 - cores = local.matrix.cores - sockets = 1 - cpu_type = "host" - memory = local.matrix.memory - scsihw = "virtio-scsi-pci" - #bootdisk = "scsi0" - boot = "order=virtio0" - onboot = true - sshkeys = local.sshkeys - vga { - type = "serial0" - } - serial { - id = 0 - type = "socket" - } - disks { - ide { - ide2 { - cloudinit { - storage = local.storage - } - } - } - virtio { - virtio0 { - disk { - size = local.matrix.drive - format = local.format - storage = local.storage - } - } - } - } - network { - id = 0 - model = "virtio" - bridge = "vmbr0" - tag = local.vlan - } - #Cloud Init Settings - ipconfig0 = "ip=192.168.${local.vlan}.${local.matrix.ip[count.index]}/24,gw=192.168.${local.vlan}.1" - searchdomain = "durp.loc" - nameserver = local.dnsserver -} From 53acab0ecea66c61fe3435be741a82f049f08fc9 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Wed, 18 Feb 2026 06:09:02 -0600 Subject: [PATCH 10/49] add nextcloud --- dmz/internalproxy/templates/nextcloud.yaml | 68 ++++++++++++++++++++++ 1 file changed, 68 insertions(+) create mode 100644 dmz/internalproxy/templates/nextcloud.yaml diff --git a/dmz/internalproxy/templates/nextcloud.yaml b/dmz/internalproxy/templates/nextcloud.yaml new file mode 100644 index 0000000..4a645a2 --- /dev/null +++ b/dmz/internalproxy/templates/nextcloud.yaml @@ -0,0 +1,68 @@ +apiVersion: v1 +kind: Service +metadata: + name: nextcloud +spec: + ports: + - name: app + port: 7282 + protocol: TCP + targetPort: 7282 + clusterIP: None + type: ClusterIP + +--- +apiVersion: v1 +kind: Endpoints +metadata: + name: nextcloud +subsets: + - addresses: + - ip: 192.168.21.200 + ports: + - name: app + port: 7282 + protocol: TCP + +--- +apiVersion: traefik.io/v1alpha1 +kind: IngressRoute +metadata: + name: nextcloud-ingress +spec: + entryPoints: + - websecure + routes: + - match: Host(`nextcloud.durp.info`) && PathPrefix(`/`) + kind: Rule + services: + - name: nextcloud + port: 7282 + scheme: http + tls: + secretName: nextcloud-tls + +--- +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + name: nextcloud-tls +spec: + secretName: nextcloud-tls + issuerRef: + name: letsencrypt-production + kind: ClusterIssuer + commonName: "nextcloud.durp.info" + dnsNames: + - "nextcloud.durp.info" + +--- +kind: Service +apiVersion: v1 +metadata: + name: nextcloud-external-dns + annotations: + external-dns.alpha.kubernetes.io/hostname: nextcloud.durp.info +spec: + type: ExternalName + externalName: durp.info From 975dbd1c6d1377ebb0194bef16f72b61419654c6 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Wed, 18 Feb 2026 06:11:48 -0600 Subject: [PATCH 11/49] update --- dmz/internalproxy/templates/nextcloud.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dmz/internalproxy/templates/nextcloud.yaml b/dmz/internalproxy/templates/nextcloud.yaml index 4a645a2..4bd7e96 100644 --- a/dmz/internalproxy/templates/nextcloud.yaml +++ b/dmz/internalproxy/templates/nextcloud.yaml @@ -38,7 +38,7 @@ spec: services: - name: nextcloud port: 7282 - scheme: http + scheme: https tls: secretName: nextcloud-tls From ed66676f2e0c03a7cc561100924a1eba32ecb3fe Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Wed, 18 Feb 2026 06:18:52 -0600 Subject: [PATCH 12/49] update --- dmz/internalproxy/templates/nextcloud.yaml | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/dmz/internalproxy/templates/nextcloud.yaml b/dmz/internalproxy/templates/nextcloud.yaml index 4bd7e96..faf27a9 100644 --- a/dmz/internalproxy/templates/nextcloud.yaml +++ b/dmz/internalproxy/templates/nextcloud.yaml @@ -35,6 +35,8 @@ spec: routes: - match: Host(`nextcloud.durp.info`) && PathPrefix(`/`) kind: Rule + middlewares: + - nextcloud-secure-headers services: - name: nextcloud port: 7282 @@ -66,3 +68,11 @@ metadata: spec: type: ExternalName externalName: durp.info + +--- +middlewares: + nextcloud-secure-headers: + headers: + hostsProxyHeaders: + - "X-Forwarded-Host" + referrerPolicy: "same-origin" \ No newline at end of file From f75d5d5be47e4f6d5934ea55733970549d577ea9 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Wed, 18 Feb 2026 06:21:02 -0600 Subject: [PATCH 13/49] update --- dmz/internalproxy/templates/nextcloud.yaml | 15 +++++++++------ 1 file changed, 9 insertions(+), 6 deletions(-) diff --git a/dmz/internalproxy/templates/nextcloud.yaml b/dmz/internalproxy/templates/nextcloud.yaml index faf27a9..82c8e6d 100644 --- a/dmz/internalproxy/templates/nextcloud.yaml +++ b/dmz/internalproxy/templates/nextcloud.yaml @@ -70,9 +70,12 @@ spec: externalName: durp.info --- -middlewares: - nextcloud-secure-headers: - headers: - hostsProxyHeaders: - - "X-Forwarded-Host" - referrerPolicy: "same-origin" \ No newline at end of file +apiVersion: traefik.io/v1alpha1 +kind: Middleware +metadata: + name: nextcloud-secure-headers +spec: + headers: + hostsProxyHeaders: + - "X-Forwarded-Host" + referrerPolicy: "same-origin" From 9d5ffd8a8a29197dec489737885f2c97aacd3038 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Wed, 18 Feb 2026 06:22:18 -0600 Subject: [PATCH 14/49] update --- dmz/internalproxy/templates/nextcloud.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dmz/internalproxy/templates/nextcloud.yaml b/dmz/internalproxy/templates/nextcloud.yaml index 82c8e6d..2050c2d 100644 --- a/dmz/internalproxy/templates/nextcloud.yaml +++ b/dmz/internalproxy/templates/nextcloud.yaml @@ -36,7 +36,7 @@ spec: - match: Host(`nextcloud.durp.info`) && PathPrefix(`/`) kind: Rule middlewares: - - nextcloud-secure-headers + - name: nextcloud-secure-headers services: - name: nextcloud port: 7282 From 749974197e65a8f6a96f3c0abb666020c954faf6 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Wed, 18 Feb 2026 06:25:44 -0600 Subject: [PATCH 15/49] update --- dmz/internalproxy/templates/nextcloud.yaml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/dmz/internalproxy/templates/nextcloud.yaml b/dmz/internalproxy/templates/nextcloud.yaml index 2050c2d..c4fd4a3 100644 --- a/dmz/internalproxy/templates/nextcloud.yaml +++ b/dmz/internalproxy/templates/nextcloud.yaml @@ -5,9 +5,9 @@ metadata: spec: ports: - name: app - port: 7282 + port: 11000 protocol: TCP - targetPort: 7282 + targetPort: 11000 clusterIP: None type: ClusterIP @@ -21,7 +21,7 @@ subsets: - ip: 192.168.21.200 ports: - name: app - port: 7282 + port: 11000 protocol: TCP --- @@ -39,7 +39,7 @@ spec: - name: nextcloud-secure-headers services: - name: nextcloud - port: 7282 + port: 11000 scheme: https tls: secretName: nextcloud-tls From d6d965595cba1975ccec90bfa3d03221de521da9 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Wed, 18 Feb 2026 06:30:33 -0600 Subject: [PATCH 16/49] update --- dmz/internalproxy/templates/nextcloud.yaml | 22 +++++++++++++++++++++- 1 file changed, 21 insertions(+), 1 deletion(-) diff --git a/dmz/internalproxy/templates/nextcloud.yaml b/dmz/internalproxy/templates/nextcloud.yaml index c4fd4a3..4b80c8e 100644 --- a/dmz/internalproxy/templates/nextcloud.yaml +++ b/dmz/internalproxy/templates/nextcloud.yaml @@ -36,7 +36,7 @@ spec: - match: Host(`nextcloud.durp.info`) && PathPrefix(`/`) kind: Rule middlewares: - - name: nextcloud-secure-headers + - name: nextcloud-chain services: - name: nextcloud port: 11000 @@ -79,3 +79,23 @@ spec: hostsProxyHeaders: - "X-Forwarded-Host" referrerPolicy: "same-origin" + +--- +apiVersion: traefik.io/v1alpha1 +kind: Middleware +metadata: + name: https-redirect +spec: + redirectScheme: + scheme: https + +--- +apiVersion: traefik.io/v1alpha1 +kind: Middleware +metadata: + name: nextcloud-chain +spec: + chain: + middlewares: + - name: https-redirect + - name: nextcloud-secure-headers \ No newline at end of file From 68d068300a2e83488bd91e0bbf06aa6a012e8479 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Thu, 19 Feb 2026 05:08:15 -0600 Subject: [PATCH 17/49] update --- dmz/internalproxy/templates/nextcloud.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dmz/internalproxy/templates/nextcloud.yaml b/dmz/internalproxy/templates/nextcloud.yaml index 4b80c8e..e3ea9dd 100644 --- a/dmz/internalproxy/templates/nextcloud.yaml +++ b/dmz/internalproxy/templates/nextcloud.yaml @@ -40,7 +40,7 @@ spec: services: - name: nextcloud port: 11000 - scheme: https + scheme: http tls: secretName: nextcloud-tls From 746e7f4d86f8df8986b506d9e925b42f001f8875 Mon Sep 17 00:00:00 2001 From: RenovateBot Date: Sun, 1 Mar 2026 07:02:06 +0000 Subject: [PATCH 18/49] Update Helm release argo-cd to v8.6.4 --- infra/argocd/Chart.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/infra/argocd/Chart.yaml b/infra/argocd/Chart.yaml index 8da230c..d9a5074 100644 --- a/infra/argocd/Chart.yaml +++ b/infra/argocd/Chart.yaml @@ -9,4 +9,4 @@ appVersion: "1.16.0" dependencies: - name: argo-cd repository: https://argoproj.github.io/argo-helm - version: 8.1.3 + version: 8.6.4 From 33efd5915fd19d8b8e4fbf4b1f955473bc8f444d Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Fri, 6 Mar 2026 05:42:12 -0600 Subject: [PATCH 19/49] remove public gitlab runner --- dmz/gitlab-runner/Chart.yaml | 3 -- dmz/gitlab-runner/values.yaml | 72 ----------------------------------- 2 files changed, 75 deletions(-) diff --git a/dmz/gitlab-runner/Chart.yaml b/dmz/gitlab-runner/Chart.yaml index 542b033..17e8efe 100644 --- a/dmz/gitlab-runner/Chart.yaml +++ b/dmz/gitlab-runner/Chart.yaml @@ -6,9 +6,6 @@ version: 0.0.1 appVersion: 0.0.1 dependencies: -- name: gitlab-runner - repository: https://charts.gitlab.io/ - version: 0.77.2 - name: gitlab-runner repository: https://charts.gitlab.io/ version: 0.77.2 diff --git a/dmz/gitlab-runner/values.yaml b/dmz/gitlab-runner/values.yaml index 3e7ddb6..7ba1021 100644 --- a/dmz/gitlab-runner/values.yaml +++ b/dmz/gitlab-runner/values.yaml @@ -1,75 +1,3 @@ -gitlab-runner: - - image: - registry: registry.durp.info - image: gitlab-org/gitlab-runner - - imagePullPolicy: Always - gitlabUrl: https://gitlab.com/ - unregisterRunner: false - terminationGracePeriodSeconds: 3600 - concurrent: 10 - checkInterval: 30 - - rbac: - create: true - rules: [] - clusterWideAccess: false - podSecurityPolicy: - enabled: false - resourceNames: - - gitlab-runner - - metrics: - enabled: true - serviceMonitor: - enabled: true - service: - enabled: true - annotations: {} - - runners: - config: | - [[runners]] - [runners.kubernetes] - namespace = "{{.Release.Namespace}}" - image = "ubuntu:22.04" - privileged = true - - executor: kubernetes - name: "k3s" - runUntagged: true - privileged: true - secret: gitlab-secret - #builds: - #cpuLimit: 200m - #cpuLimitOverwriteMaxAllowed: 400m - #memoryLimit: 256Mi - #memoryLimitOverwriteMaxAllowed: 512Mi - #cpuRequests: 100m - #cpuRequestsOverwriteMaxAllowed: 200m - #memoryRequests: 128Mi - #memoryRequestsOverwriteMaxAllowed: 256Mi - - securityContext: - allowPrivilegeEscalation: false - readOnlyRootFilesystem: false - runAsNonRoot: true - privileged: false - capabilities: - drop: ["ALL"] - - podSecurityContext: - runAsUser: 100 - fsGroup: 65533 - - resources: - limits: - memory: 2Gi - requests: - memory: 128Mi - cpu: 50m - personal: image: From 4cb432f2ce4b80385f5f1f4d528dfcf46aa7b12f Mon Sep 17 00:00:00 2001 From: RenovateBot Date: Sat, 7 Mar 2026 07:02:04 +0000 Subject: [PATCH 20/49] Update docker.io/aquasec/trivy Docker tag to v0.69.3 --- infra/openclarity/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/infra/openclarity/values.yaml b/infra/openclarity/values.yaml index e77ca5a..c8f1629 100644 --- a/infra/openclarity/values.yaml +++ b/infra/openclarity/values.yaml @@ -542,7 +542,7 @@ openclarity: # -- Trivy Server container repository repository: aquasec/trivy # -- Trivy Server container tag - tag: 0.69.1 + tag: 0.69.3 # -- Trivy Server image digest. If set will override the tag. digest: "" # -- Trivy Server image pull policy From fe23c8a706ffd93334711f76ada59c958d828fb9 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 7 Mar 2026 06:34:28 -0600 Subject: [PATCH 21/49] remove public gitlab renovate bot --- infra/renovate/Chart.yaml | 3 - infra/renovate/values.yaml | 330 ------------------------------------- 2 files changed, 333 deletions(-) diff --git a/infra/renovate/Chart.yaml b/infra/renovate/Chart.yaml index 05ed75f..b20d1e8 100644 --- a/infra/renovate/Chart.yaml +++ b/infra/renovate/Chart.yaml @@ -7,9 +7,6 @@ version: 0.1.0 appVersion: "1.16.0" dependencies: - - name: renovate - repository: https://docs.renovatebot.com/helm-charts - version: 39.264.0 - name: renovate repository: https://docs.renovatebot.com/helm-charts version: 39.264.0 diff --git a/infra/renovate/values.yaml b/infra/renovate/values.yaml index adec42f..4754bc7 100644 --- a/infra/renovate/values.yaml +++ b/infra/renovate/values.yaml @@ -1,333 +1,3 @@ -renovate: - global: - # -- Additional labels to be set on all renovate resources - commonLabels: {} - compatibility: - openshift: - # -- Adapt the securityContext sections of the deployment to make them compatible with Openshift restricted-v2 SCC: remove runAsUser, runAsGroup and fsGroup and let the platform use their allowed default IDs. Possible values: `auto` (apply if the detected running cluster is Openshift), `force` (perform the adaptation always), `disabled` (do not perform adaptation) - adaptSecurityContext: "auto" - - # -- Override the name of the chart - nameOverride: "" - # -- Override the fully qualified app name - fullnameOverride: "" - # -- Annotations to add to secret - secretAnnotations: {} - - cronjob: - # -- Schedules the job to run using cron notation - schedule: "0 1 * * *" # At 01:00 every day - # -- You can specify a time zone for a CronJob by setting timeZone to the name of a valid time zone. (starting with k8s 1.27) - timeZone: "" # see https://en.wikipedia.org/wiki/List_of_tz_database_time_zones for valid names - # -- If it is set to true, all subsequent executions are suspended. This setting does not apply to already started executions. - suspend: false - # -- Annotations to set on the cronjob - annotations: {} - # -- Labels to set on the cronjob - labels: {} - # -- "Allow" to allow concurrent runs, "Forbid" to skip new runs if a previous run is still running or "Replace" to replace the previous run - concurrencyPolicy: "" - # -- "Number of successful completions is reached to mark the job as complete" - completions: "" - # -- "Where the jobs should be NonIndexed or Indexed" - completionMode: "" - # -- Amount of failed jobs to keep in history - failedJobsHistoryLimit: "" - # -- Amount of completed jobs to keep in history - successfulJobsHistoryLimit: "" - # -- Set to Never to restart the job when the pod fails or to OnFailure to restart when a container fails - jobRestartPolicy: Never - # -- Time to keep the job after it finished before automatically deleting it - ttlSecondsAfterFinished: "" - # -- Deadline for the job to finish - activeDeadlineSeconds: "" - # -- Number of times to retry running the pod before considering the job as being failed - jobBackoffLimit: "" - # -- Maximal number of failures per index - backoffLimitPerIndex: "" - # -- Maximal number of failed indexes before terminating the Job execution - maxFailedIndexes: "" - # -- Deadline to start the job, skips execution if job misses it's configured deadline - startingDeadlineSeconds: "" - # -- Additional initContainers that can be executed before renovate - initContainers: [] - # initContainers: - # - name: INIT_CONTAINER_NAME - # image: INIT_CONTAINER_IMAGE - # -- Number of pods to run in parallel - parallelism: "" - # -- Custom command to run in the container - commandOverride: [] - # -- Custom arguments to run in the container - argsOverride: [] - # -- Prepend shell commands before renovate runs - #preCommand: '' - #preCommand: | - # ls /config - # cat /config/renovate.json - - postCommand: "" - # postCommand: | - # echo hello - # echo world - - pod: - # -- Annotations to set on the pod - annotations: {} - # -- Labels to set on the pod - labels: {} - - image: - # -- Registry to pull image from - registry: registry.durp.info - # -- Image name to pull - repository: renovatebot/renovate - # -- Renovate image tag to pull - #tag: 39.264.0 - # -- "IfNotPresent" to pull the image if no image with the specified tag exists on the node, "Always" to always pull the image or "Never" to try and use pre-pulled images - pullPolicy: Always - # -- Set `true` to use the full image. See https://docs.renovatebot.com/getting-started/running/#the-full-image - useFull: false - - # -- Secret to use to pull the image from the repository - imagePullSecrets: {} - - renovate: - # -- Custom exiting global renovate config - #existingConfigFile: "/config/renovate.json" - # -- Inline global renovate config.json - config: | - { - "platform": "gitlab", - "endpoint": "https://gitlab.com/api/v4", - "autodiscover": "true", - "dryRun": false, - "printConfig": false, - "autodiscoverFilter": ["developerdurp/*", "durfy/*"], - "assignees": ["developerdurp"], - } - # See https://docs.renovatebot.com/self-hosted-configuration - # config: | - # { - # "": "gitlab", - # "endpoint": "https://gitlab.example.com/api/v4", - # "token": "your-gitlab-renovate-user-token", - # "autodiscover": "false", - # "dryRun": true, - # "printConfig": true, - # "repositories": ["username/repo", "orgname/repo"] - # } - - # -- Use the Helm tpl function on your configuration. See README for how to use this value - configEnableHelmTpl: false - - # -- Use this to create the renovate-config as a secret instead of a configmap - configIsSecret: true - - # -- Use this to create a config.js instead of a config.json - configIsJavaScript: false - - # -- Renovate Container-level security-context - securityContext: {} - - # Instead of a file system cache, it is highly recommended to use the redis subchart. - # Alternatively, SQLite is also a good choice. - # Take a look at https://github.com/renovatebot/renovate/discussions/30525 for more information. - # -- Options related to persistence - persistence: - cache: - # -- Allow the cache to persist between runs - enabled: false - # -- Storage class of the cache PVC - storageClass: "" - # -- Storage size of the cache PVC - storageSize: "512Mi" - # -- Existing volume, enables binding the pvc to an existing volume - volumeName: "" - # -- Labels to set on the cache PVC - labels: {} - - ssh_config: - # -- Whether to enable the use and creation of a secret containing .ssh files - enabled: false - - # Provide .ssh config file contents - # -- Contents of the id_rsa file - id_rsa: "" - # -- Contents of the id_rsa_pub file - id_rsa_pub: "" - # -- Contents of the config file - config: "" - - # or provide the name of an existing secret to be read instead. - # -- Name of the existing secret containing a valid .ssh configuration - existingSecret: "" - - # -- Environment variables that should be referenced from a k8s secret, cannot be used when existingSecret is set - secrets: {} - # -- k8s secret to reference environment variables from. Overrides secrets if set - existingSecret: "renovate-config-secret" - - # -- Additional configmaps. A generated configMap name is: "renovate.fullname" + "extra" + name(below) e.g. renovate-netrc-config - extraConfigmaps: [] - # extraConfigmaps: - # - name: netrc-config - # data: - # .netrc: |- - # machine gitlab.example.com - # login gitlab-ci-token - # password some-pass - # - name: yet-another-config - # data: - # ya-config.yaml: |- - # "key"="value" - # "key1"="value1" - - #extraVolumes: - # - name: renovate-config-secret - # secretName: - # name: renovate-config-secret - # items: - # - key: renovate.json - # path: renovate.json - - #extraVolumeMounts: - # - name: renovate-config-secret - # mountPath: /config - # subPath: renovate.json - - # -- Additional containers to the pod - extraContainers: [] - # extraContainers: - # - name: vault-agent - # image: vault:1.6.2 - # args: - # - agent - # - -config - # - /vault/config/config.hcl - # env: - # - name: VAULT_ADDR - # value: https://vault:8200 - # - name: VAULT_SKIP_VERIFY - # value: "false" - # - name: VAULT_CACERT - # value: /vault/tls/ca.crt - - serviceAccount: - # -- Specifies whether a service account should be created - create: false - # -- Annotations to add to the service account - annotations: {} - # -- The name of the service account to use - # If not set and create is true, a name is generated using the fullname template - name: "" - - # -- Specify resource limits and requests for the renovate container - resources: - {} - # We usually recommend not to specify default resources and to leave this as a conscious - # choice for the user. This also increases chances charts run on environments with little - # resources, such as Minikube. If you do want to specify resources, uncomment the following - # lines, adjust them as necessary, and remove the curly braces after 'resources:'. - # limits: - # cpu: 100m - # memory: 128Mi - # requests: - # cpu: 100m - # memory: 128Mi - - # -- Environment variables to add from existing secrets/configmaps. Uses the keys as variable name - envFrom: [] - # envFrom: - # - secretRef: - # name: env-secrets - # - configMapRef: - # name: env-configmap - - # -- Environment variables to set on the renovate container - env: - RENOVATE_AUTODISCOVER: true - # env: - # VARIABLE_NAME: "value" - - # -- Additional env. Helpful too if you want to use anything other than a `value` source. - envList: [] - # envList: - # - name: POD_NAME - # valueFrom: - # fieldRef: - # fieldPath: metadata.name - - redis: - # Configuration for a Redis subchart. Additional documentation at - # https://github.com/bitnami/charts/tree/master/bitnami/redis - - # -- Enable the Redis subchart? - enabled: false - - # -- Override the prefix of the redisHost - nameOverride: "" - - # -- Disable replication by default - architecture: standalone - - auth: - # -- Don't require a password by default - enabled: false - - # -- Override Kubernetes version for redis chart - kubeVersion: "" - - # -- Override hostname resolution - hostAliases: [] - # See: https://kubernetes.io/docs/tasks/network/customize-hosts-file-for-pods/ - # hostAliases: - # - ip: "your-ip" - # hostnames: - # - "your-hostname" - - # -- Pod-level security-context - securityContext: {} - - # -- Select the node using labels to specify where the cronjob pod should run on - nodeSelector: {} - # See: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/ - # renovate: true - - # -- Configure the pod(Anti)Affinity and/or node(Anti)Affinity - affinity: {} - # See: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/ - - # -- Configure which node taints the pod should tolerate - tolerations: [] - # See: https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/ - - # -- Create extra manifests via values. Would be passed through `tpl` for templating - extraObjects: [] - # extraObjects: - # - apiVersion: external-secrets.io/v1 - # kind: ExternalSecret - # metadata: - # name: '{{ include "renovate.fullname" . }}-token' - # spec: - # secretStoreRef: - # name: default - # data: - # - secretKey: token - # remoteRef: - # key: github-token - # - | - # apiVersion: v1 - # kind: ConfigMap - # metadata: - # name: {{ include "renovate.fullname" . }}-config - # data: - # config.json: | - # { - # "platform": "github", - # "repositories": ["username/repo", "orgname/repo"] - # } - renovate-personal: global: # -- Additional labels to be set on all renovate resources From a1bf4cfff8b7fb0123c496c656e86ba7c6caea6f Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 7 Mar 2026 07:19:43 -0600 Subject: [PATCH 22/49] update vaultwarden --- infra/bitwarden/templates/deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/infra/bitwarden/templates/deployment.yaml b/infra/bitwarden/templates/deployment.yaml index 470ac9b..b915246 100644 --- a/infra/bitwarden/templates/deployment.yaml +++ b/infra/bitwarden/templates/deployment.yaml @@ -17,7 +17,7 @@ spec: spec: containers: - name: bitwarden - image: registry.durp.info/vaultwarden/server:1.34.3 + image: registry.durp.info/vaultwarden/server:1.35.4 imagePullPolicy: Always volumeMounts: - name: bitwarden-pvc From 059d35af3e8f6ac3c331cdea8112cdaf87727719 Mon Sep 17 00:00:00 2001 From: RenovateBot Date: Sun, 8 Mar 2026 07:02:03 +0000 Subject: [PATCH 23/49] Update Helm release base to v1.29.0 --- dmz/istio-system/Chart.yaml | 2 +- infra/istio-system/Chart.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/dmz/istio-system/Chart.yaml b/dmz/istio-system/Chart.yaml index 50401b5..dfc92b1 100644 --- a/dmz/istio-system/Chart.yaml +++ b/dmz/istio-system/Chart.yaml @@ -8,7 +8,7 @@ appVersion: 0.0.1 dependencies: - name: base repository: https://istio-release.storage.googleapis.com/charts - version: 1.26.2 + version: 1.29.0 - name: istiod repository: https://istio-release.storage.googleapis.com/charts version: 1.26.2 diff --git a/infra/istio-system/Chart.yaml b/infra/istio-system/Chart.yaml index 0a7ea4b..7bb5fc3 100644 --- a/infra/istio-system/Chart.yaml +++ b/infra/istio-system/Chart.yaml @@ -8,7 +8,7 @@ appVersion: 0.0.1 dependencies: - name: base repository: https://istio-release.storage.googleapis.com/charts - version: 1.26.2 + version: 1.29.0 - name: istiod repository: https://istio-release.storage.googleapis.com/charts version: 1.26.2 From 5974e6450c09e03bc8399b8fe4abada1608a482c Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 8 Mar 2026 08:11:47 -0500 Subject: [PATCH 24/49] update gitea to forgejo --- .../templates/{gitea.yaml => forgejo.yaml} | 24 +++++++++---------- 1 file changed, 12 insertions(+), 12 deletions(-) rename dmz/internalproxy/templates/{gitea.yaml => forgejo.yaml} (68%) diff --git a/dmz/internalproxy/templates/gitea.yaml b/dmz/internalproxy/templates/forgejo.yaml similarity index 68% rename from dmz/internalproxy/templates/gitea.yaml rename to dmz/internalproxy/templates/forgejo.yaml index 58c28d7..4a6998a 100644 --- a/dmz/internalproxy/templates/gitea.yaml +++ b/dmz/internalproxy/templates/forgejo.yaml @@ -1,7 +1,7 @@ apiVersion: v1 kind: Service metadata: - name: gitea + name: forgejo spec: ports: - name: app @@ -16,7 +16,7 @@ spec: apiVersion: v1 kind: Endpoints metadata: - name: gitea + name: forgejo subsets: - addresses: - ip: 192.168.21.200 @@ -30,43 +30,43 @@ subsets: apiVersion: traefik.io/v1alpha1 kind: IngressRoute metadata: - name: gitea-ingress + name: forgejo-ingress spec: entryPoints: - websecure routes: - - match: Host(`gitea.durp.info`) && PathPrefix(`/`) + - match: Host(`forgejo.durp.info`) && PathPrefix(`/`) kind: Rule services: - - name: gitea + - name: forgejo port: 3000 scheme: http tls: - secretName: gitea-tls + secretName: forgejo-tls --- apiVersion: cert-manager.io/v1 kind: Certificate metadata: - name: gitea-tls + name: forgejo-tls spec: - secretName: gitea-tls + secretName: forgejo-tls issuerRef: name: letsencrypt-production kind: ClusterIssuer - commonName: "gitea.durp.info" + commonName: "forgejo.durp.info" dnsNames: - - "gitea.durp.info" + - "forgejo.durp.info" --- kind: Service apiVersion: v1 metadata: - name: gitea-external-dns + name: forgejo-external-dns annotations: - external-dns.alpha.kubernetes.io/hostname: gitea.durp.info + external-dns.alpha.kubernetes.io/hostname: forgejo.durp.info spec: type: ExternalName externalName: durp.info From f1b27dc3666a60bce544f919dcb15962107c6f36 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 8 Mar 2026 10:03:59 -0500 Subject: [PATCH 25/49] update --- dmz/searxng/templates/ingress.yaml | 31 ++++++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) diff --git a/dmz/searxng/templates/ingress.yaml b/dmz/searxng/templates/ingress.yaml index da757e7..ab8b641 100644 --- a/dmz/searxng/templates/ingress.yaml +++ b/dmz/searxng/templates/ingress.yaml @@ -43,3 +43,34 @@ metadata: spec: type: ExternalName externalName: durp.info + +--- +apiVersion: traefik.io/v1alpha1 +kind: IngressRoute +metadata: + name: searxng-internal-ingress +spec: + entryPoints: + - websecure + routes: + - match: Host(`searxng.internal.durp.info`) && PathPrefix(`/`) + kind: Rule + services: + - name: searxng-service + port: 8080 + tls: + secretName: searxng-internal-tls + +--- +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + name: searxng-internal-tls +spec: + secretName: searxng-internal-tls + issuerRef: + name: letsencrypt-production + kind: ClusterIssuer + commonName: "searxng.internal.durp.info" + dnsNames: + - "searxng.internal.durp.info" From 7f8883c2bcf71b6680967a0ee916287e459401f8 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 8 Mar 2026 10:06:50 -0500 Subject: [PATCH 26/49] update --- dmz/searxng/templates/confligmap.yaml | 11 +++++++++++ dmz/searxng/templates/deployment.yaml | 18 +++++++++++++++++- dmz/searxng/templates/secret.yaml | 23 +++++++++++++++++++++++ 3 files changed, 51 insertions(+), 1 deletion(-) create mode 100644 dmz/searxng/templates/confligmap.yaml create mode 100644 dmz/searxng/templates/secret.yaml diff --git a/dmz/searxng/templates/confligmap.yaml b/dmz/searxng/templates/confligmap.yaml new file mode 100644 index 0000000..edc1ca6 --- /dev/null +++ b/dmz/searxng/templates/confligmap.yaml @@ -0,0 +1,11 @@ +apiVersion: v1 +kind: ConfigMap +metadata: + name: searxng-config +data: + settings.yml: |- + use_default_settings: true + search: + formats: + - html + - json diff --git a/dmz/searxng/templates/deployment.yaml b/dmz/searxng/templates/deployment.yaml index 3ab2d47..e1677ed 100644 --- a/dmz/searxng/templates/deployment.yaml +++ b/dmz/searxng/templates/deployment.yaml @@ -21,4 +21,20 @@ spec: imagePullPolicy: Always ports: - name: http - containerPort: 8080 \ No newline at end of file + containerPort: 8080 + env: + - name: SEARXNG_BASE_URL + value: https://searxng.durp.info + - name: SEARXNG_SECRET + valueFrom: + secretKeyRef: + name: searxng-secret + key: SEARXNG_SECRET + volumeMounts: + - name: searxng-config-volume + mountPath: /etc/searxng/settings.yml + subPath: settings.yml + volumes: + - name: searxng-config-volume + configMap: + name: searxng-config diff --git a/dmz/searxng/templates/secret.yaml b/dmz/searxng/templates/secret.yaml new file mode 100644 index 0000000..6d4781b --- /dev/null +++ b/dmz/searxng/templates/secret.yaml @@ -0,0 +1,23 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: searxng-secret +spec: + secretStoreRef: + name: vault + kind: ClusterSecretStore + target: + name: searxng-secret + data: + - secretKey: SEARXNG_SECRET + remoteRef: + key: kv/searxng + property: searxng-secret + +--- + +apiVersion: v1 +kind: ServiceAccount +metadata: + name: vault + From 2afdded1093fe8d13934f48798a3b08b3de4e9ae Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Wed, 25 Mar 2026 05:48:28 -0500 Subject: [PATCH 27/49] add freshrss --- dmz/internalproxy/templates/freshrss.yaml | 61 +++++++++++++++++++++++ 1 file changed, 61 insertions(+) create mode 100644 dmz/internalproxy/templates/freshrss.yaml diff --git a/dmz/internalproxy/templates/freshrss.yaml b/dmz/internalproxy/templates/freshrss.yaml new file mode 100644 index 0000000..3ee965a --- /dev/null +++ b/dmz/internalproxy/templates/freshrss.yaml @@ -0,0 +1,61 @@ + +apiVersion: v1 +kind: Service +metadata: + name: freshrss +spec: + ports: + - name: app + port: 8085 + protocol: TCP + targetPort: 8085 + clusterIP: None + type: ClusterIP + +--- + +apiVersion: v1 +kind: Endpoints +metadata: + name: freshrss +subsets: + - addresses: + - ip: 192.168.21.200 + ports: + - name: app + port: 8085 + protocol: TCP + +--- + +apiVersion: traefik.io/v1alpha1 +kind: IngressRoute +metadata: + name: freshrss-ingress +spec: + entryPoints: + - websecure + routes: + - match: Host(`freshrss.durp.info`) && PathPrefix(`/`) + kind: Rule + services: + - name: freshrss + port: 8085 + scheme: https + tls: + secretName: freshrss-tls + +--- + +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + name: freshrss-tls +spec: + secretName: freshrss-tls + issuerRef: + name: vault-issuer + kind: ClusterIssuer + commonName: "freshrss.durp.info" + dnsNames: + - "freshrss.durp.info" From 6cdffc48f3bee8cbd84a6deb7eb9cec76d593e7e Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Wed, 25 Mar 2026 06:07:43 -0500 Subject: [PATCH 28/49] update --- dmz/internalproxy/templates/freshrss.yaml | 1 - 1 file changed, 1 deletion(-) diff --git a/dmz/internalproxy/templates/freshrss.yaml b/dmz/internalproxy/templates/freshrss.yaml index 3ee965a..3fe0ff4 