1 Commits

Author SHA1 Message Date
96ebc32d8b chore(deps): update code-server
All checks were successful
lint-test-helm / lint-helm (pull_request) Successful in 26s
lint-test-helm / validate-kubeconform (pull_request) Successful in 22s
2026-04-02 19:03:09 +00:00
143 changed files with 1696 additions and 656 deletions

View File

@@ -13,7 +13,7 @@ on:
jobs: jobs:
renovate: renovate:
runs-on: ubuntu-latest runs-on: ubuntu-latest
container: ghcr.io/renovatebot/renovate:43.104.3@sha256:8248aad190150ce3f1016f9e93b45185679f075c428bca093e724a59f1fd426e container: ghcr.io/renovatebot/renovate:43.104.0@sha256:20543dec1eaca2d5e10f9225f3112a1a4d8bcbd3af73acb6a552cf6569692cbb
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

View File

@@ -0,0 +1,12 @@
dependencies:
- name: argo-workflows
repository: https://argoproj.github.io/argo-helm
version: 1.0.6
- name: argo-events
repository: https://argoproj.github.io/argo-helm
version: 2.4.21
- name: postgres-cluster
repository: oci://harbor.alexlebens.net/helm-charts
version: 7.11.1
digest: sha256:a249bd8faad886fa267cb42e843fd6465b3c4147961d182b73dd64ef9e6ca06e
generated: "2026-03-31T18:36:18.025982-05:00"

View File

@@ -0,0 +1,32 @@
apiVersion: v2
name: argo-workflows
version: 1.0.0
description: Argo Workflows
keywords:
- argo-workflows
- argo-events
- workflows
- events
home: https://docs.alexlebens.dev/applications/argo-workflows/
sources:
- https://github.com/argoproj/argo-workflows
- https://github.com/argoproj/argo-events
- https://github.com/argoproj/argo-helm/tree/main/charts/argo-workflows
- https://github.com/argoproj/argo-helm/tree/main/charts/argo-events
- https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
maintainers:
- name: alexlebens
dependencies:
- name: argo-workflows
version: 1.0.6
repository: https://argoproj.github.io/argo-helm
- name: argo-events
version: 2.4.21
repository: https://argoproj.github.io/argo-helm
- name: postgres-cluster
alias: postgres-18-cluster
version: 7.11.1
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
# renovate: datasource=github-releases depName=argoproj/argo-workflows
appVersion: v4.0.3

View File

@@ -1,10 +1,10 @@
apiVersion: external-secrets.io/v1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: ntfy-config-secret name: argo-workflows-oidc-secret
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels: labels:
app.kubernetes.io/name: ntfy-config-secret app.kubernetes.io/name: argo-workflows-oidc-secret
app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
spec: spec:
@@ -12,7 +12,11 @@ spec:
kind: ClusterSecretStore kind: ClusterSecretStore
name: vault name: vault
data: data:
- secretKey: attachment-cache-dir - secretKey: secret
remoteRef: remoteRef:
key: /garage/home-infra/ntfy-attachments key: /authentik/oidc/argo-workflows
property: attachment-cache-dir property: secret
- secretKey: client
remoteRef:
key: /authentik/oidc/argo-workflows
property: client

View File

@@ -0,0 +1,109 @@
argo-workflows:
crds:
install: true
keep: true
full: true
upgradeJob:
image:
repository: registry.k8s.io/kubectl
tag: v1.35.3
controller:
metricsConfig:
enabled: true
persistence:
postgresql:
host: argo-workflows-postgresql-18-cluster-rw
port: 5432
database: app
tableName: app
userNameSecret:
name: argo-workflows-postgresql-18-cluster-app
key: username
passwordSecret:
name: argo-workflows-postgresql-18-cluster-app
key: password
ssl: false
sslMode: disable
workflowWorkers: 2
workflowTTLWorkers: 2
podCleanupWorkers: 2
cronWorkflowWorkers: 2
resources:
requests:
cpu: 1m
memory: 20Mi
serviceMonitor:
enabled: true
workflowNamespaces:
- argo-workflows
server:
authModes:
- sso
httproute:
enabled: true
parentRefs:
- group: gateway.networking.k8s.io
kind: Gateway
name: traefik-gateway
namespace: traefik
hostnames:
- argo-workflows.alexlebens.net
rules:
- matches:
- path:
type: PathPrefix
value: /
sso:
enabled: true
issuer: https://authentik.alexlebens.net/application/o/argo-workflows/
clientId:
name: argo-workflows-oidc-secret
key: client
clientSecret:
name: argo-workflows-oidc-secret
key: secret
redirectUrl: https://argo-workflows.alexlebens.net/oauth2/callback
rbac:
enabled: false
scopes:
- openid
- email
- profile
argo-events:
crds:
install: true
keep: true
controller:
resources:
requests:
cpu: 1m
memory: 32Mi
metrics:
enabled: true
serviceMonitor:
enabled: true
webhook:
enabled: true
resources:
requests:
cpu: 1m
memory: 20Mi
postgres-18-cluster:
mode: recovery
recovery:
method: objectStore
objectStore:
index: 1
backup:
objectStore:
- name: garage-local
index: 1
destinationBucket: postgres-backups
externalSecretCredentialPath: /garage/home-infra/postgres-backups
isWALArchiver: true
scheduledBackups:
- name: live-backup
suspend: false
immediate: true
schedule: "0 0 14 * * *"
backupName: garage-local

View File

@@ -7,9 +7,9 @@ dependencies:
version: 2.4.0 version: 2.4.0
- name: postgres-cluster - name: postgres-cluster
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 7.11.2 version: 7.11.1
- name: valkey - name: valkey
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 0.5.0 version: 0.5.0
digest: sha256:7302a85008aee7950aa345aa7d64563c1b0da8f07e348ec9709f9438503a41ff digest: sha256:4b90c5af4cc7f37b04284aafd75ddda1241c71acb726932e7e21520b5bf98543
generated: "2026-04-04T21:00:59.689114-05:00" generated: "2026-03-31T18:36:26.87524-05:00"

View File

@@ -25,7 +25,7 @@ dependencies:
version: 2.4.0 version: 2.4.0
- name: postgres-cluster - name: postgres-cluster
alias: postgres-18-cluster alias: postgres-18-cluster
version: 7.11.2 version: 7.11.1
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
- name: valkey - name: valkey
alias: valkey alias: valkey

View File

@@ -5,7 +5,6 @@ description: Bazarr
keywords: keywords:
- bazarr - bazarr
- subtitles - subtitles
- servarr
home: https://docs.alexlebens.dev/applications/bazarr/ home: https://docs.alexlebens.dev/applications/bazarr/
sources: sources:
- https://github.com/morpheus65535/bazarr - https://github.com/morpheus65535/bazarr
@@ -25,5 +24,5 @@ dependencies:
version: 0.8.0 version: 0.8.0
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/bazarr.png icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/bazarr.png
# renovate: datasource=github-releases depName=linuxserver/docker-bazarr # renovate: datasource=github-releases depName=morpheus65535/bazarr
appVersion: 1.5.6 appVersion: 1.5.6

View File

@@ -102,12 +102,14 @@ blocky:
;; Application Names ;; Application Names
actual IN CNAME traefik-cl01tl actual IN CNAME traefik-cl01tl
alertmanager IN CNAME traefik-cl01tl alertmanager IN CNAME traefik-cl01tl
argo-workflows IN CNAME traefik-cl01tl
argocd IN CNAME traefik-cl01tl argocd IN CNAME traefik-cl01tl
audiobookshelf IN CNAME traefik-cl01tl audiobookshelf IN CNAME traefik-cl01tl
authentik IN CNAME traefik-cl01tl authentik IN CNAME traefik-cl01tl
backrest IN CNAME traefik-cl01tl backrest IN CNAME traefik-cl01tl
bazarr IN CNAME traefik-cl01tl bazarr IN CNAME traefik-cl01tl
ceph IN CNAME traefik-cl01tl ceph IN CNAME traefik-cl01tl
code-server IN CNAME traefik-cl01tl
dawarich IN CNAME traefik-cl01tl dawarich IN CNAME traefik-cl01tl
directus IN CNAME traefik-cl01tl directus IN CNAME traefik-cl01tl
excalidraw IN CNAME traefik-cl01tl excalidraw IN CNAME traefik-cl01tl
@@ -135,6 +137,7 @@ blocky:
lidarr IN CNAME traefik-cl01tl lidarr IN CNAME traefik-cl01tl
mail IN CNAME traefik-cl01tl mail IN CNAME traefik-cl01tl
medialyze IN CNAME traefik-cl01tl medialyze IN CNAME traefik-cl01tl
movie-roulette IN CNAME traefik-cl01tl
music-grabber IN CNAME traefik-cl01tl music-grabber IN CNAME traefik-cl01tl
navidrome IN CNAME traefik-cl01tl navidrome IN CNAME traefik-cl01tl
ntfy IN CNAME traefik-cl01tl ntfy IN CNAME traefik-cl01tl
@@ -142,6 +145,7 @@ blocky:
ollama IN CNAME traefik-cl01tl ollama IN CNAME traefik-cl01tl
omni-tools IN CNAME traefik-cl01tl omni-tools IN CNAME traefik-cl01tl
paperless-ngx IN CNAME traefik-cl01tl paperless-ngx IN CNAME traefik-cl01tl
photoview IN CNAME traefik-cl01tl
plex IN CNAME traefik-cl01tl plex IN CNAME traefik-cl01tl
postiz IN CNAME traefik-cl01tl postiz IN CNAME traefik-cl01tl
prometheus IN CNAME traefik-cl01tl prometheus IN CNAME traefik-cl01tl

View File

@@ -0,0 +1,12 @@
dependencies:
- name: app-template
repository: https://bjw-s-labs.github.io/helm-charts/
version: 4.6.2
- name: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts
version: 2.4.0
- name: volsync-target
repository: oci://harbor.alexlebens.net/helm-charts
version: 0.8.0
digest: sha256:dee0f52096efc543f4db3a5dc2732fd37ae9b7950b264e399a6e74c2f3e7cee6
generated: "2026-03-09T22:04:00.58415637Z"

View File

@@ -0,0 +1,32 @@
apiVersion: v2
name: code-server
version: 1.0.0
description: Code Server
keywords:
- code-server
- code
home: https://docs.alexlebens.dev/applications/code-server/
sources:
- https://github.com/coder/code-server
- https://github.com/linuxserver/docker-code-server
- https://github.com/linuxserver/docker-code-server/pkgs/container/code-server
- https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
- https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/cloudflared
- https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/volsync-target
maintainers:
- name: alexlebens
dependencies:
- name: app-template
alias: code-server
repository: https://bjw-s-labs.github.io/helm-charts/
version: 4.6.2
- name: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts
version: 2.4.0
- name: volsync-target
alias: volsync-target-config
version: 0.8.0
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/visual-studio-code.png
# renovate: datasource=github-releases depName=coder/code-server
appVersion: 4.113.0

View File

@@ -0,0 +1,22 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: codeserver-password-secret
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: codeserver-password-secret
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
data:
- secretKey: PASSWORD
remoteRef:
key: /cl01tl/code-server/auth
property: PASSWORD
- secretKey: SUDO_PASSWORD
remoteRef:
key: /cl01tl/code-server/auth
property: SUDO_PASSWORD

View File

@@ -0,0 +1,83 @@
code-server:
controllers:
main:
type: deployment
replicas: 1
strategy: Recreate
pod:
securityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
containers:
main:
image:
repository: ghcr.io/linuxserver/code-server
tag: 4.113.0-ls326@sha256:629232bdd99640dd3d514a40c740a9d42dcb808a844005821b2f4be6e6a8b66e
env:
- name: TZ
value: America/Chicago
- name: PUID
value: 1000
- name: PGID
value: 1000
- name: DEFAULT_WORKSPACE
value: /config
envFrom:
- secretRef:
name: codeserver-password-secret
resources:
requests:
cpu: 1m
memory: 40Mi
service:
main:
controller: main
ports:
http:
port: 8443
targetPort: 8443
route:
main:
kind: HTTPRoute
parentRefs:
- group: gateway.networking.k8s.io
kind: Gateway
name: traefik-gateway
namespace: traefik
hostnames:
- code-server.alexlebens.net
rules:
- backendRefs:
- name: code-server
port: 8443
matches:
- path:
type: PathPrefix
value: /
persistence:
config:
forceRename: code-server-config
storageClass: ceph-block
accessMode: ReadWriteOnce
size: 2Gi
advancedMounts:
main:
main:
- path: /config
readOnly: false
volsync-target-config:
pvcTarget: code-server-config
moverSecurityContext:
runAsUser: 1000
runAsGroup: 1000
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
local:
enabled: true
schedule: 16 8 * * *
remote:
enabled: true
schedule: 16 9 * * *
external:
enabled: true
schedule: 16 10 * * *

View File

@@ -4,9 +4,9 @@ dependencies:
version: 4.6.2 version: 4.6.2
- name: postgres-cluster - name: postgres-cluster
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 7.11.2 version: 7.11.1
- name: valkey - name: valkey
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 0.5.0 version: 0.5.0
digest: sha256:b070640b7006e3ad528193ca784cfbca602994c87afbef4ef4b40a05229cab10 digest: sha256:1f513bd53430dd0fbba301ab5577aca85e984394dfdca9f615aae944a09c6bc0
generated: "2026-04-04T21:01:27.376484-05:00" generated: "2026-03-31T18:37:35.858603-05:00"

View File

@@ -21,7 +21,7 @@ dependencies:
version: 4.6.2 version: 4.6.2
- name: postgres-cluster - name: postgres-cluster
alias: postgres-18-cluster alias: postgres-18-cluster
version: 7.11.2 version: 7.11.1
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
- name: valkey - name: valkey
alias: valkey alias: valkey
@@ -29,4 +29,4 @@ dependencies:
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/dawarich.png icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/dawarich.png
# renovate: datasource=github-releases depName=Freika/dawarich # renovate: datasource=github-releases depName=Freika/dawarich
appVersion: 1.6.1 appVersion: 1.6.0

View File

@@ -8,7 +8,7 @@ dawarich:
main: main:
image: image:
repository: freikin/dawarich repository: freikin/dawarich
tag: 1.6.1@sha256:a884f69f19ce0f66992f3872d24544d1e587e133b8a003e072711aafc1e02429 tag: 1.6.0@sha256:5cba4d96fb57976fb6a956b8622365789d74a1178cc3ada1cb7541a4473993a9
command: command:
- "web-entrypoint.sh" - "web-entrypoint.sh"
args: args:
@@ -111,7 +111,7 @@ dawarich:
sidekiq: sidekiq:
image: image:
repository: freikin/dawarich repository: freikin/dawarich
tag: 1.6.1@sha256:a884f69f19ce0f66992f3872d24544d1e587e133b8a003e072711aafc1e02429 tag: 1.6.0@sha256:5cba4d96fb57976fb6a956b8622365789d74a1178cc3ada1cb7541a4473993a9
command: command:
- "sidekiq-entrypoint.sh" - "sidekiq-entrypoint.sh"
args: args:

View File

@@ -8,7 +8,6 @@ keywords:
home: https://docs.alexlebens.dev/applications/descheduler/ home: https://docs.alexlebens.dev/applications/descheduler/
sources: sources:
- https://github.com/kubernetes-sigs/descheduler - https://github.com/kubernetes-sigs/descheduler
- https://explore.ggcr.dev/?repo=registry.k8s.io%2Fdescheduler%2Fdescheduler
- https://github.com/kubernetes-sigs/descheduler/tree/master/charts/descheduler - https://github.com/kubernetes-sigs/descheduler/tree/master/charts/descheduler
maintainers: maintainers:
- name: alexlebens - name: alexlebens

