Compare commits
1 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| bcce8503bf |
@@ -44,7 +44,6 @@ ArgoCD homelab project
|
|||||||
| :--- | :---: |
|
| :--- | :---: |
|
||||||
| **amnezia** | [](https://ag.hexor.cy/applications/argocd/amnezia) |
|
| **amnezia** | [](https://ag.hexor.cy/applications/argocd/amnezia) |
|
||||||
| **comfyui** | [](https://ag.hexor.cy/applications/argocd/comfyui) |
|
| **comfyui** | [](https://ag.hexor.cy/applications/argocd/comfyui) |
|
||||||
| **doka2-lobby-list** | [](https://ag.hexor.cy/applications/argocd/doka2-lobby-list) |
|
|
||||||
| **furumi** | [](https://ag.hexor.cy/applications/argocd/furumi) |
|
| **furumi** | [](https://ag.hexor.cy/applications/argocd/furumi) |
|
||||||
| **gitea** | [](https://ag.hexor.cy/applications/argocd/gitea) |
|
| **gitea** | [](https://ag.hexor.cy/applications/argocd/gitea) |
|
||||||
| **greece-notifier** | [](https://ag.hexor.cy/applications/argocd/greece-notifier) |
|
| **greece-notifier** | [](https://ag.hexor.cy/applications/argocd/greece-notifier) |
|
||||||
|
|||||||
@@ -8,7 +8,7 @@ metadata:
|
|||||||
annotations:
|
annotations:
|
||||||
reloader.stakater.com/auto: "false"
|
reloader.stakater.com/auto: "false"
|
||||||
secret.reloader.stakater.com/reload: "amneziawg-server"
|
secret.reloader.stakater.com/reload: "amneziawg-server"
|
||||||
configmap.reloader.stakater.com/reload: "amneziawg-scripts,amneziawg-exporter-redis"
|
configmap.reloader.stakater.com/reload: "amneziawg-scripts"
|
||||||
spec:
|
spec:
|
||||||
selector:
|
selector:
|
||||||
matchLabels:
|
matchLabels:
|
||||||
@@ -37,9 +37,7 @@ spec:
|
|||||||
- |
|
- |
|
||||||
set -euo pipefail
|
set -euo pipefail
|
||||||
cp /usr/bin/awg /shared-bin/awg
|
cp /usr/bin/awg /shared-bin/awg
|
||||||
cp /lib/ld-musl-x86_64.so.1 /shared-bin/ld-musl-x86_64.so.1
|
chmod 0755 /shared-bin/awg
|
||||||
cp /lib/ld-musl-x86_64.so.1 /shared-bin/libc.musl-x86_64.so.1
|
|
||||||
chmod 0755 /shared-bin/awg /shared-bin/ld-musl-x86_64.so.1 /shared-bin/libc.musl-x86_64.so.1
|
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
- name: awg-bin
|
- name: awg-bin
|
||||||
mountPath: /shared-bin
|
mountPath: /shared-bin
|
||||||
@@ -250,14 +248,6 @@ spec:
|
|||||||
mountPath: /usr/bin/awg
|
mountPath: /usr/bin/awg
|
||||||
subPath: awg
|
subPath: awg
|
||||||
readOnly: true
|
readOnly: true
|
||||||
- name: awg-bin
|
|
||||||
mountPath: /lib/ld-musl-x86_64.so.1
|
|
||||||
subPath: ld-musl-x86_64.so.1
|
|
||||||
readOnly: true
|
|
||||||
- name: awg-bin
|
|
||||||
mountPath: /lib/libc.musl-x86_64.so.1
|
|
||||||
subPath: libc.musl-x86_64.so.1
|
|
||||||
readOnly: true
|
|
||||||
volumes:
|
volumes:
|
||||||
- name: server-config
|
- name: server-config
|
||||||
secret:
|
secret:
|
||||||
|
|||||||
@@ -8,8 +8,8 @@ metadata:
|
|||||||
component: exporter
|
component: exporter
|
||||||
data:
|
data:
|
||||||
redis.conf: |
|
redis.conf: |
|
||||||
bind 127.0.0.1
|
bind 0.0.0.0
|
||||||
protected-mode yes
|
protected-mode no
|
||||||
port 6379
|
port 6379
|
||||||
tcp-backlog 511
|
tcp-backlog 511
|
||||||
timeout 0
|
timeout 0
|
||||||
@@ -21,12 +21,8 @@ data:
|
|||||||
databases 16
|
databases 16
|
||||||
always-show-logo no
|
always-show-logo no
|
||||||
set-proc-title no
|
set-proc-title no
|
||||||
save ""
|
save 3600 1
|
||||||
appendonly no
