alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 2 Actions 4 Activity
Files
f4bc65a3b5d505fc1d25d39039a0022535d32c46
infrastructure/clusters/cl01tl/services/blocky/values.yaml
Renovate Bot b78769e062
All checks were successful
lint-test-docker / docker-lint (push) Successful in 11s
Details
lint-test-helm / helm-lint (push) Successful in 19s
Details
renovate / renovate (push) Successful in 1m44s
Details
Update ghcr.io/0xerr0r/blocky Docker tag to v0.28.2 (#2100) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/0xerr0r/blocky](https://github.com/0xERR0R/blocky) | minor | `v0.27.0` -> `v0.28.2` |

---

### Release Notes

<details>
<summary>0xERR0R/blocky (ghcr.io/0xerr0r/blocky)</summary>

### [`v0.28.2`](https://github.com/0xERR0R/blocky/releases/tag/v0.28.2)

[Compare Source](https://github.com/0xERR0R/blocky/compare/v0.28.1...v0.28.2)

##### Changelog

##### Features

- [`26ac90c`](26ac90c0e2): feat: add MIPS architecture builds ([#&#8203;1929](https://github.com/0xERR0R/blocky/issues/1929)) ([@&#8203;0xERR0R](https://github.com/0xERR0R))

##### Bug fixes

- [`605a361`](605a36199d): fix: handle DNSSEC validation for large RSA exponents and improve DNSKEY matching ([#&#8203;1935](https://github.com/0xERR0R/blocky/issues/1935)) ([@&#8203;0xERR0R](https://github.com/0xERR0R))

##### Misc

- [`b776ae5`](b776ae57bc): refactor: remove duplicated code patterns in resolver and cmd packages ([#&#8203;1932](https://github.com/0xERR0R/blocky/issues/1932)) ([@&#8203;Copilot](https://github.com/Copilot))

### [`v0.28.1`](https://github.com/0xERR0R/blocky/releases/tag/v0.28.1)

[Compare Source](https://github.com/0xERR0R/blocky/compare/v0.28.0...v0.28.1)

##### Changelog

##### Bug fixes

- [`5657ce8`](5657ce8f0d): fix: resolve DNSSEC validation issue for CNAMEs in unsigned zones ([#&#8203;1930](https://github.com/0xERR0R/blocky/issues/1930)) ([@&#8203;0xERR0R](https://github.com/0xERR0R))

##### Build and dependencies

- [`f4b6b75`](f4b6b75457): build: Update regex for bug fixes in goreleaser config ([@&#8203;0xERR0R](https://github.com/0xERR0R))

##### Misc

- [`0a3c724`](0a3c72441f): refactor: remove unused code ([#&#8203;1928](https://github.com/0xERR0R/blocky/issues/1928)) ([@&#8203;0xERR0R](https://github.com/0xERR0R))

### [`v0.28.0`](https://github.com/0xERR0R/blocky/releases/tag/v0.28.0)

[Compare Source](https://github.com/0xERR0R/blocky/compare/v0.27.0...v0.28.0)

##### Changelog

##### Features

- [`77578da`](77578dafdf): feat: add DNSSEC validation ([#&#8203;1914](https://github.com/0xERR0R/blocky/issues/1914)) ([@&#8203;0xERR0R](https://github.com/0xERR0R))
- [`b29eab4`](b29eab48ac): feat: add SOA records to NXDOMAIN responses for RFC 2308 compliance ([#&#8203;1895](https://github.com/0xERR0R/blocky/issues/1895)) ([@&#8203;0xERR0R](https://github.com/0xERR0R))
- [`d0681ae`](d0681ae6d3): feat: enhance error messages with more context ([#&#8203;1894](https://github.com/0xERR0R/blocky/issues/1894)) ([@&#8203;0xERR0R](https://github.com/0xERR0R))
- [`ac8ca7d`](ac8ca7dc1f): feat: respect NO\_COLOR environment variable ([#&#8203;1911](https://github.com/0xERR0R/blocky/issues/1911)) ([@&#8203;aanderse](https://github.com/aanderse))
- [`629b4f0`](629b4f069e): feat: support DNS Stamp upstream format ([#&#8203;1922](https://github.com/0xERR0R/blocky/issues/1922)) ([@&#8203;0xERR0R](https://github.com/0xERR0R))