100644 --- a/dmz/internalproxy/templates/freshrss.yaml +++ b/dmz/internalproxy/templates/freshrss.yaml @@ -41,7 +41,6 @@ spec: services: - name: freshrss port: 8085 - scheme: https tls: secretName: freshrss-tls From e6aafbcf81b797ec296946fa436cbda6254cf63a Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Fri, 27 Mar 2026 06:04:54 -0500 Subject: [PATCH 29/49] update --- infra/portainer/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/infra/portainer/values.yaml b/infra/portainer/values.yaml index a63ba2e..a3779f7 100644 --- a/infra/portainer/values.yaml +++ b/infra/portainer/values.yaml @@ -2,7 +2,7 @@ portainer: replicaCount: 1 image: repository: registry.durp.info/portainer/portainer-ce - tag: 2.33.5 + tag: 2.39.1 pullPolicy: Always imagePullSecrets: [] From 1c0c8bab822e326b5dd622261ea1cb33a88053f8 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 28 Mar 2026 07:57:02 -0500 Subject: [PATCH 30/49] update --- dmz/internalproxy/templates/longhorn.yaml | 34 ++++++ dmz/internalproxy/templates/n8n.yaml | 136 +++++++++++----------- infra/longhorn/templates/ingress.yaml | 4 +- 3 files changed, 104 insertions(+), 70 deletions(-) create mode 100644 dmz/internalproxy/templates/longhorn.yaml diff --git a/dmz/internalproxy/templates/longhorn.yaml b/dmz/internalproxy/templates/longhorn.yaml new file mode 100644 index 0000000..9eeda9e --- /dev/null +++ b/dmz/internalproxy/templates/longhorn.yaml @@ -0,0 +1,34 @@ +apiVersion: traefik.io/v1alpha1 +kind: IngressRoute +metadata: + name: longhorn-infra-ingress + annotations: + cert-manager.io/cluster-issuer: vault-issuer +spec: + entryPoints: + - websecure + routes: + - match: Host(`longhorn.infra.durp.info`) && PathPrefix(`/`) + kind: Rule + middlewares: + - name: authentik-proxy-provider + namespace: traefik + services: + - name: infra-cluster + port: 443 + tls: + secretName: longhorn-infra-tls + +--- +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + name: longhorn-infra-tls +spec: + secretName: longhorn-infra-tls + issuerRef: + name: vault-issuer + kind: ClusterIssuer + commonName: "longhorn.infra.durp.info" + dnsNames: + - "longhorn.infra.durp.info" diff --git a/dmz/internalproxy/templates/n8n.yaml b/dmz/internalproxy/templates/n8n.yaml index d70038b..adfebc7 100644 --- a/dmz/internalproxy/templates/n8n.yaml +++ b/dmz/internalproxy/templates/n8n.yaml @@ -1,68 +1,68 @@ -apiVersion: v1 -kind: Service -metadata: - name: n8n -spec: - ports: - - name: app - port: 5678 - protocol: TCP - targetPort: 5678 - clusterIP: None - type: ClusterIP - ---- -apiVersion: v1 -kind: Endpoints -metadata: - name: n8n -subsets: - - addresses: - - ip: 192.168.21.200 - ports: - - name: app - port: 5678 - protocol: TCP - ---- -apiVersion: traefik.io/v1alpha1 -kind: IngressRoute -metadata: - name: n8n-ingress -spec: - entryPoints: - - websecure - routes: - - match: Host(`n8n.durp.info`) && PathPrefix(`/`) - kind: Rule - services: - - name: n8n - port: 5678 - scheme: http - tls: - secretName: n8n-tls - ---- -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - name: n8n-tls -spec: - secretName: n8n-tls - issuerRef: - name: letsencrypt-production - kind: ClusterIssuer - commonName: "n8n.durp.info" - dnsNames: - - "n8n.durp.info" - ---- -kind: Service -apiVersion: v1 -metadata: - name: n8n-dns - annotations: - dns.alpha.kubernetes.io/hostname: n8n.durp.info -spec: - type: ExternalName - externalName: durp.info +#apiVersion: v1 +#kind: Service +#metadata: +# name: n8n +#spec: +# ports: +# - name: app +# port: 5678 +# protocol: TCP +# targetPort: 5678 +# clusterIP: None +# type: ClusterIP +# +#--- +#apiVersion: v1 +#kind: Endpoints +#metadata: +# name: n8n +#subsets: +# - addresses: +# - ip: 192.168.21.200 +# ports: +# - name: app +# port: 5678 +# protocol: TCP +# +#--- +#apiVersion: traefik.io/v1alpha1 +#kind: IngressRoute +#metadata: +# name: n8n-ingress +#spec: +# entryPoints: +# - websecure +# routes: +# - match: Host(`n8n.durp.info`) && PathPrefix(`/`) +# kind: Rule +# services: +# - name: n8n +# port: 5678 +# scheme: http +# tls: +# secretName: n8n-tls +# +#--- +#apiVersion: cert-manager.io/v1 +#kind: Certificate +#metadata: +# name: n8n-tls +#spec: +# secretName: n8n-tls +# issuerRef: +# name: letsencrypt-production +# kind: ClusterIssuer +# commonName: "n8n.durp.info" +# dnsNames: +# - "n8n.durp.info" +# +#--- +#kind: Service +#apiVersion: v1 +#metadata: +# name: n8n-dns +# annotations: +# dns.alpha.kubernetes.io/hostname: n8n.durp.info +#spec: +# type: ExternalName +# externalName: durp.info diff --git a/infra/longhorn/templates/ingress.yaml b/infra/longhorn/templates/ingress.yaml index e9a3a2b..ad4ebd3 100644 --- a/infra/longhorn/templates/ingress.yaml +++ b/infra/longhorn/templates/ingress.yaml @@ -11,8 +11,8 @@ spec: - match: Host(`longhorn.infra.durp.info`) && PathPrefix(`/`) kind: Rule middlewares: - - name: authentik-proxy-provider - namespace: traefik + #- name: authentik-proxy-provider + # namespace: traefik services: - name: longhorn-frontend port: 80 From 8343867aeed08cb2974b480090365050bc3990c7 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 28 Mar 2026 07:59:24 -0500 Subject: [PATCH 31/49] update --- dmz/internalproxy/templates/argocd.yaml | 34 +++++++++++++++++++++++++ 1 file changed, 34 insertions(+) create mode 100644 dmz/internalproxy/templates/argocd.yaml diff --git a/dmz/internalproxy/templates/argocd.yaml b/dmz/internalproxy/templates/argocd.yaml new file mode 100644 index 0000000..20aba48 --- /dev/null +++ b/dmz/internalproxy/templates/argocd.yaml @@ -0,0 +1,34 @@ +apiVersion: traefik.io/v1alpha1 +kind: IngressRoute +metadata: + name: argocd-infra-ingress +spec: + entryPoints: + - websecure + routes: + - match: Host(`argocd.infra.durp.info`) + #middlewares: + # - name: whitelist + # namespace: traefik + kind: Rule + services: + - name: infra-cluster + port: 443 + scheme: https + tls: + secretName: argocd-tls + +--- + +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + name: argocd-infra-tls +spec: + secretName: argocd-infra-tls + issuerRef: + name: vault-issuer + kind: ClusterIssuer + commonName: "argocd.infra.durp.info" + dnsNames: + - "argocd.infra.durp.info" From ea54a2601d59fd33321d27ef8c0b9d68a6d7e51b Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 28 Mar 2026 08:10:07 -0500 Subject: [PATCH 32/49] update --- dmz/internalproxy/templates/endpoints.yaml | 26 ++++++++++++++++++ dmz/internalproxy/templates/tdarr.yaml | 31 +--------------------- dmz/internalproxy/templates/unraid.yaml | 30 --------------------- 3 files changed, 27 insertions(+), 60 deletions(-) diff --git a/dmz/internalproxy/templates/endpoints.yaml b/dmz/internalproxy/templates/endpoints.yaml index c5d00c4..1f1aec6 100644 --- a/dmz/internalproxy/templates/endpoints.yaml +++ b/dmz/internalproxy/templates/endpoints.yaml @@ -43,3 +43,29 @@ spec: - protocol: TCP port: 443 targetPort: 443 + +--- + +apiVersion: v1 +kind: Service +metadata: + name: unraid +spec: + ports: + - protocol: TCP + port: 443 + targetPort: 443 + +--- + +apiVersion: v1 +kind: Endpoints +metadata: + name: unraid +subsets: + - addresses: + - ip: 192.168.21.200 + ports: + - name: app + port: 443 + protocol: TCP diff --git a/dmz/internalproxy/templates/tdarr.yaml b/dmz/internalproxy/templates/tdarr.yaml index c9ace7f..35b9485 100644 --- a/dmz/internalproxy/templates/tdarr.yaml +++ b/dmz/internalproxy/templates/tdarr.yaml @@ -1,32 +1,3 @@ -apiVersion: v1 -kind: Service -metadata: - name: tdarr -spec: - ports: - - name: app - port: 8267 - protocol: TCP - targetPort: 8267 - clusterIP: None - type: ClusterIP - ---- - -apiVersion: v1 -kind: Endpoints -metadata: - name: tdarr -subsets: -- addresses: - - ip: 192.168.21.200 - ports: - - name: app - port: 8267 - protocol: TCP - ---- - apiVersion: traefik.io/v1alpha1 kind: IngressRoute metadata: @@ -45,7 +16,7 @@ spec: namespace: traefik kind: Rule services: - - name: tdarr + - name: unraid port: 8267 scheme: http tls: diff --git a/dmz/internalproxy/templates/unraid.yaml b/dmz/internalproxy/templates/unraid.yaml index f79f4a8..10e1015 100644 --- a/dmz/internalproxy/templates/unraid.yaml +++ b/dmz/internalproxy/templates/unraid.yaml @@ -1,33 +1,3 @@ - -apiVersion: v1 -kind: Service -metadata: - name: unraid -spec: - ports: - - name: app - port: 443 - protocol: TCP - targetPort: 443 - clusterIP: None - type: ClusterIP - ---- - -apiVersion: v1 -kind: Endpoints -metadata: - name: unraid -subsets: - - addresses: - - ip: 192.168.21.200 - ports: - - name: app - port: 443 - protocol: TCP - ---- - apiVersion: traefik.io/v1alpha1 kind: IngressRoute metadata: From ab36649642ab7751c3016a3ffbcf04ceb5c9a357 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 28 Mar 2026 08:11:26 -0500 Subject: [PATCH 33/49] update --- dmz/internalproxy/templates/endpoints.yaml | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/dmz/internalproxy/templates/endpoints.yaml b/dmz/internalproxy/templates/endpoints.yaml index 1f1aec6..875ed0f 100644 --- a/dmz/internalproxy/templates/endpoints.yaml +++ b/dmz/internalproxy/templates/endpoints.yaml @@ -55,6 +55,10 @@ spec: - protocol: TCP port: 443 targetPort: 443 + - name: app + port: 8267 + protocol: TCP + targetPort: 8267 --- @@ -69,3 +73,6 @@ subsets: - name: app port: 443 protocol: TCP + - name: app + port: 8267 + protocol: TCP From 57ea463e1996b9844ba2a3c3ae9b0048d61e775e Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 28 Mar 2026 08:12:43 -0500 Subject: [PATCH 34/49] update --- dmz/internalproxy/templates/endpoints.yaml | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/dmz/internalproxy/templates/endpoints.yaml b/dmz/internalproxy/templates/endpoints.yaml index 875ed0f..35f2d40 100644 --- a/dmz/internalproxy/templates/endpoints.yaml +++ b/dmz/internalproxy/templates/endpoints.yaml @@ -52,10 +52,11 @@ metadata: name: unraid spec: ports: - - protocol: TCP + - name: https + protocol: TCP port: 443 targetPort: 443 - - name: app + - name: tdarr port: 8267 protocol: TCP targetPort: 8267 @@ -70,9 +71,9 @@ subsets: - addresses: - ip: 192.168.21.200 ports: - - name: app + - name: https port: 443 protocol: TCP - - name: app + - name: tdarr port: 8267 protocol: TCP From c38262a51b480f4e3e9227e9ed0c216437fbfc85 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 28 Mar 2026 11:37:45 -0500 Subject: [PATCH 35/49] update --- dmz/authentik/templates/ingress.yaml | 62 ----------------- dmz/internalproxy/templates/argocd.yaml | 6 +- dmz/internalproxy/templates/authentik.yaml | 80 +++++++++++----------- 3 files changed, 43 insertions(+), 105 deletions(-) diff --git a/dmz/authentik/templates/ingress.yaml b/dmz/authentik/templates/ingress.yaml index f03751e..e69de29 100644 --- a/dmz/authentik/templates/ingress.yaml +++ b/dmz/authentik/templates/ingress.yaml @@ -1,62 +0,0 @@ -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - name: authentik-tls -spec: - issuerRef: - name: letsencrypt-production - kind: ClusterIssuer - secretName: authentik-tls - commonName: "authentik.durp.info" - dnsNames: - - "authentik.durp.info" - ---- -apiVersion: traefik.io/v1alpha1 -kind: IngressRoute -metadata: - name: authentik-ingress -spec: - entryPoints: - - websecure - routes: - - match: Host(`authentik.durp.info`) && PathPrefix(`/`) - kind: Rule - services: - - name: infra-cluster - port: 443 - tls: - secretName: authentik-tls - ---- -kind: Service -apiVersion: v1 -metadata: - name: authentik-external-dns - annotations: - external-dns.alpha.kubernetes.io/hostname: authentik.durp.info -spec: - type: ExternalName - externalName: durp.info - ---- -apiVersion: v1 -kind: Endpoints -metadata: - name: infra-cluster -subsets: - - addresses: - - ip: 192.168.12.130 - ports: - - port: 443 - ---- -apiVersion: v1 -kind: Service -metadata: - name: infra-cluster -spec: - ports: - - protocol: TCP - port: 443 - targetPort: 443 diff --git a/dmz/internalproxy/templates/argocd.yaml b/dmz/internalproxy/templates/argocd.yaml index 20aba48..d817e19 100644 --- a/dmz/internalproxy/templates/argocd.yaml +++ b/dmz/internalproxy/templates/argocd.yaml @@ -7,9 +7,9 @@ spec: - websecure routes: - match: Host(`argocd.infra.durp.info`) - #middlewares: - # - name: whitelist - # namespace: traefik + middlewares: + - name: whitelist + namespace: traefik kind: Rule services: - name: infra-cluster diff --git a/dmz/internalproxy/templates/authentik.yaml b/dmz/internalproxy/templates/authentik.yaml index 328d115..adf9884 100644 --- a/dmz/internalproxy/templates/authentik.yaml +++ b/dmz/internalproxy/templates/authentik.yaml @@ -1,40 +1,40 @@ -#apiVersion: traefik.io/v1alpha1 -#kind: IngressRoute -#metadata: -# name: authentik-ingress -#spec: -# entryPoints: -# - websecure -# routes: -# - match: Host(`authentik.durp.info`) && PathPrefix(`/`) -# kind: Rule -# services: -# - name: infra-cluster -# port: 443 -# tls: -# secretName: authentik-tls -# -#--- -#apiVersion: cert-manager.io/v1 -#kind: Certificate -#metadata: -# name: authentik-tls -#spec: -# issuerRef: -# name: letsencrypt-production -# kind: ClusterIssuer -# secretName: authentik-tls -# commonName: "authentik.durp.info" -# dnsNames: -# - "authentik.durp.info" -# -#--- -#kind: Service -#apiVersion: v1 -#metadata: -# name: authentik-external-dns -# annotations: -# external-dns.alpha.kubernetes.io/hostname: authentik.durp.info -#spec: -# type: ExternalName -# externalName: durp.info +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + name: authentik-tls +spec: + issuerRef: + name: letsencrypt-production + kind: ClusterIssuer + secretName: authentik-tls + commonName: "authentik.durp.info" + dnsNames: + - "authentik.durp.info" + +--- +apiVersion: traefik.io/v1alpha1 +kind: IngressRoute +metadata: + name: authentik-ingress +spec: + entryPoints: + - websecure + routes: + - match: Host(`authentik.durp.info`) && PathPrefix(`/`) + kind: Rule + services: + - name: infra-cluster + port: 443 + tls: + secretName: authentik-tls + +--- +kind: Service +apiVersion: v1 +metadata: + name: authentik-external-dns + annotations: + external-dns.alpha.kubernetes.io/hostname: authentik.durp.info +spec: + type: ExternalName + externalName: durp.info \ No newline at end of file From e47f51426a1e2e7dacc429eee8954587a9e2a7bf Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 28 Mar 2026 12:09:41 -0500 Subject: [PATCH 36/49] update --- dmz/internalproxy/templates/duplicati.yaml | 31 +--- dmz/internalproxy/templates/endpoints.yaml | 132 +++++++++++++++++ dmz/internalproxy/templates/forgejo.yaml | 31 +--- dmz/internalproxy/templates/freshrss.yaml | 32 +---- dmz/internalproxy/templates/gitlab.yaml | 85 ++++------- dmz/internalproxy/templates/invidious.yaml | 149 ++++++++++---------- dmz/internalproxy/templates/kasm.yaml | 31 +--- dmz/internalproxy/templates/kuma.yaml | 91 ++++++------ dmz/internalproxy/templates/litellm.yaml | 31 +--- dmz/internalproxy/templates/minio.yaml | 31 +--- dmz/internalproxy/templates/nextcloud.yaml | 29 +--- dmz/internalproxy/templates/nexus.yaml | 31 +--- dmz/internalproxy/templates/ollama.yaml | 35 +---- dmz/internalproxy/templates/open-webui.yaml | 33 +---- dmz/internalproxy/templates/plex.yaml | 33 +---- dmz/internalproxy/templates/portainer.yaml | 6 +- dmz/internalproxy/templates/registry.yaml | 29 +--- dmz/internalproxy/templates/root-vault.yaml | 32 +---- dmz/internalproxy/templates/s3.yaml | 33 +---- dmz/internalproxy/templates/semaphore.yaml | 129 ++++++++--------- 20 files changed, 365 insertions(+), 669 deletions(-) diff --git a/dmz/internalproxy/templates/duplicati.yaml b/dmz/internalproxy/templates/duplicati.yaml index d2563d0..74475df 100644 --- a/dmz/internalproxy/templates/duplicati.yaml +++ b/dmz/internalproxy/templates/duplicati.yaml @@ -1,32 +1,3 @@ -apiVersion: v1 -kind: Service -metadata: - name: duplicati -spec: - ports: - - name: app - port: 8200 - protocol: TCP - targetPort: 8200 - clusterIP: None - type: ClusterIP - ---- - -apiVersion: v1 -kind: Endpoints -metadata: - name: duplicati -subsets: -- addresses: - - ip: 192.168.21.200 - ports: - - name: app - port: 8200 - protocol: TCP - ---- - apiVersion: traefik.io/v1alpha1 kind: IngressRoute metadata: @@ -43,7 +14,7 @@ spec: namespace: traefik kind: Rule services: - - name: duplicati + - name: unraid port: 8200 tls: secretName: duplicati-tls diff --git a/dmz/internalproxy/templates/endpoints.yaml b/dmz/internalproxy/templates/endpoints.yaml index 35f2d40..0b36e84 100644 --- a/dmz/internalproxy/templates/endpoints.yaml +++ b/dmz/internalproxy/templates/endpoints.yaml @@ -60,6 +60,58 @@ spec: port: 8267 protocol: TCP targetPort: 8267 + - name: duplicati + port: 8200 + protocol: TCP + targetPort: 8200 + - name: forgejo + port: 3000 + protocol: TCP + targetPort: 3000 + - name: freshrss + port: 8085 + protocol: TCP + targetPort: 8085 + - name: gitlab-ssh + port: 9022 + protocol: TCP + targetPort: 9022 + - name: gitlab + port: 9443 + protocol: TCP + targetPort: 9443 + - name: minio + port: 9769 + protocol: TCP + targetPort: 9769 + - name: nextcloud + port: 11000 + protocol: TCP + targetPort: 11000 + - name: nexus + port: 8081 + protocol: TCP + targetPort: 8081 + - name: openweb-ui + port: 8089 + protocol: TCP + targetPort: 8089 + - name: plex + port: 32400 + protocol: TCP + targetPort: 32400 + - name: registry + port: 5000 + protocol: TCP + targetPort: 5000 + - name: root-vault + port: 8201 + protocol: TCP + targetPort: 8201 + - name: s3 + port: 9768 + protocol: TCP + targetPort: 9768 --- @@ -77,3 +129,83 @@ subsets: - name: tdarr port: 8267 protocol: TCP + - name: duplicati + port: 8200 + protocol: TCP + - name: forgejo + port: 3000 + protocol: TCP + - name: freshrss + port: 8085 + protocol: TCP + - name: gitlab-ssh + port: 9022 + protocol: TCP + - name: gitlab + port: 9443 + protocol: TCP + - name: minio + port: 9769 + protocol: TCP + - name: nextcloud + port: 11000 + protocol: TCP + - name: nexus + port: 8081 + protocol: TCP + - name: openweb-ui + port: 8089 + protocol: TCP + - name: plex + port: 32400 + protocol: TCP + - name: registry + port: 5000 + protocol: TCP + - name: root-vault + port: 8201 + protocol: TCP + - name: s3 + port: 9768 + protocol: TCP + +--- + +apiVersion: v1 +kind: Endpoints +metadata: + name: ubuntu +subsets: + - addresses: + - ip: 192.168.20.104 + ports: + - name: https + port: 443 + protocol: TCP + - name: litellm + port: 4000 + protocol: TCP + - name: ollama + port: 11435 + protocol: TCP + +--- + +apiVersion: v1 +kind: Service +metadata: + name: ubuntu +spec: + ports: + - name: https + port: 443 + protocol: TCP + targetPort: 443 + - name: litellm + port: 4000 + protocol: TCP + targetPort: 4000 + - name: ollama + port: 11435 + protocol: TCP + targetPort: 11435 diff --git a/dmz/internalproxy/templates/forgejo.yaml b/dmz/internalproxy/templates/forgejo.yaml index 4a6998a..52eb710 100644 --- a/dmz/internalproxy/templates/forgejo.yaml +++ b/dmz/internalproxy/templates/forgejo.yaml @@ -1,32 +1,3 @@ -apiVersion: v1 -kind: Service -metadata: - name: forgejo -spec: - ports: - - name: app - port: 3000 - protocol: TCP - targetPort: 3000 - clusterIP: None - type: ClusterIP - ---- - -apiVersion: v1 -kind: Endpoints -metadata: - name: forgejo -subsets: - - addresses: - - ip: 192.168.21.200 - ports: - - name: app - port: 3000 - protocol: TCP - ---- - apiVersion: traefik.io/v1alpha1 kind: IngressRoute metadata: @@ -38,7 +9,7 @@ spec: - match: Host(`forgejo.durp.info`) && PathPrefix(`/`) kind: Rule services: - - name: forgejo + - name: unraid port: 3000 scheme: http tls: diff --git a/dmz/internalproxy/templates/freshrss.yaml b/dmz/internalproxy/templates/freshrss.yaml index 3fe0ff4..092854c 100644 --- a/dmz/internalproxy/templates/freshrss.yaml +++ b/dmz/internalproxy/templates/freshrss.yaml @@ -1,33 +1,3 @@ - -apiVersion: v1 -kind: Service -metadata: - name: freshrss -spec: - ports: - - name: app - port: 8085 - protocol: TCP - targetPort: 8085 - clusterIP: None - type: ClusterIP - ---- - -apiVersion: v1 -kind: Endpoints -metadata: - name: freshrss -subsets: - - addresses: - - ip: 192.168.21.200 - ports: - - name: app - port: 8085 - protocol: TCP - ---- - apiVersion: traefik.io/v1alpha1 kind: IngressRoute metadata: @@ -39,7 +9,7 @@ spec: - match: Host(`freshrss.durp.info`) && PathPrefix(`/`) kind: Rule services: - - name: freshrss + - name: unraid port: 8085 tls: secretName: freshrss-tls diff --git a/dmz/internalproxy/templates/gitlab.yaml b/dmz/internalproxy/templates/gitlab.yaml index 0c79c8b..2f225c2 100644 --- a/dmz/internalproxy/templates/gitlab.yaml +++ b/dmz/internalproxy/templates/gitlab.yaml @@ -1,30 +1,30 @@ -apiVersion: v1 -kind: Service -metadata: - name: gitlab-ssh -spec: - ports: - - name: app - port: 9022 - protocol: TCP - targetPort: 9022 - clusterIP: None - type: ClusterIP - ---- -apiVersion: v1 -kind: Endpoints -metadata: - name: gitlab-ssh -subsets: - - addresses: - - ip: 192.168.21.200 - ports: - - name: app - port: 9022 - protocol: TCP - ---- +#apiVersion: v1 +#kind: Service +#metadata: +# name: gitlab-ssh +#spec: +# ports: +# - name: app +# port: 9022 +# protocol: TCP +# targetPort: 9022 +# clusterIP: None +# type: ClusterIP +# +#--- +#apiVersion: v1 +#kind: Endpoints +#metadata: +# name: gitlab-ssh +#subsets: +# - addresses: +# - ip: 192.168.21.200 +# ports: +# - name: app +# port: 9022 +# protocol: TCP +# +#--- apiVersion: traefik.io/v1alpha1 kind: IngressRouteTCP metadata: @@ -35,36 +35,9 @@ spec: routes: - match: HostSNI(`*`) services: - - name: gitlab-ssh + - name: unraid port: 9022 ---- -apiVersion: v1 -kind: Service -metadata: - name: gitlab -spec: - ports: - - name: app - port: 9443 - protocol: TCP - targetPort: 9443 - clusterIP: None - type: ClusterIP - ---- -apiVersion: v1 -kind: Endpoints -metadata: - name: gitlab -subsets: - - addresses: - - ip: 192.168.21.200 - ports: - - name: app - port: 9443 - protocol: TCP - --- apiVersion: traefik.io/v1alpha1 kind: IngressRoute @@ -77,7 +50,7 @@ spec: - match: Host(`gitlab.durp.info`) && PathPrefix(`/`) kind: Rule services: - - name: gitlab + - name: unraid port: 9443 scheme: https tls: diff --git a/dmz/internalproxy/templates/invidious.yaml b/dmz/internalproxy/templates/invidious.yaml index cd85414..752db88 100644 --- a/dmz/internalproxy/templates/invidious.yaml +++ b/dmz/internalproxy/templates/invidious.yaml @@ -1,74 +1,75 @@ -apiVersion: v1 -kind: Service -metadata: - name: invidious -spec: - ports: - - name: app - port: 3000 - protocol: TCP - targetPort: 3000 - clusterIP: None - type: ClusterIP - ---- - -apiVersion: v1 -kind: Endpoints -metadata: - name: invidious -subsets: -- addresses: - - ip: 192.168.20.104 - ports: - - name: app - port: 3000 - protocol: TCP - ---- - -apiVersion: traefik.io/v1alpha1 -kind: IngressRoute -metadata: - name: invidious-ingress -spec: - entryPoints: - - websecure - routes: - - match: Host(`invidious.durp.info`) && PathPrefix(`/`) - middlewares: - - name: authentik-proxy-provider - namespace: traefik - kind: Rule - services: - - name: invidious - port: 3000 - tls: - secretName: invidious-tls - ---- - -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - name: invidious-tls -spec: - secretName: invidious-tls - issuerRef: - name: letsencrypt-production - kind: ClusterIssuer - commonName: "invidious.durp.info" - dnsNames: - - "invidious.durp.info" - ---- - -kind: Service -apiVersion: v1 -metadata: - name: invidious-external-dns - annotations: - external-dns.alpha.kubernetes.io/hostname: invidious.durp.info -spec: - type: ExternalName - externalName: durp.info +#apiVersion: v1 +#kind: Service +#metadata: +# name: invidious +#spec: +# ports: +# - name: app +# port: 3000 +# protocol: TCP +# targetPort: 3000 +# clusterIP: None +# type: ClusterIP +# +#--- +# +#apiVersion: v1 +#kind: Endpoints +#metadata: +# name: invidious +#subsets: +#- addresses: +# - ip: 192.168.20.104 +# ports: +# - name: app +# port: 3000 +# protocol: TCP +# +#--- +# +#apiVersion: traefik.io/v1alpha1 +#kind: IngressRoute +#metadata: +# name: invidious-ingress +#spec: +# entryPoints: +# - websecure +# routes: +# - match: Host(`invidious.durp.info`) && PathPrefix(`/`) +# middlewares: +# - name: authentik-proxy-provider +# namespace: traefik +# kind: Rule +# services: +# - name: invidious +# port: 3000 +# tls: +# secretName: invidious-tls +# +#--- +# +#apiVersion: cert-manager.io/v1 +#kind: Certificate +#metadata: +# name: invidious-tls +#spec: +# secretName: invidious-tls +# issuerRef: +# name: letsencrypt-production +# kind: ClusterIssuer +# commonName: "invidious.durp.info" +# dnsNames: +# - "invidious.durp.info" +# +#--- +# +#kind: Service +#apiVersion: v1 +#metadata: +# name: invidious-external-dns +# annotations: +# external-dns.alpha.kubernetes.io/hostname: invidious.durp.info +#spec: +# type: ExternalName +# externalName: durp.info +# \ No newline at end of file diff --git a/dmz/internalproxy/templates/kasm.yaml b/dmz/internalproxy/templates/kasm.yaml index 3e53772..7db9d75 100644 --- a/dmz/internalproxy/templates/kasm.yaml +++ b/dmz/internalproxy/templates/kasm.yaml @@ -1,32 +1,3 @@ -apiVersion: v1 -kind: Service -metadata: - name: kasm -spec: - ports: - - name: app - port: 443 - protocol: TCP - targetPort: 443 - clusterIP: None - type: ClusterIP - ---- - -apiVersion: v1 -kind: Endpoints -metadata: - name: kasm -subsets: - - addresses: - - ip: 192.168.20.104 - ports: - - name: app - port: 443 - protocol: TCP - ---- - apiVersion: traefik.io/v1alpha1 kind: IngressRoute metadata: @@ -38,7 +9,7 @@ spec: - match: Host(`kasm.durp.info`) && PathPrefix(`/`) kind: Rule services: - - name: kasm + - name: ubuntu port: 443 scheme: https tls: diff --git a/dmz/internalproxy/templates/kuma.yaml b/dmz/internalproxy/templates/kuma.yaml index 0651763..2465b67 100644 --- a/dmz/internalproxy/templates/kuma.yaml +++ b/dmz/internalproxy/templates/kuma.yaml @@ -1,45 +1,46 @@ -apiVersion: traefik.io/v1alpha1 -kind: IngressRoute -metadata: - name: kuma-ingress -spec: - entryPoints: - - websecure - routes: - - match: Host(`kuma.durp.info`) && PathPrefix(`/`) - kind: Rule - middlewares: - - name: authentik-proxy-provider - namespace: traefik - services: - - name: master-cluster - port: 443 - tls: - secretName: kuma-tls - ---- - -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - name: kuma-tls -spec: - issuerRef: - name: letsencrypt-production - kind: ClusterIssuer - secretName: kuma-tls - commonName: "kuma.durp.info" - dnsNames: - - "kuma.durp.info" - ---- - -kind: Service -apiVersion: v1 -metadata: - name: kuma-external-dns - annotations: - external-dns.alpha.kubernetes.io/hostname: kuma.durp.info -spec: - type: ExternalName - externalName: durp.info +#apiVersion: traefik.io/v1alpha1 +#kind: IngressRoute +#metadata: +# name: kuma-ingress +#spec: +# entryPoints: +# - websecure +# routes: +# - match: Host(`kuma.durp.info`) && PathPrefix(`/`) +# kind: Rule +# middlewares: +# - name: authentik-proxy-provider +# namespace: traefik +# services: +# - name: master-cluster +# port: 443 +# tls: +# secretName: kuma-tls +# +#--- +# +#apiVersion: cert-manager.io/v1 +#kind: Certificate +#metadata: +# name: kuma-tls +#spec: +# issuerRef: +# name: letsencrypt-production +# kind: ClusterIssuer +# secretName: kuma-tls +# commonName: "kuma.durp.info" +# dnsNames: +# - "kuma.durp.info" +# +#--- +# +#kind: Service +#apiVersion: v1 +#metadata: +# name: kuma-external-dns +# annotations: +# external-dns.alpha.kubernetes.io/hostname: kuma.durp.info +#spec: +# type: ExternalName +# externalName: durp.info +# \ No newline at end of file diff --git a/dmz/internalproxy/templates/litellm.yaml b/dmz/internalproxy/templates/litellm.yaml index e70cbd8..11a87ac 100644 --- a/dmz/internalproxy/templates/litellm.yaml +++ b/dmz/internalproxy/templates/litellm.yaml @@ -1,32 +1,3 @@ -apiVersion: v1 -kind: Service -metadata: - name: litellm -spec: - ports: - - name: app - port: 4000 - protocol: TCP - targetPort: 4000 - clusterIP: None - type: ClusterIP - ---- - -apiVersion: v1 -kind: Endpoints -metadata: - name: litellm -subsets: - - addresses: - - ip: 192.168.20.104 - ports: - - name: app - port: 4000 - protocol: TCP - ---- - apiVersion: traefik.io/v1alpha1 kind: IngressRoute metadata: @@ -38,7 +9,7 @@ spec: - match: Host(`litellm.durp.info`) && PathPrefix(`/`) kind: Rule services: - - name: litellm + - name: ubuntu port: 4000 tls: secretName: litellm-tls diff --git a/dmz/internalproxy/templates/minio.yaml b/dmz/internalproxy/templates/minio.yaml index c30a923..8622240 100644 --- a/dmz/internalproxy/templates/minio.yaml +++ b/dmz/internalproxy/templates/minio.yaml @@ -1,32 +1,3 @@ -apiVersion: v1 -kind: Service -metadata: - name: minio -spec: - ports: - - name: app - port: 9769 - protocol: TCP - targetPort: 9769 - clusterIP: None - type: ClusterIP - ---- - -apiVersion: v1 -kind: Endpoints -metadata: - name: minio -subsets: - - addresses: - - ip: 192.168.21.200 - ports: - - name: app - port: 9769 - protocol: TCP - ---- - apiVersion: traefik.io/v1alpha1 kind: IngressRoute metadata: @@ -41,7 +12,7 @@ spec: namespace: traefik kind: Rule services: - - name: minio + - name: unraid port: 9769 scheme: http tls: diff --git a/dmz/internalproxy/templates/nextcloud.yaml b/dmz/internalproxy/templates/nextcloud.yaml index e3ea9dd..77b04e5 100644 --- a/dmz/internalproxy/templates/nextcloud.yaml +++ b/dmz/internalproxy/templates/nextcloud.yaml @@ -1,30 +1,3 @@ -apiVersion: v1 -kind: Service -metadata: - name: nextcloud -spec: - ports: - - name: app - port: 11000 - protocol: TCP - targetPort: 11000 - clusterIP: None - type: ClusterIP - ---- -apiVersion: v1 -kind: Endpoints -metadata: - name: nextcloud -subsets: - - addresses: - - ip: 192.168.21.200 - ports: - - name: app - port: 11000 - protocol: TCP - ---- apiVersion: traefik.io/v1alpha1 kind: IngressRoute metadata: @@ -38,7 +11,7 @@ spec: middlewares: - name: nextcloud-chain services: - - name: nextcloud + - name: unraid port: 11000 scheme: http tls: diff --git a/dmz/internalproxy/templates/nexus.yaml b/dmz/internalproxy/templates/nexus.yaml index ed609d9..8e9ca70 100644 --- a/dmz/internalproxy/templates/nexus.yaml +++ b/dmz/internalproxy/templates/nexus.yaml @@ -1,32 +1,3 @@ -apiVersion: v1 -kind: Service -metadata: - name: nexus -spec: - ports: - - name: app - port: 8081 - protocol: TCP - targetPort: 8081 - clusterIP: None - type: ClusterIP - ---- - -apiVersion: v1 -kind: Endpoints -metadata: - name: nexus -subsets: -- addresses: - - ip: 192.168.21.200 - ports: - - name: app - port: 8081 - protocol: TCP - ---- - apiVersion: traefik.io/v1alpha1 kind: IngressRoute metadata: @@ -38,7 +9,7 @@ spec: - match: Host(`nexus.durp.info`) && PathPrefix(`/`) kind: Rule services: - - name: nexus + - name: unraid port: 8081 tls: secretName: nexus-tls diff --git a/dmz/internalproxy/templates/ollama.yaml b/dmz/internalproxy/templates/ollama.yaml index 9141647..9ad17e3 100644 --- a/dmz/internalproxy/templates/ollama.yaml +++ b/dmz/internalproxy/templates/ollama.yaml @@ -15,7 +15,6 @@ spec: property: users --- - apiVersion: traefik.io/v1alpha1 kind: Middleware metadata: @@ -26,36 +25,6 @@ spec: secret: ollama-secret --- - -apiVersion: v1 -kind: Service -metadata: - name: ollama -spec: - ports: - - name: app - port: 11435 - protocol: TCP - targetPort: 11435 - clusterIP: None - type: ClusterIP - ---- - -apiVersion: v1 -kind: Endpoints -metadata: - name: ollama -subsets: - - addresses: - - ip: 192.168.20.104 - ports: - - name: app - port: 11435 - protocol: TCP - ---- - apiVersion: traefik.io/v1alpha1 kind: IngressRoute metadata: @@ -69,13 +38,12 @@ spec: - name: ollama-basic-auth kind: Rule services: - - name: ollama + - name: unraid port: 11435 tls: secretName: ollama-tls --- - apiVersion: cert-manager.io/v1 kind: Certificate metadata: @@ -90,7 +58,6 @@ spec: - "ollama.durp.info" --- - kind: Service apiVersion: v1 metadata: diff --git a/dmz/internalproxy/templates/open-webui.yaml b/dmz/internalproxy/templates/open-webui.yaml index 24ae6fd..f3e7f89 100644 --- a/dmz/internalproxy/templates/open-webui.yaml +++ b/dmz/internalproxy/templates/open-webui.yaml @@ -1,32 +1,3 @@ -apiVersion: v1 -kind: Service -metadata: - name: open-webui -spec: - ports: - - name: app - port: 8089 - protocol: TCP - targetPort: 8089 - clusterIP: None - type: ClusterIP - ---- - -apiVersion: v1 -kind: Endpoints -metadata: - name: open-webui -subsets: - - addresses: - - ip: 192.168.21.200 - ports: - - name: app - port: 8089 - protocol: TCP - ---- - apiVersion: traefik.io/v1alpha1 kind: IngressRoute metadata: @@ -38,14 +9,13 @@ spec: - match: Host(`open-webui.durp.info`) && PathPrefix(`/`) kind: Rule services: - - name: open-webui + - name: unraid port: 8089 scheme: http tls: secretName: open-webui-tls --- - apiVersion: cert-manager.io/v1 kind: Certificate metadata: @@ -60,7 +30,6 @@ spec: - "open-webui.durp.info" --- - kind: Service apiVersion: v1 metadata: diff --git a/dmz/internalproxy/templates/plex.yaml b/dmz/internalproxy/templates/plex.yaml index abbdabf..7fbc5f8 100644 --- a/dmz/internalproxy/templates/plex.yaml +++ b/dmz/internalproxy/templates/plex.yaml @@ -1,32 +1,3 @@ -apiVersion: v1 -kind: Service -metadata: - name: plex -spec: - ports: - - name: app - port: 32400 - protocol: TCP - targetPort: 32400 - clusterIP: None - type: ClusterIP - ---- - -apiVersion: v1 -kind: Endpoints -metadata: - name: plex -subsets: - - addresses: - - ip: 192.168.21.200 - ports: - - name: app - port: 32400 - protocol: TCP - ---- - apiVersion: traefik.io/v1alpha1 kind: IngressRoute metadata: @@ -38,14 +9,13 @@ spec: - match: Host(`plex.durp.info`) && PathPrefix(`/`) kind: Rule services: - - name: plex + - name: unraid port: 32400 scheme: https tls: secretName: plex-tls --- - apiVersion: cert-manager.io/v1 kind: Certificate metadata: @@ -60,7 +30,6 @@ spec: - "plex.durp.info" --- - kind: Service apiVersion: v1 metadata: diff --git a/dmz/internalproxy/templates/portainer.yaml b/dmz/internalproxy/templates/portainer.yaml index 554e052..ae89690 100644 --- a/dmz/internalproxy/templates/portainer.yaml +++ b/dmz/internalproxy/templates/portainer.yaml @@ -7,9 +7,9 @@ spec: - websecure routes: - match: Host(`portainer.internal.durp.info`) && PathPrefix(`/`) - #middlewares: - #- name: whitelist - # namespace: traefik + middlewares: + - name: whitelist + namespace: traefik kind: Rule services: - name: infra-cluster diff --git a/dmz/internalproxy/templates/registry.yaml b/dmz/internalproxy/templates/registry.yaml index ac3c25a..b9b6ed4 100644 --- a/dmz/internalproxy/templates/registry.yaml +++ b/dmz/internalproxy/templates/registry.yaml @@ -1,30 +1,3 @@ -apiVersion: v1 -kind: Service -metadata: - name: registry -spec: - ports: - - name: app - port: 5000 - protocol: TCP - targetPort: 5000 - clusterIP: None - type: ClusterIP - ---- -apiVersion: v1 -kind: Endpoints -metadata: - name: registry -subsets: - - addresses: - - ip: 192.168.21.200 - ports: - - name: app - port: 5000 - protocol: TCP - ---- apiVersion: traefik.io/v1alpha1 kind: IngressRoute metadata: @@ -39,7 +12,7 @@ spec: - name: whitelist namespace: traefik services: - - name: registry + - name: unraid port: 5000 tls: secretName: registry-tls diff --git a/dmz/internalproxy/templates/root-vault.yaml b/dmz/internalproxy/templates/root-vault.yaml index c32ca62..76d4b94 100644 --- a/dmz/internalproxy/templates/root-vault.yaml +++ b/dmz/internalproxy/templates/root-vault.yaml @@ -1,32 +1,3 @@ -apiVersion: v1 -kind: Service -metadata: - name: root-vault -spec: - ports: - - name: app - port: 8201 - protocol: TCP - targetPort: 8201 - clusterIP: None - type: ClusterIP - ---- - -apiVersion: v1 -kind: Endpoints -metadata: - name: root-vault -subsets: - - addresses: - - ip: 192.168.21.200 - ports: - - name: app - port: 8201 - protocol: TCP - ---- - apiVersion: traefik.io/v1alpha1 kind: IngressRoute metadata: @@ -41,14 +12,13 @@ spec: namespace: traefik kind: Rule services: - - name: root-vault + - name: unraid port: 8201 scheme: https tls: secretName: root-vault-tls --- - apiVersion: cert-manager.io/v1 kind: Certificate metadata: diff --git a/dmz/internalproxy/templates/s3.yaml b/dmz/internalproxy/templates/s3.yaml index 29d509d..5bf203e 100644 --- a/dmz/internalproxy/templates/s3.yaml +++ b/dmz/internalproxy/templates/s3.yaml @@ -1,32 +1,3 @@ -apiVersion: v1 -kind: Service -metadata: - name: s3 -spec: - ports: - - name: app - port: 9768 - protocol: TCP - targetPort: 9768 - clusterIP: None - type: ClusterIP - ---- - -apiVersion: v1 -kind: Endpoints -metadata: - name: s3 -subsets: - - addresses: - - ip: 192.168.21.200 - ports: - - name: app - port: 9768 - protocol: TCP - ---- - apiVersion: traefik.io/v1alpha1 kind: IngressRoute metadata: @@ -41,7 +12,7 @@ spec: namespace: traefik kind: Rule services: - - name: s3 + - name: unraid port: 9768 scheme: http tls: @@ -75,7 +46,7 @@ spec: - match: Host(`s3.durp.info`) && PathPrefix(`/`) kind: Rule services: - - name: s3 + - name: unraid port: 9768 scheme: http tls: diff --git a/dmz/internalproxy/templates/semaphore.yaml b/dmz/internalproxy/templates/semaphore.yaml index 3005b94..145d1ca 100644 --- a/dmz/internalproxy/templates/semaphore.yaml +++ b/dmz/internalproxy/templates/semaphore.yaml @@ -1,64 +1,65 @@ - -apiVersion: v1 -kind: Service -metadata: - name: semaphore -spec: - ports: - - name: app - port: 3001 - protocol: TCP - targetPort: 3001 - clusterIP: None - type: ClusterIP - ---- - -apiVersion: v1 -kind: Endpoints -metadata: - name: semaphore -subsets: - - addresses: - - ip: 192.168.21.200 - ports: - - name: app - port: 3001 - protocol: TCP - ---- - -apiVersion: traefik.io/v1alpha1 -kind: IngressRoute -metadata: - name: semaphore-ingress -spec: - entryPoints: - - websecure - routes: - - match: Host(`semaphore.internal.durp.info`) && PathPrefix(`/`) - middlewares: - - name: whitelist - namespace: traefik - kind: Rule - services: - - name: semaphore - port: 3001 - scheme: http - tls: - secretName: semaphore-tls - ---- - -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - name: semaphore-tls -spec: - secretName: semaphore-tls - issuerRef: - name: vault-issuer - kind: ClusterIssuer - commonName: "semaphore.internal.durp.info" - dnsNames: - - "semaphore.internal.durp.info" +# +#apiVersion: v1 +#kind: Service +#metadata: +# name: semaphore +#spec: +# ports: +# - name: app +# port: 3001 +# protocol: TCP +# targetPort: 3001 +# clusterIP: None +# type: ClusterIP +# +#--- +# +#apiVersion: v1 +#kind: Endpoints +#metadata: +# name: semaphore +#subsets: +# - addresses: +# - ip: 192.168.21.200 +# ports: +# - name: app +# port: 3001 +# protocol: TCP +# +#--- +# +#apiVersion: traefik.io/v1alpha1 +#kind: IngressRoute +#metadata: +# name: semaphore-ingress +#spec: +# entryPoints: +# - websecure +# routes: +# - match: Host(`semaphore.internal.durp.info`) && PathPrefix(`/`) +# middlewares: +# - name: whitelist +# namespace: traefik +# kind: Rule +# services: +# - name: semaphore +# port: 3001 +# scheme: http +# tls: +# secretName: semaphore-tls +# +#--- +# +#apiVersion: cert-manager.io/v1 +#kind: Certificate +#metadata: +# name: semaphore-tls +#spec: +# secretName: semaphore-tls +# issuerRef: +# name: vault-issuer +# kind: ClusterIssuer +# commonName: "semaphore.internal.durp.info" +# dnsNames: +# - "semaphore.internal.durp.info" +# \ No newline at end of file From 224450c70c9c848ac8cdff550bf10834b89b8a73 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 28 Mar 2026 12:13:07 -0500 Subject: [PATCH 37/49] update --- dmz/internalproxy/templates/endpoints.yaml | 7 +++++ dmz/internalproxy/templates/smokeping.yaml | 33 +--------------------- 2 files changed, 8 insertions(+), 32 deletions(-) diff --git a/dmz/internalproxy/templates/endpoints.yaml b/dmz/internalproxy/templates/endpoints.yaml index 0b36e84..428120a 100644 --- a/dmz/internalproxy/templates/endpoints.yaml +++ b/dmz/internalproxy/templates/endpoints.yaml @@ -112,6 +112,10 @@ spec: port: 9768 protocol: TCP targetPort: 9768 + - name: smokeping + port: 81 + protocol: TCP + targetPort: 81 --- @@ -168,6 +172,9 @@ subsets: - name: s3 port: 9768 protocol: TCP + - name: smokeping + port: 81 + protocol: TCP --- diff --git a/dmz/internalproxy/templates/smokeping.yaml b/dmz/internalproxy/templates/smokeping.yaml index 2d78b2f..9808876 100644 --- a/dmz/internalproxy/templates/smokeping.yaml +++ b/dmz/internalproxy/templates/smokeping.yaml @@ -1,32 +1,3 @@ -apiVersion: v1 -kind: Service -metadata: - name: smokeping -spec: - ports: - - name: app - port: 81 - protocol: TCP - targetPort: 81 - clusterIP: None - type: ClusterIP - ---- - -apiVersion: v1 -kind: Endpoints -metadata: - name: smokeping -subsets: -- addresses: - - ip: 192.168.21.200 - ports: - - name: app - port: 81 - protocol: TCP - ---- - apiVersion: traefik.io/v1alpha1 kind: IngressRoute metadata: @@ -43,13 +14,12 @@ spec: namespace: traefik kind: Rule services: - - name: smokeping + - name: unraid port: 81 tls: secretName: smokeping-tls --- - apiVersion: cert-manager.io/v1 kind: Certificate metadata: @@ -64,7 +34,6 @@ spec: - "smokeping.durp.info" --- - kind: Service apiVersion: v1 metadata: From ecf16c071745446568bff607b54a53aa781be827 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 29 Mar 2026 07:23:32 -0500 Subject: [PATCH 38/49] update --- dmz/internalproxy/templates/argocd.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dmz/internalproxy/templates/argocd.yaml b/dmz/internalproxy/templates/argocd.yaml index d817e19..5adf88e 100644 --- a/dmz/internalproxy/templates/argocd.yaml +++ b/dmz/internalproxy/templates/argocd.yaml @@ -16,7 +16,7 @@ spec: port: 443 scheme: https tls: - secretName: argocd-tls + secretName: argocd-infra-tls --- From f457e7f1d9bea15716b76bb902277f9415ea3fb8 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Mon, 30 Mar 2026 05:34:35 -0500 Subject: [PATCH 39/49] update --- dmz/internalproxy/templates/ollama.