|
|
||||||
stop-writes-on-bgsave-error no
|
stop-writes-on-bgsave-error no
|
||||||
rdbcompression yes
|
rdbcompression yes
|
||||||
rdbchecksum yes
|
rdbchecksum yes
|
||||||
dir /data
|
dir /data
|
||||||
rename-command CONFIG ""
|
|
||||||
rename-command SAVE ""
|
|
||||||
rename-command BGSAVE ""
|
|
||||||
|
|||||||
@@ -48,32 +48,3 @@ spec:
|
|||||||
remoteRef:
|
remoteRef:
|
||||||
key: 3092dc7c-41dd-461a-9f7a-377727f47e93
|
key: 3092dc7c-41dd-461a-9f7a-377727f47e93
|
||||||
property: fields[1].value
|
property: fields[1].value
|
||||||
---
|
|
||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: amnezia-fellow
|
|
||||||
spec:
|
|
||||||
target:
|
|
||||||
name: amnezia-fellow
|
|
||||||
deletionPolicy: Delete
|
|
||||||
template:
|
|
||||||
engineVersion: v2
|
|
||||||
type: Opaque
|
|
||||||
data:
|
|
||||||
database-url: |-
|
|
||||||
postgresql://amnezia_fellow:{{ .amnezia_fellow | urlquery }}@psql.psql.svc:5432/amnezia_fellow
|
|
||||||
postgres-password: |-
|
|
||||||
{{ .amnezia_fellow }}
|
|
||||||
data:
|
|
||||||
- secretKey: amnezia_fellow
|
|
||||||
sourceRef:
|
|
||||||
storeRef:
|
|
||||||
name: vaultwarden-login
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
metadataPolicy: None
|
|
||||||
key: 2a9deb39-ef22-433e-a1be-df1555625e22
|
|
||||||
property: fields[19].value
|
|
||||||
|
|||||||
@@ -5,8 +5,6 @@ metadata:
|
|||||||
name: amnezia-fellow
|
name: amnezia-fellow
|
||||||
labels:
|
labels:
|
||||||
app: amnezia-fellow
|
app: amnezia-fellow
|
||||||
annotations:
|
|
||||||
secret.reloader.stakater.com/reload: "amnezia-fellow"
|
|
||||||
spec:
|
spec:
|
||||||
replicas: 1
|
replicas: 1
|
||||||
strategy:
|
strategy:
|
||||||
@@ -33,10 +31,7 @@ spec:
|
|||||||
protocol: TCP
|
protocol: TCP
|
||||||
env:
|
env:
|
||||||
- name: AMNEZIA_FELLOW_DATABASE_URL
|
- name: AMNEZIA_FELLOW_DATABASE_URL
|
||||||
valueFrom:
|
value: "sqlite:///data/amnezia-fellow.sqlite3?mode=rwc"
|
||||||
secretKeyRef:
|
|
||||||
name: amnezia-fellow
|
|
||||||
key: database-url
|
|
||||||
- name: AMNEZIA_FELLOW_K8S_NAMESPACE
|
- name: AMNEZIA_FELLOW_K8S_NAMESPACE
|
||||||
value: "amnezia"
|
value: "amnezia"
|
||||||
- name: AMNEZIA_FELLOW_K8S_CLIENTS_SECRET
|
- name: AMNEZIA_FELLOW_K8S_CLIENTS_SECRET
|
||||||
@@ -70,3 +65,10 @@ spec:
|
|||||||
limits:
|
limits:
|
||||||
cpu: "500m"
|
cpu: "500m"
|
||||||
memory: "512Mi"
|
memory: "512Mi"
|
||||||
|
volumeMounts:
|
||||||
|
- name: data
|
||||||
|
mountPath: /data
|
||||||
|
volumes:
|
||||||
|
- name: data
|
||||||
|
persistentVolumeClaim:
|
||||||
|
claimName: amnezia-fellow-data
|
||||||
|
|||||||
@@ -1,20 +0,0 @@
|
|||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: doka2-lobby-list
|
|
||||||
namespace: argocd
|
|
||||||
spec:
|
|
||||||
project: apps
|
|
||||||
destination:
|
|
||||||
namespace: doka2-lobby-list
|
|
||||||
server: https://kubernetes.default.svc
|
|
||||||
source:
|
|
||||||
repoURL: ssh://git@gt.hexor.cy:30022/ab/homelab.git
|
|
||||||
targetRevision: HEAD
|
|
||||||
path: k8s/apps/doka2-lobby-list
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
selfHeal: true
|
|
||||||
prune: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
@@ -1,51 +0,0 @@
|
|||||||
---
|
|
||||||
apiVersion: apps/v1
|
|
||||||
kind: Deployment
|
|
||||||
metadata:
|
|
||||||
name: doka2-lobby-list