View File

@@ -1,7 +1,4 @@
descheduler: descheduler:
image:
repository: registry.k8s.io/descheduler/descheduler
tag: v0.35.1@sha256:871d3b804390b0b8c7cb09d4e9b7856cf30e31f9e9e3d29562b0301a10453bb1
kind: Deployment kind: Deployment
resources: resources:
limits: limits:

View File

@@ -4,9 +4,9 @@ dependencies:
version: 4.6.2 version: 4.6.2
- name: postgres-cluster - name: postgres-cluster
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 7.11.2 version: 7.11.1
- name: valkey - name: valkey
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 0.5.0 version: 0.5.0
digest: sha256:5fa84b2d82a160c35e002690e4d299275b8136463da9da789be9ca7c6ff998c4 digest: sha256:116183cdff428293215553b7e60be9aefafbbaaaf64c01f1fc974badd3e0754b
generated: "2026-04-04T21:01:37.322862-05:00" generated: "2026-03-31T18:37:42.414041-05:00"

View File

@@ -21,7 +21,7 @@ dependencies:
version: 4.6.2 version: 4.6.2
- name: postgres-cluster - name: postgres-cluster
alias: postgres-18-cluster alias: postgres-18-cluster
version: 7.11.2 version: 7.11.1
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
- name: valkey - name: valkey
alias: valkey alias: valkey

View File

@@ -9,6 +9,7 @@ directus:
image: image:
repository: ghcr.io/directus/directus repository: ghcr.io/directus/directus
tag: 11.17.1@sha256:1dd2080a50a9f6df2b6f49df15a7734424bbd1a5902983c4b6e447f22027b80b tag: 11.17.1@sha256:1dd2080a50a9f6df2b6f49df15a7734424bbd1a5902983c4b6e447f22027b80b
pullPolicy: IfNotPresent
env: env:
- name: PUBLIC_URL - name: PUBLIC_URL
value: https://directus.alexlebens.net value: https://directus.alexlebens.net

View File

@@ -18,4 +18,4 @@ dependencies:
repository: https://helm.elastic.co repository: https://helm.elastic.co
icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/elastic.png icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/elastic.png
# renovate: datasource=github-releases depName=elastic/cloud-on-k8s # renovate: datasource=github-releases depName=elastic/cloud-on-k8s
appVersion: v3.3.2 appVersion: v3.3.1

View File

@@ -8,7 +8,6 @@ keywords:
home: https://docs.alexlebens.dev/applications/eraser/ home: https://docs.alexlebens.dev/applications/eraser/
sources: sources:
- https://github.com/kubernetes-sigs/external-dns - https://github.com/kubernetes-sigs/external-dns
- https://explore.ggcr.dev/?repo=registry.k8s.io%2Fexternal-dns%2Fexternal-dns
- https://github.com/kashalls/external-dns-unifi-webhook - https://github.com/kashalls/external-dns-unifi-webhook
- https://github.com/kubernetes-sigs/external-dns/tree/master/charts/external-dns - https://github.com/kubernetes-sigs/external-dns/tree/master/charts/external-dns
maintainers: maintainers:

View File

@@ -1,7 +1,4 @@
external-dns-unifi: external-dns-unifi:
image:
repository: registry.k8s.io/external-dns/external-dns
tag: v0.20.0@sha256:ddc7f4212ed09a21024deb1f470a05240837712e74e4b9f6d1f2632ff10672e7
fullnameOverride: external-dns-unifi fullnameOverride: external-dns-unifi
resources: resources:
requests: requests:

View File

@@ -24,4 +24,4 @@ dependencies:
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
icon: https://raw.githubusercontent.com/foldergram/foldergram/refs/heads/main/client/public/icon-512.png icon: https://raw.githubusercontent.com/foldergram/foldergram/refs/heads/main/client/public/icon-512.png
# renovate: datasource=github-releases depName=foldergram/foldergram # renovate: datasource=github-releases depName=foldergram/foldergram
appVersion: v1.1.0 appVersion: v1.0.9

View File

@@ -12,7 +12,8 @@ foldergram:
main: main:
image: image:
repository: ghcr.io/foldergram/foldergram repository: ghcr.io/foldergram/foldergram
tag: 1.1.0@sha256:b08c7f30a15a3d3e4cf0877a5271cb76be6a36ab83751f040c115ccdb76b736a tag: 1.0.9@sha256:aa6707e7456386f2d74b8f2769d0281f4127d1276349583b8531dbaa8f844883
pullPolicy: IfNotPresent
env: env:
- name: IMAGE_DETAIL_SOURCE - name: IMAGE_DETAIL_SOURCE
value: original value: original

View File

@@ -7,9 +7,9 @@ dependencies:
version: 2.4.0 version: 2.4.0
- name: postgres-cluster - name: postgres-cluster
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 7.11.2 version: 7.11.1
- name: volsync-target - name: volsync-target
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 0.8.0 version: 0.8.0
digest: sha256:f709ef2ce041d934faf75dfa31cc86e536aa62ab31ab82584c9751652561744c digest: sha256:ebf08159809ef0d69fcb8742b47245c82994b528c2f58e5ed40293555e085ecd
generated: "2026-04-04T21:02:01.689182-05:00" generated: "2026-03-31T18:37:59.187695-05:00"

View File

@@ -25,7 +25,7 @@ dependencies:
version: 2.4.0 version: 2.4.0
- name: postgres-cluster - name: postgres-cluster
alias: postgres-18-cluster alias: postgres-18-cluster
version: 7.11.2 version: 7.11.1
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
- name: volsync-target - name: volsync-target
alias: volsync-target-data alias: volsync-target-data

View File

@@ -4,9 +4,9 @@ dependencies:
version: 1.5.0 version: 1.5.0
- name: postgres-cluster - name: postgres-cluster
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 7.11.2 version: 7.11.1
- name: volsync-target - name: volsync-target
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 0.8.0 version: 0.8.0
digest: sha256:b2a7ef962a91dff4313f66c1d04356f1b2aeefc752d672a9a27ea227db4b8c7d digest: sha256:1f530794c6d9c4a487d30443dce7ddf556524c7f875c6e5249b135e81528f0c5
generated: "2026-04-04T21:02:09.187828-05:00" generated: "2026-03-31T19:06:30.871275-05:00"

View File

@@ -20,7 +20,7 @@ dependencies:
version: 1.5.0 version: 1.5.0
- name: postgres-cluster - name: postgres-cluster
alias: postgres-18-cluster alias: postgres-18-cluster
version: 7.11.2 version: 7.11.1
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
- name: volsync-target - name: volsync-target
alias: volsync-target-data alias: volsync-target-data

View File

@@ -113,6 +113,9 @@ gatus:
- name: yamtrack - name: yamtrack
url: https://yamtrack.alexlebens.net url: https://yamtrack.alexlebens.net
<<: *defaults <<: *defaults
- name: movie-roulette
url: https://movie-roulette.alexlebens.net
<<: *defaults
- name: jellyfin - name: jellyfin
url: https://jellyfin.alexlebens.net url: https://jellyfin.alexlebens.net
<<: *defaults <<: *defaults
@@ -131,6 +134,9 @@ gatus:
- name: immich - name: immich
url: https://immich.alexlebens.net url: https://immich.alexlebens.net
<<: *defaults <<: *defaults
- name: photoview
url: https://photoview.alexlebens.net
<<: *defaults
- name: foldergram - name: foldergram
url: https://foldergram.alexlebens.net url: https://foldergram.alexlebens.net
<<: *defaults <<: *defaults
@@ -179,6 +185,9 @@ gatus:
- name: komodo - name: komodo
url: https://komodo.alexlebens.net url: https://komodo.alexlebens.net
<<: *defaults <<: *defaults
- name: argo-workflows
url: https://argo-workflows.alexlebens.net
<<: *defaults
- name: omni-tools - name: omni-tools
url: https://omni-tools.alexlebens.net url: https://omni-tools.alexlebens.net
<<: *defaults <<: *defaults
@@ -350,7 +359,7 @@ gatus:
<<: *defaults <<: *defaults
group: external group: external
- name: outline - name: outline
url: https://outline.alexlebens.dev url: https://wiki.alexlebens.dev
<<: *defaults <<: *defaults
group: external group: external
- name: vaultwarden - name: vaultwarden
@@ -371,6 +380,10 @@ gatus:
url: https://gitea.alexlebens.dev url: https://gitea.alexlebens.dev
<<: *defaults <<: *defaults
group: external group: external
- name: codeserver
url: https://codeserver.alexlebens.dev
<<: *defaults
group: external
- name: authentik - name: authentik
url: https://auth.alexlebens.dev url: https://auth.alexlebens.dev
<<: *defaults <<: *defaults

View File

@@ -1,6 +1,6 @@
dependencies: dependencies:
- name: generic-device-plugin - name: generic-device-plugin
repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
version: 0.20.28 version: 0.20.27
digest: sha256:16e4470b394110a11721fe38a57ad1cfa7c994bca440bfbbc5b3b7a46a79f165 digest: sha256:b66a7ab013f5eda47ccf94824796e026642e1abfc051e498957ee0f59743e9fc
generated: "2026-04-05T02:12:22.980217268Z" generated: "2026-03-31T21:37:08.823163353Z"

View File

@@ -14,6 +14,6 @@ maintainers:
dependencies: dependencies:
- name: generic-device-plugin - name: generic-device-plugin
repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
version: 0.20.28 version: 0.20.27
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
appVersion: 1.0.0 appVersion: 1.0.0

View File

@@ -13,7 +13,7 @@ dependencies:
version: 2.4.0 version: 2.4.0
- name: postgres-cluster - name: postgres-cluster
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 7.11.2 version: 7.10.0
- name: valkey - name: valkey
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 0.5.0 version: 0.5.0
@@ -23,5 +23,5 @@ dependencies:
- name: volsync-target - name: volsync-target
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 0.8.0 version: 0.8.0
digest: sha256:4dc7ea441a81261a431f917521e528819ab708f6ddb4b3a77412464aecec3598 digest: sha256:a31820970bf7a7e5fa51ff09668238ab5e3b9d4433a71e35d07b779ff632b94c
generated: "2026-04-04T21:14:18.193631-05:00" generated: "2026-04-01T21:57:18.743604859Z"

View File

@@ -39,7 +39,7 @@ dependencies:
version: 2.4.0 version: 2.4.0
- name: postgres-cluster - name: postgres-cluster
alias: postgres-18-cluster alias: postgres-18-cluster
version: 7.11.2 version: 7.10.0
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
- name: valkey - name: valkey
alias: valkey-gitea alias: valkey-gitea

View File

@@ -145,52 +145,11 @@ gitea-actions:
statefulset: statefulset:
replicas: 6 replicas: 6
timezone: America/Chicago timezone: America/Chicago
resources:
limits:
ephemeral-storage: 15Gi
requests:
ephemeral-storage: 2Gi
affinity:
podAntiAffinity:
preferredDuringSchedulingIgnoredDuringExecution:
- weight: 100
podAffinityTerm:
labelSelector:
matchExpressions:
- key: app.kubernetes.io/name
operator: In
values:
- gitea-actions-act-runner
topologyKey: "kubernetes.io/hostname"
extraVolumes:
- name: workspace-vol
ephemeral:
volumeClaimTemplate:
spec:
accessModes:
- ReadWriteOnce
storageClassName: ceph-block
resources:
requests:
storage: 20Gi
- name: docker-vol
ephemeral:
volumeClaimTemplate:
spec:
accessModes:
- ReadWriteOnce
storageClassName: ceph-block
resources:
requests:
storage: 50Gi
actRunner: actRunner:
registry: docker.io registry: docker.io
repository: gitea/act_runner repository: gitea/act_runner
# renovate: datasource=docker depName=gitea/act_runner # renovate: datasource=docker depName=gitea/act_runner
tag: 0.3.1@sha256:c2a169c5e99864c25e32527cef3d82203225e09558773022bf3dc164a2e6d762 tag: 0.3.1@sha256:c2a169c5e99864c25e32527cef3d82203225e09558773022bf3dc164a2e6d762
extraVolumeMounts:
- name: workspace-vol
mountPath: /workspace
config: | config: |
log: log:
level: debug level: debug
@@ -207,9 +166,6 @@ gitea-actions:
repository: docker repository: docker
# renovate: datasource=docker depName=docker # renovate: datasource=docker depName=docker
tag: 29.3.1-dind@sha256:4d90f1f6c400315c2dba96d3ec93c01e64198395cbba04f79d12adce4f737029 tag: 29.3.1-dind@sha256:4d90f1f6c400315c2dba96d3ec93c01e64198395cbba04f79d12adce4f737029
extraVolumeMounts:
- name: docker-vol
mountPath: /var/lib/docker
persistence: persistence:
storageClass: ceph-block storageClass: ceph-block
size: 10Gi size: 10Gi
@@ -245,6 +201,7 @@ postgres-18-cluster:
resources: resources:
requests: requests:
cpu: 100m cpu: 100m
memory: 150Mi
recovery: recovery:
method: objectStore method: objectStore
objectStore: objectStore:

View File

@@ -4,12 +4,12 @@ dependencies:
version: 5.22.2 version: 5.22.2
- name: postgres-cluster - name: postgres-cluster
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 7.11.2 version: 7.11.1
- name: valkey - name: valkey
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 0.5.0 version: 0.5.0
- name: valkey - name: valkey
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 0.5.0 version: 0.5.0
digest: sha256:6c096d1ce729469f12e66b2d0d0c677990d06643ff49401ee8fa69f5ed738e9c digest: sha256:1f6bf4f0f24f85d8c362766010e4f42d26458c0412b67afab9b05f2e17eacced
generated: "2026-04-04T21:02:18.686653-05:00" generated: "2026-03-31T19:12:08.326471-05:00"

View File

@@ -20,7 +20,7 @@ dependencies:
repository: https://grafana.github.io/helm-charts repository: https://grafana.github.io/helm-charts
- name: postgres-cluster - name: postgres-cluster
alias: postgres-18-cluster alias: postgres-18-cluster
version: 7.11.2 version: 7.11.1
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
- name: valkey - name: valkey
alias: valkey-unified-alerting alias: valkey-unified-alerting

View File

@@ -24,4 +24,4 @@ dependencies:
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
# renovate: datasource=github-releases depName=home-assistant/core # renovate: datasource=github-releases depName=home-assistant/core
appVersion: 2026.4.1 appVersion: 2026.4.0

View File

@@ -12,7 +12,7 @@ home-assistant:
main: main:
image: image:
repository: ghcr.io/home-assistant/home-assistant repository: ghcr.io/home-assistant/home-assistant
tag: 2026.4.1@sha256:8848691147f01a6eee7753de2ade21b04d6168fcd2e2a7089f6f84e3b7b86960 tag: 2026.4.0@sha256:7fbf6a5e006e889d7799476ad7646bd18e9dc73e8a4ccd9326b41798de6bb3bf
env: env:
- name: TZ - name: TZ
value: America/Chicago value: America/Chicago
@@ -23,7 +23,7 @@ home-assistant:
code-server: code-server:
image: image:
repository: ghcr.io/linuxserver/code-server repository: ghcr.io/linuxserver/code-server
tag: 4.114.0-ls328@sha256:928e63f0b775d76cda606f181bae9d81c6d3fbd2d1daeef9438e3ba5579f391d tag: 4.113.0-ls326@sha256:629232bdd99640dd3d514a40c740a9d42dcb808a844005821b2f4be6e6a8b66e
env: env:
- name: TZ - name: TZ
value: America/Chicago value: America/Chicago

