feat: spell check pass
All checks were successful
test-build / guarddog (push) Successful in 54s
test-build / build (push) Successful in 1m37s
release-image / guarddog (push) Successful in 42s
release-image / build (push) Successful in 1m16s
release-image / semantic-release (push) Successful in 35s
release-image / release-harbor (push) Has been skipped
release-image / release-gitea (push) Has been skipped
All checks were successful
test-build / guarddog (push) Successful in 54s
test-build / build (push) Successful in 1m37s
release-image / guarddog (push) Successful in 42s
release-image / build (push) Successful in 1m16s
release-image / semantic-release (push) Successful in 35s
release-image / release-harbor (push) Has been skipped
release-image / release-gitea (push) Has been skipped
This commit was merged in pull request #266.
This commit is contained in:
@@ -26,4 +26,4 @@ Deploying and managing resources within Kubernetes clusters.
|
||||
|
||||
Syncs from templates defined in the [infrastructure](https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/manifests/) repo, manifests branch. Deeply integrated with Gitea and the rendered manifests system.
|
||||
|
||||
Also used as a dashboard for resources, mostly for logs and restarting deployments. This is also done in [Headlamp](https://docs.alexlebens.dev/applications/headlamp/), which is the full featured dashboard.
|
||||
Also used as a dashboard for resources, mostly for logs and restarting deployments. This is also done in [Headlamp](https://docs.alexlebens.dev/applications/headlamp/), which is the full-featured dashboard.
|
||||
|
||||
@@ -16,7 +16,7 @@ hero:
|
||||
|
||||
# Purpose
|
||||
|
||||
Podcasts, Audiobbooks, and Books.
|
||||
Podcasts, Audiobooks, and Books.
|
||||
|
||||
# Notes
|
||||
|
||||
|
||||
@@ -26,4 +26,4 @@ Single sign on authentication for applications that support OIDC.
|
||||
|
||||
# Notes
|
||||
|
||||
Available at public, local, and Tailscale endpoints. Apps are configured for their like endppoints.
|
||||
Available at public, local, and Tailscale endpoints. Apps are configured for their like endpoints.
|
||||
|
||||
@@ -16,10 +16,10 @@ hero:
|
||||
|
||||
# Purpose
|
||||
|
||||
Backup system for files on the NAS. For size contraint reasons, does not backup most video content.
|
||||
Backup system for files on the NAS. For size constraint reasons, does not backup most video content.
|
||||
|
||||
# Notes
|
||||
|
||||
Must be manually configured in the app. Has been setup for targets at the remote - PiBox - or the Digital Ocean S3 buckets.
|
||||
Must be manually configured in the app. Has been set up for targets at the remote - PiBox - or the Digital Ocean S3 buckets.
|
||||
|
||||
Mainly just for irreplacable files.
|
||||
Mainly just for irreplaceable files.
|
||||
|
||||
@@ -20,10 +20,10 @@ import { Aside } from '@astrojs/starlight/components';
|
||||
|
||||
# Purpose
|
||||
|
||||
Very fast and declarative config DNS with built in adblocking. Used for local domain name configuration as well.
|
||||
Very fast and declarative config DNS with built-in ad blocking. Used for local domain name configuration as well.
|
||||
|
||||
# Notes
|
||||
|
||||
Deployments in cluster, on RaspberryPis, and the PiBox. Cluster and Tailscale use the cluster endpoint, clients use the RaspberyPis, and home network used the PiBox.
|
||||
|
||||
DNS over TLS to Cloudflare servers and somewhat agressive blocking.
|
||||
DNS over TLS to Cloudflare servers and somewhat aggressive blocking.
|
||||
|
||||
@@ -26,6 +26,6 @@ Operator that manages PostgreSQL deployments in cluster.
|
||||
|
||||
A very important application since many core services and applications depend on PostgreSQL databases.
|
||||
|
||||
Backups to the NAS with replication of the base backups to remote and DigialOcean S3 endpoints.
|
||||
Backups to the NAS with replication of the base backups to remote and DigitalOcean S3 endpoints.
|
||||
|
||||
Used in conjunction with [this](https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster) Helm Chart to easily deploy and manage the application PostgreSQL instances.
|
||||
|
||||
@@ -24,6 +24,6 @@ DNS server just for cluster services, such as pod and service routing.
|
||||
|
||||
# Notes
|
||||
|
||||
Upstreams to [Blocky](https://docs.alexlebens.dev/applications/blocky/) for external DNS queries and also to the [Tailscale](https://docs.alexlebens.dev/applications/tailscale-operator/) DNS server for Tailnet access.