|
|
||||||
labels:
|
|
||||||
app: doka2-lobby-list
|
|
||||||
spec:
|
|
||||||
replicas: 1
|
|
||||||
strategy:
|
|
||||||
type: Recreate
|
|
||||||
selector:
|
|
||||||
matchLabels:
|
|
||||||
app: doka2-lobby-list
|
|
||||||
template:
|
|
||||||
metadata:
|
|
||||||
labels:
|
|
||||||
app: doka2-lobby-list
|
|
||||||
spec:
|
|
||||||
nodeSelector:
|
|
||||||
kubernetes.io/os: linux
|
|
||||||
volumes:
|
|
||||||
- name: creds
|
|
||||||
persistentVolumeClaim:
|
|
||||||
claimName: doka2-lobby-list-creds
|
|
||||||
containers:
|
|
||||||
- name: doka2-lobby-list
|
|
||||||
image: ultradesu/doka2-lobby-list:latest
|
|
||||||
imagePullPolicy: Always
|
|
||||||
ports:
|
|
||||||
- name: http
|
|
||||||
containerPort: 3000
|
|
||||||
protocol: TCP
|
|
||||||
env:
|
|
||||||
- name: ADMIN_PASSWORD
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: doka2-lobby-list-secrets
|
|
||||||
key: ADMIN_PASSWORD
|
|
||||||
- name: CREDS_DIR
|
|
||||||
value: /data/creds
|
|
||||||
volumeMounts:
|
|
||||||
- name: creds
|
|
||||||
mountPath: /data/creds
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
cpu: "50m"
|
|
||||||
memory: "128Mi"
|
|
||||||
limits:
|
|
||||||
cpu: "500m"
|
|
||||||
memory: "512Mi"
|
|
||||||
@@ -1,26 +0,0 @@
|
|||||||
---
|
|
||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: doka2-lobby-list-secrets
|
|
||||||
spec:
|
|
||||||
target:
|
|
||||||
name: doka2-lobby-list-secrets
|
|
||||||
deletionPolicy: Delete
|
|
||||||
template:
|
|
||||||
type: Opaque
|
|
||||||
data:
|
|
||||||
ADMIN_PASSWORD: |-
|
|
||||||
{{ .admin_password | trim }}
|
|
||||||
data:
|
|
||||||
- secretKey: admin_password
|
|
||||||
sourceRef:
|
|
||||||
storeRef:
|
|
||||||
name: vaultwarden-login
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
metadataPolicy: None
|
|
||||||
key: af4618dd-6431-4b20-b617-c00bae9ceff6
|
|
||||||
property: password
|
|
||||||
@@ -1,26 +0,0 @@
|
|||||||
---
|
|
||||||
apiVersion: networking.k8s.io/v1
|
|
||||||
kind: Ingress
|
|
||||||
metadata:
|
|
||||||
name: doka2-lobby-list-tls-ingress
|
|
||||||
annotations:
|
|
||||||
cert-manager.io/cluster-issuer: letsencrypt
|
|
||||||
traefik.ingress.kubernetes.io/router.middlewares: kube-system-https-redirect@kubernetescrd
|
|
||||||
acme.cert-manager.io/http01-edit-in-place: "true"
|
|
||||||
spec:
|
|
||||||
ingressClassName: traefik
|
|
||||||
rules:
|
|
||||||
- host: doka.hexor.cy
|
|
||||||
http:
|
|
||||||
paths:
|
|
||||||
- path: /
|
|
||||||
pathType: Prefix
|
|
||||||
backend:
|
|
||||||
service:
|
|
||||||
name: doka2-lobby-list
|
|
||||||
port:
|
|
||||||
number: 80
|
|
||||||
tls:
|
|
||||||
- secretName: doka2-lobby-list-tls
|
|
||||||
hosts:
|
|
||||||
- doka.hexor.cy
|
|
||||||
@@ -1,10 +0,0 @@
|
|||||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
||||||
kind: Kustomization
|
|
||||||
|
|
||||||
resources:
|
|
||||||
- app.yaml
|
|
||||||
- deployment.yaml
|
|
||||||
- external-secrets.yaml
|
|
||||||
- service.yaml
|
|
||||||
- ingress.yaml
|
|
||||||
- storage.yaml
|
|
||||||
@@ -1,16 +0,0 @@
|
|||||||
---
|
|
||||||
apiVersion: v1
|
|
||||||
kind: Service
|
|
||||||
metadata:
|
|
||||||
name: doka2-lobby-list
|
|
||||||
labels:
|
|
||||||
app: doka2-lobby-list
|
|
||||||
spec:
|
|
||||||
type: ClusterIP
|
|
||||||
selector:
|
|
||||||
