forust
5321d44011
fix: add checkmk agent entrypoint
...
ci / lint-prettier (push) Failing after 13s
ci / lint-ruff (push) Successful in 5s
ci / lint-dockerfiles (push) Successful in 5s
ci / validate (push) Successful in 8s
ci / deploy-userbot-panel (push) Has been skipped
ci / lint-yaml (push) Failing after 8s
ci / build (push) Has been skipped
update traefik to v3.7.13
2026-09-10 14:50:12 +02:00
forust
861d89d36a
ci(deploy): split runtime by k8s/active marker
...
services marked k8s/active are applied via kubectl; the rest via docker
compose. inactive services with k8s/ keep only routing manifests
(external Services, EndpointSlices, Ingresses) to reach docker backends.
headscale/nextcloud routing moved to k8s/routing/.
validations: compose config --quiet + kubectl apply --dry-run=client.
namespace manifests applied first. pull_policy:build stacks get
build+push before up so the registry image stays fresh.
2026-09-06 20:39:12 +02:00
forust
587611ca88
chore: remove empty middlewares blocks from k8s ingresses
2026-09-02 12:17:04 +02:00
forust
92aa731e44
deleted crowdsec stack from the repo. will figure something else
...
ci / lint-prettier (push) Successful in 18s
ci / lint-ruff (push) Successful in 6s
ci / lint-yaml (push) Successful in 6s
ci / lint-dockerfiles (push) Successful in 5s
ci / validate (push) Successful in 6s
ci / build (push) Successful in 43s
Signed-off-by: mr-forust <vzlomdsisma@gmail.com >
2026-07-19 23:16:14 +02:00
forust
73a1132beb
Align Traefik Helm log values with chart v41
lint / prettier (push) Successful in 1m59s
lint / ruff (push) Successful in 4s
lint / yamllint (push) Successful in 5s
lint / hadolint (push) Successful in 4s
validate / yaml (push) Successful in 6s
validate / k8s (push) Successful in 3s
2026-06-29 23:02:26 +02:00
forust
a128523c24
Fix CrowdSec middleware references in Traefik ingresses
2026-06-29 22:47:21 +02:00
forust
bacb2f4b9f
fix: correct Traefik rule syntax for local IngressRoutes
...
Move parentheses outside Host() calls so that || and && operators
are properly grouped in Traefik rule expressions.
2026-06-28 11:59:52 +02:00
forust
d53b14b1de
chore: apply yaml lint fixes across compose files
...
- Fix trailing whitespace in compose files
- Add missing final newlines (EOF)
- Fix indentation in dockmon (3-space -> 2-space) and glance monitor.yml
- Align comments consistently
2026-06-19 11:57:14 +02:00
forust
0803f3efff
chore(k8s): returned to Host || Host standart instead of regexp.
...
Deploy to Server / deploy (push) Has been cancelled
Yaml lint (yamllint)
2026-06-18 21:02:40 +02:00
forust
b9b8474455
feat(k8s): protect all prod routers with crowdsec middleware
2026-06-17 01:50:33 +02:00
forust
76853637bc
feat: traefik prometheus metrics
2026-06-17 01:41:45 +02:00
forust
dac3777fc4
fix: authentik k8s url
2026-06-17 01:41:13 +02:00
forust
85d35f86a7
feat: switch adguard dns to a dedicated metallb IP
2026-06-16 12:36:31 +02:00
forust
4ca3ccdad3
chore(k8s): router rewrite
...
- returned to Host matcher instead of Hostregexp
- switched dockercompose labels to letsencrypt
- renamed DoH route
2026-06-16 12:34:15 +02:00
forust
10e26cda72
feat: crowdsec
...
- moved bouncer tokens to secrets
- experimental host ssh log parsing
- moved crowdsec to it's own directory
2026-06-16 00:23:29 +02:00
forust
2f97821dc6
feat: crowdsec lapi helm
Deploy to Server / deploy (push) Has been cancelled
2026-06-14 23:21:37 +02:00
forust
26d10f4e71
changed traefik bgp ip
Deploy to Server / deploy (push) Has been cancelled
2026-06-11 19:44:07 +02:00
forust
68c5eac164
chore: compact ingress rules with regex
2026-06-11 14:20:03 +02:00
forust
2dce972be2
feat(k8s): traefik metallb and minecraft ports
...
