forust
|
85d35f86a7
|
feat: switch adguard dns to a dedicated metallb IP
|
2026-06-16 12:36:31 +02:00 |
|
forust
|
4ca3ccdad3
|
chore(k8s): router rewrite
- returned to Host matcher instead of Hostregexp
- switched dockercompose labels to letsencrypt
- renamed DoH route
|
2026-06-16 12:34:15 +02:00 |
|
forust
|
10e26cda72
|
feat: crowdsec
- moved bouncer tokens to secrets
- experimental host ssh log parsing
- moved crowdsec to it's own directory
|
2026-06-16 00:23:29 +02:00 |
|
forust
|
2f97821dc6
|
feat: crowdsec lapi helm
Deploy to Server / deploy (push) Has been cancelled
|
2026-06-14 23:21:37 +02:00 |
|
forust
|
26d10f4e71
|
changed traefik bgp ip
Deploy to Server / deploy (push) Has been cancelled
|
2026-06-11 19:44:07 +02:00 |
|
forust
|
68c5eac164
|
chore: compact ingress rules with regex
|
2026-06-11 14:20:03 +02:00 |
|
forust
|
2dce972be2
|
feat(k8s): traefik metallb and minecraft ports
- MetalLB binded on 172.20.10.2
- disabled hostnetwork
- 25565 MC Java
- 19132 UDP MC Bedrock
|
2026-06-11 03:42:59 +02:00 |
|
forust
|
18d1e21690
|
fix(k8s): traefik log spam for non-existing local-tls secret, because of namespace isolation
|
2026-06-10 21:14:10 +02:00 |
|
forust
|
6232b77026
|
fix: traefik restart policy to fix port issue
|
2026-06-09 09:02:30 +02:00 |
|
forust
|
17b2dfdc2e
|
fix: gitea ssh tcp router, dns over tls adguard router
|
2026-06-08 14:20:28 +02:00 |
|
forust
|
e19660fdf4
|
feat(k8s): standardize IngressRoutes — LE prod certs, prod→local→dev order, Traefik values fix
|
2026-06-08 12:27:55 +02:00 |
|
forust
|
36922a177c
|
feat(k8s): add K8s manifests for all homelab services
traefik, gitea, adguard, nextcloud, errorpages, homepages,
uptime-kuma, kener, checkmk, headscale, dockmon, metube,
downtify, portainer, netronome, userbot
Includes Helm values, deployments, services, ingress routes,
configmaps, secrets (placeholders), postgres statefulsets,
kustomize overlays, and Traefik dynamic configuration.
|
2026-06-08 10:54:03 +02:00 |
|
forust
|
e5797e60b7
|
upd: traefik v3.7.2
Deploy to Server / deploy (push) Has been cancelled
|
2026-06-07 20:36:51 +02:00 |
|
forust
|
b8d5bc747d
|
hack: commented out local certs until i figure out how to route certs for local routers
|
2026-06-07 13:38:14 +02:00 |
|
forust
|
6dac841b2c
|
updated traefik to v3.7,
Deploy to Server / deploy (push) Has been cancelled
resolved maxResponseBodySize not set
|
2026-05-25 01:47:59 +02:00 |
|
forust
|
8362f45bdc
|
upd: updated image tags for services:
- gitea 1.25.1 --> 1.26
- portainer-ce latest --> 2.41.0
- traefik latest --> 3.6.15
|
2026-05-08 16:37:26 +02:00 |
|
forust
|
a22707770f
|
feat: update certificates logic:
Deploy to Server / deploy (push) Failing after 1s
- Switched xdfnx's homepage certificates to traefik-managed mode
- Renamed local fallback certs
|
2026-02-25 21:12:44 +01:00 |
|
forust
|
578a1ca544
|
revert: naio needs insecure transport
2593b54402 chore: add backquotes for downtify traefik labels removed insecureTransport
|
2026-02-20 01:25:23 +01:00 |
|
forust
|
2593b54402
|
chore: add backquotes for downtify traefik labels
removed insecureTransport
|
2026-02-05 01:33:04 +01:00 |
|
forust
|
d7a68237e5
|
chore: remove redundant or unnececary traefik labels
- traefik.docker.network= (defined by traefik cli)
- traefik.http.routers.<routername>.middlewares=security-headers@file" (applied globally by traefik cli)
|
2026-02-04 22:26:27 +01:00 |
|
forust
|
3dbb50c924
|
json logging
|
2026-01-29 17:30:09 +01:00 |
|
forust
|
b7ecf88052
|
fix: correct metube local router rule and fix TLS configuration comments
|
2026-01-23 17:54:00 +01:00 |
|
forust
|
5068591b8b
|
fix: xdfnx's certificate
|
2026-01-23 17:48:00 +01:00 |
|
forust
|
c6d00e525b
|
fix: comment-out CF Origin CA. (google trust service)
|
2026-01-22 00:51:15 +01:00 |
|
forust
|
95f0afbbee
|
feat: add traefik integration for error-handler
TODO: fix css
|
2026-01-21 20:14:02 +01:00 |
|
forust
|
45ce789f58
|
chore: compose cleanup:
- Remove TZ envs
- +- unified compose structure
- Minify where possible
- Remove <service>.internal routers
- Remove service specifications where possible
Affected services:
- adguardhome
- authentik
- cfddns
- checkmk
- dockmon
- downtify
- gitea
- glance
- headscale
- homepages
- metube
- nextcloud
- penpot
- portainer
- termix
- traefik
- uptime-kuma
TODO: Move data from directory to volumes
|
2026-01-19 23:33:50 +01:00 |
|
forust
|
5fe8af82d5
|
Revert "fix: clean up traefik configuration and add redirect middleware"
This reverts commit dc7fe64fbc.