app: doka2-lobby-list
|
|
||||||
ports:
|
|
||||||
- port: 80
|
|
||||||
targetPort: http
|
|
||||||
protocol: TCP
|
|
||||||
name: http
|
|
||||||
@@ -1,14 +0,0 @@
|
|||||||
---
|
|
||||||
apiVersion: v1
|
|
||||||
kind: PersistentVolumeClaim
|
|
||||||
metadata:
|
|
||||||
name: doka2-lobby-list-creds
|
|
||||||
labels:
|
|
||||||
app: doka2-lobby-list
|
|
||||||
spec:
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteOnce
|
|
||||||
storageClassName: longhorn
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
storage: 1Gi
|
|
||||||
@@ -45,11 +45,6 @@ spec:
|
|||||||
value: "info"
|
value: "info"
|
||||||
- name: WEB_PETTING_DEBUG
|
- name: WEB_PETTING_DEBUG
|
||||||
value: "false"
|
value: "false"
|
||||||
- name: WEB_PETTING_DATABASE_URL
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: web-petting-secrets
|
|
||||||
key: WEB_PETTING_DATABASE_URL
|
|
||||||
resources:
|
resources:
|
||||||
requests:
|
requests:
|
||||||
memory: "256Mi"
|
memory: "256Mi"
|
||||||
|
|||||||
@@ -1,26 +0,0 @@
|
|||||||
---
|
|
||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: web-petting-secrets
|
|
||||||
spec:
|
|
||||||
target:
|
|
||||||
name: web-petting-secrets
|
|
||||||
deletionPolicy: Delete
|
|
||||||
template:
|
|
||||||
type: Opaque
|
|
||||||
data:
|
|
||||||
WEB_PETTING_DATABASE_URL: |-
|
|
||||||
postgresql://web_petting:{{ .web_petting }}@psql.psql.svc:5432/web_petting
|
|
||||||
data:
|
|
||||||
- secretKey: web_petting
|
|
||||||
sourceRef:
|
|
||||||
storeRef:
|
|
||||||
name: vaultwarden-login
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
metadataPolicy: None
|
|
||||||
key: 2a9deb39-ef22-433e-a1be-df1555625e22
|
|
||||||
property: fields[20].value
|
|
||||||
@@ -4,7 +4,6 @@ kind: Kustomization
|
|||||||
resources:
|
resources:
|
||||||
- app.yaml
|
- app.yaml
|
||||||
- deployment.yaml
|
- deployment.yaml
|
||||||
- external-secrets.yaml
|
|
||||||
- service.yaml
|
- service.yaml
|
||||||
- ingress.yaml
|
- ingress.yaml
|
||||||
- storage.yaml
|
- storage.yaml
|
||||||
|
|||||||
@@ -140,10 +140,6 @@ spec:
|
|||||||
{{ .furumi_dev }}
|
{{ .furumi_dev }}
|
||||||
USER_keycloak: |-
|
USER_keycloak: |-
|
||||||
{{ .keycloak }}
|
{{ .keycloak }}
|
||||||
USER_amnezia_fellow: |-
|
|
||||||
{{ .amnezia_fellow }}
|
|
||||||
USER_web_petting: |-
|
|
||||||
{{ .web_petting }}
|
|
||||||
data:
|
data:
|
||||||
- secretKey: authentik
|
- secretKey: authentik
|
||||||
sourceRef:
|
sourceRef:
|
||||||
@@ -343,25 +339,3 @@ spec:
|
|||||||
metadataPolicy: None
|
metadataPolicy: None
|
||||||
key: 2a9deb39-ef22-433e-a1be-df1555625e22
|
key: 2a9deb39-ef22-433e-a1be-df1555625e22
|
||||||
property: fields[18].value
|
property: fields[18].value
|
||||||
- secretKey: amnezia_fellow
|
|
||||||
sourceRef:
|
|
||||||
storeRef:
|
|
||||||
name: vaultwarden-login
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
metadataPolicy: None
|
|
||||||
key: 2a9deb39-ef22-433e-a1be-df1555625e22
|
|
||||||
property: fields[19].value
|
|
||||||
- secretKey: web_petting
|
|
||||||
sourceRef:
|
|
||||||
storeRef:
|
|
||||||
name: vaultwarden-login
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
metadataPolicy: None
|
|
||||||
key: 2a9deb39-ef22-433e-a1be-df1555625e22
|
|
||||||
property: fields[20].value
|
|
||||||
|
|||||||
Reference in New Issue
Block a user