- MetalLB binded on 172.20.10.2
- disabled hostnetwork
- 25565 MC Java
- 19132 UDP MC Bedrock
2026-06-11 03:42:59 +02:00
forust
18d1e21690
fix(k8s): traefik log spam for non-existing local-tls secret, because of namespace isolation
2026-06-10 21:14:10 +02:00
forust
6232b77026
fix: traefik restart policy to fix port issue
2026-06-09 09:02:30 +02:00
forust
17b2dfdc2e
fix: gitea ssh tcp router, dns over tls adguard router
2026-06-08 14:20:28 +02:00
forust
e19660fdf4
feat(k8s): standardize IngressRoutes — LE prod certs, prod→local→dev order, Traefik values fix
2026-06-08 12:27:55 +02:00
forust
36922a177c
feat(k8s): add K8s manifests for all homelab services
...
traefik, gitea, adguard, nextcloud, errorpages, homepages,
uptime-kuma, kener, checkmk, headscale, dockmon, metube,
downtify, portainer, netronome, userbot
Includes Helm values, deployments, services, ingress routes,
configmaps, secrets (placeholders), postgres statefulsets,
kustomize overlays, and Traefik dynamic configuration.
2026-06-08 10:54:03 +02:00
forust
e5797e60b7
upd: traefik v3.7.2
Deploy to Server / deploy (push) Has been cancelled
2026-06-07 20:36:51 +02:00
forust
b8d5bc747d
hack: commented out local certs until i figure out how to route certs for local routers
2026-06-07 13:38:14 +02:00
forust
6dac841b2c
updated traefik to v3.7,
...
Deploy to Server / deploy (push) Has been cancelled
resolved maxResponseBodySize not set
2026-05-25 01:47:59 +02:00
forust
8362f45bdc
upd: updated image tags for services:
...
- gitea 1.25.1 --> 1.26
- portainer-ce latest --> 2.41.0
- traefik latest --> 3.6.15
2026-05-08 16:37:26 +02:00
forust
a22707770f
feat: update certificates logic:
...
Deploy to Server / deploy (push) Failing after 1s
- Switched xdfnx's homepage certificates to traefik-managed mode
- Renamed local fallback certs
2026-02-25 21:12:44 +01:00
forust
578a1ca544
revert: naio needs insecure transport
...
2593b54402
2026-02-20 01:25:23 +01:00
forust
2593b54402
chore: add backquotes for downtify traefik labels
...
removed insecureTransport
2026-02-05 01:33:04 +01:00
forust
d7a68237e5
chore: remove redundant or unnececary traefik labels
...
- traefik.docker.network= (defined by traefik cli)
- traefik.http.routers.<routername>.middlewares=security-headers@file" (applied globally by traefik cli)
2026-02-04 22:26:27 +01:00
forust
3dbb50c924
json logging
2026-01-29 17:30:09 +01:00
forust
b7ecf88052
fix: correct metube local router rule and fix TLS configuration comments
2026-01-23 17:54:00 +01:00
forust
5068591b8b
fix: xdfnx's certificate
2026-01-23 17:48:00 +01:00
forust
c6d00e525b
fix: comment-out CF Origin CA. (google trust service)
2026-01-22 00:51:15 +01:00
forust
95f0afbbee
feat: add traefik integration for error-handler
...
TODO: fix css
2026-01-21 20:14:02 +01:00
forust
45ce789f58
chore: compose cleanup:
...
- Remove TZ envs
- +- unified compose structure
- Minify where possible
- Remove <service>.internal routers
- Remove service specifications where possible
Affected services:
- adguardhome
- authentik
- cfddns
- checkmk
- dockmon
- downtify
- gitea
- glance
- headscale
- homepages
- metube
- nextcloud
- penpot
- portainer
- termix
- traefik
- uptime-kuma
TODO: Move data from directory to volumes
2026-01-19 23:33:50 +01:00
forust
5fe8af82d5
Revert "fix: clean up traefik configuration and add redirect middleware"
...
This reverts commit dc7fe64fbc
2026-01-19 11:18:36 +01:00
forust
9b43a9bef4
feat: add traefik configuration for external fileservers
2026-01-09 14:48:42 +01:00
forust
dc7fe64fbc
fix: clean up traefik configuration and add redirect middleware
2025-12-30 22:44:52 +01:00
forust
502810a12e
fix: update traefik router rules for DNS and adjust letsencrypt volume path
2025-12-30 17:20:13 +01:00
forust
c047cc291d
LE for DoH
2025-12-30 16:54:23 +01:00
forust
fb2f420520
refactor: update network refs form "traefik-proxy" to "proxy"
...
- To allow testing dev vers of other services
2025-12-30 14:14:24 +01:00
forust
dc75dbaf7c
chore: disable logging on pre-dormant period
2025-12-17 03:03:32 +01:00
forust
f4c695f95e
feat: security-chain (authentik) on no-login services, SSO traefik dashboard
2025-12-09 15:14:42 +01:00
forust
6bdb16ad21
chore: whitespaces
2025-12-09 13:23:59 +01:00
forust
0e46193f53
chore: replace sec middlewares with sec chain
2025-12-09 03:57:13 +01:00
forust
aed28ed15c
refactor: sepparate traefik and authentik
2025-12-09 03:52:20 +01:00
forust
f3b73bae11
feat: authentik service+envfile for traefik and authentik
2025-12-08 01:29:00 +01:00
forust