View File

@@ -145,6 +145,12 @@ homepage:
href: https://yamtrack.alexlebens.net href: https://yamtrack.alexlebens.net
siteMonitor: http://yamtrack.yamtrack:80 siteMonitor: http://yamtrack.yamtrack:80
statusStyle: dot statusStyle: dot
- Movie Roulette:
icon: https://raw.githubusercontent.com/sahara101/Movie-Roulette/refs/heads/main/static/icons/icon.png
description: Movie Roulette
href: https://movie-roulette.alexlebens.net
siteMonitor: http://movie-roulette.movie-roulette:80
statusStyle: dot
- Movies and TV: - Movies and TV:
icon: sh-jellyfin.webp icon: sh-jellyfin.webp
description: Jellyfin description: Jellyfin
@@ -175,6 +181,12 @@ homepage:
href: https://immich.alexlebens.net href: https://immich.alexlebens.net
siteMonitor: http://immich.immich:2283 siteMonitor: http://immich.immich:2283
statusStyle: dot statusStyle: dot
- Pictures:
icon: sh-photoview.webp
description: Photoview
href: https://photoview.alexlebens.net
siteMonitor: http://photoview.photoview:80
statusStyle: dot
- Pictures: - Pictures:
icon: sh-foldergram.webp icon: sh-foldergram.webp
description: Foldergram description: Foldergram
@@ -196,7 +208,7 @@ homepage:
statusStyle: dot statusStyle: dot
- Documentation: - Documentation:
icon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.png icon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.png
description: Homelab Docs description: Documentation Wiki
href: https://docs.alexlebens.dev href: https://docs.alexlebens.dev
siteMonitor: https://docs.alexlebens.dev siteMonitor: https://docs.alexlebens.dev
statusStyle: dot statusStyle: dot
@@ -224,11 +236,11 @@ homepage:
href: https://chat.alexlebens.dev href: https://chat.alexlebens.dev
siteMonitor: https://chat.alexlebens.dev siteMonitor: https://chat.alexlebens.dev
statusStyle: dot statusStyle: dot
- Knowledge Base: - Wiki:
icon: sh-outline.webp icon: sh-outline.webp
description: Outline description: Outline
href: https://outline.alexlebens.dev href: https://wiki.alexlebens.dev
siteMonitor: https://outline.alexlebens.dev siteMonitor: https://wiki.alexlebens.dev
statusStyle: dot statusStyle: dot
- Passwords: - Passwords:
icon: sh-vaultwarden-light.webp icon: sh-vaultwarden-light.webp
@@ -297,7 +309,7 @@ homepage:
href: https://paperless-ngx.alexlebens.net href: https://paperless-ngx.alexlebens.net
siteMonitor: http://paperless-ngx.paperless-ngx:80 siteMonitor: http://paperless-ngx.paperless-ngx:80
statusStyle: dot statusStyle: dot
- Wikipedia: - Wiki:
icon: sh-kiwix-light.webp icon: sh-kiwix-light.webp
description: Kiwix description: Kiwix
href: https://kiwix.alexlebens.net href: https://kiwix.alexlebens.net
@@ -338,6 +350,12 @@ homepage:
href: https://gitea-ps10rp.boreal-beaufort.ts.net href: https://gitea-ps10rp.boreal-beaufort.ts.net
siteMonitor: https://gitea-ps10rp.boreal-beaufort.ts.net siteMonitor: https://gitea-ps10rp.boreal-beaufort.ts.net
statusStyle: dot statusStyle: dot
- IDE (External):
icon: sh-visual-studio-code.webp
description: VS Code
href: https://codeserver.alexlebens.dev
siteMonitor: https://codeserver.alexlebens.dev
statusStyle: dot
- IDE (Home Assistant): - IDE (Home Assistant):
icon: sh-visual-studio-code.webp icon: sh-visual-studio-code.webp
description: Edit config for Home Assistant description: Edit config for Home Assistant
@@ -375,6 +393,12 @@ homepage:
secret: {{ "{{HOMEPAGE_VAR_KOMODO_API_SECRET}}" }} secret: {{ "{{HOMEPAGE_VAR_KOMODO_API_SECRET}}" }}
showStacks: true showStacks: true
fields: ["running", "down", "unhealthy", "unknown"] fields: ["running", "down", "unhealthy", "unknown"]
- Deployment Workflows:
icon: sh-argo-cd.webp
description: Argo Workflows
href: https://argo-workflows.alexlebens.net
siteMonitor: http://argo-workflows-server.argo-workflows:2746
statusStyle: dot
- Uptime: - Uptime:
icon: sh-gatus.webp icon: sh-gatus.webp
description: Gatus description: Gatus
@@ -837,7 +861,7 @@ homepage:
siteMonitor: http://yubal.yubal:80 siteMonitor: http://yubal.yubal:80
statusStyle: dot statusStyle: dot
- Music Grabber: - Music Grabber:
icon: sh-music-grabber.webp icon: sh-music-service.webp
description: Replicate Music playlists description: Replicate Music playlists
href: https://music-grabber.alexlebens.net href: https://music-grabber.alexlebens.net
siteMonitor: http://music-grabber.music-grabber:80 siteMonitor: http://music-grabber.music-grabber:80

View File

@@ -4,7 +4,6 @@ version: 1.0.0
description: Houndarr description: Houndarr
keywords: keywords:
- houndarr - houndarr
- rescan
- servarr - servarr
home: https://docs.alexlebens.dev/applications/houndarr/ home: https://docs.alexlebens.dev/applications/houndarr/
sources: sources:
@@ -25,4 +24,4 @@ dependencies:
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/houndarr.png icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/houndarr.png
# renovate: datasource=github-releases depName=av1155/houndarr # renovate: datasource=github-releases depName=av1155/houndarr
appVersion: v1.7.0 appVersion: v1.6.5

View File

@@ -8,7 +8,7 @@ houndarr:
main: main:
image: image:
repository: ghcr.io/av1155/houndarr repository: ghcr.io/av1155/houndarr
tag: v1.7.0@sha256:8ae2a8b86497cbc54d11591c12220f3be3319039c2bdd0c8b041b2b7c2fd7943 tag: v1.6.5@sha256:f3adbd745094919166bafcd9b428738d1087f651b1562adeaba44ff975827d87
env: env:
- name: TZ - name: TZ
value: America/Chicago value: America/Chicago

View File

@@ -4,12 +4,12 @@ dependencies:
version: 4.6.2 version: 4.6.2
- name: postgres-cluster - name: postgres-cluster
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 7.11.2 version: 7.11.1
- name: valkey - name: valkey
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 0.5.0 version: 0.5.0
- name: volsync-target - name: volsync-target
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 0.8.0 version: 0.8.0
digest: sha256:8b9129d1bbef82d6e0033610da9c25b2b98ce078027d389429cd947c8d22823e digest: sha256:b52be61811b2c4b8f1ac733be19de51e33540589b71337af99fc97727a1894e8
generated: "2026-04-04T21:02:46.154937-05:00" generated: "2026-04-01T19:49:30.408077-05:00"

View File

@@ -21,7 +21,7 @@ dependencies:
version: 4.6.2 version: 4.6.2
- name: postgres-cluster - name: postgres-cluster
alias: postgres-18-cluster alias: postgres-18-cluster
version: 7.11.2 version: 7.11.1
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
- name: valkey - name: valkey
alias: valkey alias: valkey

View File

@@ -5,9 +5,6 @@ jellyfin:
replicas: 1 replicas: 1
strategy: Recreate strategy: Recreate
pod: pod:
securityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
affinity: affinity:
podAntiAffinity: podAntiAffinity:
requiredDuringSchedulingIgnoredDuringExecution: requiredDuringSchedulingIgnoredDuringExecution:

View File

@@ -4,9 +4,9 @@ dependencies:
version: 4.6.2 version: 4.6.2
- name: postgres-cluster - name: postgres-cluster
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 7.11.2 version: 7.11.1
- name: volsync-target - name: volsync-target
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 0.8.0 version: 0.8.0
digest: sha256:4ff8555c97c457923957fac499a0c9469edac8b3dd7ab0fab46f7d4e07e8eff5 digest: sha256:a5b2ddd5097971d246b0d1f519ffafb662594d9f84ddc854b8eedf8702d2035f
generated: "2026-04-04T21:02:58.694365-05:00" generated: "2026-04-01T19:49:45.674314-05:00"

View File

@@ -21,7 +21,7 @@ dependencies:
version: 4.6.2 version: 4.6.2
- name: postgres-cluster - name: postgres-cluster
alias: postgres-18-cluster alias: postgres-18-cluster
version: 7.11.2 version: 7.11.1
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
- name: volsync-target - name: volsync-target
alias: volsync-target-data alias: volsync-target-data
@@ -29,4 +29,4 @@ dependencies:
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellystat.png icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellystat.png
# renovate: datasource=github-releases depName=CyferShepard/Jellystat # renovate: datasource=github-releases depName=CyferShepard/Jellystat
appVersion: 1.1.9 appVersion: 1.1.7

View File

@@ -8,7 +8,7 @@ jellystat:
main: main:
image: image:
repository: ghcr.io/cyfershepard/jellystat repository: ghcr.io/cyfershepard/jellystat
tag: 1.1.9@sha256:f7f56aabad139faa996b8bb21a36dd3e65f7c87e10408921815b95a28a4efbaf tag: 1.1.8@sha256:c8c451704ba7985340142cd047e2364cabaf41b613669b6c5340688ed217f82a
env: env:
- name: TZ - name: TZ
value: America/Chicago value: America/Chicago

View File

@@ -5,7 +5,7 @@ description: Kiwix
keywords: keywords:
- kiwix - kiwix
- wikipedia - wikipedia
home: https://docs.alexlebens.dev/applications/kiwix/ home: https://wiki.alexlebens.dev/s/16eaaf92-3607-421f-bc66-cb3c39eeaea0
sources: sources:
- https://github.com/kiwix - https://github.com/kiwix
- https://github.com/kiwix/kiwix-tools/pkgs/container/kiwix-serve - https://github.com/kiwix/kiwix-tools/pkgs/container/kiwix-serve

View File

@@ -4,11 +4,13 @@ kiwix:
type: deployment type: deployment
replicas: 1 replicas: 1
strategy: Recreate strategy: Recreate
revisionHistoryLimit: 3
containers: containers:
main: main:
image: image:
repository: ghcr.io/kiwix/kiwix-serve repository: ghcr.io/kiwix/kiwix-serve
tag: 3.8.2@sha256:acdab28186a66b51bfd4202210c6732931ea95cf41c711148a0c9770b9fcc9e1 tag: 3.8.2
pullPolicy: IfNotPresent
args: args:
- '*.zim' - '*.zim'
env: env:
@@ -16,8 +18,8 @@ kiwix:
value: 8080 value: 8080
resources: resources:
requests: requests:
cpu: 1m cpu: 50m
memory: 10Mi memory: 512Mi
service: service:
main: main:
controller: main controller: main
@@ -25,6 +27,7 @@ kiwix:
http: http:
port: 80 port: 80
targetPort: 8080 targetPort: 8080
protocol: HTTP
route: route:
main: main:
kind: HTTPRoute kind: HTTPRoute
@@ -37,8 +40,11 @@ kiwix:
- kiwix.alexlebens.net - kiwix.alexlebens.net
rules: rules:
- backendRefs: - backendRefs:
- name: kiwix - group: ''
kind: Service
name: kiwix
port: 80 port: 80
weight: 100
matches: matches:
- path: - path:
type: PathPrefix type: PathPrefix

View File

@@ -4,9 +4,9 @@ dependencies:
version: 4.6.2 version: 4.6.2
- name: postgres-cluster - name: postgres-cluster
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 7.11.2 version: 7.10.0
- name: volsync-target - name: volsync-target
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 0.8.0 version: 0.8.0
digest: sha256:ed3362c98ab60b195a47d0789f2420e041e907be955cdd122f84e363a00f4c73 digest: sha256:c1bbed66c94b64ba44ef1caadf74d46d9bce551e37b62b1cd0a3af9b81046251
generated: "2026-04-04T21:03:12.459168-05:00" generated: "2026-03-24T14:00:56.813765-05:00"

View File

@@ -4,16 +4,16 @@ version: 1.0.0
description: Komodo description: Komodo
keywords: keywords:
- komodo - komodo
- docker-deployment - deployment
home: https://docs.alexlebens.dev/applications/komodo/ - dashboard
- docker-compose
home: https://wiki.alexlebens.dev/s/bb7eb683-b5c7-4f50-9f2c-e8e57dc67c81
sources: sources:
- https://github.com/moghtech/komodo - https://github.com/moghtech/komodo
- https://github.com/FerretDB/FerretDB - https://github.com/cloudnative-pg/cloudnative-pg
- https://github.com/moghtech/komodo/pkgs/container/komodo-core - https://github.com/moghtech/komodo/pkgs/container/komodo-core
- https://github.com/ferretdb/FerretDB/pkgs/container/ferretdb
- https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
- https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
- https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/volsync-target
maintainers: maintainers:
- name: alexlebens - name: alexlebens
dependencies: dependencies:
@@ -23,7 +23,7 @@ dependencies:
version: 4.6.2 version: 4.6.2
- name: postgres-cluster - name: postgres-cluster
alias: postgresql-17-fdb-cluster alias: postgresql-17-fdb-cluster
version: 7.11.2 version: 7.10.0
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
- name: volsync-target - name: volsync-target
alias: volsync-target-keys alias: volsync-target-keys
@@ -31,4 +31,4 @@ dependencies:
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/komodo.png icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/komodo.png
# renovate: datasource=github-releases depName=moghtech/komodo # renovate: datasource=github-releases depName=moghtech/komodo
appVersion: v2.1.1 appVersion: v2.1.0

View File

@@ -14,23 +14,38 @@ spec:
data: data:
- secretKey: passkey - secretKey: passkey
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/komodo/config key: /cl01tl/komodo/config
metadataPolicy: None
property: passkey property: passkey
- secretKey: jwt - secretKey: jwt
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/komodo/config key: /cl01tl/komodo/config
metadataPolicy: None
property: jwt property: jwt
- secretKey: webhook - secretKey: webhook
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/komodo/config key: /cl01tl/komodo/config
metadataPolicy: None
property: webhook property: webhook
- secretKey: oidc-client-id - secretKey: oidc-client-id
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /authentik/oidc/komodo key: /authentik/oidc/komodo
metadataPolicy: None
property: client property: client
- secretKey: oidc-client-secret - secretKey: oidc-client-secret
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /authentik/oidc/komodo key: /authentik/oidc/komodo
metadataPolicy: None
property: secret property: secret
--- ---
@@ -50,9 +65,15 @@ spec:
data: data:
- secretKey: uri - secretKey: uri
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/komodo/ferret key: /cl01tl/komodo/ferret
metadataPolicy: None
property: uri property: uri
- secretKey: password - secretKey: password
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/komodo/ferret key: /cl01tl/komodo/ferret
metadataPolicy: None
property: password property: password