|
||||
Upstream to [Blocky](https://docs.alexlebens.dev/applications/blocky/) for external DNS queries and also to the [Tailscale](https://docs.alexlebens.dev/applications/tailscale-operator/) DNS server for Tailnet access.
|
||||
|
||||
Deploys as part of the Talos upgrades, but managed by Helm chart for the above custom configuration.
|
||||
|
||||
@@ -26,7 +26,7 @@ Used for applications that need to store a lot of data, but not over the NFS con
|
||||
|
||||
## Resizing the Prometheus disk
|
||||
|
||||
There is an issue resizing iSCSI disks. The following Github issue has instructions on how to manually resize if a permissions error is thrown.
|
||||
There is an issue resizing iSCSI disks. The following GitHub issue has instructions on how to manually resize if a permissions error is thrown.
|
||||
|
||||
https://github.com/democratic-csi/democratic-csi/issues/491#issuecomment-3778463893
|
||||
|
||||
|
||||
@@ -20,4 +20,4 @@ Automatic service that cleans up local caches of images.
|
||||
|
||||
# Notes
|
||||
|
||||
Removes all non running images. This does cause a startup delay, but [Harbor](https://docs.alexlebens.dev/applications/harbor/) is configured as a generic pull through cache, so pulls for new images should be quick.
|
||||
Removes all non-running images. This does cause a startup delay, but [Harbor](https://docs.alexlebens.dev/applications/harbor/) is configured as a generic pull through cache, so pulls for new images should be quick.
|
||||
|
||||
@@ -20,7 +20,7 @@ import { Aside } from '@astrojs/starlight/components';
|
||||
|
||||
# Purpose
|
||||
|
||||
Very useful, decalarative way to make Kubernetes Secrets from an external provider.
|
||||
Very useful, declarative way to make Kubernetes Secrets from an external provider.
|
||||
|
||||
# Notes
|
||||
|
||||
|
||||
@@ -24,4 +24,4 @@ RSS reader for various news sites as well as software releases.
|
||||
|
||||
# Notes
|
||||
|
||||
A little finicky to setup, predates popular use of containers, but still functions quite well. I mostly use it with an Android app.
|
||||
A little finicky to set up, predates popular use of containers, but still functions quite well. I mostly use it with an Android app.
|
||||
|
||||
@@ -20,7 +20,7 @@ import { Aside } from '@astrojs/starlight/components';
|
||||
|
||||
# Purpose
|
||||
|
||||
Uptime and down notifications for all endpoints, both local and public.
|
||||
Up time and down notifications for all endpoints, both local and public.
|
||||
|
||||
# Notes
|
||||
|
||||
|
||||
@@ -20,4 +20,4 @@ Plugin used to give devices to pods, specifically tun devices for networking.
|
||||
|
||||
# Notes
|
||||
|
||||
Used by recomendation in [Tailscale Docs](https://docs.siderolabs.com/kubernetes-guides/advanced-guides/device-plugins).
|
||||
Used by recommendation in [Tailscale Docs](https://docs.siderolabs.com/kubernetes-guides/advanced-guides/device-plugins).
|
||||
|
||||
@@ -24,8 +24,8 @@ import { Aside } from '@astrojs/starlight/components';
|
||||
|
||||
# Purpose
|
||||
|
||||
Git repoistory for storing all my code.
|
||||
Git repository for storing all my code.
|
||||
|
||||
# Notes
|
||||
|
||||
Primary code repo, repositories set to replicate to a PiBox as well as Github for a layer of backup.
|
||||
Primary code repo, repositories set to replicate to a PiBox as well as GitHub for a layer of backup.
|
||||
|
||||
@@ -24,6 +24,6 @@ Pull through cache and registry for personal images built in Gitea.
|
||||
|
||||
# Notes
|
||||
|
||||
Talos is configured to direct pulls to Docker, Github, and others to Harbor first. Stores these images as a cache to avoid rate limiting, primarily by Docker hub.
|
||||
Talos is configured to direct pulls to Docker, GitHub, and others to Harbor first. Stores these images as a cache to avoid rate limiting, primarily by Docker hub.
|
||||
|
||||
Any of my own images also get stored here to deploy.
|
||||
|
||||
@@ -16,7 +16,7 @@ hero:
|
||||
|
||||
# Purpose
|
||||
|
||||
Local copies of various wikis and other datasets.
|
||||
Local copies of various wikis and other data sets.
|
||||
|
||||
# Notes
|
||||
|
||||
|
||||
@@ -20,6 +20,6 @@ Manages deployments of single nodes hosts with docker compose stacks.
