alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 6 Actions Activity

Compare commits

base: alexlebens:92724d235181316272bfe67dc9fbfed9f0e3b985
Branches Tags
alexlebens:main alexlebens:renovate/postgres-cluster-6.x alexlebens:renovate/ghcr.io-linuxserver-prowlarr-2.x alexlebens:renovate/actions-checkout-5.x alexlebens:renovate/ghcr.io-moghtech-komodo-core-1.x alexlebens:renovate/ghcr.io-immich-app-immich-server-1.x alexlebens:renovate/ghcr.io-immich-app-immich-machine-learning-1.x alexlebens:renovate/roundcube-roundcubemail-1.x
..
compare: alexlebens:main
Branches Tags
alexlebens:renovate/postgres-cluster-6.x alexlebens:renovate/ghcr.io-linuxserver-prowlarr-2.x alexlebens:renovate/actions-checkout-5.x alexlebens:renovate/ghcr.io-moghtech-komodo-core-1.x alexlebens:renovate/ghcr.io-immich-app-immich-server-1.x alexlebens:renovate/ghcr.io-immich-app-immich-machine-learning-1.x alexlebens:main alexlebens:renovate/roundcube-roundcubemail-1.x

8 Commits
92724d2351 ... main

Author SHA1 Message Date
Alex Lebens
9a611ba15d disable scanner
All checks were successful
lint-test-helm / helm-lint (push) Successful in 12s
Details
renovate / renovate (push) Successful in 1m21s
Details
2025-08-23 22:27:19 -05:00
Alex Lebens
02790f9cc7 disable csi operator
All checks were successful
lint-test-helm / helm-lint (push) Successful in 18s
Details
renovate / renovate (push) Successful in 1m9s
Details
2025-08-23 22:11:58 -05:00
Renovate Bot
7252469938 Update ghcr.io/plexguide/huntarr Docker tag to v8.2.8
All checks were successful
lint-test-helm / helm-lint (pull_request) Successful in 14s
Details
lint-test-helm / helm-lint (push) Successful in 10s
Details
renovate / renovate (push) Successful in 2m1s
Details
2025-08-24 03:01:12 +00:00
Renovate Bot
1b2569c8ca Update Helm release tailscale-operator to v1.86.5 (#1299)
All checks were successful
lint-test-helm / helm-lint (push) Successful in 11s
Details
renovate / renovate (push) Successful in 1m37s
Details
2025-08-23 19:01:17 +00:00
Renovate Bot
98897ba0ba Update kube-prometheus-stack Docker tag to v77 (#1298)
Some checks failed
lint-test-helm / helm-lint (push) Successful in 9s
Details
renovate / renovate (push) Has been cancelled
Details 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [kube-prometheus-stack](https://github.com/prometheus-operator/kube-prometheus) ([source](https://github.com/prometheus-community/helm-charts)) | major | `76.5.1` -> `77.0.0` |

---

### Release Notes

<details>
<summary>prometheus-community/helm-charts (kube-prometheus-stack)</summary>

### [`v77.0.0`](https://github.com/prometheus-community/helm-charts/releases/tag/kube-prometheus-stack-77.0.0)

[Compare Source](https://github.com/prometheus-community/helm-charts/compare/kube-prometheus-stack-76.5.1...kube-prometheus-stack-77.0.0)

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

#### What's Changed

- \[kube-prometheus-stack] bump to 0.85.0 by [@&#8203;DrFaust92](https://github.com/DrFaust92) in https://github.com/prometheus-community/helm-charts/pull/6084

**Full Changelog**: https://github.com/prometheus-community/helm-charts/compare/prometheus-redis-exporter-6.16.0...kube-prometheus-stack-77.0.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xLjMiLCJ1cGRhdGVkSW5WZXIiOiI0MS4xLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->

Reviewed-on: #1298
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
 2025-08-23 19:01:00 +00:00
Renovate Bot
f357aaca79 Update Helm release authentik to v2025.8.1 (#1297)
All checks were successful
lint-test-helm / helm-lint (push) Successful in 11s
Details
renovate / renovate (push) Successful in 1m34s
Details
2025-08-23 16:01:18 +00:00
Renovate Bot
d069d3f1d0 Update cloudflared Docker tag to v1.20.1 (#1296)
All checks were successful
lint-test-helm / helm-lint (push) Successful in 9s
Details
renovate / renovate (push) Successful in 1m26s
Details
2025-08-23 04:02:42 +00:00
Renovate Bot
8eeac21525 Update Helm release rook-ceph-cluster to v1.18.0 (#1281)
All checks were successful
lint-test-helm / helm-lint (push) Successful in 15s
Details
renovate / renovate (push) Successful in 3m0s
Details 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [rook-ceph-cluster](https://github.com/rook/rook) | minor | `v1.17.8` -> `v1.18.0` |

---

### Release Notes

<details>
<summary>rook/rook (rook-ceph-cluster)</summary>

### [`v1.18.0`](https://github.com/rook/rook/releases/tag/v1.18.0)

[Compare Source](https://github.com/rook/rook/compare/v1.17.8...v1.18.0)

#### Upgrade Guide

To upgrade from previous versions of Rook, see the [Rook upgrade guide](https://rook.github.io/docs/rook/v1.18/Upgrade/rook-upgrade/).