|
2026-01-19 11:18:36 +01:00 |
|
forust
|
9b43a9bef4
|
feat: add traefik configuration for external fileservers
|
2026-01-09 14:48:42 +01:00 |
|
forust
|
dc7fe64fbc
|
fix: clean up traefik configuration and add redirect middleware
|
2025-12-30 22:44:52 +01:00 |
|
forust
|
502810a12e
|
fix: update traefik router rules for DNS and adjust letsencrypt volume path
|
2025-12-30 17:20:13 +01:00 |
|
forust
|
c047cc291d
|
LE for DoH
|
2025-12-30 16:54:23 +01:00 |
|
forust
|
fb2f420520
|
refactor: update network refs form "traefik-proxy" to "proxy"
- To allow testing dev vers of other services
|
2025-12-30 14:14:24 +01:00 |
|
forust
|
dc75dbaf7c
|
chore: disable logging on pre-dormant period
|
2025-12-17 03:03:32 +01:00 |
|
forust
|
f4c695f95e
|
feat: security-chain (authentik) on no-login services, SSO traefik dashboard
|
2025-12-09 15:14:42 +01:00 |
|
forust
|
6bdb16ad21
|
chore: whitespaces
|
2025-12-09 13:23:59 +01:00 |
|
forust
|
0e46193f53
|
chore: replace sec middlewares with sec chain
|
2025-12-09 03:57:13 +01:00 |
|
forust
|
aed28ed15c
|
refactor: sepparate traefik and authentik
|
2025-12-09 03:52:20 +01:00 |
|
forust
|
f3b73bae11
|
feat: authentik service+envfile for traefik and authentik
|
2025-12-08 01:29:00 +01:00 |
|
forust
|
c31369f2b7
|
add certfiles for xdfnx landing
|
2025-12-07 02:28:55 +01:00 |
|
forust
|
504cbc81a0
|
fix: nextcloud traefik router parse error
|
2025-12-07 02:16:59 +01:00 |
|
forust
|
aa7239ee83
|
refactor: traefik dynamic configuration
|
2025-12-07 01:39:58 +01:00 |
|
forust
|
6d9427cf2a
|
chore: add traefik dev rule for main nextcloud
|
2025-12-06 02:34:19 +01:00 |
|
forust
|
70d60ed40a
|
chore: add traefik dev rule for main nextcloud
|
2025-12-06 02:33:10 +01:00 |
|
forust
|
d48a01775d
|
fix: routers for nextcloud frontend
|
2025-12-06 00:38:16 +01:00 |
|
forust
|
23e955bde7
|
chore: new auth credentials, revert to info logging
|
2025-12-05 20:33:14 +01:00 |
|
forust
|
a767107277
|
fix: refering to file-defined middlewares
|
2025-12-05 14:36:57 +01:00 |
|
forust
|
e68e37c285
|
refactor: use internal tld according to ICAAN
|
2025-12-05 04:30:51 +01:00 |
|
forust
|
fc6a11397b
|
refactor: move traefik configuration to docker-compose files via labels
|
2025-12-05 04:03:24 +01:00 |
|
forust
|
8a0ed85e7c
|
feat: Penpoint service, traefik integration
|
2025-12-04 20:04:49 +01:00 |
|
forust
|
272666d2fd
|
fix: container url forust-homepage
|
2025-11-26 00:44:58 +01:00 |
|