View File

@@ -4,11 +4,13 @@ komodo:
type: deployment type: deployment
replicas: 1 replicas: 1
strategy: Recreate strategy: Recreate
revisionHistoryLimit: 3
containers: containers:
main: main:
image: image:
repository: ghcr.io/moghtech/komodo-core repository: ghcr.io/moghtech/komodo-core
tag: 2.1.1@sha256:2bbbb1efd3534211dac35091e0818f10398d9bdd98fdbf0ddef09e9e0b5ec4ba tag: 2.1.0@sha256:4915d91b5c6e9de4e8fd59391eed5cad090ec84dcf6a1a9233d97edfdbbb88e7
pullPolicy: IfNotPresent
env: env:
- name: COMPOSE_LOGGING_DRIVER - name: COMPOSE_LOGGING_DRIVER
value: local value: local
@@ -43,7 +45,7 @@ komodo:
- name: KOMODO_LOCAL_AUTH - name: KOMODO_LOCAL_AUTH
value: true value: true
- name: KOMODO_ENABLE_NEW_USERS - name: KOMODO_ENABLE_NEW_USERS
value: false value: true
- name: KOMODO_DISABLE_NON_ADMIN_CREATE - name: KOMODO_DISABLE_NON_ADMIN_CREATE
value: true value: true
- name: KOMODO_TRANSPARENT_MODE - name: KOMODO_TRANSPARENT_MODE
@@ -80,16 +82,18 @@ komodo:
resources: resources:
requests: requests:
cpu: 10m cpu: 10m
memory: 80Mi memory: 128Mi
ferretdb-2: ferretdb-2:
type: deployment type: deployment
replicas: 1 replicas: 1
strategy: Recreate strategy: Recreate
revisionHistoryLimit: 3
containers: containers:
main: main:
image: image:
repository: ghcr.io/ferretdb/ferretdb repository: ghcr.io/ferretdb/ferretdb
tag: 2.7.0@sha256:5706414241eb84f0515512c37b46db0f1b1eac9e5ceb7e4c2523211c184b1985 tag: 2.7.0
pullPolicy: IfNotPresent
env: env:
- name: DB_USERNAME - name: DB_USERNAME
value: ferret value: ferret
@@ -102,8 +106,8 @@ komodo:
value: postgresql://$(DB_USERNAME):$(DB_PASSWORD)@komodo-postgresql-17-fdb-cluster-rw.komodo.svc.cluster.local:5432/ferretDB value: postgresql://$(DB_USERNAME):$(DB_PASSWORD)@komodo-postgresql-17-fdb-cluster-rw.komodo.svc.cluster.local:5432/ferretDB
resources: resources:
requests: requests:
cpu: 1m cpu: 10m
memory: 20Mi memory: 128Mi
service: service:
main: main:
controller: main controller: main
@@ -111,12 +115,14 @@ komodo:
http: http:
port: 80 port: 80
targetPort: 9120 targetPort: 9120
protocol: HTTP
ferretdb-2: ferretdb-2:
controller: ferretdb-2 controller: ferretdb-2
ports: ports:
http: http:
port: 27017 port: 27017
targetPort: 27017 targetPort: 27017
protocol: HTTP
route: route:
main: main:
kind: HTTPRoute kind: HTTPRoute
@@ -129,8 +135,11 @@ komodo:
- komodo.alexlebens.net - komodo.alexlebens.net
rules: rules:
- backendRefs: - backendRefs:
- name: komodo-main - group: ''
kind: Service
name: komodo-main
port: 80 port: 80
weight: 100
matches: matches:
- path: - path:
type: PathPrefix type: PathPrefix
@@ -141,6 +150,7 @@ komodo:
storageClass: ceph-block storageClass: ceph-block
accessMode: ReadWriteOnce accessMode: ReadWriteOnce
size: 1Gi size: 1Gi
retain: true
advancedMounts: advancedMounts:
main: main:
main: main:
@@ -150,6 +160,7 @@ komodo:
storageClass: ceph-block storageClass: ceph-block
accessMode: ReadWriteOnce accessMode: ReadWriteOnce
size: 5Gi size: 5Gi
retain: true
advancedMounts: advancedMounts:
main: main:
main: main:
@@ -159,6 +170,7 @@ komodo:
storageClass: ceph-block storageClass: ceph-block
accessMode: ReadWriteOnce accessMode: ReadWriteOnce
size: 5Gi size: 5Gi
retain: true
advancedMounts: advancedMounts:
main: main:
main: main:
@@ -170,7 +182,7 @@ postgresql-17-fdb-cluster:
cluster: cluster:
image: image:
repository: ghcr.io/ferretdb/postgres-documentdb repository: ghcr.io/ferretdb/postgres-documentdb
tag: 17-0.107.0-ferretdb-2.7.0@sha256:2386795ec2aa7ae559304361979f1dc5708d383ee9020ae63dadc2940dfe58f7 tag: "17-0.106.0-ferretdb-2.5.0"
postgresUID: 999 postgresUID: 999
postgresGID: 999 postgresGID: 999
postgresql: postgresql:
@@ -212,12 +224,35 @@ postgresql-17-fdb-cluster:
destinationBucket: postgres-backups destinationBucket: postgres-backups
externalSecretCredentialPath: /garage/home-infra/postgres-backups externalSecretCredentialPath: /garage/home-infra/postgres-backups
isWALArchiver: true isWALArchiver: true
# - name: garage-remote
# index: 1
# destinationBucket: postgres-backups
# externalSecretCredentialPath: /garage/home-infra/postgres-backups
# retentionPolicy: "90d"
# data:
# compression: bzip2
# - name: external
# index: 1
# endpointURL: https://nyc3.digitaloceanspaces.com
# destinationBucket: postgres-backups-ce540ddf106d186bbddca68a
# externalSecretCredentialPath: /garage/home-infra/postgres-backups
# isWALArchiver: false
scheduledBackups: scheduledBackups:
- name: live-backup - name: live-backup
suspend: false suspend: false
immediate: true immediate: true
schedule: "0 50 14 * * *" schedule: "0 50 14 * * *"
backupName: garage-local backupName: garage-local
# - name: weekly-backup
# suspend: true
# immediate: true
# schedule: "0 0 4 * * SAT"
# backupName: garage-remote
# - name: daily-backup
# suspend: true
# immediate: true
# schedule: "0 0 0 * * *"
# backupName: external
volsync-target-keys: volsync-target-keys:
pvcTarget: komodo-keys pvcTarget: komodo-keys
local: local:

View File

@@ -1,12 +1,12 @@
dependencies: dependencies:
- name: kube-prometheus-stack - name: kube-prometheus-stack
repository: oci://ghcr.io/prometheus-community/charts repository: oci://ghcr.io/prometheus-community/charts
version: 82.18.0 version: 82.16.1
- name: app-template - name: app-template
repository: https://bjw-s-labs.github.io/helm-charts/ repository: https://bjw-s-labs.github.io/helm-charts/
version: 4.6.2 version: 4.6.2
- name: valkey - name: valkey
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 0.5.0 version: 0.4.0
digest: sha256:bd480d8e4de9a528a73ec1bbadff5afb4d1f37ba6a85d98ec82a607283148f3d digest: sha256:ece31be37d2fa7c7c59058e2d47e8190bea3baa742b4f04fe793956cd2d52f7f
generated: "2026-04-04T21:48:51.739477322Z" generated: "2026-04-02T07:03:55.367235416Z"

View File

@@ -5,20 +5,22 @@ description: Kube Prometheus Stack
keywords: keywords:
- kube-prometheus-stack - kube-prometheus-stack
- prometheus - prometheus
home: https://docs.alexlebens.dev/applications/kube-prometheus-stack/ - alertmanager
- metrics
- alerts
- kubernetes
home: https://wiki.alexlebens.dev/s/cd9fc3a4-aa88-4285-8886-91a6c5aecf7d
sources: sources:
- https://github.com/prometheus/prometheus - https://github.com/prometheus/prometheus
- https://github.com/prometheus-operator/kube-prometheus - https://github.com/prometheus-operator/kube-prometheus
- https://git.xenrox.net/~xenrox/ntfy-alertmanager/ - https://github.com/alexbakker/alertmanager-ntfy
- https://hub.docker.com/r/xenrox/ntfy-alertmanager
- https://github.com/prometheus-community/helm-charts/tree/main/charts/kube-prometheus-stack - https://github.com/prometheus-community/helm-charts/tree/main/charts/kube-prometheus-stack
- https://github.com/bjw-s/helm-charts/blob/main/charts/other/app-template - https://github.com/bjw-s/helm-charts/blob/main/charts/other/app-template
- https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/valkey
maintainers: maintainers:
- name: alexlebens - name: alexlebens
dependencies: dependencies:
- name: kube-prometheus-stack - name: kube-prometheus-stack
version: 82.18.0 version: 82.16.1
repository: oci://ghcr.io/prometheus-community/charts repository: oci://ghcr.io/prometheus-community/charts
- name: app-template - name: app-template
alias: ntfy-alertmanager alias: ntfy-alertmanager
@@ -26,7 +28,7 @@ dependencies:
version: 4.6.2 version: 4.6.2
- name: valkey - name: valkey
alias: valkey alias: valkey
version: 0.5.0 version: 0.4.0
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
# renovate: datasource=github-releases depName=prometheus-operator/prometheus-operator # renovate: datasource=github-releases depName=prometheus-operator/prometheus-operator

View File

@@ -14,7 +14,10 @@ spec:
data: data:
- secretKey: ntfy_password - secretKey: ntfy_password
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/kube-prometheus-stack/ntfy-alertmanager key: /cl01tl/kube-prometheus-stack/ntfy-alertmanager
metadataPolicy: None
property: ntfy_password property: ntfy_password
--- ---
@@ -34,7 +37,10 @@ spec:
data: data:
- secretKey: token - secretKey: token
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/token key: /garage/token
metadataPolicy: None
property: metric property: metric
--- ---
@@ -54,9 +60,15 @@ spec:
data: data:
- secretKey: ntfy_password - secretKey: ntfy_password
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/kube-prometheus-stack/ntfy-alertmanager key: /cl01tl/kube-prometheus-stack/ntfy-alertmanager
metadataPolicy: None
property: ntfy_password property: ntfy_password
- secretKey: config - secretKey: config
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/kube-prometheus-stack/ntfy-alertmanager key: /cl01tl/kube-prometheus-stack/ntfy-alertmanager
metadataPolicy: None
property: config property: config

View File

@@ -9,8 +9,10 @@ kube-prometheus-stack:
kubeSchedulerRecording: false kubeSchedulerRecording: false
global: global:
rbac: rbac:
create: true
createAggregateClusterRoles: true createAggregateClusterRoles: true
alertmanager: alertmanager:
enabled: true
config: config:
route: route:
group_by: ["namespace", "alertname"] group_by: ["namespace", "alertname"]
@@ -34,6 +36,8 @@ kube-prometheus-stack:
route: route:
main: main:
enabled: true enabled: true
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
hostnames: hostnames:
- alertmanager.alexlebens.net - alertmanager.alexlebens.net
parentRefs: parentRefs:
@@ -41,9 +45,14 @@ kube-prometheus-stack:
kind: Gateway kind: Gateway
name: traefik-gateway name: traefik-gateway
namespace: traefik namespace: traefik
matches:
- path:
type: PathPrefix
value: /
alertmanagerSpec: alertmanagerSpec:
secrets: secrets:
- alertmanager-config-secret - alertmanager-config-secret
replicas: 1
grafana: grafana:
enabled: false enabled: false
kubeApiServer: kubeApiServer:
@@ -52,13 +61,11 @@ kube-prometheus-stack:
kubeControllerManager: kubeControllerManager:
enabled: false enabled: false
kubeEtcd: kubeEtcd:
enabled: true
service: service:
selector: selector:
k8s-app: kube-controller-manager k8s-app: kube-controller-manager
serviceMonitor: serviceMonitor:
metricRelabelings:
- action: labeldrop
regex: pod
relabelings: relabelings:
- sourceLabels: [__meta_kubernetes_pod_node_name] - sourceLabels: [__meta_kubernetes_pod_node_name]
separator: ; separator: ;
@@ -66,12 +73,22 @@ kube-prometheus-stack:
targetLabel: nodename targetLabel: nodename
replacement: $1 replacement: $1
action: replace action: replace
metricRelabelings:
- action: labeldrop
regex: pod
kubeScheduler: kubeScheduler:
enabled: false enabled: false
kubeProxy: kubeProxy:
enabled: false enabled: false
kubeStateMetrics:
enabled: true
nodeExporter:
operatingSystems:
darwin:
enabled: false
prometheusOperator: prometheusOperator:
admissionWebhooks: admissionWebhooks:
enabled: true
annotations: annotations:
argocd.argoproj.io/hook: PreSync argocd.argoproj.io/hook: PreSync
argocd.argoproj.io/hook-delete-policy: HookSucceeded argocd.argoproj.io/hook-delete-policy: HookSucceeded
@@ -89,6 +106,8 @@ kube-prometheus-stack:
route: route:
main: main:
enabled: true enabled: true
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
hostnames: hostnames:
- prometheus.alexlebens.net - prometheus.alexlebens.net
parentRefs: parentRefs:
@@ -96,10 +115,13 @@ kube-prometheus-stack:
kind: Gateway kind: Gateway
name: traefik-gateway name: traefik-gateway
namespace: traefik namespace: traefik
matches:
- path:
type: PathPrefix
value: /
prometheusSpec: prometheusSpec:
scrapeInterval: 30s scrapeInterval: 30s
retention: 45d retention: 30d
retentionSize: 240GiB
externalUrl: https://prometheus.alexlebens.net externalUrl: https://prometheus.alexlebens.net
ruleSelectorNilUsesHelmValues: false ruleSelectorNilUsesHelmValues: false
serviceMonitorSelectorNilUsesHelmValues: false serviceMonitorSelectorNilUsesHelmValues: false
@@ -120,11 +142,14 @@ ntfy-alertmanager:
main: main:
type: deployment type: deployment
replicas: 1 replicas: 1
strategy: Recreate
revisionHistoryLimit: 3
containers: containers:
main: main:
image: image:
repository: xenrox/ntfy-alertmanager repository: xenrox/ntfy-alertmanager
tag: 1.0.0@sha256:81788c7905774b7b0b2ed6833b2bc4826a90a42e4b738706edcedd5f489e7a73 tag: 1.0.0
pullPolicy: IfNotPresent
service: service:
main: main:
controller: main controller: main
@@ -132,6 +157,7 @@ ntfy-alertmanager:
http: http:
port: 80 port: 80
targetPort: 8080 targetPort: 8080
protocol: HTTP
persistence: persistence:
config: config:
enabled: true enabled: true

View File

@@ -4,8 +4,9 @@ version: 1.0.0
description: Kubelet Serving Cert Approver description: Kubelet Serving Cert Approver
keywords: keywords:
- kubelet-serving-cert-approver - kubelet-serving-cert-approver
- kubernetes
- certificate - certificate
home: https://docs.alexlebens.dev/applications/kubelet-serving-cert-approver/ home: https://wiki.alexlebens.dev/s/3aa80722-db85-41b4-ba1e-8d4c3d8643b5
sources: sources:
- https://github.com/alex1989hu/kubelet-serving-cert-approver - https://github.com/alex1989hu/kubelet-serving-cert-approver
- https://github.com/alex1989hu/kubelet-serving-cert-approver/pkgs/container/kubelet-serving-cert-approver - https://github.com/alex1989hu/kubelet-serving-cert-approver/pkgs/container/kubelet-serving-cert-approver

View File

@@ -29,6 +29,7 @@ kubelet-serving-cert-approver:
type: deployment type: deployment
replicas: 1 replicas: 1
strategy: Recreate strategy: Recreate
revisionHistoryLimit: 3
serviceAccount: serviceAccount:
name: kubelet-serving-cert-approver name: kubelet-serving-cert-approver
pod: pod:
@@ -37,7 +38,8 @@ kubelet-serving-cert-approver:
main: main:
image: image:
repository: ghcr.io/alex1989hu/kubelet-serving-cert-approver repository: ghcr.io/alex1989hu/kubelet-serving-cert-approver
tag: 0.10.3@sha256:4cdc92140c48341433513dce3201806309d5256cfbac6f830feae1e7e9fb0d7d tag: 0.10.3
pullPolicy: Always
args: args:
- serve - serve
env: env:
@@ -47,8 +49,8 @@ kubelet-serving-cert-approver:
fieldPath: metadata.namespace fieldPath: metadata.namespace
resources: resources:
requests: requests:
cpu: 1m cpu: 100m
memory: 20Mi memory: 128Mi
securityContext: securityContext:
allowPrivilegeEscalation: false allowPrivilegeEscalation: false
capabilities: capabilities:
@@ -68,6 +70,8 @@ kubelet-serving-cert-approver:
health: health:
port: 8080 port: 8080
targetPort: 8080 targetPort: 8080
protocol: HTTP
metrics: metrics:
port: 9090 port: 9090
targetPort: 9090 targetPort: 9090
protocol: HTTP

View File

@@ -4,8 +4,10 @@ version: 1.0.0
description: Kubernetes Cloudflare DDNS description: Kubernetes Cloudflare DDNS
keywords: keywords:
- kubernetes-cloudflare-ddns - kubernetes-cloudflare-ddns
- cloudflare
- ddns - ddns
home: https://docs.alexlebens.dev/applications/kubelet-serving-cert-approver/ - kubernetes
home: https://wiki.alexlebens.dev/s/49513b51-cf91-4efd-b2a5-957555bc3ad7
sources: sources:
- https://github.com/kubitodev/kubernetes-cloudflare-ddns - https://github.com/kubitodev/kubernetes-cloudflare-ddns
- https://hub.docker.com/r/kubitodev/kubernetes-cloudflare-ddns - https://hub.docker.com/r/kubitodev/kubernetes-cloudflare-ddns

View File

@@ -14,17 +14,29 @@ spec:
data: data:
- secretKey: AUTH_KEY - secretKey: AUTH_KEY
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cloudflare/alexlebens.net/ddns key: /cloudflare/alexlebens.net/ddns
metadataPolicy: None
property: token property: token
- secretKey: NAME - secretKey: NAME
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cloudflare/alexlebens.net/ddns key: /cloudflare/alexlebens.net/ddns
metadataPolicy: None
property: name property: name
- secretKey: RECORD_ID - secretKey: RECORD_ID
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cloudflare/alexlebens.net/ddns key: /cloudflare/alexlebens.net/ddns
metadataPolicy: None
property: record-id property: record-id
- secretKey: ZONE_ID - secretKey: ZONE_ID
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cloudflare/alexlebens.net/ddns key: /cloudflare/alexlebens.net/ddns
metadataPolicy: None
property: zone-id property: zone-id

View File

@@ -4,19 +4,24 @@ kubernetes-cloudflare-ddns:
type: cronjob type: cronjob
cronjob: cronjob:
suspend: false suspend: false
timeZone: America/Chicago concurrencyPolicy: Forbid
timeZone: US/Central
schedule: "30 4 * * *" schedule: "30 4 * * *"
startingDeadlineSeconds: 90
successfulJobsHistory: 1
failedJobsHistory: 1
backoffLimit: 3 backoffLimit: 3
parallelism: 1 parallelism: 1
containers: containers:
main: main:
image: image:
repository: kubitodev/kubernetes-cloudflare-ddns repository: kubitodev/kubernetes-cloudflare-ddns
tag: 2.0.0@sha256:80979b046e32ecccedfa6c00804676d070ef87c7f77a65e4afa4e91ffdeb7309 tag: 2.0.0
pullPolicy: IfNotPresent
envFrom: envFrom:
- secretRef: - secretRef:
name: kubernetes-cloudflare-ddns-secret name: kubernetes-cloudflare-ddns-secret
resources: resources:
requests: requests:
cpu: 10m cpu: 10m
memory: 32Mi memory: 128Mi

View File

@@ -5,13 +5,12 @@ description: LanguageTool
keywords: keywords:
- languagetool - languagetool
- spellchecking - spellchecking
home: https://docs.alexlebens.dev/applications/languagetool/ home: https://wiki.alexlebens.dev/
sources: sources:
- https://github.com/languagetool-org/languagetool - https://github.com/languagetool-org/languagetool
- https://github.com/Erikvl87/docker-languagetool - https://github.com/Erikvl87/docker-languagetool
- https://hub.docker.com/r/erikvl87/languagetool - https://hub.docker.com/r/erikvl87/languagetool
- https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
- https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/volsync-target
maintainers: maintainers:
- name: alexlebens - name: alexlebens
dependencies: dependencies:

View File

@@ -4,11 +4,13 @@ languagetool:
type: deployment type: deployment
replicas: 1 replicas: 1
strategy: Recreate strategy: Recreate
revisionHistoryLimit: 3
containers: containers:
main: main:
image: image:
repository: erikvl87/languagetool repository: erikvl87/languagetool
tag: 6.7@sha256:454acc9b3d232bdf37a0eddb1c8d0e93513ce41b914a8a374e3c44a884122364 tag: 6.7
pullPolicy: IfNotPresent
env: env:
- name: langtool_languageModel - name: langtool_languageModel
value: /ngrams value: /ngrams
@@ -18,8 +20,8 @@ languagetool:
value: 1g value: 1g
resources: resources:
requests: requests:
cpu: 1m cpu: 10m
memory: 800Mi memory: 128Mi
service: service:
main: main:
controller: main controller: main
@@ -27,6 +29,7 @@ languagetool:
http: http:
port: 80 port: 80
targetPort: 8010 targetPort: 8010
protocol: HTTP
route: route:
main: main:
kind: HTTPRoute kind: HTTPRoute
@@ -39,8 +42,11 @@ languagetool:
- languagetool.alexlebens.net - languagetool.alexlebens.net
rules: rules:
- backendRefs: - backendRefs:
- name: languagetool - group: ''
kind: Service
name: languagetool
port: 80 port: 80
weight: 100
matches: matches:
- path: - path:
type: PathPrefix type: PathPrefix
@@ -51,6 +57,7 @@ languagetool:
storageClass: ceph-block storageClass: ceph-block
accessMode: ReadWriteOnce accessMode: ReadWriteOnce
size: 1Gi size: 1Gi
retain: true
advancedMounts: advancedMounts:
main: main:
main: main:

View File

@@ -4,14 +4,13 @@ version: 1.0.0
description: Libation description: Libation
keywords: keywords:
- libation - libation
- audiobooks
- audible - audible
home: https://docs.alexlebens.dev/applications/languagetool/ home: https://wiki.alexlebens.dev/s/63beac50-a63f-45fe-b8e5-e1691dd5e9b0
sources: sources:
- https://github.com/rmcrackan/Libation - https://github.com/rmcrackan/Libation
- https://hub.docker.com/r/rmcrackan/libation - https://hub.docker.com/r/rmcrackan/libation
- https://hub.docker.com/_/ubuntu/tags
- https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
- https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/volsync-target
maintainers: maintainers:
- name: alexlebens - name: alexlebens
dependencies: dependencies:

View File

@@ -4,15 +4,20 @@ libation:
type: cronjob type: cronjob
cronjob: cronjob:
suspend: false suspend: false
timeZone: America/Chicago concurrencyPolicy: Forbid
timeZone: US/Central
schedule: 0 0 1 1 * schedule: 0 0 1 1 *
startingDeadlineSeconds: 90
successfulJobsHistory: 1
failedJobsHistory: 1
backoffLimit: 3 backoffLimit: 3
parallelism: 1 parallelism: 1
containers: containers:
main: main:
image: image:
repository: rmcrackan/libation repository: rmcrackan/libation
tag: 13.3.2@sha256:d1c45260f3ba34b0fb1432c2b51763e00c5174864961856c1c31e7f2b0c3a39e tag: 13.3.2
pullPolicy: IfNotPresent
env: env:
- name: SLEEP_TIME - name: SLEEP_TIME
value: "-1" value: "-1"
@@ -21,7 +26,7 @@ libation:
resources: resources:
requests: requests:
cpu: 10m cpu: 10m
memory: 32Mi memory: 128Mi
debug: debug:
type: deployment type: deployment
replicas: 0 replicas: 0
@@ -30,7 +35,8 @@ libation:
main: main:
image: image:
repository: ubuntu repository: ubuntu
tag: resolute-20260401@sha256:a072b64036a738e55bff8f9a9682cbb893bf20c213772effc1de8dee8df1cea9 tag: resolute-20260401
pullPolicy: IfNotPresent
command: command:
- "sleep" - "sleep"
- "infinity" - "infinity"
@@ -44,6 +50,7 @@ libation:
storageClass: ceph-block storageClass: ceph-block
accessMode: ReadWriteOnce accessMode: ReadWriteOnce
size: 500Mi size: 500Mi
retain: true
advancedMounts: advancedMounts:
main: main:
main: main:

View File

@@ -4,9 +4,9 @@ dependencies:
version: 4.6.2 version: 4.6.2
- name: postgres-cluster - name: postgres-cluster
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 7.11.2 version: 7.10.0
- name: volsync-target - name: volsync-target
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 0.8.0 version: 0.8.0
digest: sha256:eaa092df6ae81137c5a62622f9e09495a9bc886ae908202b120969948206d786 digest: sha256:0f1a2923a7042b364a817edc64729d5e1c18b0552555c035d974de626f372692
generated: "2026-04-04T21:03:34.837519-05:00" generated: "2026-03-15T20:07:00.750754951Z"

View File

@@ -4,18 +4,17 @@ version: 1.0.0
description: Lidarr description: Lidarr
keywords: keywords:
- lidarr - lidarr
- music
- servarr - servarr
home: https://docs.alexlebens.dev/applications/lidarr/ - music
- metrics
home: https://wiki.alexlebens.dev/s/f7c4e892-aa3b-435f-b220-317dc53137ac
sources: sources:
- https://github.com/Lidarr/Lidarr - https://github.com/Lidarr/Lidarr
- https://github.com/linuxserver/docker-lidarr - https://github.com/linuxserver/docker-lidarr
- https://github.com/onedr0p/exportarr - https://github.com/cloudnative-pg/cloudnative-pg
- https://github.com/linuxserver/docker-lidarr/pkgs/container/lidarr
- https://github.com/onedr0p/exportarr/pkgs/container/exportarr - https://github.com/onedr0p/exportarr/pkgs/container/exportarr
- https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
- https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
- https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/volsync-target
maintainers: maintainers:
- name: alexlebens - name: alexlebens
dependencies: dependencies:
@@ -25,12 +24,11 @@ dependencies:
version: 4.6.2 version: 4.6.2
- name: postgres-cluster - name: postgres-cluster
alias: postgres-18-cluster alias: postgres-18-cluster
version: 7.11.2 version: 7.10.0
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
- name: volsync-target - name: volsync-target
alias: volsync-target-config alias: volsync-target-config
version: 0.8.0 version: 0.8.0
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/lidarr.png icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/lidarr.png
# renovate: datasource=github-releases depName=linuxserver/docker-lidarr
appVersion: 3.1.2-nightly appVersion: 3.1.2-nightly

View File

@@ -4,6 +4,7 @@ lidarr:
type: deployment type: deployment
replicas: 1 replicas: 1
strategy: Recreate strategy: Recreate
revisionHistoryLimit: 3
pod: pod:
securityContext: securityContext:
runAsUser: 1000 runAsUser: 1000
@@ -15,9 +16,10 @@ lidarr:
image: image:
repository: ghcr.io/linuxserver/lidarr repository: ghcr.io/linuxserver/lidarr
tag: 3.1.2-nightly@sha256:034055feee43b11eb2f7a8438a9af1c99ab564dd2b43e5df2fe5b3c9b3b8b1ac tag: 3.1.2-nightly@sha256:034055feee43b11eb2f7a8438a9af1c99ab564dd2b43e5df2fe5b3c9b3b8b1ac
pullPolicy: IfNotPresent
env: env:
- name: TZ - name: TZ
value: America/Chicago value: US/Central
- name: PUID - name: PUID
value: 1000 value: 1000
- name: PGID - name: PGID
@@ -25,11 +27,12 @@ lidarr:
resources: resources:
requests: requests:
cpu: 100m cpu: 100m
memory: 300Mi memory: 256Mi
metrics: metrics:
image: image:
repository: ghcr.io/onedr0p/exportarr repository: ghcr.io/onedr0p/exportarr
tag: v2.3.0@sha256:af535d94061cf97a52e1661945ffba78c03f9443eae7c0da1a80a5a4be56b520 tag: v2.3.0
pullPolicy: IfNotPresent
args: ["lidarr"] args: ["lidarr"]
env: env:
- name: URL - name: URL
@@ -42,6 +45,10 @@ lidarr:
value: false value: false
- name: ENABLE_UNKNOWN_QUEUE_ITEMS - name: ENABLE_UNKNOWN_QUEUE_ITEMS
value: false value: false
resources:
requests:
cpu: 10m
memory: 128Mi
service: service:
main: main:
controller: main controller: main
@@ -49,9 +56,11 @@ lidarr:
http: http:
port: 80 port: 80
targetPort: 8686 targetPort: 8686
protocol: HTTP
metrics: metrics:
port: 9792 port: 9792
targetPort: 9792 targetPort: 9792
protocol: TCP
serviceMonitor: serviceMonitor:
main: main:
selector: selector:
@@ -86,8 +95,11 @@ lidarr:
type: PathPrefix type: PathPrefix
value: /outpost.goauthentik.io value: /outpost.goauthentik.io
- backendRefs: - backendRefs:
- name: lidarr - group: ''
kind: Service
name: lidarr
port: 80 port: 80
weight: 100
filters: filters:
- type: ExtensionRef - type: ExtensionRef
extensionRef: extensionRef:
@@ -104,6 +116,7 @@ lidarr:
storageClass: ceph-block storageClass: ceph-block
accessMode: ReadWriteOnce accessMode: ReadWriteOnce
size: 10Gi size: 10Gi
retain: true
advancedMounts: advancedMounts:
main: main:
main: main:
@@ -137,12 +150,35 @@ postgres-18-cluster:
destinationBucket: postgres-backups destinationBucket: postgres-backups
externalSecretCredentialPath: /garage/home-infra/postgres-backups externalSecretCredentialPath: /garage/home-infra/postgres-backups
isWALArchiver: true isWALArchiver: true
# - name: garage-remote
# index: 1
# destinationBucket: postgres-backups
# externalSecretCredentialPath: /garage/home-infra/postgres-backups
# retentionPolicy: "90d"
# data:
# compression: bzip2
# - name: external
# index: 1
# endpointURL: https://nyc3.digitaloceanspaces.com
# destinationBucket: postgres-backups-ce540ddf106d186bbddca68a
# externalSecretCredentialPath: /garage/home-infra/postgres-backups
# isWALArchiver: false
scheduledBackups: scheduledBackups:
- name: live-backup - name: live-backup
suspend: false suspend: false
immediate: true immediate: true
schedule: "0 55 14 * * *" schedule: "0 55 14 * * *"
backupName: garage-local backupName: garage-local
# - name: weekly-backup
# suspend: true
# immediate: true
# schedule: "0 0 4 * * SAT"
# backupName: garage-remote
# - name: daily-backup
# suspend: true
# immediate: true
# schedule: "0 0 0 * * *"
# backupName: external
volsync-target-config: volsync-target-config:
pvcTarget: lidarr-config pvcTarget: lidarr-config
moverSecurityContext: moverSecurityContext:

View File

@@ -5,7 +5,8 @@ description: Local Path Provisioner
keywords: keywords:
- local-path-provisioner - local-path-provisioner
- storage - storage
home: https://docs.alexlebens.dev/applications/local-path-provisioner/ - kubernetes
home: https://wiki.alexlebens.dev/s/fa4d4152-b9dd-4fdc-a6f2-93a2c0df7f4a
sources: sources:
- https://github.com/rancher/local-path-provisioner - https://github.com/rancher/local-path-provisioner
- https://hub.docker.com/r/rancher/local-path-provisioner - https://hub.docker.com/r/rancher/local-path-provisioner

View File

@@ -1,11 +1,10 @@
local-path-provisioner: local-path-provisioner:
replicaCount: 1
image: image:
repository: rancher/local-path-provisioner repository: rancher/local-path-provisioner
tag: v0.0.35@sha256:34ff0847cc47ebf69656ba44a3de9324596d0036b66ffd323b21614dd8221530 tag: v0.0.35
helperImage: helperImage:
repository: busybox repository: busybox
tag: 1.37.0@sha256:1487d0af5f52b4ba31c7e465126ee2123fe3f2305d638e7827681e7cf6c83d5e tag: 1.37.0
storageClass: storageClass:
create: true create: true
defaultClass: false defaultClass: false
@@ -13,10 +12,6 @@ local-path-provisioner:
name: local-path name: local-path
reclaimPolicy: Delete reclaimPolicy: Delete
volumeBindingMode: WaitForFirstConsumer volumeBindingMode: WaitForFirstConsumer
resources:
limits:
cpu: 1m
memory: 30Mi
nodePathMap: nodePathMap:
- node: DEFAULT_PATH_FOR_NON_LISTED_NODES - node: DEFAULT_PATH_FOR_NON_LISTED_NODES
paths: paths:

View File

@@ -4,6 +4,6 @@ dependencies:
version: 6.55.0 version: 6.55.0
- name: alloy - name: alloy
repository: https://grafana.github.io/helm-charts repository: https://grafana.github.io/helm-charts
version: 1.7.0 version: 1.6.2
digest: sha256:e6a06dc016858215a461d05c543b937f7a87ecc1bb58381cd6fb825ba524fa66 digest: sha256:463184dc134143723f8567a1ebd228353cf0253a139f0a4e76637ec65aa4aaf1
generated: "2026-04-02T19:05:47.897397013Z" generated: "2026-03-14T18:16:47.779817047Z"

View File

@@ -4,13 +4,14 @@ version: 1.0.0
description: Loki description: Loki
keywords: keywords:
- loki - loki
- promtail
- logs - logs
home: https://docs.alexlebens.dev/applications/loki/ - kubernetes
home: https://wiki.alexlebens.dev/s/c5a4dc61-5487-46c9-88f1-cac363742d30
sources: sources:
- https://github.com/grafana/loki - https://github.com/grafana/loki
- https://github.com/grafana/alloy
- https://github.com/grafana/loki/tree/main/production/helm/loki - https://github.com/grafana/loki/tree/main/production/helm/loki
- https://github.com/grafana/alloy/tree/main/operations/helm/charts/alloy - https://github.com/grafana/helm-charts/tree/main/charts/promtail
maintainers: maintainers:
- name: alexlebens - name: alexlebens
dependencies: dependencies:
@@ -18,7 +19,7 @@ dependencies:
version: 6.55.0 version: 6.55.0
repository: https://grafana.github.io/helm-charts repository: https://grafana.github.io/helm-charts
- name: alloy - name: alloy
version: 1.7.0 version: 1.6.2
repository: https://grafana.github.io/helm-charts repository: https://grafana.github.io/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/loki.png icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/loki.png
# renovate: datasource=github-releases depName=grafana/loki # renovate: datasource=github-releases depName=grafana/loki

View File

@@ -2,14 +2,25 @@ loki:
deploymentMode: SingleBinary deploymentMode: SingleBinary
loki: loki:
auth_enabled: false auth_enabled: false
commonConfig:
replication_factor: 1
ingester_client:
pool_config:
remote_timeout: 10s
remote_timeout: 10s
limits_config: limits_config:
allow_structured_metadata: false allow_structured_metadata: false
max_streams_per_user: 100000 max_streams_per_user: 100000
ingestion_rate_mb: 1024 ingestion_rate_mb: 1024
ingestion_burst_size_mb: 1024 ingestion_burst_size_mb: 1024
retention_period: 7d retention_period: 7d
commonConfig: compactor:
replication_factor: 1 delete_request_store: filesystem
working_directory: /var/loki/compactor
compaction_interval: 10m
retention_enabled: true
retention_delete_delay: 2h
retention_delete_worker_count: 150
storage: storage:
type: filesystem type: filesystem
schemaConfig: schemaConfig:
@@ -20,34 +31,16 @@ loki:
schema: v13 schema: v13
index: index:
period: 24h period: 24h
compactor:
delete_request_store: filesystem
working_directory: /var/loki/compactor
compaction_interval: 10m
retention_enabled: true
retention_delete_delay: 2h
retention_delete_worker_count: 150
ingester_client:
pool_config:
remote_timeout: 10s
remote_timeout: 10s
enterprise: enterprise:
enabled: false enabled: false
gateway: gateway:
enabled: true enabled: true
resources:
requests:
cpu: 10m
memory: 20Mi
basicAuth: basicAuth:
enabled: false enabled: false
singleBinary: singleBinary:
replicas: 1 replicas: 1
resources:
requests:
cpu: 100m
memory: 800Mi
persistence: persistence:
enableStatefulSetAutoDeletePVC: true
enabled: true enabled: true
size: 150Gi size: 150Gi
storageClass: synology-iscsi-delete storageClass: synology-iscsi-delete
@@ -128,5 +121,7 @@ alloy:
url = "http://loki-gateway.loki.svc.cluster.local:80/loki/api/v1/push" url = "http://loki-gateway.loki.svc.cluster.local:80/loki/api/v1/push"
} }
} }
controller:
type: 'daemonset'
serviceMonitor: serviceMonitor:
enabled: true enabled: true

View File

@@ -5,12 +5,12 @@ description: MariaDB Operator
keywords: keywords:
- mariadb-operator - mariadb-operator
- database - database
- operator - storage
home: https://docs.alexlebens.dev/applications/mariadb-operator/ - kubernetes
home: https://wiki.alexlebens.dev/
sources: sources:
- https://github.com/mariadb-operator/mariadb-operator - https://github.com/mariadb-operator/mariadb-operator
- https://github.com/mariadb-operator/mariadb-operator/tree/main/deploy/charts/mariadb-operator - https://github.com/mariadb-operator/mariadb-operator/tree/main/deploy/charts/mariadb-operator
- https://github.com/mariadb-operator/mariadb-operator/tree/main/deploy/charts/mariadb-operator-crds
maintainers: maintainers:
- name: alexlebens - name: alexlebens
dependencies: dependencies:
@@ -20,6 +20,6 @@ dependencies:
- name: mariadb-operator-crds - name: mariadb-operator-crds
version: 26.3.0 version: 26.3.0
repository: https://helm.mariadb.com/mariadb-operator repository: https://helm.mariadb.com/mariadb-operator
icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/mariadb.png icon: https://mariadb-operator.github.io/mariadb-operator/assets/mariadb_profile.svg
# renovate: datasource=github-releases depName=mariadb-operator/mariadb-operator # renovate: datasource=github-releases depName=mariadb-operator/mariadb-operator
appVersion: 26.3.0 appVersion: 26.3.0

View File

@@ -1,9 +1,11 @@
mariadb-operator: mariadb-operator:
crds:
enabled: false
ha: ha:
enabled: true enabled: true
replicas: 3
metrics: metrics:
enabled: true enabled: true
serviceMonitor:
enabled: true
pdb: pdb:
enabled: true enabled: true
maxUnavailable: 1

View File

@@ -19,13 +19,13 @@ dependencies:
version: 2.4.0 version: 2.4.0
- name: postgres-cluster - name: postgres-cluster
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 7.11.2 version: 7.10.0
- name: valkey - name: valkey
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 0.5.0 version: 0.4.0
- name: valkey - name: valkey
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 0.5.0 version: 0.4.0
- name: volsync-target - name: volsync-target
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 0.8.0 version: 0.8.0
@@ -38,5 +38,5 @@ dependencies:
- name: volsync-target - name: volsync-target
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 0.8.0 version: 0.8.0
digest: sha256:0e8b1b79a98952ed49c87c6da83dcc2eed2aabbd755d9ebf1bdd3090f3ccc44c digest: sha256:8fb2d00605ade15db97e778f47ecc1ffae3705ce3408a17e0a21f7def65de884
generated: "2026-04-04T21:03:48.737144-05:00" generated: "2026-03-24T16:59:56.540825394Z"

View File

@@ -4,15 +4,20 @@ version: 1.0.0
description: Matrix Synapse description: Matrix Synapse
keywords: keywords:
- matrix-synapse - matrix-synapse
- matrix
- chat - chat
home: https://docs.alexlebens.dev/applications/matrix-synapse/ - bridge
- matrix-hookshot
- mautrix-discord
- mautrix-whatsapp
home: https://wiki.alexlebens.dev/s/bd7e7f66-136a-41b8-8144-847bacbb3059
sources: sources:
- https://github.com/element-hq/synapse - https://github.com/element-hq/synapse
- https://github.com/matrix-org/matrix-hookshot - https://github.com/matrix-org/matrix-hookshot
- https://github.com/mautrix/discord - https://github.com/mautrix/discord
- https://github.com/mautrix/whatsapp - https://github.com/mautrix/whatsapp
- https://github.com/rtsp/docker-lighttpd/pkgs/container/docker-lighttpd - https://github.com/cloudflare/cloudflared
- https://hub.docker.com/_/alpine - https://github.com/cloudnative-pg/cloudnative-pg
- https://hub.docker.com/r/halfshot/matrix-hookshot - https://hub.docker.com/r/halfshot/matrix-hookshot
- https://mau.dev/mautrix/discord/container_registry - https://mau.dev/mautrix/discord/container_registry
- https://mau.dev/mautrix/whatsapp/container_registry - https://mau.dev/mautrix/whatsapp/container_registry
@@ -20,8 +25,6 @@ sources:
- https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
- https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/cloudflared - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/cloudflared
- https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
- https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/valkey
- https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/volsync-target
maintainers: maintainers:
- name: alexlebens - name: alexlebens
dependencies: dependencies:
@@ -50,15 +53,15 @@ dependencies:
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
- name: postgres-cluster - name: postgres-cluster
alias: postgres-18-cluster alias: postgres-18-cluster
version: 7.11.2 version: 7.10.0
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
- name: valkey - name: valkey
alias: valkey-matrix-synapse alias: valkey-matrix-synapse
version: 0.5.0 version: 0.4.0
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
- name: valkey - name: valkey
alias: valkey-hookshot alias: valkey-hookshot
version: 0.5.0 version: 0.4.0
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
- name: volsync-target - name: volsync-target
alias: volsync-target-synapse alias: volsync-target-synapse

View File

@@ -14,11 +14,17 @@ spec:
data: data:
- secretKey: oidc.yaml - secretKey: oidc.yaml
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/matrix-synapse/config key: /cl01tl/matrix-synapse/config
metadataPolicy: None
property: oidc.yaml property: oidc.yaml
- secretKey: config.yaml - secretKey: config.yaml
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/matrix-synapse/config key: /cl01tl/matrix-synapse/config
metadataPolicy: None
property: config.yaml property: config.yaml
--- ---
@@ -38,7 +44,10 @@ spec:
data: data:
- secretKey: signing.key - secretKey: signing.key
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/matrix-synapse/config key: /cl01tl/matrix-synapse/config
metadataPolicy: None
property: signing-key property: signing-key
--- ---
@@ -58,19 +67,31 @@ spec:
data: data:
- secretKey: config.yml - secretKey: config.yml
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/matrix-synapse/hookshot key: /cl01tl/matrix-synapse/hookshot
metadataPolicy: None
property: config property: config
- secretKey: registration.yml - secretKey: registration.yml
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/matrix-synapse/hookshot key: /cl01tl/matrix-synapse/hookshot
metadataPolicy: None
property: registration property: registration
- secretKey: hookshot-registration.yaml - secretKey: hookshot-registration.yaml
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/matrix-synapse/hookshot key: /cl01tl/matrix-synapse/hookshot
metadataPolicy: None
property: registration property: registration
- secretKey: passkey.pem - secretKey: passkey.pem
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/matrix-synapse/hookshot key: /cl01tl/matrix-synapse/hookshot
metadataPolicy: None
property: passkey property: passkey
--- ---
@@ -89,11 +110,17 @@ spec:
data: data:
- secretKey: config.yaml - secretKey: config.yaml
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/matrix-synapse/mautrix-discord key: /cl01tl/matrix-synapse/mautrix-discord
metadataPolicy: None
property: config property: config
- secretKey: mautrix-discord-registration.yaml - secretKey: mautrix-discord-registration.yaml
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/matrix-synapse/mautrix-discord key: /cl01tl/matrix-synapse/mautrix-discord
metadataPolicy: None
property: registration property: registration
--- ---
@@ -113,11 +140,17 @@ spec:
data: data:
- secretKey: config.yaml - secretKey: config.yaml
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/matrix-synapse/mautrix-whatsapp key: /cl01tl/matrix-synapse/mautrix-whatsapp
metadataPolicy: None
property: config property: config
- secretKey: mautrix-whatsapp-registration.yaml - secretKey: mautrix-whatsapp-registration.yaml
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/matrix-synapse/mautrix-whatsapp key: /cl01tl/matrix-synapse/mautrix-whatsapp
metadataPolicy: None
property: registration property: registration
--- ---
@@ -137,7 +170,10 @@ spec:
data: data:
- secretKey: double-puppet-registration.yaml - secretKey: double-puppet-registration.yaml
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/matrix-synapse/double-puppet key: /cl01tl/matrix-synapse/double-puppet
metadataPolicy: None
property: registration property: registration
--- ---
@@ -157,9 +193,15 @@ spec:
data: data:
- secretKey: default - secretKey: default
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/matrix-synapse/redis key: /cl01tl/matrix-synapse/redis
metadataPolicy: None
property: password property: password
- secretKey: password - secretKey: password
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/matrix-synapse/redis key: /cl01tl/matrix-synapse/redis
metadataPolicy: None
property: password property: password

View File

@@ -1,7 +1,4 @@
matrix-synapse: matrix-synapse:
image:
repository: ghcr.io/element-hq/synapse
tag: v1.150.0@sha256:cba0969087ca70a3ec72ebcd1491a6c8391a7da2c0b92738231dd9c7ad55df4d
serverName: alexlebens.dev serverName: alexlebens.dev
publicServerName: matrix.alexlebens.dev publicServerName: matrix.alexlebens.dev
argoCD: true argoCD: true
@@ -80,7 +77,7 @@ matrix-synapse:
resources: resources:
requests: requests:
cpu: 10m cpu: 10m
memory: 130Mi memory: 128Mi
workers: workers:
default: default:
replicaCount: 0 replicaCount: 0
@@ -103,9 +100,6 @@ matrix-synapse:
client: client:
m.homeserver: m.homeserver:
base_url: https://matrix.alexlebens.dev base_url: https://matrix.alexlebens.dev
image:
repository: ghcr.io/rtsp/docker-lighttpd
tag: 1.4.76@sha256:b4b58d217a35dbd6cade82927677de404a46fb3d2b1d5fcb42042b6a6f17b2fb
postgresql: postgresql:
enabled: false enabled: false
externalPostgresql: externalPostgresql:
@@ -131,9 +125,6 @@ matrix-synapse:
enabled: true enabled: true
uid: 666 uid: 666
gid: 666 gid: 666
image:
repository: alpine
tag: 3.23.3@sha256:25109184c71bdad752c8312a8623239686a9a2071e8825f20acb8f2198c3f659
ingress: ingress:
enabled: false enabled: false
gateway: gateway:
@@ -147,15 +138,17 @@ matrix-hookshot:
type: deployment type: deployment
replicas: 1 replicas: 1
strategy: Recreate strategy: Recreate
revisionHistoryLimit: 3
containers: containers:
main: main:
image: image:
repository: halfshot/matrix-hookshot repository: halfshot/matrix-hookshot
tag: 7.3.2@sha256:44283e5131a1a5818bbbf6d9d1e07dccdc29ac5bb6002fcf159af6ac09cf8085 tag: 7.3.2
pullPolicy: IfNotPresent
resources: resources:
requests: requests:
cpu: 5m cpu: 10m
memory: 90Mi memory: 128Mi
service: service:
main: main:
controller: main controller: main
@@ -163,15 +156,19 @@ matrix-hookshot:
webhook: webhook:
port: 9000 port: 9000
targetPort: 9000 targetPort: 9000
protocol: HTTP
metrics: metrics:
port: 9001 port: 9001
targetPort: 9001 targetPort: 9001
protocol: HTTP
widgets: widgets:
port: 9002 port: 9002
targetPort: 9002 targetPort: 9002
protocol: HTTP
appservice: appservice:
port: 9993 port: 9993
targetPort: 9993 targetPort: 9993
protocol: HTTP
serviceMonitor: serviceMonitor:
main: main:
selector: selector:
@@ -223,6 +220,7 @@ matrix-hookshot:
storageClass: ceph-block storageClass: ceph-block
accessMode: ReadWriteOnce accessMode: ReadWriteOnce
size: 500Mi size: 500Mi
retain: true
advancedMounts: advancedMounts:
main: main:
main: main:
@@ -237,11 +235,17 @@ mautrix-discord:
type: statefulset type: statefulset
replicas: 1 replicas: 1
strategy: RollingUpdate strategy: RollingUpdate
revisionHistoryLimit: 3
# initContainers: # initContainers:
# init-copy-config: # init-copy-config:
# image: # image:
# repository: busybox # repository: busybox
# tag: 1.37.0 # tag: 1.37.0
# pullPolicy: IfNotPresent
# resources:
# requests:
# cpu: 10m
# memory: 128Mi
# command: # command:
# - /bin/sh # - /bin/sh
# - -ec # - -ec
@@ -256,11 +260,12 @@ mautrix-discord:
main: main:
image: image:
repository: dock.mau.dev/mautrix/discord repository: dock.mau.dev/mautrix/discord
tag: v0.7.6@sha256:e4946b0df6a2786c88ed490e0d2692e352f1b79b9ff0e821a33764bd8bd1fffd tag: v0.7.6
pullPolicy: IfNotPresent
resources: resources:
requests: requests:
cpu: 1m cpu: 10m
memory: 40Mi memory: 128Mi
service: service:
main: main:
controller: main controller: main
@@ -268,6 +273,7 @@ mautrix-discord:
http: http:
port: 29334 port: 29334
targetPort: 29334 targetPort: 29334
protocol: HTTP
persistence: persistence:
config: config:
enabled: true enabled: true
@@ -296,6 +302,7 @@ mautrix-discord:
storageClass: ceph-block storageClass: ceph-block
accessMode: ReadWriteOnce accessMode: ReadWriteOnce
size: 500Mi size: 500Mi
retain: true
advancedMounts: advancedMounts:
main: main:
init-copy-config: init-copy-config:
@@ -311,13 +318,19 @@ mautrix-whatsapp:
controllers: controllers:
main: main:
type: statefulset type: statefulset
replicas: 1 replicas: 0
strategy: RollingUpdate strategy: RollingUpdate
revisionHistoryLimit: 3
# initContainers: # initContainers:
# init-copy-config: # init-copy-config:
# image: # image:
# repository: busybox # repository: busybox
# tag: 1.37.0 # tag: 1.37.0
# pullPolicy: IfNotPresent
# resources:
# requests:
# cpu: 10m
# memory: 128Mi
# command: # command:
# - /bin/sh # - /bin/sh
# - -ec # - -ec
@@ -332,11 +345,12 @@ mautrix-whatsapp:
main: main:
image: image:
repository: dock.mau.dev/mautrix/whatsapp repository: dock.mau.dev/mautrix/whatsapp
tag: v0.2603.0@sha256:b49009312361d9ea0d7090716fd09f2323f477b32bd119648c6ca2d558a3e236 tag: v0.2602.0
pullPolicy: IfNotPresent
resources: resources:
requests: requests:
cpu: 1m cpu: 10m
memory: 40Mi memory: 64Mi
service: service:
main: main:
controller: main controller: main
@@ -344,6 +358,7 @@ mautrix-whatsapp:
http: http:
port: 29318 port: 29318
targetPort: 29318 targetPort: 29318
protocol: HTTP
persistence: persistence:
config: config:
enabled: true enabled: true
@@ -372,6 +387,7 @@ mautrix-whatsapp:
storageClass: ceph-block storageClass: ceph-block
accessMode: ReadWriteOnce accessMode: ReadWriteOnce
size: 500Mi size: 500Mi
retain: true
advancedMounts: advancedMounts:
main: main:
init-copy-config: init-copy-config:
@@ -386,6 +402,10 @@ cloudflared-hookshot:
name: hookshot name: hookshot
postgres-18-cluster: postgres-18-cluster:
mode: recovery mode: recovery
cluster:
resources:
requests:
cpu: 200m
recovery: recovery:
method: objectStore method: objectStore
objectStore: objectStore:
@@ -397,12 +417,35 @@ postgres-18-cluster:
destinationBucket: postgres-backups destinationBucket: postgres-backups
externalSecretCredentialPath: /garage/home-infra/postgres-backups externalSecretCredentialPath: /garage/home-infra/postgres-backups
isWALArchiver: true isWALArchiver: true
# - name: garage-remote
# index: 1
# destinationBucket: postgres-backups
# externalSecretCredentialPath: /garage/home-infra/postgres-backups
# retentionPolicy: "90d"
# data:
# compression: bzip2
# - name: external
# index: 1
# endpointURL: https://nyc3.digitaloceanspaces.com
# destinationBucket: postgres-backups-ce540ddf106d186bbddca68a
# externalSecretCredentialPath: /garage/home-infra/postgres-backups
# isWALArchiver: false
scheduledBackups: scheduledBackups:
- name: live-backup - name: live-backup
suspend: false suspend: false
immediate: true immediate: true
schedule: "0 0 15 * * *" schedule: "0 0 15 * * *"
backupName: garage-local backupName: garage-local
# - name: weekly-backup
# suspend: true
# immediate: true
# schedule: "0 0 4 * * SAT"
# backupName: garage-remote
# - name: daily-backup
# suspend: true
# immediate: true
# schedule: "0 0 0 * * *"
# backupName: external
databases: databases:
- name: mautrix-discord - name: mautrix-discord
ensure: present ensure: present
@@ -418,8 +461,6 @@ valkey-matrix-synapse:
aclUsers: aclUsers:
default: default:
permissions: "~* &* +@all" permissions: "~* &* +@all"
# No option to configure metrics when auth is enabled
# https://github.com/valkey-io/valkey-helm/issues/135
metrics: metrics:
enabled: false enabled: false
valkey-hookshot: valkey-hookshot:

View File

@@ -5,7 +5,7 @@ description: MediaLyze
keywords: keywords:
- medialyze - medialyze
- jellyfin - jellyfin
home: https://docs.alexlebens.dev/applications/medialyze/ home: https://wiki.alexlebens.dev/
sources: sources:
- https://github.com/frederikemmer/MediaLyze - https://github.com/frederikemmer/MediaLyze
- https://github.com/frederikemmer/MediaLyze/pkgs/container/medialyze - https://github.com/frederikemmer/MediaLyze/pkgs/container/medialyze

View File

@@ -4,15 +4,13 @@ medialyze:
type: deployment type: deployment
replicas: 1 replicas: 1
strategy: Recreate strategy: Recreate
pod: revisionHistoryLimit: 3
securityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
containers: containers:
main: main:
image: image:
repository: ghcr.io/frederikemmer/medialyze repository: ghcr.io/frederikemmer/medialyze
tag: 0.4.1@sha256:d4f2e04d3759f308bea605c9b7242ab6da98813adc0b276dc3cbe9c283071eb8 tag: 0.4.1
pullPolicy: IfNotPresent
env: env:
- name: HOST_PORT - name: HOST_PORT
value: 8080 value: 8080
@@ -24,8 +22,8 @@ medialyze:
value: /media value: /media
resources: resources:
requests: requests:
cpu: 5m cpu: 10m
memory: 400Mi memory: 128Mi
service: service:
main: main:
controller: main controller: main
@@ -33,6 +31,7 @@ medialyze:
http: http:
port: 80 port: 80
targetPort: 8080 targetPort: 8080
protocol: HTTP
route: route:
main: main:
kind: HTTPRoute kind: HTTPRoute
@@ -45,8 +44,11 @@ medialyze:
- medialyze.alexlebens.net - medialyze.alexlebens.net
rules: rules:
- backendRefs: - backendRefs:
- name: medialyze - group: ''
kind: Service
name: medialyze
port: 80 port: 80
weight: 100
matches: matches:
- path: - path:
type: PathPrefix type: PathPrefix
@@ -57,6 +59,7 @@ medialyze:
storageClass: ceph-block storageClass: ceph-block
accessMode: ReadWriteOnce accessMode: ReadWriteOnce
size: 1Gi size: 1Gi
retain: true
advancedMounts: advancedMounts:
main: main:
main: main:

View File

@@ -5,10 +5,10 @@ description: Metrics Server
keywords: keywords:
- metrics-server - metrics-server
- metrics - metrics
home: https://docs.alexlebens.dev/applications/metrics-server/ - kubernetes
home: https://wiki.alexlebens.dev/s/feb71856-e3d9-4655-9808-6c4bfb330872
sources: sources:
- https://github.com/kubernetes-sigs/metrics-server - https://github.com/kubernetes-sigs/metrics-server
- https://explore.ggcr.dev/?repo=registry.k8s.io%2Fmetrics-server%2Fmetrics-server
- https://github.com/kubernetes-sigs/metrics-server/tree/master/charts/metrics-server - https://github.com/kubernetes-sigs/metrics-server/tree/master/charts/metrics-server
maintainers: maintainers:
- name: alexlebens - name: alexlebens

View File

@@ -1,19 +1,12 @@
metrics-server: metrics-server:
image: replicas: 3
repository: registry.k8s.io/metrics-server/metrics-server metrics:
tag: v0.8.1@sha256:b2d2efaf5ac3b366ed0f839d2412a2c4279d4fc2a2a733f12c52133faed36c41 enabled: true
replicas: 2 serviceMonitor:
enabled: true
defaultArgs: defaultArgs:
- --cert-dir=/tmp - --cert-dir=/tmp
- --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname - --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname
- --kubelet-use-node-status-port - --kubelet-use-node-status-port
- --metric-resolution=15s - --metric-resolution=15s
- --kubelet-insecure-tls - --kubelet-insecure-tls
metrics:
enabled: true
serviceMonitor:
enabled: true
resources:
requests:
cpu: 10m
memory: 60Mi

View File

@@ -0,0 +1,6 @@
dependencies:
- name: app-template
repository: https://bjw-s-labs.github.io/helm-charts/
version: 4.6.2
digest: sha256:faa35ccfc18b2d47fad558e168bd3c68e64790fe2b1356881452ae4f5cd8b443
generated: "2026-03-10T16:01:13.738843-05:00"

View File

@@ -0,0 +1,22 @@
apiVersion: v2
name: movie-roulette
version: 1.0.0
description: Movie Roulette
keywords:
- movie-roulette
- jellyfin
home: https://wiki.alexlebens.dev/
sources:
- https://github.com/sahara101/Movie-Roulette
- https://github.com/sahara101/Movie-Roulette/pkgs/container/movie-roulette
- https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
maintainers:
- name: alexlebens
dependencies:
- name: app-template
alias: movie-roulette
repository: https://bjw-s-labs.github.io/helm-charts/
version: 4.6.2
icon: https://raw.githubusercontent.com/sahara101/Movie-Roulette/refs/heads/main/static/icons/icon.png
# renovate: datasource=github-releases depName=sahara101/Movie-Roulette
appVersion: v5.4.1

View File

@@ -0,0 +1,42 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: movie-roulette-config-secret
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: movie-roulette-config-secret
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
data:
- secretKey: secret-key
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/movie-roulette/key
metadataPolicy: None
property: secret-key
- secretKey: jellyfin-key
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/jellyfin/movie-roulette
metadataPolicy: None
property: jellyfin-key
- secretKey: jellyfin-user
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/jellyfin/movie-roulette
metadataPolicy: None
property: user
- secretKey: seerr-key
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/seerr/key
metadataPolicy: None
property: key

View File

@@ -0,0 +1,128 @@
movie-roulette:
controllers:
main:
type: deployment
replicas: 1
strategy: Recreate
revisionHistoryLimit: 3
containers:
main:
image:
repository: ghcr.io/sahara101/movie-roulette
tag: v5.4.2
pullPolicy: IfNotPresent
env:
- name: FLASK_SECRET_KEY
valueFrom:
secretKeyRef:
name: movie-roulette-config-secret
key: secret-key
- name: CORS_ALLOWED_ORIGINS
value: movie-roulette.alexlebens.net
- name: DISABLE_SETTINGS
value: "TRUE"
- name: AUTH_ENABLED
value: "TRUE"
- name: AUTH_SESSION_LIFETIME
value: "86400"
- name: JELLYFIN_URL
value: http://jellyfin.alexlebens.net
- name: JELLYFIN_API_KEY
valueFrom:
secretKeyRef:
name: movie-roulette-config-secret
key: jellyfin-key
- name: JELLYFIN_USER_ID
valueFrom:
secretKeyRef:
name: movie-roulette-config-secret
key: jellyfin-user
- name: LOGIN_BACKDROP_ENABLED
value: "TRUE"
- name: HOMEPAGE_MODE
value: "FALSE"
- name: USE_LINKS
value: "TRUE"
- name: USE_FILTER
value: "TRUE"
- name: USE_WATCH_BUTTON
value: "TRUE"
- name: USE_NEXT_BUTTON
value: "TRUE"
- name: USE_GRID_VIEW
value: "true"
- name: ENABLE_MOBILE_TRUNCATION
value: "TRUE"
- name: SHOW_NOW_WATCHING_CARD
value: "FALSE"
- name: USE_HEROUI_THEME
value: "FALSE"
- name: ENABLE_MOVIE_LOGOS
value: "TRUE"
- name: LOAD_MOVIE_ON_START
value: "FALSE"
- name: SEERR_URL
value: http://seerr.alexlebens.net
- name: SEERR_API_KEY
valueFrom:
secretKeyRef:
name: movie-roulette-config-secret
key: seerr-key
- name: REQUEST_SERVICE_DEFAULT
value: "seerr"
resources:
requests:
cpu: 10m
memory: 128Mi
service:
main:
controller: main
ports:
http:
port: 80
targetPort: 4000
protocol: HTTP
route:
main:
kind: HTTPRoute
parentRefs:
- group: gateway.networking.k8s.io
kind: Gateway
name: traefik-gateway
namespace: traefik
hostnames:
- movie-roulette.alexlebens.net
rules:
- backendRefs:
- group: ''
kind: Service
name: movie-roulette
port: 80
weight: 100
matches:
- path:
type: PathPrefix
value: /
persistence:
data:
forceRename: movie-roulette-data
storageClass: ceph-block
accessMode: ReadWriteOnce
size: 1Gi
retain: true
advancedMounts:
main:
main:
- path: /config
readOnly: false
volsync-target-data:
pvcTarget: movie-roulette-data
local:
enabled: true
schedule: 44 8 * * *
remote:
enabled: true
schedule: 44 9 * * *
external:
enabled: true
schedule: 44 10 * * *

View File

@@ -2,8 +2,5 @@ dependencies:
- name: app-template - name: app-template
repository: https://bjw-s-labs.github.io/helm-charts/ repository: https://bjw-s-labs.github.io/helm-charts/
version: 4.6.2 version: 4.6.2
- name: volsync-target digest: sha256:ed8d23326d2567f51cd8391aab6afd5f53c57df3c9f2bfc352cd22f9759d596e
repository: oci://harbor.alexlebens.net/helm-charts generated: "2026-02-20T18:33:14.633756-06:00"
version: 0.8.0
digest: sha256:abc3e3772be3542b02abd3453d3f23fd12bb11166202eaedd01b6fb67f040a3e
generated: "2026-04-04T17:57:13.966422-05:00"

View File

@@ -5,12 +5,11 @@ description: Music Grabber
keywords: keywords:
- music-grabber - music-grabber
- music - music
home: https://docs.alexlebens.dev/applications/music-grabber/ home: https://wiki.alexlebens.dev/s/
sources: sources:
- https://gitlab.com/g33kphr33k/musicgrabber - https://gitlab.com/g33kphr33k/musicgrabber
- https://hub.docker.com/r/g33kphr33k/musicgrabber - https://hub.docker.com/r/g33kphr33k/musicgrabber/tags
- https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
- https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/volsync-target
maintainers: maintainers:
- name: alexlebens - name: alexlebens
dependencies: dependencies:
@@ -18,10 +17,5 @@ dependencies:
alias: music-grabber alias: music-grabber
repository: https://bjw-s-labs.github.io/helm-charts/ repository: https://bjw-s-labs.github.io/helm-charts/
version: 4.6.2 version: 4.6.2
- name: volsync-target
alias: volsync-target-data
version: 0.8.0
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/music-grabber.png
# renovate: datasource=docker depName=g33kphr33k/musicgrabber # renovate: datasource=docker depName=g33kphr33k/musicgrabber
appVersion: 2.5.5 appVersion: 2.5.4

View File

@@ -14,19 +14,31 @@ spec:
data: data:
- secretKey: navidrome-user - secretKey: navidrome-user
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/navidrome/admin key: /cl01tl/navidrome/admin
metadataPolicy: None
property: user property: user
- secretKey: navidrome-password - secretKey: navidrome-password
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/navidrome/admin key: /cl01tl/navidrome/admin
metadataPolicy: None
property: password property: password
- secretKey: slskd-user - secretKey: slskd-user
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/slskd/auth key: /cl01tl/slskd/auth
metadataPolicy: None
property: user property: user
- secretKey: slskd-password - secretKey: slskd-password
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/slskd/auth key: /cl01tl/slskd/auth
metadataPolicy: None
property: password property: password
--- ---
@@ -46,17 +58,29 @@ spec:
data: data:
- secretKey: private-key - secretKey: private-key
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /airvpn/conf/cl01tl key: /airvpn/conf/cl01tl
metadataPolicy: None
property: private-key property: private-key
- secretKey: preshared-key - secretKey: preshared-key
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /airvpn/conf/cl01tl key: /airvpn/conf/cl01tl
metadataPolicy: None
property: preshared-key property: preshared-key
- secretKey: addresses - secretKey: addresses
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /airvpn/conf/cl01tl key: /airvpn/conf/cl01tl
metadataPolicy: None
property: addresses property: addresses
- secretKey: input-ports - secretKey: input-ports
remoteRef: remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /airvpn/conf/cl01tl key: /airvpn/conf/cl01tl
metadataPolicy: None
property: input-ports property: input-ports

View File

@@ -0,0 +1,11 @@
apiVersion: v1
kind: Namespace
metadata:
name: music-grabber
labels:
app.kubernetes.io/name: music-grabber
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
pod-security.kubernetes.io/audit: privileged
pod-security.kubernetes.io/enforce: privileged
pod-security.kubernetes.io/warn: privileged

View File

@@ -4,15 +4,13 @@ music-grabber:
type: deployment type: deployment
replicas: 1 replicas: 1
strategy: Recreate strategy: Recreate
pod: revisionHistoryLimit: 3
securityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
containers: containers:
main: main:
image: image:
repository: g33kphr33k/musicgrabber repository: g33kphr33k/musicgrabber
tag: 2.5.5@sha256:756ce91653b2f5f17f8f47e5c91f07df5af82162608acdf507e6209a16725373 tag: 2.5.4
pullPolicy: IfNotPresent
env: env:
- name: MUSIC_DIR - name: MUSIC_DIR
value: /mnt/store/Music Grabber/ value: /mnt/store/Music Grabber/
@@ -51,7 +49,73 @@ music-grabber:
cpu: 100m cpu: 100m
requests: requests:
cpu: 10m cpu: 10m
memory: 50Mi memory: 512Mi
# gluetun:
# image:
# repository: ghcr.io/qdm12/gluetun
# tag: v3.41.1@sha256:1a5bf4b4820a879cdf8d93d7ef0d2d963af56670c9ebff8981860b6804ebc8ab
# pullPolicy: IfNotPresent
# lifecycle:
# postStart:
# exec:
# command: ["/bin/sh", "-c", "(ip rule del table 51820; ip -6 rule del table 51820) || true"]
# env:
# - name: VPN_SERVICE_PROVIDER
# value: airvpn
# - name: VPN_TYPE
# value: wireguard
# - name: WIREGUARD_PRIVATE_KEY
# valueFrom:
# secretKeyRef:
# name: music-grabber-wireguard-conf
# key: private-key
# - name: WIREGUARD_PRESHARED_KEY
# valueFrom:
# secretKeyRef:
# name: music-grabber-wireguard-conf
# key: preshared-key
# - name: WIREGUARD_ADDRESSES
# valueFrom:
# secretKeyRef:
# name: music-grabber-wireguard-conf
# key: addresses
# - name: FIREWALL_OUTBOUND_SUBNETS
# value: 10.0.0.0/8
# - name: FIREWALL_INPUT_PORTS
# value: 8080
# - name: DNS_UPSTREAM_RESOLVER_TYPE
# value: dot
# - name: HTTPPROXY
# value: "off"
# - name: SHADOWSOCKS
# value: "off"
# securityContext:
# privileged: True
# capabilities:
# add:
# - NET_ADMIN
# - SYS_MODULE
# probes:
# liveness:
# enabled: true
# custom: true
# spec:
# exec:
# command:
# - /gluetun-entrypoint
# - healthcheck
# failureThreshold: 5
# initialDelaySeconds: 30
# periodSeconds: 30
# successThreshold: 1
# timeoutSeconds: 15
# resources:
# limits:
# devic.es/tun: "1"
# requests:
# devic.es/tun: "1"
# cpu: 10m
# memory: 128Mi
service: service:
main: main:
controller: main controller: main
@@ -59,6 +123,7 @@ music-grabber:
http: http:
port: 80 port: 80
targetPort: 8080 targetPort: 8080
protocol: HTTP
route: route:
main: main:
kind: HTTPRoute kind: HTTPRoute
@@ -71,18 +136,21 @@ music-grabber:
- music-grabber.alexlebens.net - music-grabber.alexlebens.net
rules: rules:
- backendRefs: - backendRefs:
- name: music-grabber - group: ''
kind: Service
name: music-grabber
port: 80 port: 80
weight: 100
matches: matches:
- path: - path:
type: PathPrefix type: PathPrefix
value: / value: /
persistence: persistence:
data: cache:
forceRename: music-grabber-data
storageClass: ceph-block storageClass: ceph-block
accessMode: ReadWriteOnce accessMode: ReadWriteOnce
size: 1Gi size: 1Gi
retain: true
advancedMounts: advancedMounts:
main: main:
main: main:
@@ -95,14 +163,3 @@ music-grabber:
main: main:
- path: /mnt/store/ - path: /mnt/store/
readOnly: false readOnly: false
volsync-target-data:
pvcTarget: music-grabber-data
local:
enabled: true
schedule: 46 8 * * *
remote:
enabled: true
schedule: 46 9 * * *
external:
enabled: true
schedule: 46 10 * * *

View File

@@ -6,14 +6,11 @@ keywords:
- navidrome - navidrome
- feishin - feishin
- music - music
home: https://docs.alexlebens.dev/applications/navidrome/ home: https://wiki.alexlebens.dev/s/
sources: sources:
- https://github.com/navidrome/navidrome - https://github.com/navidrome/navidrome
- https://github.com/jeffvli/feishin - https://github.com/jeffvli/feishin
- https://github.com/navidrome/navidrome/pkgs/container/navidrome
- https://github.com/jeffvli/feishin/pkgs/container/feishin
- https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
- https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/volsync-target
maintainers: maintainers:
- name: alexlebens - name: alexlebens
dependencies: dependencies:

View File

@@ -4,15 +4,13 @@ navidrome:
type: deployment type: deployment
replicas: 1 replicas: 1
strategy: Recreate strategy: Recreate
pod: revisionHistoryLimit: 3
securityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
containers: containers:
main: main:
image: image:
repository: ghcr.io/navidrome/navidrome repository: deluan/navidrome
tag: 0.61.1@sha256:1e1660054a856cc09f227d6929252e45a519fdb16004b464dd637f7294ca3ec1 tag: 0.61.0@sha256:b14a6acb5cd5ee73f3a13d63d8d68ede82dedb796aa522fbada94769d990cf0b
pullPolicy: IfNotPresent
env: env:
- name: ND_MUSICFOLDER - name: ND_MUSICFOLDER
value: /music value: /music
@@ -34,16 +32,18 @@ navidrome:
requests: requests:
gpu.intel.com/i915: 1 gpu.intel.com/i915: 1
cpu: 10m cpu: 10m
memory: 50Mi memory: 128Mi
feishin: feishin:
type: deployment type: deployment
replicas: 1 replicas: 1
strategy: Recreate strategy: Recreate
revisionHistoryLimit: 3
containers: containers:
main: main:
image: image:
repository: ghcr.io/jeffvli/feishin repository: ghcr.io/jeffvli/feishin
tag: 1.9.0@sha256:5e6959afd27dabadd8f68fed8b0485d851593c61ca558194295bf8950262cc07 tag: 1.0.1-beta.1@sha256:61239641f23a33f99c2858419b14afb66683f3cd82010363fba92be3993fd894
pullPolicy: IfNotPresent
env: env:
- name: SERVER_NAME - name: SERVER_NAME
value: talos value: talos
@@ -53,10 +53,6 @@ navidrome:
value: navidrome value: navidrome
- name: SERVER_URL - name: SERVER_URL
value: https://navidrome.alexlebens.net value: https://navidrome.alexlebens.net
resources:
requests:
cpu: 1m
memory: 20Mi
service: service:
main: main:
controller: main controller: main
@@ -64,12 +60,14 @@ navidrome:
http: http:
port: 80 port: 80
targetPort: 4533 targetPort: 4533
protocol: HTTP
feishin: feishin:
controller: feishin controller: feishin
ports: ports:
http: http:
port: 80 port: 80
targetPort: 9180 targetPort: 9180
protocol: HTTP
serviceMonitor: serviceMonitor:
main: main:
selector: selector:
@@ -96,8 +94,11 @@ navidrome:
- navidrome.alexlebens.net - navidrome.alexlebens.net
rules: rules:
- backendRefs: - backendRefs:
- name: navidrome-main - group: ''
kind: Service
name: navidrome-main
port: 80 port: 80
weight: 100
matches: matches:
- path: - path:
type: PathPrefix type: PathPrefix
@@ -113,8 +114,11 @@ navidrome:
- feishin.alexlebens.net - feishin.alexlebens.net
rules: rules:
- backendRefs: - backendRefs:
- name: navidrome-feishin - group: ''
kind: Service
name: navidrome-feishin
port: 80 port: 80
weight: 100
matches: matches:
- path: - path:
type: PathPrefix type: PathPrefix

View File

@@ -5,10 +5,10 @@ description: Node Feature Discovery
keywords: keywords:
- node-feature-discovery - node-feature-discovery
- labels - labels
home: https://docs.alexlebens.dev/applications/node-feature-discovery/ - kubernetes
home: https://wiki.alexlebens.dev/s/b6fb2588-8212-4dca-b4c6-3021020b2ae1
sources: sources:
- https://github.com/kubernetes-sigs/node-feature-discovery - https://github.com/kubernetes-sigs/node-feature-discovery
- https://console.cloud.google.com/artifacts/docker/k8s-staging-nfd/us/gcr.io/node-feature-discovery
- https://github.com/kubernetes-sigs/node-feature-discovery/tree/master/deployment/helm/node-feature-discovery - https://github.com/kubernetes-sigs/node-feature-discovery/tree/master/deployment/helm/node-feature-discovery
maintainers: maintainers:
- name: alexlebens - name: alexlebens

View File

@@ -1,18 +1,12 @@
node-feature-discovery: node-feature-discovery:
image:
repository: gcr.io/k8s-staging-nfd/node-feature-discovery
tag: v0.18.3@sha256:f9ef2ebee55141a1758d3c0a87bb701f5db2adf6856f7218b11bc2bac7b63862
pullPolicy: IfNotPresent
featureGates: featureGates:
NodeFeatureGroupAPI: true NodeFeatureGroupAPI: true
master: master:
replicaCount: 1 replicaCount: 2
resources: resources:
limits:
memory: null
requests: requests:
cpu: 10m cpu: 20m
memory: 20Mi memory: 60Mi
tolerations: tolerations:
- key: node-role.kubernetes.io/control-plane - key: node-role.kubernetes.io/control-plane
operator: Exists operator: Exists
@@ -66,23 +60,17 @@ node-feature-discovery:
class: ["0300"] class: ["0300"]
vendor: ["8086"] vendor: ["8086"]
resources: resources:
limits:
memory: null
requests: requests:
cpu: 1m cpu: 20m
memory: 20Mi memory: 60Mi
tolerations: tolerations:
- key: node-role.kubernetes.io/control-plane - key: node-role.kubernetes.io/control-plane
operator: Exists operator: Exists
effect: NoSchedule effect: NoSchedule
topologyUpdater:
enable: false
gc: gc:
resources: resources:
limits:
memory: null
requests: requests:
cpu: 1m cpu: 20m
memory: 20Mi memory: 60Mi
prometheus: prometheus:
enable: true enable: true

View File

@@ -2,8 +2,5 @@ dependencies:
- name: app-template - name: app-template
repository: https://bjw-s-labs.github.io/helm-charts/ repository: https://bjw-s-labs.github.io/helm-charts/
version: 4.6.2 version: 4.6.2
- name: postgres-cluster digest: sha256:30d747f8b08ed690202fda39ab6e19bd74ebc45548847a087ddbf175abe1438c
repository: oci://harbor.alexlebens.net/helm-charts generated: "2026-01-16T18:50:22.233502056Z"
version: 7.11.2
digest: sha256:a689da8f05654c3e83e3f1459670cc201c28b9b4444c6891dca7ac4b70c5a4be
generated: "2026-04-04T19:19:40.397469-05:00"

Some files were not shown because too many files have changed in this diff Show More