#### Breaking Changes

- Kubernetes v1.29 is now the minimum version supported by Rook through the soon-to-be K8s release v1.34.
- Helm versions 3.13 and newer are supported. Previously, only the latest version of helm was tested and the docs stated only version 3.x of helm as a prerequisite. Now rook supports the six most recent minor versions of helm along with their their patch updates.
- Rook now validates node topology during CephCluster creation to prevent misconfigured CRUSH hierarchies for OSDs. If child labels like `topology.rook.io/rack` are duplicated across zones, cluster creation will fail. The check applies only to new clusters without OSDs. Clusters with existing OSDs will only log a warning and continue. If the checks are invalid in your topology, they can be suppressed by setting `ROOK_SKIP_OSD_TOPOLOGY_CHECK=true` in the `rook-ceph-operator-config` configmap.

#### Features

- The Ceph CSI operator is now the default and recommended component for configuring CSI drivers for RBD, CephFS, and NFS volumes. The CSI operator has been factored out of Rook to run independently to manage the Ceph-CSI driver. 
  - During the upgrade and throughout the v1.18.x releases, Rook will automatically convert any Rook CSI settings to the new CSI operator CRs. This transition is expected to be completely transparent. In the future v1.19 release, Rook will relinquish direct control of these settings so advanced users can have more flexibility when configuring the CSI drivers. At that time, we will have a guide on configuring these new Ceph CSI operator CRs directly.
  - During install, as mentioned in the [Quickstart Guide](https://rook.io/docs/rook/latest-release/Getting-Started/quickstart/#deploy-the-rook-operator), there is a new manifest to be created: csi-operator.yaml
  - If installing with the helm chart, the Ceph CSI operator will automatically be installed by default with the new helm setting `csi.rookUseCsiOperator` in the rook-ceph chart.
  - If a blocking issue is found, the previous CSI driver can be re-enabled by setting `ROOK_USE_CSI_OPERATOR: false` in operator.yaml or by applying the helm setting `csi.rookUseCsiOperator: false`.
- [Ceph CSI v3.15](https://github.com/ceph/ceph-csi/releases/tag/v3.15.0) has a range of features and improvements for the RBD, CephFS, and NFS drivers. This release is supported both by the Ceph CSI operator and Rook's direct mode of configuration. Starting in the next release (at the end of the year), the Ceph CSI operator will be required to configure the CSI driver.
- [CephX key rotation](https://rook.io/docs/rook/v1.18/Storage-Configuration/Advanced/cephx-key-rotation/?h=cephx) is now available as an **experimental** feature for the CephX authentication keys used by Ceph daemons and clients. Users will begin to see new cephx status items on some Rook resources in newly-deployed Rook clusters. Users can also find `spec.security.cephx` settings that allow initiating CephX key rotation for various Ceph components. Full documentation for key rotation can be found [here](https://rook.io/docs/rook/v1.18/Storage-Configuration/Advanced/cephx-key-rotation/?h=cephx).
  - Ceph version v19.2.3+ is required for key rotation.
  - The Ceph admin and mon keys cannot yet be rotated. Implementation is still in progress while in experimental mode.
- Add support for specifying the clusterID in the [CephBlockPoolRadosNamespace](https://rook.io/docs/rook/v1.18/CRDs/Block-Storage/ceph-block-pool-rados-namespace-crd/#creating-a-storage-class) and the [CephFilesystemSubVolumeGroup](https://rook.io/docs/rook/v1.18/CRDs/Shared-Filesystem/ceph-fs-subvolumegroup-crd/#create-a-storage-class-for-the-subvolume-group) CR.
- When a mon is being [failed over](https://rook.io/docs/rook/latest-release/Storage-Configuration/Advanced/ceph-mon-health/#failing-over-a-monitor), if the assigned node no longer exists, the mon is failed over immediately instead of waiting for a
  20 minute timeout.
- Support for Ceph Tentacle v20 will be available as soon as it is released.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xLjMiLCJ1cGRhdGVkSW5WZXIiOiI0MS4xLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImNoYXJ0Il19-->