|
||||
|
||||
# Notes
|
||||
|
||||
Manual setup, but follows Gitops with webhook triggered updates from Gitea.
|
||||
Manual setup, but follows Git ops with webhook triggered updates from Gitea.
|
||||
|
||||
Compose files are placed in [infrastructure](https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/hosts) under the hosts dir.
|
||||
|
||||
@@ -16,7 +16,7 @@ hero:
|
||||
|
||||
# Purpose
|
||||
|
||||
Provides higher level grammer and spell checking service.
|
||||
Provides higher level grammar and spell checking service.
|
||||
|
||||
# Notes
|
||||
|
||||
|
||||
@@ -20,6 +20,6 @@ Servarr app that manages the metadata and organization of music.
|
||||
|
||||
# Notes
|
||||
|
||||
Connects to [qbittorrent](https://docs.alexlebens.dev/applications/qbittorrent), [slskd](https://docs.alexlebens.dev/applications/slskd) with support from [prowlarr](https://docs.alexlebens.dev/applications/prowlarr) and [unpackerr](https://docs.alexlebens.dev/applications/unpackerr).
|
||||
Connects to [qbittorrent](https://docs.alexlebens.dev/applications/qbittorrent), [slskd](https://docs.alexlebens.dev/applications/slskd) with support from [Prowlarr](https://docs.alexlebens.dev/applications/prowlarr) and [Unpackerr](https://docs.alexlebens.dev/applications/unpackerr).
|
||||
|
||||
Runs on nightly branch to integrate plugins.
|
||||
|
||||
@@ -16,7 +16,7 @@ hero:
|
||||
|
||||
# Purpose
|
||||
|
||||
Storage for paths on the local node's NVME drive. When high performance, but non redundant storage is required.
|
||||
Storage for paths on the local node's NVME drive. When high performance, but non-redundant storage is required.
|
||||
|
||||
# Notes
|
||||
|
||||
|
||||
@@ -20,12 +20,12 @@ import { Aside } from '@astrojs/starlight/components';
|
||||
|
||||
# Purpose
|
||||
|
||||
Collects logs from pods and makes them availabile in Grafana.
|
||||
Collects logs from pods and makes them available in Grafana.
|
||||
|
||||
# Notes
|
||||
|
||||
Uses iSCSI for log storage.
|
||||
|
||||
Generally unused as I inspect most logs in [ArgoCD](https://docs.alexlebens.dev/applications/argo-cd/) or [Headlamp](https://docs.alexlebens.dev/applications/headlamp/). But this does keep them for longer rentention.
|
||||
Generally unused as I inspect most logs in [ArgoCD](https://docs.alexlebens.dev/applications/argo-cd/) or [Headlamp](https://docs.alexlebens.dev/applications/headlamp/). But this does keep them for longer retention
|
||||
|
||||
Maybe someday will integrate AI from [Ollama](https://docs.alexlebens.dev/applications/ollama/) to monitor and report on logs.
|
||||
|
||||
@@ -16,7 +16,7 @@ hero:
|
||||
|
||||
# Purpose
|
||||
|
||||
Core Kubernetes service that provides basic metrics on cpu, memory, and disk that is used by Kubernetes for tooling such as scaling. Also what is seen in [Headlamp](https://docs.alexlebens.dev/applications/headlamp) for live stats.
|
||||
Core Kubernetes service that provides basic metrics on CPU, memory, and disk that is used by Kubernetes for tooling such as scaling. Also, what is seen in [Headlamp](https://docs.alexlebens.dev/applications/headlamp) for live stats.
|
||||
|
||||
# Notes
|
||||
|
||||
|
||||
@@ -24,6 +24,6 @@ Music server that uses the subsonic protocol.
|
||||
|
||||
# Notes
|
||||
|
||||
Chart also deploys a webclient of [Feishin](https://github.com/jeffvli/feishin), but I mostly use the desktop app. On Android I use [Symfonium](https://symfonium.app/).
|
||||
Chart also deploys a web client of [Feishin](https://github.com/jeffvli/feishin), but I mostly use the desktop app. On Android I use [Symfonium](https://symfonium.app/).
|
||||
|
||||
While I can use [Jellyfin](https://docs.alexlebens.dev/applications/jellyfin) for music, I prefer separation for dedicated media types.
|
||||
|
||||
@@ -24,4 +24,4 @@ Notification service based on a Pub/Sub model.
|
||||
|
||||
# Notes
|
||||
|
||||
Very useful service that sends notifications to my phone and is widely addopted by a lot of other apps or has bridging support such as through [apprise](https://github.com/caronc/apprise).
