forust
861d89d36a
ci(deploy): split runtime by k8s/active marker
...
services marked k8s/active are applied via kubectl; the rest via docker
compose. inactive services with k8s/ keep only routing manifests
(external Services, EndpointSlices, Ingresses) to reach docker backends.
headscale/nextcloud routing moved to k8s/routing/.
validations: compose config --quiet + kubectl apply --dry-run=client.
namespace manifests applied first. pull_policy:build stacks get
build+push before up so the registry image stays fresh.
2026-09-06 20:39:12 +02:00
forust
587611ca88
chore: remove empty middlewares blocks from k8s ingresses
2026-09-02 12:17:04 +02:00
forust
92aa731e44
deleted crowdsec stack from the repo. will figure something else
...
Signed-off-by: mr-forust <vzlomdsisma@gmail.com >
2026-07-19 23:16:14 +02:00
forust
a128523c24
Fix CrowdSec middleware references in Traefik ingresses
2026-06-29 22:47:21 +02:00
forust
f424d91405
Tighten lint workflow scope
2026-06-21 21:51:20 +02:00
forust
69ffd3682e
refactor: userbot to subtree
2026-06-19 23:20:13 +02:00
forust
d74a705d53
chore(k8s): rewritten ingressroute to include headplane AND headscale-admin ui
...
new routes groupping style
2026-06-19 23:02:22 +02:00
forust
2de6131ba7
chore: apply prettier formatting across compose files and configs
2026-06-19 12:03:11 +02:00
forust
1762962f32
chore(k8s): fix indentation in ingress manifests (3-space -> 2-space)
2026-06-19 12:03:02 +02:00
forust
0803f3efff
chore(k8s): returned to Host || Host standart instead of regexp.
...
Yaml lint (yamllint)
2026-06-18 21:02:40 +02:00
forust
ec0420962b
hotfix: update headscale config for v0.29.0 breaking changes
...
- ephemeral_node_inactivity_timeout → node.ephemeral.inactivity_timeout
- randomize_client_port → randomizeClientPort in policy file
2026-06-18 14:26:58 +02:00
forust
b9b8474455
feat(k8s): protect all prod routers with crowdsec middleware
2026-06-17 01:50:33 +02:00
forust
4ca3ccdad3
chore(k8s): router rewrite
...
- returned to Host matcher instead of Hostregexp
- switched dockercompose labels to letsencrypt
- renamed DoH route
2026-06-16 12:34:15 +02:00
forust
68c5eac164
chore: compact ingress rules with regex
2026-06-11 14:20:03 +02:00
forust
18d1e21690
fix(k8s): traefik log spam for non-existing local-tls secret, because of namespace isolation
2026-06-10 21:14:10 +02:00
forust
22ffd779cc
fix: switched headscale to external-service (managed by docker, routed by k8s)
...
- Changed ports for headscale to prefix "1"
2026-06-09 09:01:44 +02:00
forust
e19660fdf4
feat(k8s): standardize IngressRoutes — LE prod certs, prod→local→dev order, Traefik values fix
2026-06-08 12:27:55 +02:00
forust
36922a177c
feat(k8s): add K8s manifests for all homelab services
...
traefik, gitea, adguard, nextcloud, errorpages, homepages,
uptime-kuma, kener, checkmk, headscale, dockmon, metube,
downtify, portainer, netronome, userbot
Includes Helm values, deployments, services, ingress routes,
configmaps, secrets (placeholders), postgres statefulsets,
kustomize overlays, and Traefik dynamic configuration.
2026-06-08 10:54:03 +02:00
forust
d7a68237e5
chore: remove redundant or unnececary traefik labels
...
- traefik.docker.network= (defined by traefik cli)
- traefik.http.routers.<routername>.middlewares=security-headers@file" (applied globally by traefik cli)
2026-02-04 22:26:27 +01:00
forust
3ee0b96ed5
feat: add acl policies to the headscale
2026-02-01 01:14:58 +01:00
forust
d25d213d9b
feat: add headscale admin web admin (along with headplane accessible via port)
2026-01-31 13:38:33 +01:00
forust
54da82432b
fix: remove headplane healtcheck (always false negative)
2026-01-29 17:22:47 +01:00
forust
bf72007b14
feat: headplane (ui for headscale)
2026-01-21 10:09:31 +01:00
forust
f18d4d9be4
chore: use volumes to store data of
...
- portainer
- headscale
- termix
- uptime-kuma
- dockmon
2026-01-19 23:58:26 +01:00
forust
45ce789f58
chore: compose cleanup:
...
- Remove TZ envs
- +- unified compose structure
- Minify where possible
- Remove <service>.internal routers
- Remove service specifications where possible
Affected services:
- adguardhome
- authentik
- cfddns
- checkmk
- dockmon
- downtify
- gitea
- glance
- headscale
- homepages
- metube
- nextcloud
- penpot
- portainer
- termix
- traefik
- uptime-kuma
TODO: Move data from directory to volumes
2026-01-19 23:33:50 +01:00
forust
89576032b9
fix: update DNS settings for headscale
2026-01-03 01:39:05 +01:00
forust
a9edfc0a25
fix: traefik middlewares for local and dev envs
2026-01-02 13:06:49 +01:00
forust
21f4e46028
chore: container name change for headscale web panel
2026-01-02 03:06:24 +01:00
forust
0234524635
feat: headscale implementation
...
- Headscale server
- Using goodieshq/headscale-admin as ui
- UI protected by security-chain
- Metrics available at /metrics
2026-01-02 01:29:51 +01:00
forust
ce0bc4613a
fix: headscale command
2026-01-01 03:19:45 +01:00
forust
8f4f460ff3
feat: add headscale server and UI configuration with Traefik routing
2026-01-01 02:39:28 +01:00
forust