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/dmz/internalproxy/templates/ollama.yaml b/dmz/internalproxy/templates/ollama.yaml index 9ad17e3..f03ca52 100644 --- a/dmz/internalproxy/templates/ollama.yaml +++ b/dmz/internalproxy/templates/ollama.yaml @@ -38,7 +38,7 @@ spec: - name: ollama-basic-auth kind: Rule services: - - name: unraid + - name: ubuntu port: 11435 tls: secretName: ollama-tls @@ -66,4 +66,4 @@ metadata: external-dns.alpha.kubernetes.io/hostname: ollama.durp.info spec: type: ExternalName - externalName: durp.info \ No newline at end of file + externalName: durp.info From 1ddfd948a5542f68a91371d421f6cde1ea545f89 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 2 May 2026 06:08:39 -0500 Subject: [PATCH 40/49] add gotify and kuma --- dmz/internalproxy/templates/endpoints.yaml | 13 ++-- dmz/internalproxy/templates/gotify.yaml | 41 ++++++++++ dmz/internalproxy/templates/kuma.yaml | 87 ++++++++++------------ 3 files changed, 88 insertions(+), 53 deletions(-) create mode 100644 dmz/internalproxy/templates/gotify.yaml diff --git a/dmz/internalproxy/templates/endpoints.yaml b/dmz/internalproxy/templates/endpoints.yaml index 428120a..fbabade 100644 --- a/dmz/internalproxy/templates/endpoints.yaml +++ b/dmz/internalproxy/templates/endpoints.yaml @@ -9,7 +9,6 @@ subsets: - port: 443 --- - apiVersion: v1 kind: Service metadata: @@ -21,7 +20,6 @@ spec: targetPort: 443 --- - apiVersion: v1 kind: Endpoints metadata: @@ -33,7 +31,6 @@ subsets: - port: 443 --- - apiVersion: v1 kind: Service metadata: @@ -45,7 +42,6 @@ spec: targetPort: 443 --- - apiVersion: v1 kind: Service metadata: @@ -118,7 +114,6 @@ spec: targetPort: 81 --- - apiVersion: v1 kind: Endpoints metadata: @@ -139,6 +134,9 @@ subsets: - name: forgejo port: 3000 protocol: TCP + - name: kuma + port: 3001 + protocol: TCP - name: freshrss port: 8085 protocol: TCP @@ -175,9 +173,11 @@ subsets: - name: smokeping port: 81 protocol: TCP + - name: gotify + port: 8070 + protocol: TCP --- - apiVersion: v1 kind: Endpoints metadata: @@ -197,7 +197,6 @@ subsets: protocol: TCP --- - apiVersion: v1 kind: Service metadata: diff --git a/dmz/internalproxy/templates/gotify.yaml b/dmz/internalproxy/templates/gotify.yaml new file mode 100644 index 0000000..6619aed --- /dev/null +++ b/dmz/internalproxy/templates/gotify.yaml @@ -0,0 +1,41 @@ +apiVersion: traefik.io/v1alpha1 +kind: IngressRoute +metadata: + name: gotify-ingress +spec: + entryPoints: + - websecure + routes: + - match: Host(`gotify.durp.info`) && PathPrefix(`/`) + kind: Rule + services: + - name: unraid + port: 8070 + scheme: http + tls: + secretName: gotify-tls + +--- +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + name: gotify-tls +spec: + secretName: gotify-tls + issuerRef: + name: letsencrypt-production + kind: ClusterIssuer + commonName: "gotify.durp.info" + dnsNames: + - "gotify.durp.info" + +--- +kind: Service +apiVersion: v1 +metadata: + name: gotify-external-dns + annotations: + external-dns.alpha.kubernetes.io/hostname: gotify.durp.info +spec: + type: ExternalName + externalName: durp.info diff --git a/dmz/internalproxy/templates/kuma.yaml b/dmz/internalproxy/templates/kuma.yaml index 2465b67..31b040b 100644 --- a/dmz/internalproxy/templates/kuma.yaml +++ b/dmz/internalproxy/templates/kuma.yaml @@ -1,46 +1,41 @@ -#apiVersion: traefik.io/v1alpha1 -#kind: IngressRoute -#metadata: -# name: kuma-ingress -#spec: -# entryPoints: -# - websecure -# routes: -# - match: Host(`kuma.durp.info`) && PathPrefix(`/`) -# kind: Rule -# middlewares: -# - name: authentik-proxy-provider -# namespace: traefik -# services: -# - name: master-cluster -# port: 443 -# tls: -# secretName: kuma-tls -# -#--- -# -#apiVersion: cert-manager.io/v1 -#kind: Certificate -#metadata: -# name: kuma-tls -#spec: -# issuerRef: -# name: letsencrypt-production -# kind: ClusterIssuer -# secretName: kuma-tls -# commonName: "kuma.durp.info" -# dnsNames: -# - "kuma.durp.info" -# -#--- -# -#kind: Service -#apiVersion: v1 -#metadata: -# name: kuma-external-dns -# annotations: -# external-dns.alpha.kubernetes.io/hostname: kuma.durp.info -#spec: -# type: ExternalName -# externalName: durp.info -# \ No newline at end of file +apiVersion: traefik.io/v1alpha1 +kind: IngressRoute +metadata: + name: kuma-ingress +spec: + entryPoints: + - websecure + routes: + - match: Host(`kuma.durp.info`) && PathPrefix(`/`) + kind: Rule + services: + - name: unraid + port: 3001 + scheme: http + tls: + secretName: kuma-tls + +--- +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + name: kuma-tls +spec: + secretName: kuma-tls + issuerRef: + name: letsencrypt-production + kind: ClusterIssuer + commonName: "kuma.durp.info" + dnsNames: + - "kuma.durp.info" + +--- +kind: Service +apiVersion: v1 +metadata: + name: kuma-external-dns + annotations: + external-dns.alpha.kubernetes.io/hostname: kuma.durp.info +spec: + type: ExternalName + externalName: durp.info From d50b776fef3f43a486a89da459d2ecebefde167c Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 2 May 2026 06:15:04 -0500 Subject: [PATCH 41/49] update --- dmz/internalproxy/templates/endpoints.yaml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/dmz/internalproxy/templates/endpoints.yaml b/dmz/internalproxy/templates/endpoints.yaml index fbabade..c7544c9 100644 --- a/dmz/internalproxy/templates/endpoints.yaml +++ b/dmz/internalproxy/templates/endpoints.yaml @@ -63,6 +63,9 @@ spec: - name: forgejo port: 3000 protocol: TCP + - name: kuma + port: 3001 + protocol: TCP targetPort: 3000 - name: freshrss port: 8085 @@ -112,6 +115,9 @@ spec: port: 81 protocol: TCP targetPort: 81 + - name: gotify + port: 8070 + protocol: TCP --- apiVersion: v1 From d7effa4eacbb0dca4091b6eff37caec9abab8684 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 9 May 2026 08:23:10 -0500 Subject: [PATCH 42/49] update --- dmz/internalproxy/templates/s3.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/dmz/internalproxy/templates/s3.yaml b/dmz/internalproxy/templates/s3.yaml index 5bf203e..8d5bdca 100644 --- a/dmz/internalproxy/templates/s3.yaml +++ b/dmz/internalproxy/templates/s3.yaml @@ -13,7 +13,7 @@ spec: kind: Rule services: - name: unraid - port: 9768 + port: 9769 scheme: http tls: secretName: s3-tls @@ -47,7 +47,7 @@ spec: kind: Rule services: - name: unraid - port: 9768 + port: 9769 scheme: http tls: secretName: s3-external-tls From b968cd024f5ae8fd94e1601f15cfaf8d65da4187 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 9 May 2026 12:14:16 -0500 Subject: [PATCH 43/49] update --- dmz/internalproxy/templates/s3.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/dmz/internalproxy/templates/s3.yaml b/dmz/internalproxy/templates/s3.yaml index 8d5bdca..5bf203e 100644 --- a/dmz/internalproxy/templates/s3.yaml +++ b/dmz/internalproxy/templates/s3.yaml @@ -13,7 +13,7 @@ spec: kind: Rule services: - name: unraid - port: 9769 + port: 9768 scheme: http tls: secretName: s3-tls @@ -47,7 +47,7 @@ spec: kind: Rule services: - name: unraid - port: 9769 + port: 9768 scheme: http tls: secretName: s3-external-tls From 2d1916de2bf8de93e52e61f02ba0d51445f5925a Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 9 May 2026 13:32:48 -0500 Subject: [PATCH 44/49] add images --- dmz/internalproxy/templates/gitlab.yaml | 44 +++++++++++++++++++++++++ 1 file changed, 44 insertions(+) diff --git a/dmz/internalproxy/templates/gitlab.yaml b/dmz/internalproxy/templates/gitlab.yaml index 2f225c2..5d07bea 100644 --- a/dmz/internalproxy/templates/gitlab.yaml +++ b/dmz/internalproxy/templates/gitlab.yaml @@ -80,3 +80,47 @@ metadata: spec: type: ExternalName externalName: durp.info + +--- +apiVersion: traefik.io/v1alpha1 +kind: IngressRoute +metadata: + name: gitlab-registry + namespace: gitlab +spec: + entryPoints: + - websecure + routes: + - match: Host(`images.durp.info`) + kind: Rule + services: + - name: unraid + port: 5050 + scheme: http + tls: + certResolver: letsencrypt + +--- +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + name: gitlab-images-tls +spec: + secretName: gitlab-images-tls + issuerRef: + name: letsencrypt-production + kind: ClusterIssuer + commonName: "images.durp.info" + dnsNames: + - "images.durp.info" + +--- +kind: Service +apiVersion: v1 +metadata: + name: gitlab-images-external-dns + annotations: + external-dns.alpha.kubernetes.io/hostname: images.durp.info +spec: + type: ExternalName + externalName: durp.info From e66526b1766e9b27b0d17e84ed78b47eaae6b525 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 9 May 2026 13:37:02 -0500 Subject: [PATCH 45/49] update --- dmz/internalproxy/templates/gitlab.yaml | 1 - 1 file changed, 1 deletion(-) diff --git a/dmz/internalproxy/templates/gitlab.yaml b/dmz/internalproxy/templates/gitlab.yaml index 5d07bea..6f032fa 100644 --- a/dmz/internalproxy/templates/gitlab.yaml +++ b/dmz/internalproxy/templates/gitlab.yaml @@ -86,7 +86,6 @@ apiVersion: traefik.io/v1alpha1 kind: IngressRoute metadata: name: gitlab-registry - namespace: gitlab spec: entryPoints: - websecure From ce51ae2f8d7439403922c185615d9668b4b2558b Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 9 May 2026 13:39:43 -0500 Subject: [PATCH 46/49] update --- dmz/internalproxy/templates/gitlab.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dmz/internalproxy/templates/gitlab.yaml b/dmz/internalproxy/templates/gitlab.yaml index 6f032fa..5331347 100644 --- a/dmz/internalproxy/templates/gitlab.yaml +++ b/dmz/internalproxy/templates/gitlab.yaml @@ -97,7 +97,7 @@ spec: port: 5050 scheme: http tls: - certResolver: letsencrypt + secretName: gitlab-images-tls --- apiVersion: cert-manager.io/v1 From dc09d0109eb3a7d65423c80cd91becb01c760887 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 10 May 2026 08:03:18 -0500 Subject: [PATCH 47/49] update --- dmz/internalproxy/templates/endpoints.yaml | 7 +++++++ dmz/internalproxy/templates/gitlab.yaml | 2 +- 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/dmz/internalproxy/templates/endpoints.yaml b/dmz/internalproxy/templates/endpoints.yaml index c7544c9..8380a2c 100644 --- a/dmz/internalproxy/templates/endpoints.yaml +++ b/dmz/internalproxy/templates/endpoints.yaml @@ -103,6 +103,10 @@ spec: port: 5000 protocol: TCP targetPort: 5000 + - name: gitlab-registry + port: 5002 + protocol: TCP + targetPort: 5002 - name: root-vault port: 8201 protocol: TCP @@ -170,6 +174,9 @@ subsets: - name: registry port: 5000 protocol: TCP + - name: gitlab-registry + port: 5002 + protocol: TCP - name: root-vault port: 8201 protocol: TCP diff --git a/dmz/internalproxy/templates/gitlab.yaml b/dmz/internalproxy/templates/gitlab.yaml index 5331347..d64a5aa 100644 --- a/dmz/internalproxy/templates/gitlab.yaml +++ b/dmz/internalproxy/templates/gitlab.yaml @@ -94,7 +94,7 @@ spec: kind: Rule services: - name: unraid - port: 5050 + port: 5002 scheme: http tls: secretName: gitlab-images-tls From fa564e4d8c27be062bff10a60ff366d972334feb Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Tue, 12 May 2026 06:24:19 -0500 Subject: [PATCH 48/49] update --- infra/authentik/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/infra/authentik/values.yaml b/infra/authentik/values.yaml index 1cf4c0a..c98e563 100644 --- a/infra/authentik/values.yaml +++ b/infra/authentik/values.yaml @@ -34,7 +34,7 @@ authentik: enabled: true image: registry: registry.durp.info - repository: bitnami/postgresql + repository: bitnamilegacy/postgresql pullPolicy: Always postgresqlUsername: "authentik" postgresqlDatabase: "authentik" From dc2c619e19c59aa770109eea70d6a8cbf52359ae Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Tue, 12 May 2026 06:26:13 -0500 Subject: [PATCH 49/49] update --- infra/authentik/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/infra/authentik/values.yaml b/infra/authentik/values.yaml index c98e563..7b75190 100644 --- a/infra/authentik/values.yaml +++ b/infra/authentik/values.yaml @@ -52,7 +52,7 @@ authentik: enabled: false image: registry: registry.durp.info - repository: bitnami/redis + repository: bitnamilegacy/redis pullPolicy: Always architecture: standalone auth: