Compare commits
20 Commits
b8ff4cdb09
...
main
| Author | SHA1 | Date | |
|---|---|---|---|
| 5c307b7743 | |||
| d1b88d31cd | |||
| a35f1a46f9 | |||
| 8f90834648 | |||
| fb1f1afbb7 | |||
| 686bcc7568 | |||
| 8b0c4bae1a | |||
| a82ca2ffeb | |||
| 0b60f42670 | |||
| 50a5933039 | |||
| 80e6023b3e | |||
| 774145519e | |||
| d1d2f93181 | |||
| f34a0ba929 | |||
| 7a2938a142 | |||
| cadda99eca | |||
| a8ef14d27a | |||
| e9a07a5446 | |||
| a1c57f86b8 | |||
| 727350fa6b |
@@ -77,3 +77,9 @@ actual:
|
||||
readOnly: false
|
||||
volsync-target-data:
|
||||
pvcTarget: actual-data
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -25,7 +25,7 @@ dependencies:
|
||||
repository: https://argoproj.github.io/argo-helm
|
||||
- name: postgres-cluster
|
||||
alias: postgres-18-cluster
|
||||
version: 7.4.3
|
||||
version: 7.4.4
|
||||
repository: oci://harbor.alexlebens.net/helm-charts
|
||||
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
|
||||
# renovate: github=argoproj/argo-workflows
|
||||
|
||||
@@ -123,5 +123,17 @@ audiobookshelf:
|
||||
readOnly: false
|
||||
volsync-target-config:
|
||||
pvcTarget: audiobookshelf-config
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
volsync-target-metadata:
|
||||
pvcTarget: audiobookshelf-metadata
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -28,7 +28,7 @@ dependencies:
|
||||
version: 2.1.4
|
||||
- name: postgres-cluster
|
||||
alias: postgres-18-cluster
|
||||
version: 7.4.3
|
||||
version: 7.4.4
|
||||
repository: oci://harbor.alexlebens.net/helm-charts
|
||||
- name: redis-replication
|
||||
version: 0.5.0
|
||||
|
||||
@@ -109,7 +109,7 @@ redis-replication:
|
||||
existingSecret:
|
||||
enabled: false
|
||||
redisReplication:
|
||||
clusterSize: 3
|
||||
clusterSize: 1
|
||||
redisSentinel:
|
||||
enabled: true
|
||||
enabled: false
|
||||
clusterSize: 3
|
||||
|
||||
@@ -107,5 +107,17 @@ backrest:
|
||||
readOnly: true
|
||||
volsync-target-data:
|
||||
pvcTarget: backrest-data
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
volsync-target-config:
|
||||
pvcTarget: backrest-config
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -83,3 +83,9 @@ volsync-target-config:
|
||||
runAsGroup: 1000
|
||||
fsGroup: 1000
|
||||
fsGroupChangePolicy: OnRootMismatch
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -135,7 +135,6 @@ blocky:
|
||||
lidatube IN CNAME traefik-cl01tl
|
||||
listenarr IN CNAME traefik-cl01tl
|
||||
mail IN CNAME traefik-cl01tl
|
||||
n8n IN CNAME traefik-cl01tl
|
||||
navidrome IN CNAME traefik-cl01tl
|
||||
ntfy IN CNAME traefik-cl01tl
|
||||
objects IN CNAME traefik-cl01tl
|
||||
@@ -319,6 +318,6 @@ redis-replication:
|
||||
existingSecret:
|
||||
enabled: false
|
||||
redisReplication:
|
||||
clusterSize: 3
|
||||
clusterSize: 1
|
||||
redisSentinel:
|
||||
enabled: false
|
||||
|
||||
@@ -202,6 +202,12 @@ mariadb-cluster:
|
||||
key: secret
|
||||
volsync-target-config:
|
||||
pvcTarget: booklore-config
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
volsync-target-data:
|
||||
pvcTarget: booklore-data
|
||||
local:
|
||||
|
||||
@@ -75,3 +75,9 @@ volsync-target-config:
|
||||
runAsGroup: 1000
|
||||
fsGroup: 1000
|
||||
fsGroupChangePolicy: OnRootMismatch
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -26,7 +26,7 @@ dependencies:
|
||||
version: 2.1.4
|
||||
- name: postgres-cluster
|
||||
alias: postgres-18-cluster
|
||||
version: 7.4.3
|
||||
version: 7.4.4
|
||||
repository: oci://harbor.alexlebens.net/helm-charts
|
||||
- name: redis-replication
|
||||
version: 0.5.0
|
||||
|
||||
@@ -216,7 +216,7 @@ redis-replication:
|
||||
name: directus-redis-config
|
||||
key: password
|
||||
redisReplication:
|
||||
clusterSize: 3
|
||||
clusterSize: 1
|
||||
redisSentinel:
|
||||
enabled: true
|
||||
enabled: false
|
||||
clusterSize: 3
|
||||
|
||||
@@ -129,3 +129,9 @@ ephemera:
|
||||
readOnly: false
|
||||
volsync-target-config:
|
||||
pvcTarget: ephemera
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -26,7 +26,7 @@ dependencies:
|
||||
version: 2.1.4
|
||||
- name: postgres-cluster
|
||||
alias: postgres-18-cluster
|
||||
version: 7.4.3
|
||||
version: 7.4.4
|
||||
repository: oci://harbor.alexlebens.net/helm-charts
|
||||
- name: volsync-target
|
||||
alias: volsync-target-data
|
||||
|
||||
@@ -80,7 +80,7 @@ freshrss:
|
||||
main:
|
||||
image:
|
||||
repository: freshrss/freshrss
|
||||
tag: 1.27.1
|
||||
tag: 1.28.0
|
||||
pullPolicy: IfNotPresent
|
||||
env:
|
||||
- name: PGID
|
||||
@@ -246,3 +246,9 @@ volsync-target-data:
|
||||
- 100
|
||||
- 109
|
||||
- 65539
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -22,7 +22,7 @@ dependencies:
|
||||
version: 1.4.4
|
||||
- name: postgres-cluster
|
||||
alias: postgres-18-cluster
|
||||
version: 7.4.3
|
||||
version: 7.4.4
|
||||
repository: oci://harbor.alexlebens.net/helm-charts
|
||||
- name: volsync-target
|
||||
alias: volsync-target-data
|
||||
|
||||
@@ -185,9 +185,6 @@ gatus:
|
||||
- name: argo-workflows
|
||||
url: https://argo-workflows.alexlebens.net
|
||||
<<: *defaults
|
||||
- name: n8n
|
||||
url: https://n8n.alexlebens.net
|
||||
<<: *defaults
|
||||
- name: omni-tools
|
||||
url: https://omni-tools.alexlebens.net
|
||||
<<: *defaults
|
||||
@@ -426,3 +423,9 @@ postgres-18-cluster:
|
||||
# backupName: external
|
||||
volsync-target-data:
|
||||
pvcTarget: gatus
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -39,7 +39,7 @@ dependencies:
|
||||
version: 2.1.4
|
||||
- name: postgres-cluster
|
||||
alias: postgres-18-cluster
|
||||
version: 7.4.3
|
||||
version: 7.4.4
|
||||
repository: oci://harbor.alexlebens.net/helm-charts
|
||||
- name: redis-replication
|
||||
alias: redis-replication-gitea
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
gitea:
|
||||
global:
|
||||
imageRegistry: registry.hub.docker.com
|
||||
replicaCount: 3
|
||||
replicaCount: 2
|
||||
image:
|
||||
repository: gitea/gitea
|
||||
tag: 1.25.3
|
||||
|
||||
@@ -21,7 +21,7 @@ dependencies:
|
||||
repository: https://grafana.github.io/helm-charts
|
||||
- name: postgres-cluster
|
||||
alias: postgres-18-cluster
|
||||
version: 7.4.3
|
||||
version: 7.4.4
|
||||
repository: oci://harbor.alexlebens.net/helm-charts
|
||||
- name: redis-replication
|
||||
alias: redis-replication-unified-alerting
|
||||
|
||||
@@ -21,7 +21,7 @@ dependencies:
|
||||
repository: https://helm.goharbor.io
|
||||
- name: postgres-cluster
|
||||
alias: postgres-18-cluster
|
||||
version: 7.4.3
|
||||
version: 7.4.4
|
||||
repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
|
||||
- name: redis-replication
|
||||
version: 0.5.0
|
||||
|
||||
@@ -142,7 +142,7 @@ redis-replication:
|
||||
existingSecret:
|
||||
enabled: false
|
||||
redisReplication:
|
||||
clusterSize: 3
|
||||
clusterSize: 1
|
||||
redisSentinel:
|
||||
enabled: true
|
||||
enabled: false
|
||||
clusterSize: 3
|
||||
|
||||
@@ -132,3 +132,9 @@ volsync-target-config:
|
||||
runAsGroup: 1000
|
||||
fsGroup: 1000
|
||||
fsGroupChangePolicy: OnRootMismatch
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -331,12 +331,6 @@ homepage:
|
||||
href: https://argo-workflows.alexlebens.net
|
||||
siteMonitor: http://argo-workflows-server.argo-workflows:2746
|
||||
statusStyle: dot
|
||||
- API Workflows:
|
||||
icon: sh-n8n.webp
|
||||
description: n8n
|
||||
href: https://n8n.alexlebens.net
|
||||
siteMonitor: http://n8n-main.n8n:80
|
||||
statusStyle: dot
|
||||
- Uptime:
|
||||
icon: sh-gatus.webp
|
||||
description: Gatus
|
||||
|
||||
@@ -60,3 +60,9 @@ huntarr:
|
||||
readOnly: false
|
||||
volsync-target-config:
|
||||
pvcTarget: huntarr-config
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -20,7 +20,7 @@ dependencies:
|
||||
version: 4.5.0
|
||||
- name: postgres-cluster
|
||||
alias: postgres-18-cluster
|
||||
version: 7.4.3
|
||||
version: 7.4.4
|
||||
repository: oci://harbor.alexlebens.net/helm-charts
|
||||
- name: redis-replication
|
||||
version: 0.5.0
|
||||
|
||||
@@ -226,9 +226,9 @@ redis-replication:
|
||||
existingSecret:
|
||||
enabled: false
|
||||
redisReplication:
|
||||
clusterSize: 3
|
||||
clusterSize: 1
|
||||
redisSentinel:
|
||||
enabled: true
|
||||
enabled: false
|
||||
clusterSize: 3
|
||||
volsync-target-data:
|
||||
pvcTarget: immich
|
||||
|
||||
@@ -21,7 +21,7 @@ dependencies:
|
||||
version: 4.5.0
|
||||
- name: postgres-cluster
|
||||
alias: postgres-18-cluster
|
||||
version: 7.4.3
|
||||
version: 7.4.4
|
||||
repository: oci://harbor.alexlebens.net/helm-charts
|
||||
- name: volsync-target
|
||||
alias: volsync-target-data
|
||||
|
||||
@@ -144,3 +144,9 @@ postgres-18-cluster:
|
||||
|
||||
volsync-target-data:
|
||||
pvcTarget: jellystat-data
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -170,3 +170,9 @@ meilisearch:
|
||||
enabled: true
|
||||
volsync-target-data:
|
||||
pvcTarget: karakeep
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -23,7 +23,7 @@ dependencies:
|
||||
version: 4.5.0
|
||||
- name: postgres-cluster
|
||||
alias: postgresql-17-fdb-cluster
|
||||
version: 7.4.3
|
||||
version: 7.4.4
|
||||
repository: oci://harbor.alexlebens.net/helm-charts
|
||||
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/komodo.png
|
||||
# renovate: github=moghtech/komodo
|
||||
|
||||
@@ -174,12 +174,12 @@ redis-replication:
|
||||
existingSecret:
|
||||
enabled: false
|
||||
redisReplication:
|
||||
clusterSize: 3
|
||||
clusterSize: 1
|
||||
volumeClaimTemplate:
|
||||
spec:
|
||||
resources:
|
||||
requests:
|
||||
storage: 10Gi
|
||||
redisSentinel:
|
||||
enabled: true
|
||||
enabled: false
|
||||
clusterSize: 3
|
||||
|
||||
@@ -62,3 +62,9 @@ libation:
|
||||
readOnly: false
|
||||
volsync-target-config:
|
||||
pvcTarget: libation
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -24,7 +24,7 @@ dependencies:
|
||||
version: 4.5.0
|
||||
- name: postgres-cluster
|
||||
alias: postgres-18-cluster
|
||||
version: 7.4.3
|
||||
version: 7.4.4
|
||||
repository: oci://harbor.alexlebens.net/helm-charts
|
||||
- name: volsync-target
|
||||
alias: volsync-target-config
|
||||
|
||||
@@ -170,3 +170,9 @@ volsync-target-config:
|
||||
runAsGroup: 1000
|
||||
fsGroup: 1000
|
||||
fsGroupChangePolicy: OnRootMismatch
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -92,3 +92,9 @@ volsync-target-config:
|
||||
runAsGroup: 1000
|
||||
fsGroup: 1000
|
||||
fsGroupChangePolicy: OnRootMismatch
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -73,3 +73,9 @@ volsync-target-config:
|
||||
runAsGroup: 1000
|
||||
fsGroup: 1000
|
||||
fsGroupChangePolicy: OnRootMismatch
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -3,4 +3,4 @@ dependencies:
|
||||
repository: https://charts.containeroo.ch
|
||||
version: 0.0.34
|
||||
digest: sha256:f4f946897660d5d65eb2a56144d907c0b48c9a72e20d10a73684eaeb0d50cfd3
|
||||
generated: "2025-12-26T15:01:44.39475407Z"
|
||||
generated: "2025-12-26T21:55:29.099967751Z"
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
local-path-provisioner:
|
||||
image:
|
||||
repository: rancher/local-path-provisioner
|
||||
tag: v0.0.32
|
||||
tag: v0.0.33
|
||||
helperImage:
|
||||
repository: busybox
|
||||
tag: 1.37.0
|
||||
|
||||
@@ -53,7 +53,7 @@ dependencies:
|
||||
repository: oci://harbor.alexlebens.net/helm-charts
|
||||
- name: postgres-cluster
|
||||
alias: postgres-18-cluster
|
||||
version: 7.4.3
|
||||
version: 7.4.4
|
||||
repository: oci://harbor.alexlebens.net/helm-charts
|
||||
- name: redis-replication
|
||||
alias: redis-replication-matrix-synapse
|
||||
|
||||
@@ -477,15 +477,39 @@ redis-replication-hookshot:
|
||||
clusterSize: 3
|
||||
volsync-target-synapse:
|
||||
pvcTarget: matrix-synapse
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
volsync-target-hookshot:
|
||||
pvcTarget: matrix-hookshot
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
volsync-target-discord:
|
||||
pvcTarget: mautrix-discord
|
||||
moverSecurityContext:
|
||||
runAsUser: 1337
|
||||
runAsGroup: 1337
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
volsync-target-whatsapp:
|
||||
pvcTarget: mautrix-whatsapp
|
||||
moverSecurityContext:
|
||||
runAsUser: 1337
|
||||
runAsGroup: 1337
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -1,15 +0,0 @@
|
||||
dependencies:
|
||||
- name: app-template
|
||||
repository: https://bjw-s-labs.github.io/helm-charts/
|
||||
version: 4.5.0
|
||||
- name: postgres-cluster
|
||||
repository: oci://harbor.alexlebens.net/helm-charts
|
||||
version: 7.4.3
|
||||
- name: redis-replication
|
||||
repository: oci://harbor.alexlebens.net/helm-charts
|
||||
version: 0.5.0
|
||||
- name: volsync-target
|
||||
repository: oci://harbor.alexlebens.net/helm-charts
|
||||
version: 0.6.0
|
||||
digest: sha256:044b0cda285583d8cb792725b75887041f82e5d6906566cd3677d2f67186d7f1
|
||||
generated: "2025-12-23T22:38:27.330827-06:00"
|
||||
@@ -1,35 +0,0 @@
|
||||
apiVersion: v2
|
||||
name: n8n
|
||||
version: 1.0.0
|
||||
description: n8n
|
||||
keywords:
|
||||
- n8n
|
||||
- automation
|
||||
home: https://wiki.alexlebens.dev/s/e4544bd4-c66a-420c-8020-c54b2078181a
|
||||
sources:
|
||||
- https://github.com/n8n-io/n8n
|
||||
- https://github.com/cloudnative-pg/cloudnative-pg
|
||||
- https://github.com/n8n-io/n8n/pkgs/container/n8n
|
||||
- https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
|
||||
- https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
|
||||
maintainers:
|
||||
- name: alexlebens
|
||||
dependencies:
|
||||
- name: app-template
|
||||
alias: n8n
|
||||
repository: https://bjw-s-labs.github.io/helm-charts/
|
||||
version: 4.5.0
|
||||
- name: postgres-cluster
|
||||
alias: postgres-18-cluster
|
||||
version: 7.4.3
|
||||
repository: oci://harbor.alexlebens.net/helm-charts
|
||||
- name: redis-replication
|
||||
version: 0.5.0
|
||||
repository: oci://harbor.alexlebens.net/helm-charts
|
||||
- name: volsync-target
|
||||
alias: volsync-target-data
|
||||
version: 0.6.0
|
||||
repository: oci://harbor.alexlebens.net/helm-charts
|
||||
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/n8n.png
|
||||
# renovate: github=n8n-io/n8n
|
||||
appVersion: 2.0.1
|
||||
@@ -1,21 +0,0 @@
|
||||
apiVersion: external-secrets.io/v1
|
||||
kind: ExternalSecret
|
||||
metadata:
|
||||
name: n8n-config-secret
|
||||
namespace: {{ .Release.Namespace }}
|
||||
labels:
|
||||
app.kubernetes.io/name: n8n-config-secret
|
||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
||||
spec:
|
||||
secretStoreRef:
|
||||
kind: ClusterSecretStore
|
||||
name: vault
|
||||
data:
|
||||
- secretKey: key
|
||||
remoteRef:
|
||||
conversionStrategy: Default
|
||||
decodingStrategy: None
|
||||
key: /cl01tl/n8n/config
|
||||
metadataPolicy: None
|
||||
property: key
|
||||
@@ -1,441 +0,0 @@
|
||||
n8n:
|
||||
controllers:
|
||||
main:
|
||||
type: deployment
|
||||
replicas: 1
|
||||
strategy: Recreate
|
||||
revisionHistoryLimit: 3
|
||||
containers:
|
||||
main:
|
||||
image:
|
||||
repository: ghcr.io/n8n-io/n8n
|
||||
tag: 2.2.1
|
||||
pullPolicy: IfNotPresent
|
||||
env:
|
||||
- name: GENERIC_TIMEZONE
|
||||
value: US/Central
|
||||
- name: DB_TYPE
|
||||
value: postgresdb
|
||||
- name: DB_POSTGRESDB_DATABASE
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: n8n-postgresql-18-cluster-app
|
||||
key: dbname
|
||||
- name: DB_POSTGRESDB_HOST
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: n8n-postgresql-18-cluster-app
|
||||
key: host
|
||||
- name: DB_POSTGRESDB_PORT
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: n8n-postgresql-18-cluster-app
|
||||
key: port
|
||||
- name: DB_POSTGRESDB_USER
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: n8n-postgresql-18-cluster-app
|
||||
key: user
|
||||
- name: DB_POSTGRESDB_PASSWORD
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: n8n-postgresql-18-cluster-app
|
||||
key: password
|
||||
- name: N8N_METRICS
|
||||
value: true
|
||||
- name: QUEUE_HEALTH_CHECK_ACTIVE
|
||||
value: true
|
||||
- name: EXECUTIONS_MODE
|
||||
value: queue
|
||||
- name: QUEUE_BULL_REDIS_HOST
|
||||
value: redis-replication-n8n-master.n8n
|
||||
- name: N8N_ENCRYPTION_KEY
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: n8n-config-secret
|
||||
key: key
|
||||
- name: WEBHOOK_URL
|
||||
value: https://n8n.alexlebens.net/
|
||||
probes:
|
||||
liveness:
|
||||
enabled: true
|
||||
custom: true
|
||||
spec:
|
||||
httpGet:
|
||||
path: /healthz
|
||||
port: 5678
|
||||
initialDelaySeconds: 0
|
||||
periodSeconds: 10
|
||||
timeoutSeconds: 1
|
||||
failureThreshold: 3
|
||||
readiness:
|
||||
enabled: true
|
||||
custom: true
|
||||
spec:
|
||||
httpGet:
|
||||
path: /healthz/readiness
|
||||
port: 5678
|
||||
initialDelaySeconds: 0
|
||||
periodSeconds: 10
|
||||
timeoutSeconds: 1
|
||||
failureThreshold: 3
|
||||
resources:
|
||||
requests:
|
||||
cpu: 10m
|
||||
memory: 128Mi
|
||||
worker:
|
||||
type: daemonset
|
||||
revisionHistoryLimit: 3
|
||||
pod:
|
||||
nodeSelector:
|
||||
kubernetes.io/arch: amd64
|
||||
containers:
|
||||
main:
|
||||
image:
|
||||
repository: ghcr.io/n8n-io/n8n
|
||||
tag: 2.2.1
|
||||
pullPolicy: IfNotPresent
|
||||
command:
|
||||
- n8n
|
||||
args:
|
||||
- worker
|
||||
# - --concurrency=10
|
||||
env:
|
||||
- name: GENERIC_TIMEZONE
|
||||
value: US/Central
|
||||
- name: DB_TYPE
|
||||
value: postgresdb
|
||||
- name: DB_POSTGRESDB_DATABASE
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: n8n-postgresql-18-cluster-app
|
||||
key: dbname
|
||||
- name: DB_POSTGRESDB_HOST
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: n8n-postgresql-18-cluster-app
|
||||
key: host
|
||||
- name: DB_POSTGRESDB_PORT
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: n8n-postgresql-18-cluster-app
|
||||
key: port
|
||||
- name: DB_POSTGRESDB_USER
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: n8n-postgresql-18-cluster-app
|
||||
key: user
|
||||
- name: DB_POSTGRESDB_PASSWORD
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: n8n-postgresql-18-cluster-app
|
||||
key: password
|
||||
- name: N8N_METRICS
|
||||
value: true
|
||||
- name: N8N_RUNNERS_ENABLED
|
||||
value: true
|
||||
- name: N8N_BLOCK_ENV_ACCESS_IN_NODE
|
||||
value: true
|
||||
- name: N8N_GIT_NODE_DISABLE_BARE_REPOS
|
||||
value: true
|
||||
- name: QUEUE_HEALTH_CHECK_ACTIVE
|
||||
value: true
|
||||
- name: EXECUTIONS_MODE
|
||||
value: queue
|
||||
- name: QUEUE_BULL_REDIS_HOST
|
||||
value: redis-replication-n8n-master.n8n
|
||||
- name: N8N_ENCRYPTION_KEY
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: n8n-config-secret
|
||||
key: key
|
||||
- name: WEBHOOK_URL
|
||||
value: https://n8n.alexlebens.net/
|
||||
probes:
|
||||
liveness:
|
||||
enabled: false
|
||||
custom: true
|
||||
spec:
|
||||
httpGet:
|
||||
path: /healthz
|
||||
port: 5678
|
||||
initialDelaySeconds: 60
|
||||
periodSeconds: 10
|
||||
timeoutSeconds: 1
|
||||
failureThreshold: 3
|
||||
readiness:
|
||||
enabled: false
|
||||
custom: true
|
||||
spec:
|
||||
httpGet:
|
||||
path: /healthz/readiness
|
||||
port: 5678
|
||||
initialDelaySeconds: 60
|
||||
periodSeconds: 10
|
||||
timeoutSeconds: 1
|
||||
failureThreshold: 3
|
||||
resources:
|
||||
requests:
|
||||
cpu: 10m
|
||||
memory: 128Mi
|
||||
webhook:
|
||||
type: daemonset
|
||||
revisionHistoryLimit: 3
|
||||
pod:
|
||||
nodeSelector:
|
||||
kubernetes.io/arch: amd64
|
||||
containers:
|
||||
main:
|
||||
image:
|
||||
repository: ghcr.io/n8n-io/n8n
|
||||
tag: 2.2.1
|
||||
pullPolicy: IfNotPresent
|
||||
command:
|
||||
- n8n
|
||||
args:
|
||||
- webhook
|
||||
env:
|
||||
- name: GENERIC_TIMEZONE
|
||||
value: US/Central
|
||||
- name: DB_TYPE
|
||||
value: postgresdb
|
||||
- name: DB_POSTGRESDB_DATABASE
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: n8n-postgresql-18-cluster-app
|
||||
key: dbname
|
||||
- name: DB_POSTGRESDB_HOST
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: n8n-postgresql-18-cluster-app
|
||||
key: host
|
||||
- name: DB_POSTGRESDB_PORT
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: n8n-postgresql-18-cluster-app
|
||||
key: port
|
||||
- name: DB_POSTGRESDB_USER
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: n8n-postgresql-18-cluster-app
|
||||
key: user
|
||||
- name: DB_POSTGRESDB_PASSWORD
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: n8n-postgresql-18-cluster-app
|
||||
key: password
|
||||
- name: N8N_METRICS
|
||||
value: true
|
||||
- name: QUEUE_HEALTH_CHECK_ACTIVE
|
||||
value: true
|
||||
- name: EXECUTIONS_MODE
|
||||
value: queue
|
||||
- name: QUEUE_BULL_REDIS_HOST
|
||||
value: redis-replication-n8n-master.n8n
|
||||
- name: N8N_ENCRYPTION_KEY
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: n8n-config-secret
|
||||
key: key
|
||||
- name: WEBHOOK_URL
|
||||
value: https://n8n.alexlebens.net/
|
||||
- name: N8N_DIAGNOSTICS_ENABLED
|
||||
value: false
|
||||
- name: N8N_VERSION_NOTIFICATIONS_ENABLED
|
||||
value: false
|
||||
probes:
|
||||
liveness:
|
||||
enabled: true
|
||||
custom: true
|
||||
spec:
|
||||
httpGet:
|
||||
path: /healthz
|
||||
port: 5678
|
||||
initialDelaySeconds: 0
|
||||
periodSeconds: 10
|
||||
timeoutSeconds: 1
|
||||
failureThreshold: 3
|
||||
readiness:
|
||||
enabled: true
|
||||
custom: true
|
||||
spec:
|
||||
httpGet:
|
||||
path: /healthz/readiness
|
||||
port: 5678
|
||||
initialDelaySeconds: 0
|
||||
periodSeconds: 10
|
||||
timeoutSeconds: 1
|
||||
failureThreshold: 3
|
||||
resources:
|
||||
requests:
|
||||
cpu: 10m
|
||||
memory: 128Mi
|
||||
service:
|
||||
main:
|
||||
controller: main
|
||||
ports:
|
||||
http:
|
||||
port: 80
|
||||
targetPort: 5678
|
||||
protocol: HTTP
|
||||
worker:
|
||||
controller: worker
|
||||
ports:
|
||||
http:
|
||||
port: 80
|
||||
targetPort: 5678
|
||||
protocol: HTTP
|
||||
webhook:
|
||||
controller: webhook
|
||||
ports:
|
||||
http:
|
||||
port: 80
|
||||
targetPort: 5678
|
||||
protocol: HTTP
|
||||
serviceMonitor:
|
||||
main:
|
||||
selector:
|
||||
matchLabels:
|
||||
app.kubernetes.io/name: n8n-main
|
||||
app.kubernetes.io/instance: n8n-main
|
||||
serviceName: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}'
|
||||
endpoints:
|
||||
- port: http
|
||||
interval: 3m
|
||||
scrapeTimeout: 1m
|
||||
path: /metrics
|
||||
worker:
|
||||
selector:
|
||||
matchLabels:
|
||||
app.kubernetes.io/name: n8n-worker
|
||||
app.kubernetes.io/instance: n8n-worker
|
||||
serviceName: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}'
|
||||
endpoints:
|
||||
- port: http
|
||||
interval: 3m
|
||||
scrapeTimeout: 1m
|
||||
path: /metrics
|
||||
webhook:
|
||||
selector:
|
||||
matchLabels:
|
||||
app.kubernetes.io/name: n8n-webhook
|
||||
app.kubernetes.io/instance: n8n-webhook
|
||||
serviceName: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}'
|
||||
endpoints:
|
||||
- port: http
|
||||
interval: 3m
|
||||
scrapeTimeout: 1m
|
||||
path: /metrics
|
||||
route:
|
||||
main:
|
||||
kind: HTTPRoute
|
||||
parentRefs:
|
||||
- group: gateway.networking.k8s.io
|
||||
kind: Gateway
|
||||
name: traefik-gateway
|
||||
namespace: traefik
|
||||
hostnames:
|
||||
- n8n.alexlebens.net
|
||||
rules:
|
||||
- backendRefs:
|
||||
- group: ''
|
||||
kind: Service
|
||||
name: n8n-main
|
||||
port: 80
|
||||
weight: 100
|
||||
matches:
|
||||
- path:
|
||||
type: PathPrefix
|
||||
value: /
|
||||
- path:
|
||||
type: PathPrefix
|
||||
value: /webhook-test/
|
||||
- backendRefs:
|
||||
- group: ''
|
||||
kind: Service
|
||||
name: n8n-webhook
|
||||
port: 80
|
||||
weight: 100
|
||||
matches:
|
||||
- path:
|
||||
type: PathPrefix
|
||||
value: /webhook/
|
||||
- path:
|
||||
type: PathPrefix
|
||||
value: /webhook-waiting/
|
||||
- path:
|
||||
type: PathPrefix
|
||||
value: /form/
|
||||
persistence:
|
||||
data:
|
||||
storageClass: ceph-block
|
||||
accessMode: ReadWriteOnce
|
||||
size: 5Gi
|
||||
advancedMounts:
|
||||
main:
|
||||
main:
|
||||
- path: /data
|
||||
readOnly: false
|
||||
cache:
|
||||
type: emptyDir
|
||||
advancedMounts:
|
||||
worker:
|
||||
main:
|
||||
- path: /home/node/.n8n
|
||||
readOnly: false
|
||||
webhook:
|
||||
main:
|
||||
- path: /home/node/.n8n
|
||||
readOnly: false
|
||||
postgres-18-cluster:
|
||||
mode: recovery
|
||||
recovery:
|
||||
method: objectStore
|
||||
objectStore:
|
||||
index: 1
|
||||
backup:
|
||||
objectStore:
|
||||
- name: garage-local
|
||||
index: 1
|
||||
destinationBucket: postgres-backups
|
||||
externalSecretCredentialPath: /garage/home-infra/postgres-backups
|
||||
isWALArchiver: true
|
||||
# - name: garage-remote
|
||||
# index: 1
|
||||
# destinationBucket: postgres-backups
|
||||
# externalSecretCredentialPath: /garage/home-infra/postgres-backups
|
||||
# retentionPolicy: "90d"
|
||||
# data:
|
||||
# compression: bzip2
|
||||
# - name: external
|
||||
# index: 1
|
||||
# endpointURL: https://nyc3.digitaloceanspaces.com
|
||||
# destinationBucket: postgres-backups-ce540ddf106d186bbddca68a
|
||||
# externalSecretCredentialPath: /garage/home-infra/postgres-backups
|
||||
# isWALArchiver: false
|
||||
scheduledBackups:
|
||||
- name: live-backup
|
||||
suspend: false
|
||||
immediate: true
|
||||
schedule: "0 0 0 * * *"
|
||||
backupName: garage-local
|
||||
# - name: weekly-backup
|
||||
# suspend: true
|
||||
# immediate: true
|
||||
# schedule: "0 0 4 * * SAT"
|
||||
# backupName: garage-remote
|
||||
# - name: daily-backup
|
||||
# suspend: true
|
||||
# immediate: true
|
||||
# schedule: "0 0 0 * * *"
|
||||
# backupName: external
|
||||
redis-replication:
|
||||
existingSecret:
|
||||
enabled: false
|
||||
redisReplication:
|
||||
clusterSize: 3
|
||||
redisSentinel:
|
||||
enabled: true
|
||||
clusterSize: 3
|
||||
volsync-target-data:
|
||||
pvcTarget: n8n
|
||||
@@ -153,3 +153,9 @@ volsync-target-data:
|
||||
runAsGroup: 1000
|
||||
fsGroup: 1000
|
||||
fsGroupChangePolicy: OnRootMismatch
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -23,7 +23,7 @@ dependencies:
|
||||
version: 4.5.0
|
||||
- name: postgres-cluster
|
||||
alias: postgres-18-cluster
|
||||
version: 7.4.3
|
||||
version: 7.4.4
|
||||
repository: oci://harbor.alexlebens.net/helm-charts
|
||||
- name: volsync-target
|
||||
alias: volsync-target-data
|
||||
|
||||
@@ -306,3 +306,9 @@ volsync-target-data:
|
||||
moverSecurityContext:
|
||||
runAsUser: 1337
|
||||
runAsGroup: 1337
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -27,7 +27,7 @@ dependencies:
|
||||
version: 2.1.4
|
||||
- name: postgres-cluster
|
||||
alias: postgres-18-cluster
|
||||
version: 7.4.3
|
||||
version: 7.4.4
|
||||
repository: oci://harbor.alexlebens.net/helm-charts
|
||||
- name: redis-replication
|
||||
version: 0.5.0
|
||||
|
||||
@@ -188,7 +188,7 @@ redis-replication:
|
||||
existingSecret:
|
||||
enabled: false
|
||||
redisReplication:
|
||||
clusterSize: 3
|
||||
clusterSize: 1
|
||||
redisSentinel:
|
||||
enabled: true
|
||||
enabled: false
|
||||
clusterSize: 3
|
||||
|
||||
@@ -20,7 +20,7 @@ dependencies:
|
||||
version: 4.5.0
|
||||
- name: postgres-cluster
|
||||
alias: postgres-18-cluster
|
||||
version: 7.4.3
|
||||
version: 7.4.4
|
||||
repository: oci://harbor.alexlebens.net/helm-charts
|
||||
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/photoview.png
|
||||
# renovate: github=photoview/photoview
|
||||
|
||||
@@ -26,7 +26,7 @@ dependencies:
|
||||
version: 2.1.4
|
||||
- name: postgres-cluster
|
||||
alias: postgres-18-cluster
|
||||
version: 7.4.3
|
||||
version: 7.4.4
|
||||
repository: oci://harbor.alexlebens.net/helm-charts
|
||||
- name: redis-replication
|
||||
version: 0.5.0
|
||||
|
||||
@@ -173,11 +173,23 @@ redis-replication:
|
||||
name: postiz-redis-config
|
||||
key: password
|
||||
redisReplication:
|
||||
clusterSize: 3
|
||||
clusterSize: 1
|
||||
redisSentinel:
|
||||
enabled: true
|
||||
enabled: false
|
||||
clusterSize: 3
|
||||
volsync-target-config:
|
||||
pvcTarget: postiz-config
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
volsync-target-upload:
|
||||
pvcTarget: postiz-uploads
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -82,3 +82,9 @@ volsync-target-config:
|
||||
- 100
|
||||
- 109
|
||||
- 65539
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -453,5 +453,17 @@ volsync-target-config:
|
||||
volumeSnapshotClassName: ceph-filesystem-snapshot
|
||||
volsync-target-qbit-manage-config:
|
||||
pvcTarget: qbittorrent-qbit-manage-config-data
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
volsync-target-qui-config:
|
||||
pvcTarget: qbittorrent-qui-config-data
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -27,7 +27,7 @@ dependencies:
|
||||
version: 4.5.0
|
||||
- name: postgres-cluster
|
||||
alias: postgres-18-cluster
|
||||
version: 7.4.3
|
||||
version: 7.4.4
|
||||
repository: oci://harbor.alexlebens.net/helm-charts
|
||||
- name: volsync-target
|
||||
alias: volsync-target-config
|
||||
|
||||
@@ -170,3 +170,9 @@ volsync-target-config:
|
||||
runAsGroup: 1000
|
||||
fsGroup: 1000
|
||||
fsGroupChangePolicy: OnRootMismatch
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -27,7 +27,7 @@ dependencies:
|
||||
version: 4.5.0
|
||||
- name: postgres-cluster
|
||||
alias: postgres-18-cluster
|
||||
version: 7.4.3
|
||||
version: 7.4.4
|
||||
repository: oci://harbor.alexlebens.net/helm-charts
|
||||
- name: volsync-target
|
||||
alias: volsync-target-config
|
||||
|
||||
@@ -168,3 +168,9 @@ volsync-target-config:
|
||||
runAsGroup: 1000
|
||||
fsGroup: 1000
|
||||
fsGroupChangePolicy: OnRootMismatch
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -26,7 +26,7 @@ dependencies:
|
||||
version: 4.5.0
|
||||
- name: postgres-cluster
|
||||
alias: postgres-18-cluster
|
||||
version: 7.4.3
|
||||
version: 7.4.4
|
||||
repository: oci://harbor.alexlebens.net/helm-charts
|
||||
- name: volsync-target
|
||||
alias: volsync-target-config
|
||||
|
||||
@@ -168,3 +168,9 @@ volsync-target-config:
|
||||
runAsGroup: 1000
|
||||
fsGroup: 1000
|
||||
fsGroupChangePolicy: OnRootMismatch
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -26,7 +26,7 @@ dependencies:
|
||||
version: 4.5.0
|
||||
- name: postgres-cluster
|
||||
alias: postgres-18-cluster
|
||||
version: 7.4.3
|
||||
version: 7.4.4
|
||||
repository: oci://harbor.alexlebens.net/helm-charts
|
||||
- name: volsync-target
|
||||
alias: volsync-target-config
|
||||
|
||||
@@ -170,3 +170,9 @@ volsync-target-config:
|
||||
runAsGroup: 1000
|
||||
fsGroup: 1000
|
||||
fsGroupChangePolicy: OnRootMismatch
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -24,4 +24,4 @@ dependencies:
|
||||
alias: volsync-target-data
|
||||
version: 0.6.0
|
||||
repository: oci://harbor.alexlebens.net/helm-charts
|
||||
appVersion: 0.0.1
|
||||
appVersion: 0.0.3
|
||||
|
||||
@@ -9,13 +9,13 @@ rayflume:
|
||||
main:
|
||||
image:
|
||||
repository: harbor.alexlebens.net/images/rayflume
|
||||
tag: 0.0.2
|
||||
tag: 0.0.7
|
||||
pullPolicy: IfNotPresent
|
||||
env:
|
||||
- name: DEBUG
|
||||
value: True
|
||||
- name: ALLOWED_HOSTS
|
||||
value: rayflume.alexlebens.net
|
||||
value: rayflume.alexlebens.net,rayflume.rayflume
|
||||
- name: SECRET_KEY
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
@@ -88,9 +88,15 @@ redis-replication:
|
||||
existingSecret:
|
||||
enabled: false
|
||||
redisReplication:
|
||||
clusterSize: 3
|
||||
clusterSize: 1
|
||||
redisSentinel:
|
||||
enabled: true
|
||||
enabled: false
|
||||
clusterSize: 3
|
||||
volsync-target-data:
|
||||
pvcTarget: rayflume-data
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -21,7 +21,7 @@ dependencies:
|
||||
version: 4.5.0
|
||||
- name: postgres-cluster
|
||||
alias: postgres-18-cluster
|
||||
version: 7.4.3
|
||||
version: 7.4.4
|
||||
repository: oci://harbor.alexlebens.net/helm-charts
|
||||
- name: volsync-target
|
||||
alias: volsync-target-data
|
||||
|
||||
@@ -270,3 +270,9 @@ postgres-18-cluster:
|
||||
# backupName: external
|
||||
volsync-target-data:
|
||||
pvcTarget: roundcube-data
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -9,7 +9,7 @@ searxng:
|
||||
main:
|
||||
image:
|
||||
repository: searxng/searxng
|
||||
tag: latest@sha256:74c9ee6120b2c990999fcbe14b69b0dbb981bfbd70b2f2cf63b2c094f11bc883
|
||||
tag: latest@sha256:8d98d5c1b678714c3b20dacfab5ea5e3b67f79e50df6d5dbc92ed4f0a964ccbd
|
||||
pullPolicy: IfNotPresent
|
||||
env:
|
||||
- name: SEARXNG_BASE_URL
|
||||
@@ -39,7 +39,7 @@ searxng:
|
||||
main:
|
||||
image:
|
||||
repository: searxng/searxng
|
||||
tag: latest@sha256:74c9ee6120b2c990999fcbe14b69b0dbb981bfbd70b2f2cf63b2c094f11bc883
|
||||
tag: latest@sha256:8d98d5c1b678714c3b20dacfab5ea5e3b67f79e50df6d5dbc92ed4f0a964ccbd
|
||||
pullPolicy: IfNotPresent
|
||||
env:
|
||||
- name: SEARXNG_BASE_URL
|
||||
@@ -219,3 +219,9 @@ searxng:
|
||||
readOnly: false
|
||||
volsync-target-data:
|
||||
pvcTarget: searxng-browser-data
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -31,3 +31,9 @@ seerr-chart:
|
||||
memory: 128Mi
|
||||
volsync-target-config:
|
||||
pvcTarget: seerr-seerr-chart-config
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -27,7 +27,7 @@ dependencies:
|
||||
version: 4.5.0
|
||||
- name: postgres-cluster
|
||||
alias: postgres-18-cluster
|
||||
version: 7.4.3
|
||||
version: 7.4.4
|
||||
repository: oci://harbor.alexlebens.net/helm-charts
|
||||
- name: volsync-target
|
||||
alias: volsync-target-config
|
||||
|
||||
@@ -168,3 +168,9 @@ volsync-target-config:
|
||||
runAsGroup: 1000
|
||||
fsGroup: 1000
|
||||
fsGroupChangePolicy: OnRootMismatch
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -26,7 +26,7 @@ dependencies:
|
||||
version: 4.5.0
|
||||
- name: postgres-cluster
|
||||
alias: postgres-18-cluster
|
||||
version: 7.4.3
|
||||
version: 7.4.4
|
||||
repository: oci://harbor.alexlebens.net/helm-charts
|
||||
- name: volsync-target
|
||||
alias: volsync-target-config
|
||||
|
||||
@@ -168,3 +168,9 @@ volsync-target-config:
|
||||
runAsGroup: 1000
|
||||
fsGroup: 1000
|
||||
fsGroupChangePolicy: OnRootMismatch
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -26,7 +26,7 @@ dependencies:
|
||||
version: 4.5.0
|
||||
- name: postgres-cluster
|
||||
alias: postgres-18-cluster
|
||||
version: 7.4.3
|
||||
version: 7.4.4
|
||||
repository: oci://harbor.alexlebens.net/helm-charts
|
||||
- name: volsync-target
|
||||
alias: volsync-target-config
|
||||
|
||||
@@ -168,3 +168,9 @@ volsync-target-config:
|
||||
runAsGroup: 1000
|
||||
fsGroup: 1000
|
||||
fsGroupChangePolicy: OnRootMismatch
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -150,5 +150,17 @@ soulsync:
|
||||
readOnly: true
|
||||
volsync-target-config:
|
||||
pvcTarget: soulsync-config
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
volsync-target-database:
|
||||
pvcTarget: soulsync-database
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -23,7 +23,7 @@ dependencies:
|
||||
repository: https://bjw-s-labs.github.io/helm-charts/
|
||||
- name: postgres-cluster
|
||||
alias: postgres-18-cluster
|
||||
version: 7.4.3
|
||||
version: 7.4.4
|
||||
repository: oci://harbor.alexlebens.net/helm-charts
|
||||
- name: redis-replication
|
||||
version: 0.5.0
|
||||
|
||||
@@ -118,9 +118,15 @@ redis-replication:
|
||||
existingSecret:
|
||||
enabled: false
|
||||
redisReplication:
|
||||
clusterSize: 3
|
||||
clusterSize: 1
|
||||
redisSentinel:
|
||||
enabled: true
|
||||
enabled: false
|
||||
clusterSize: 3
|
||||
volsync-target-config:
|
||||
pvcTarget: stalwart-config
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -169,3 +169,9 @@ tautulli:
|
||||
readOnly: false
|
||||
volsync-target-config:
|
||||
pvcTarget: tautulli-config
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -179,5 +179,17 @@ tdarr-exporter:
|
||||
memory: 256Mi
|
||||
volsync-target-config:
|
||||
pvcTarget: tdarr-config
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
volsync-target-server:
|
||||
pvcTarget: tdarr-server
|
||||
local:
|
||||
enabled: false
|
||||
remote:
|
||||
enabled: false
|
||||
external:
|
||||
enabled: false
|
||||
|
||||
@@ -1,6 +0,0 @@
|
||||
dependencies:
|
||||
- name: trivy-operator
|
||||
repository: https://aquasecurity.github.io/helm-charts/
|
||||
version: 0.31.0
|
||||
digest: sha256:5a71d5ff43d5e36ea500c5dcade70cddc874621ad49ffe7c10ba202a14b9c87f
|
||||
generated: "2025-12-01T19:56:01.513264-06:00"
|
||||
@@ -1,23 +0,0 @@
|
||||
apiVersion: v2
|
||||
name: trivy
|
||||
version: 1.0.0
|
||||
description: Trivy
|
||||
keywords:
|
||||
- trivy
|
||||
- vulnerability
|
||||
- monitoring
|
||||
- kubernetes
|
||||
home: https://wiki.alexlebens.dev/s/5cffa529-4c2e-4126-99eb-cc4aeb5a49b3
|
||||
sources:
|
||||
- https://github.com/aquasecurity/trivy
|
||||
- https://github.com/aquasecurity/trivy-operator
|
||||
- https://github.com/aquasecurity/trivy-operator/tree/main/deploy/helm
|
||||
maintainers:
|
||||
- name: alexlebens
|
||||
dependencies:
|
||||
- name: trivy-operator
|
||||
version: 0.31.0
|
||||
repository: https://aquasecurity.github.io/helm-charts/
|
||||
icon: https://raw.githubusercontent.com/aquasecurity/trivy/main/docs/imgs/logo.png
|
||||
# renovate: github=aquasecurity/trivy
|
||||
appVersion: 0.31.0
|
||||
@@ -1,11 +0,0 @@
|
||||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: trivy
|
||||
labels:
|
||||
app.kubernetes.io/name: trivy
|
||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
||||
pod-security.kubernetes.io/audit: privileged
|
||||
pod-security.kubernetes.io/enforce: privileged
|
||||
pod-security.kubernetes.io/warn: privileged
|
||||
@@ -1,105 +0,0 @@
|
||||
trivy-operator:
|
||||
targetWorkloads: "pod,replicaset,replicationcontroller,statefulset,daemonset,cronjob,job"
|
||||
operator:
|
||||
replicas: 1
|
||||
vulnerabilityScannerEnabled: false
|
||||
sbomGenerationEnabled: false
|
||||
clusterSbomCacheEnabled: false
|
||||
configAuditScannerEnabled: true
|
||||
rbacAssessmentScannerEnabled: true
|
||||
infraAssessmentScannerEnabled: false
|
||||
clusterComplianceEnabled: false
|
||||
serviceMonitor:
|
||||
enabled: true
|
||||
trivy:
|
||||
createConfig: true
|
||||
image:
|
||||
registry: mirror.gcr.io
|
||||
repository: aquasec/trivy
|
||||
tag: 0.68.2
|
||||
storageClassEnabled: true
|
||||
storageClassName: ceph-block
|
||||
storageSize: "5Gi"
|
||||
registry:
|
||||
mirror:
|
||||
"registry-1.docker.io": proxy-registry-1.docker.io
|
||||
"quay.io": proxy-quay.io
|
||||
"registry.k8s.io": proxy-registry.k8s
|
||||
"gcr.io": proxy-gcr.io
|
||||
"ghcr.io": proxy-ghcr.io
|
||||
"hub.docker": proxy-hub.docker
|
||||
severity: UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL
|
||||
slow: true
|
||||
resources:
|
||||
requests:
|
||||
cpu: 100m
|
||||
memory: 128M
|
||||
supportedConfigAuditKinds: "Workload,Service,Role,ClusterRole,NetworkPolicy,Ingress,LimitRange,ResourceQuota"
|
||||
server:
|
||||
resources:
|
||||
requests:
|
||||
cpu: 200m
|
||||
memory: 512Mi
|
||||
replicas: 1
|
||||
compliance:
|
||||
reportType: summary
|
||||
cron: 0 5 * * *
|
||||
specs:
|
||||
- k8s-cis-1.23
|
||||
- k8s-nsa-1.0
|
||||
- k8s-pss-baseline-0.1
|
||||
- k8s-pss-restricted-0.1
|
||||
volumeMounts:
|
||||
- mountPath: /tmp
|
||||
name: cache-policies
|
||||
readOnly: false
|
||||
volumes:
|
||||
- name: cache-policies
|
||||
emptyDir: {}
|
||||
resources:
|
||||
requests:
|
||||
cpu: 100m
|
||||
memory: 128Mi
|
||||
nodeCollector:
|
||||
tolerations:
|
||||
- key: node-role.kubernetes.io/control-plane
|
||||
operator: Exists
|
||||
effect: NoSchedule
|
||||
volumeMounts:
|
||||
- name: var-lib-etcd
|
||||
mountPath: /var/lib/etcd
|
||||
readOnly: true
|
||||
- name: var-lib-kubelet
|
||||
mountPath: /var/lib/kubelet
|
||||
readOnly: true
|
||||
- name: var-lib-kube-scheduler
|
||||
mountPath: /var/lib/kube-scheduler
|
||||
readOnly: true
|
||||
- name: var-lib-kube-controller-manager
|
||||
mountPath: /var/lib/kube-controller-manager
|
||||
readOnly: true
|
||||
- name: etc-kubernetes
|
||||
mountPath: /etc/kubernetes
|
||||
readOnly: true
|
||||
- name: etc-cni-netd
|
||||
mountPath: /etc/cni/net.d/
|
||||
readOnly: true
|
||||
volumes:
|
||||
- name: var-lib-etcd
|
||||
hostPath:
|
||||
path: /var/lib/etcd
|
||||
- name: var-lib-kubelet
|
||||
hostPath:
|
||||
path: /var/lib/kubelet
|
||||
- name: var-lib-kube-scheduler
|
||||
hostPath:
|
||||
path: /var/lib/kube-scheduler
|
||||
- name: var-lib-kube-controller-manager
|
||||
hostPath:
|
||||
path: /var/lib/kube-controller-manager
|
||||
- name: etc-kubernetes
|
||||
hostPath:
|
||||
path: /etc/kubernetes
|
||||
- name: etc-cni-netd
|
||||
hostPath:
|
||||
path: /etc/cni/net.d/
|
||||
@@ -148,7 +148,7 @@ redis-replication:
|
||||
existingSecret:
|
||||
enabled: false
|
||||
redisReplication:
|
||||
clusterSize: 3
|
||||
clusterSize: 1
|
||||
resources:
|
||||
requests:
|
||||
cpu: 200m
|
||||
@@ -159,5 +159,5 @@ redis-replication:
|
||||
requests:
|
||||
storage: 10Gi
|
||||
redisSentinel:
|
||||
enabled: true
|
||||
enabled: false
|
||||
clusterSize: 3
|
||||
|
||||
@@ -27,7 +27,7 @@ dependencies:
|
||||
version: 2.1.4
|
||||
- name: postgres-cluster
|
||||
alias: postgres-18-cluster
|
||||
version: 7.4.3
|
||||
version: 7.4.4
|
||||
repository: oci://harbor.alexlebens.net/helm-charts
|
||||
- name: volsync-target
|
||||
alias: volsync-target-data
|
||||
|
||||
@@ -22,7 +22,7 @@ dependencies:
|
||||
version: 4.5.0
|
||||
- name: postgres-cluster
|
||||
alias: postgres-18-cluster
|
||||
version: 7.4.3
|
||||
version: 7.4.4
|
||||
repository: oci://harbor.alexlebens.net/helm-charts
|
||||
- name: redis-replication
|
||||
version: 0.5.0
|
||||
|
||||
@@ -136,7 +136,7 @@ redis-replication:
|
||||
existingSecret:
|
||||
enabled: false
|
||||
redisReplication:
|
||||
clusterSize: 3
|
||||
clusterSize: 1
|
||||
redisSentinel:
|
||||
enabled: true
|
||||
enabled: false
|
||||
clusterSize: 3
|
||||
|
||||
@@ -111,7 +111,6 @@ customDNS:
|
||||
lidatube IN CNAME traefik-cl01tl
|
||||
listenarr IN CNAME traefik-cl01tl
|
||||
mail IN CNAME traefik-cl01tl
|
||||
n8n IN CNAME traefik-cl01tl
|
||||
navidrome IN CNAME traefik-cl01tl
|
||||
ntfy IN CNAME traefik-cl01tl
|
||||
objects IN CNAME traefik-cl01tl
|
||||
|
||||
@@ -111,7 +111,6 @@ customDNS:
|
||||
lidatube IN CNAME traefik-cl01tl
|
||||
listenarr IN CNAME traefik-cl01tl
|
||||
mail IN CNAME traefik-cl01tl
|
||||
n8n IN CNAME traefik-cl01tl
|
||||
navidrome IN CNAME traefik-cl01tl
|
||||
ntfy IN CNAME traefik-cl01tl
|
||||
objects IN CNAME traefik-cl01tl
|
||||
|
||||
@@ -99,7 +99,6 @@
|
||||
"ghcr.io/linuxserver/prowlarr",
|
||||
"ghcr.io/linuxserver/radarr",
|
||||
"ghcr.io/linuxserver/sonarr",
|
||||
"ghcr.io/n8n-io/n8n",
|
||||
"ghcr.io/prometheus-community/charts/kube-prometheus-stack",
|
||||
"vectorim/element-web"
|
||||
],
|
||||
|
||||
Reference in New Issue
Block a user