##### Bugfixes

- [`8aad53e`](8aad53ea47): fix: TCP response truncation ([#&#8203;1904](https://github.com/0xERR0R/blocky/issues/1904)) ([@&#8203;TimQuelch](https://github.com/TimQuelch))
- [`9d4a58c`](9d4a58c72d): fix: allow list group initialization with partial source failures ([#&#8203;1889](https://github.com/0xERR0R/blocky/issues/1889)) ([@&#8203;0xERR0R](https://github.com/0xERR0R))
- [`0993a17`](0993a170a8): fix: ensure HTTP response bodies are drained before closing for connection reuse ([#&#8203;1924](https://github.com/0xERR0R/blocky/issues/1924)) ([@&#8203;0xERR0R](https://github.com/0xERR0R))
- [`1a98cda`](1a98cda2c5): fix: ensure conditional upstreams initialize independently of default upstreams ([#&#8203;1890](https://github.com/0xERR0R/blocky/issues/1890)) ([@&#8203;0xERR0R](https://github.com/0xERR0R))
- [`0804760`](0804760319): fix: resolve panic when CNAME points to external domain ([#&#8203;1867](https://github.com/0xERR0R/blocky/issues/1867)) ([#&#8203;1884](https://github.com/0xERR0R/blocky/issues/1884)) ([@&#8203;0xERR0R](https://github.com/0xERR0R))