Reviewed-on: #1281
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
 2025-08-23 02:49:24 +00:00
20 changed files with 22 additions and 21 deletions
Expand all files Collapse all files

2
clusters/cl01tl/applications/code-server/Chart.yaml
View File

@@ -23,6 +23,6 @@ dependencies:
- name: cloudflared - name: cloudflared
alias: cloudflared alias: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 1.20.0 version: 1.20.1
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/visual-studio-code.png icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/visual-studio-code.png
appVersion: 4.100.2 appVersion: 4.100.2

2
clusters/cl01tl/applications/directus/Chart.yaml
View File

@@ -24,7 +24,7 @@ dependencies:
- name: cloudflared - name: cloudflared
alias: cloudflared-directus alias: cloudflared-directus
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 1.20.0 version: 1.20.1
- name: postgres-cluster - name: postgres-cluster
alias: postgres-17-cluster alias: postgres-17-cluster
version: 5.1.0 version: 5.1.0

2
clusters/cl01tl/applications/element-web/Chart.yaml
View File

@@ -22,6 +22,6 @@ dependencies:
- name: cloudflared - name: cloudflared
alias: cloudflared alias: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 1.20.0 version: 1.20.1
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
appVersion: v1.11.100 appVersion: v1.11.100

2
clusters/cl01tl/applications/freshrss/Chart.yaml
View File

@@ -24,7 +24,7 @@ dependencies:
- name: cloudflared - name: cloudflared
alias: cloudflared alias: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 1.20.0 version: 1.20.1
- name: postgres-cluster - name: postgres-cluster
alias: postgres-17-cluster alias: postgres-17-cluster
version: 5.1.0 version: 5.1.0

2
clusters/cl01tl/applications/homepage-dev/Chart.yaml
View File

@@ -22,6 +22,6 @@ dependencies:
- name: cloudflared - name: cloudflared
alias: cloudflared alias: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 1.20.0 version: 1.20.1
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
appVersion: v1.2.0 appVersion: v1.2.0

2
clusters/cl01tl/applications/huntarr/values.yaml
View File

@@ -9,7 +9,7 @@ huntarr:
main: main:
image: image:
repository: ghcr.io/plexguide/huntarr repository: ghcr.io/plexguide/huntarr
tag: 8.2.7 tag: 8.2.8
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
env: env:
- name: TZ - name: TZ

2
clusters/cl01tl/applications/karakeep/Chart.yaml
View File

@@ -27,6 +27,6 @@ dependencies:
- name: cloudflared - name: cloudflared
alias: cloudflared alias: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 1.20.0 version: 1.20.1
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/webp/karakeep.webp icon: https://cdn.jsdelivr.net/gh/selfhst/icons/webp/karakeep.webp
appVersion: 0.26.0 appVersion: 0.26.0

2
clusters/cl01tl/applications/outline/Chart.yaml
View File

@@ -25,7 +25,7 @@ dependencies:
- name: cloudflared - name: cloudflared
alias: cloudflared-outline alias: cloudflared-outline
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 1.20.0 version: 1.20.1
- name: postgres-cluster - name: postgres-cluster
alias: postgres-17-cluster alias: postgres-17-cluster
version: 5.1.0 version: 5.1.0

2
clusters/cl01tl/applications/postiz/Chart.yaml
View File

@@ -23,7 +23,7 @@ dependencies:
version: 4.2.0 version: 4.2.0
- name: cloudflared - name: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 1.20.0 version: 1.20.1
- name: postgres-cluster - name: postgres-cluster
alias: postgres-17-cluster alias: postgres-17-cluster
version: 5.1.0 version: 5.1.0

2
clusters/cl01tl/applications/site-documentation/Chart.yaml
View File

@@ -23,6 +23,6 @@ dependencies:
- name: cloudflared - name: cloudflared
alias: cloudflared-site alias: cloudflared-site
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 1.20.0 version: 1.20.1
icon: https://d21zlbwtcn424f.cloudfront.net/logo-new-round.png icon: https://d21zlbwtcn424f.cloudfront.net/logo-new-round.png
appVersion: 0.8.1 appVersion: 0.8.1

2
clusters/cl01tl/applications/site-profile/Chart.yaml
View File

@@ -23,6 +23,6 @@ dependencies:
- name: cloudflared - name: cloudflared
alias: cloudflared-site alias: cloudflared-site
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 1.20.0 version: 1.20.1
icon: https://d21zlbwtcn424f.cloudfront.net/logo-new-round.png icon: https://d21zlbwtcn424f.cloudfront.net/logo-new-round.png
appVersion: 2.0.1 appVersion: 2.0.1

2
clusters/cl01tl/applications/vaultwarden/Chart.yaml
View File

@@ -25,7 +25,7 @@ dependencies:
- name: cloudflared - name: cloudflared
alias: cloudflared alias: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 1.20.0 version: 1.20.1
- name: postgres-cluster - name: postgres-cluster
alias: postgres-17-cluster alias: postgres-17-cluster
version: 5.1.0 version: 5.1.0

2
clusters/cl01tl/monitoring/kube-prometheus-stack/Chart.yaml
View File

@@ -19,7 +19,7 @@ maintainers:
- name: alexlebens - name: alexlebens
dependencies: dependencies:
- name: kube-prometheus-stack - name: kube-prometheus-stack
version: 76.5.1 version: 77.0.0
repository: oci://ghcr.io/prometheus-community/charts repository: oci://ghcr.io/prometheus-community/charts
- name: app-template - name: app-template
alias: ntfy-alertmanager alias: ntfy-alertmanager

2
clusters/cl01tl/monitoring/trivy/values.yaml
View File

@@ -7,7 +7,7 @@ trivy-operator:
clusterSbomCacheEnabled: false clusterSbomCacheEnabled: false
configAuditScannerEnabled: true configAuditScannerEnabled: true
rbacAssessmentScannerEnabled: true rbacAssessmentScannerEnabled: true
infraAssessmentScannerEnabled: true infraAssessmentScannerEnabled: false
clusterComplianceEnabled: false clusterComplianceEnabled: false
serviceMonitor: serviceMonitor:
enabled: true enabled: true

4
clusters/cl01tl/platform/authentik/Chart.yaml
View File

@@ -21,12 +21,12 @@ maintainers:
- name: alexlebens - name: alexlebens
dependencies: dependencies:
- name: authentik - name: authentik
version: 2025.8.0 version: 2025.8.1
repository: https://charts.goauthentik.io/ repository: https://charts.goauthentik.io/
- name: cloudflared - name: cloudflared
alias: cloudflared alias: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 1.20.0 version: 1.20.1
- name: postgres-cluster - name: postgres-cluster
alias: postgres-17-cluster alias: postgres-17-cluster
version: 5.1.0 version: 5.1.0

2
clusters/cl01tl/platform/gitea/Chart.yaml
View File

@@ -41,7 +41,7 @@ dependencies:
- name: cloudflared - name: cloudflared
alias: cloudflared alias: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 1.20.0 version: 1.20.1
- name: postgres-cluster - name: postgres-cluster
alias: postgres-17-cluster alias: postgres-17-cluster
version: 5.1.0 version: 5.1.0

4
clusters/cl01tl/platform/matrix-synapse/Chart.yaml
View File

@@ -45,11 +45,11 @@ dependencies:
# version: 4.0.1 # version: 4.0.1
- name: cloudflared - name: cloudflared
alias: cloudflared-synapse alias: cloudflared-synapse
version: 1.20.0 version: 1.20.1
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
- name: cloudflared - name: cloudflared
alias: cloudflared-hookshot alias: cloudflared-hookshot
version: 1.20.0 version: 1.20.1
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
- name: postgres-cluster - name: postgres-cluster
alias: postgres-17-cluster alias: postgres-17-cluster

2
clusters/cl01tl/services/tailscale-operator/Chart.yaml
View File

@@ -17,7 +17,7 @@ maintainers:
- name: alexlebens - name: alexlebens
dependencies: dependencies:
- name: tailscale-operator - name: tailscale-operator
version: 1.86.2 version: 1.86.5
repository: https://pkgs.tailscale.com/helmcharts repository: https://pkgs.tailscale.com/helmcharts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/tailscale-light.png icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/tailscale-light.png
appVersion: v1.82.5 appVersion: v1.82.5

2
clusters/cl01tl/storage/rook-ceph/Chart.yaml
View File

@@ -24,6 +24,6 @@ dependencies:
- name: cloudflared - name: cloudflared
alias: cloudflared-rgw alias: cloudflared-rgw
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 1.20.0 version: 1.20.1
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ceph.png icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ceph.png
appVersion: v1.17.1 appVersion: v1.17.1

1
clusters/cl01tl/storage/rook-ceph/values.yaml
View File

@@ -2,6 +2,7 @@ rook-ceph:
crds: crds:
enabled: true enabled: true
csi: csi:
rookUseCsiOperator: false
enableMetadata: true enableMetadata: true
cephFSKernelMountOptions: "ms_mode=secure" cephFSKernelMountOptions: "ms_mode=secure"
provisionerReplicas: 3 provisionerReplicas: 3