##### Build and dependencies

- [`0cd5be8`](0cd5be80d4): build(deps): bump actions/download-artifact from 5 to 6 ([#&#8203;1907](https://github.com/0xERR0R/blocky/issues/1907)) ([@&#8203;dependabot](https://github.com/dependabot)\[bot])
- [`5db30c4`](5db30c408d): build(deps): bump actions/upload-artifact from 4 to 5 ([#&#8203;1908](https://github.com/0xERR0R/blocky/issues/1908)) ([@&#8203;dependabot](https://github.com/dependabot)\[bot])
- [`fc7ebe3`](fc7ebe323a): build(deps): bump amannn/action-semantic-pull-request from 5 to 6 ([#&#8203;1897](https://github.com/0xERR0R/blocky/issues/1897)) ([@&#8203;dependabot](https://github.com/dependabot)\[bot])
- [`6a4d411`](6a4d4111c1): build(deps): bump github.com/avast/retry-go/v4 from 4.6.1 to 4.7.0 ([#&#8203;1888](https://github.com/0xERR0R/blocky/issues/1888)) ([@&#8203;dependabot](https://github.com/dependabot)\[bot])
- [`9e293c0`](9e293c0e82): build(deps): bump github.com/breml/rootcerts from 0.3.1 to 0.3.2 ([#&#8203;1886](https://github.com/0xERR0R/blocky/issues/1886)) ([@&#8203;dependabot](https://github.com/dependabot)\[bot])
- [`e81bf41`](e81bf416fa): build(deps): bump github.com/breml/rootcerts from 0.3.2 to 0.3.3 ([#&#8203;1912](https://github.com/0xERR0R/blocky/issues/1912)) ([@&#8203;dependabot](https://github.com/dependabot)\[bot])
- [`073c8bf`](073c8bfcd7): build(deps): bump github.com/docker/docker from 28.5.1+incompatible to 28.5.2+incompatible ([#&#8203;1915](https://github.com/0xERR0R/blocky/issues/1915)) ([@&#8203;dependabot](https://github.com/dependabot)\[bot])
- [`2dac748`](2dac748963): build(deps): bump github.com/onsi/ginkgo/v2 from 2.26.0 to 2.27.1 ([#&#8203;1906](https://github.com/0xERR0R/blocky/issues/1906)) ([@&#8203;dependabot](https://github.com/dependabot)\[bot])
- [`8f534e6`](8f534e6f54): build(deps): bump github.com/onsi/ginkgo/v2 from 2.27.1 to 2.27.2 ([#&#8203;1909](https://github.com/0xERR0R/blocky/issues/1909)) ([@&#8203;dependabot](https://github.com/dependabot)\[bot])
- [`7fa1c78`](7fa1c78316): build(deps): bump github.com/testcontainers/testcontainers-go from 0.39.0 to 0.40.0 ([#&#8203;1916](https://github.com/0xERR0R/blocky/issues/1916)) ([@&#8203;dependabot](https://github.com/dependabot)\[bot])
- [`5b147cc`](5b147cc12e): build(deps): bump github.com/testcontainers/testcontainers-go/modules/mariadb from 0.39.0 to 0.40.0 ([#&#8203;1918](https://github.com/0xERR0R/blocky/issues/1918)) ([@&#8203;dependabot](https://github.com/dependabot)\[bot])
- [`80aeaa9`](80aeaa9316): build(deps): bump github.com/testcontainers/testcontainers-go/modules/postgres from 0.39.0 to 0.40.0 ([#&#8203;1917](https://github.com/0xERR0R/blocky/issues/1917)) ([@&#8203;dependabot](https://github.com/dependabot)\[bot])
- [`1cdaf72`](1cdaf728ed): build(deps): bump github.com/testcontainers/testcontainers-go/modules/redis from 0.39.0 to 0.40.0 ([#&#8203;1919](https://github.com/0xERR0R/blocky/issues/1919)) ([@&#8203;dependabot](https://github.com/dependabot)\[bot])
- [`7663b7d`](7663b7d6c5): build(deps): bump golang.org/x/net from 0.46.0 to 0.47.0 ([#&#8203;1925](https://github.com/0xERR0R/blocky/issues/1925)) ([@&#8203;dependabot](https://github.com/dependabot)\[bot])
- [`8a212de`](8a212debcc): build(deps): bump gorm.io/gorm from 1.31.0 to 1.31.1 ([#&#8203;1913](https://github.com/0xERR0R/blocky/issues/1913)) ([@&#8203;dependabot](https://github.com/dependabot)\[bot])
- [`157f91f`](157f91f5ef): build(release): Add changelog groups for features and fixes ([@&#8203;0xERR0R](https://github.com/0xERR0R))
- [`d3e8b3b`](d3e8b3bb35): build: add pr title validation workflow ([#&#8203;1893](https://github.com/0xERR0R/blocky/issues/1893)) ([@&#8203;0xERR0R](https://github.com/0xERR0R))
- [`44074e4`](44074e457a): build: cache Go dependencies in Docker builds ([#&#8203;1899](https://github.com/0xERR0R/blocky/issues/1899)) ([@&#8203;0xERR0R](https://github.com/0xERR0R))
- [`21a65de`](21a65de090): build: enable dependabot automerge ([#&#8203;1891](https://github.com/0xERR0R/blocky/issues/1891)) ([@&#8203;0xERR0R](https://github.com/0xERR0R))
- [`8bf91c4`](8bf91c49fc): build: remove unused tools ([#&#8203;1900](https://github.com/0xERR0R/blocky/issues/1900)) ([@&#8203;0xERR0R](https://github.com/0xERR0R))
- [`4656429`](4656429c80): build: simplify build ([#&#8203;1892](https://github.com/0xERR0R/blocky/issues/1892)) ([@&#8203;0xERR0R](https://github.com/0xERR0R))
- [`ab77fd5`](ab77fd57cc): build: update tool dependencies ([#&#8203;1898](https://github.com/0xERR0R/blocky/issues/1898)) ([@&#8203;0xERR0R](https://github.com/0xERR0R))
- [`824ca3e`](824ca3eecd): build: use Docker for mkdocs-material documentation server ([@&#8203;0xERR0R](https://github.com/0xERR0R))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi41LjAiLCJ1cGRhdGVkSW5WZXIiOiI0Mi41LjAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->

Reviewed-on: #2100
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2025-11-24 17:37:08 +00:00

306 lines
13 KiB
YAML
Raw Blame History

blocky:
controllers:
main:
type: deployment
replicas: 3
strategy: RollingUpdate
revisionHistoryLimit: 3
containers:
main:
image:
repository: ghcr.io/0xerr0r/blocky
tag: v0.28.2@sha256:5f84a54e4ee950c4ab21db905b7497476ece2f4e1a376d23ab8c4855cabddcba
pullPolicy: IfNotPresent
env:
- name: TZ
value: US/Central
resources:
requests:
cpu: 10m
memory: 128Mi
configMaps:
config:
enabled: true
data:
config.yml: |
upstreams:
init:
strategy: fast
groups:
default:
- tcp-tls:1.1.1.1:853
- tcp-tls:1.0.0.1:853
strategy: parallel_best
timeout: 2s
connectIPVersion: v4
customDNS:
filterUnmappedTypes: false
zone: |
$ORIGIN alexlebens.net.
$TTL 86400
;; Name Server
IN NS patryk.ns.cloudflare.com.
IN NS veda.ns.cloudflare.com.
IN NS dns1.
IN NS dns2.
IN NS dns3.
dns1 IN A 10.232.1.22
dns2 IN A 10.232.1.51
dns3 IN A 10.232.1.52
;; Computer Names
nw01un IN A 192.168.1.1 ; Unifi Gateway
ps08rp IN A 10.232.1.51 ; DNS
ps09rp IN A 10.232.1.52 ; DNS
ps02sn IN A 10.232.1.61 ; Synology Web
ps02sn-bond IN A 10.232.1.64 ; Synology Bond for Storage
pd05wd IN A 10.230.0.115 ; Desktop
pl02mc IN A 10.230.0.105 ; Laptop
dv01hr IN A 10.232.1.72 ; HD Homerun
dv02kv IN A 10.232.1.71 ; Pi KVM
it01ag IN A 10.232.1.83 ; Airgradient
it02ph IN A 10.232.1.85 ; Phillips Hue
it03tb IN A 10.232.1.81 ; TubesZB ZigBee
it04tb IN A 10.232.1.82 ; TubesZB Z-Wave
it05sp IN A 10.230.0.100 ; Shelly Plug
;; Common Names
synology IN CNAME ps02sn
synologybond IN CNAME ps02sn-bond
unifi IN CNAME nw01un
airgradient IN CNAME it01ag
hdhr IN CNAME dv01hr
pikvm IN CNAME dv02kv
;; Service Names
cl01tl IN A 10.232.1.11
cl01tl IN A 10.232.1.12
cl01tl IN A 10.232.1.13
cl01tl-api IN A 10.232.1.11
cl01tl-api IN A 10.232.1.12
cl01tl-api IN A 10.232.1.13
cl01tl-endpoint IN A 10.232.1.21
cl01tl-endpoint IN A 10.232.1.22
cl01tl-endpoint IN A 10.232.1.23
cl01tl-gateway IN A 10.232.1.200
traefik-cl01tl IN A 10.232.1.21
blocky IN A 10.232.1.22
plex-lb IN A 10.232.1.23
;; Application Names
actual IN CNAME traefik-cl01tl
alertmanager IN CNAME traefik-cl01tl
argo-workflows IN CNAME traefik-cl01tl
argocd IN CNAME traefik-cl01tl
audiobookshelf IN CNAME traefik-cl01tl
authentik IN CNAME traefik-cl01tl
backrest IN CNAME traefik-cl01tl
bazarr IN CNAME traefik-cl01tl
booklore IN CNAME traefik-cl01tl
calibre IN CNAME traefik-cl01tl
calibre-downloader IN CNAME traefik-cl01tl
ceph IN CNAME traefik-cl01tl
code-server IN CNAME traefik-cl01tl
ephemera IN CNAME traefik-cl01tl
garage-s3 IN CNAME traefik-cl01tl
garage-webui IN CNAME traefik-cl01tl
gatus IN CNAME traefik-cl01tl
gitea IN CNAME traefik-cl01tl
grafana IN CNAME traefik-cl01tl
harbor IN CNAME traefik-cl01tl
headlamp IN CNAME traefik-cl01tl
home IN CNAME traefik-cl01tl
home-assistant IN CNAME traefik-cl01tl
home-assistant-code-server IN CNAME traefik-cl01tl
hubble IN CNAME cl01tl-gateway
huntarr IN CNAME traefik-cl01tl
immich IN CNAME traefik-cl01tl
jellyfin IN CNAME traefik-cl01tl
jellystat IN CNAME traefik-cl01tl
kiwix IN CNAME traefik-cl01tl
komodo IN CNAME traefik-cl01tl
kronic IN CNAME traefik-cl01tl
lidarr IN CNAME traefik-cl01tl
lidatube IN CNAME traefik-cl01tl
listenarr IN CNAME traefik-cl01tl
mail IN CNAME traefik-cl01tl
n8n IN CNAME traefik-cl01tl
ntfy IN CNAME traefik-cl01tl
objects IN CNAME traefik-cl01tl
ollama IN CNAME traefik-cl01tl
omni-tools IN CNAME traefik-cl01tl
overseerr IN CNAME traefik-cl01tl
pgadmin IN CNAME traefik-cl01tl
photoview IN CNAME traefik-cl01tl
plex IN CNAME traefik-cl01tl
postiz IN CNAME traefik-cl01tl
prometheus IN CNAME traefik-cl01tl
prowlarr IN CNAME traefik-cl01tl
qbittorrent IN CNAME traefik-cl01tl
qui IN CNAME traefik-cl01tl
radarr IN CNAME traefik-cl01tl
radarr-4k IN CNAME traefik-cl01tl
radarr-anime IN CNAME traefik-cl01tl
radarr-standup IN CNAME traefik-cl01tl
searxng IN CNAME traefik-cl01tl
slskd IN CNAME traefik-cl01tl
sonarr IN CNAME traefik-cl01tl
sonarr-4k IN CNAME traefik-cl01tl
sonarr-anime IN CNAME traefik-cl01tl
stalwart IN CNAME traefik-cl01tl
tautulli IN CNAME traefik-cl01tl
tdarr IN CNAME traefik-cl01tl
tubearchivist IN CNAME traefik-cl01tl
vault IN CNAME traefik-cl01tl
whodb IN CNAME traefik-cl01tl
yamtrack IN CNAME traefik-cl01tl
blocking:
denylists:
sus:
- https://v.firebog.net/hosts/static/w3kbl.txt
ads:
- https://v.firebog.net/hosts/AdguardDNS.txt
- https://v.firebog.net/hosts/Admiral.txt
- https://v.firebog.net/hosts/Easylist.txt
- https://adaway.org/hosts.txt
priv:
- https://v.firebog.net/hosts/Easyprivacy.txt
- https://v.firebog.net/hosts/Prigent-Ads.txt
mal:
- https://v.firebog.net/hosts/Prigent-Crypto.txt
- https://osint.digitalside.it/Threat-Intel/lists/latestdomains.txt
pro:
- https://raw.githubusercontent.com/hagezi/dns-blocklists/main/wildcard/pro.plus.txt
allowlists:
sus:
- |
*.alexlebens.net
*.alexlebens.dev
*.boreal-beaufort.ts.net
ads:
- |
*.alexlebens.net
*.alexlebens.dev
*.boreal-beaufort.ts.net
priv:
- |
*.alexlebens.net
*.alexlebens.dev
*.boreal-beaufort.ts.net
mal:
- |
*.alexlebens.net
*.alexlebens.dev
*.boreal-beaufort.ts.net
pro:
- |
*.alexlebens.net
*.alexlebens.dev
*.boreal-beaufort.ts.net
clientGroupsBlock:
default:
- sus
- ads
- priv
- mal
- pro
blockType: zeroIp
blockTTL: 1m
loading:
refreshPeriod: 24h
downloads:
timeout: 60s
attempts: 5
cooldown: 10s
concurrency: 16
strategy: fast
maxErrorsPerSource: 5
caching:
minTime: 5m
maxTime: 30m
maxItemsCount: 0
prefetching: true
prefetchExpires: 2h
prefetchThreshold: 5
prefetchMaxItemsCount: 0
cacheTimeNegative: 30m
redis:
address: redis-replication-blocky-master.blocky:6379
required: true
prometheus:
enable: true
path: /metrics
queryLog:
type: console
logRetentionDays: 7
creationAttempts: 1
creationCooldown: 2s
flushInterval: 30s
minTlsServeVersion: 1.3
ports:
dns: 53
http: 4000
log:
level: info
format: text
timestamp: true
privacy: false
service:
dns-external:
controller: main
type: LoadBalancer
annotations:
tailscale.com/expose: "true"
ports:
tcp:
port: 53
targetPort: 53
protocol: TCP
udp:
port: 53
targetPort: 53
protocol: UDP
metrics:
controller: main
ports:
metrics:
port: 4000
targetPort: 4000
protocol: TCP
persistence:
config:
enabled: true
type: configMap
name: blocky
advancedMounts:
main:
main:
- path: /app/config.yml
readOnly: true
mountPropagation: None
subPath: config.yml
Reference in New Issue View Git Blame Copy Permalink