|
||||
Very useful service that sends notifications to my phone and is widely adopted by a lot of other apps or has bridging support such as through [apprise](https://github.com/caronc/apprise).
|
||||
|
||||
@@ -24,4 +24,4 @@ Local AI servers.
|
||||
|
||||
Configured mostly to run the Gemma models.
|
||||
|
||||
Tailscale connction to the desktop GPU for larger model processing.
|
||||
Tailscale connection to the desktop GPU for larger model processing.
|
||||
|
||||
@@ -24,8 +24,8 @@ Secrets manager.
|
||||
|
||||
# Notes
|
||||
|
||||
Retrieved by [External Secrets](https://docs.alexlebens.dev/applications/external-secrets/) for making them availible in cluster.
|
||||
Retrieved by [External Secrets](https://docs.alexlebens.dev/applications/external-secrets/) for making them available in cluster.
|
||||
|
||||
Can store other secrets, but primarily used for cluster secrets.
|
||||
|
||||
And by 'secrets' this means passwords, keys, etc, that are confidential and non public.
|
||||
And by 'secrets' this means passwords, keys, etc, that are confidential and non-public.
|
||||
|
||||
@@ -24,6 +24,6 @@ Automates social media posting.
|
||||
|
||||
# Notes
|
||||
|
||||
So dumb and complex to setup, has hard dependency on [Temporal](https://github.com/temporalio).
|
||||
So dumb and complex to set up, has hard dependency on [Temporal](https://github.com/temporalio).
|
||||
|
||||
Haven't begun to use, but want to connect to automate posting of my blog.
|
||||
|
||||
@@ -20,4 +20,4 @@ Simple service that will ensure a restart of services if their mounted ConfigMap
|
||||
|
||||
# Notes
|
||||
|
||||
Used by a few apps, such as homepage where its entirely configured by ConfigMap.
|
||||
Used by a few apps, such as homepage where it's entirely configured by ConfigMap.
|
||||
|
||||
@@ -22,7 +22,7 @@ import { Aside } from '@astrojs/starlight/components';
|
||||
|
||||
# Purpose
|
||||
|
||||
Clustered storage that runs on the SSDs in cluster to provide durable and reliable block and filesystem volumes.
|
||||
Clustered storage that runs on the SSDs in cluster to provide durable and reliable block and file system volumes.
|
||||
|
||||
# Notes
|
||||
|
||||
@@ -30,4 +30,4 @@ Runs [Ceph](https://ceph.io/en/) underneath and managed by Rook pods.
|
||||
|
||||
Ensure this system is healthy before any upgrades and restarts.
|
||||
|
||||
One of the main pressures to increase node count to expand host and disk count of this cluster for more space as well as durabiliy during node outages.
|
||||
One of the main pressures to increase node count to expand host and disk count of this cluster for more space as well as durability during node outages.
|
||||
|
||||
@@ -1,27 +0,0 @@
|
||||
---
|
||||
title: Roundcube
|
||||
description: Roundcube Webmail is a browser-based multilingual IMAP client with an application-like user interface.
|
||||
hero:
|
||||
tagline: Roundcube Webmail is a browser-based multilingual IMAP client with an application-like user interface.
|
||||
image:
|
||||
file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/roundcube.webp
|
||||
actions:
|
||||
- text: Source
|
||||
link: https://github.com/roundcube/roundcubemail
|
||||
icon: right-arrow
|
||||
- text: Deployment Chart
|
||||
link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/roundcube
|
||||
icon: right-arrow
|
||||
---
|
||||
|
||||
# Purpose
|
||||
|
||||
Internal client for email.
|
||||
|
||||
# Notes
|
||||
|
||||
Connected to [Stalwart](https://docs.alexlebens.dev/applications/stalwart/).
|
||||
|
||||
Generally unsued as I have not configured any services for sending email.
|
||||
|
||||
This is NOT used for external email, such as gmail.
|
||||
@@ -20,7 +20,7 @@ import { Aside } from '@astrojs/starlight/components';
|
||||
|
||||
# Purpose
|
||||
|
||||
Analytics service for my websites.
|
||||
Analytic service for my websites.
|
||||
|
||||
# Notes
|
||||
|
||||
|
||||
@@ -24,4 +24,4 @@ Metrics from the Shelly Plug.
|
||||
|
||||
# Notes
|
||||
|
||||
Can provide historical wattage use of the shelly plug which the entire homelab's electricity passes through.
|
||||
Can provide historical wattage use of the Shelly plug which the entire homelab's electricity passes through.
|
||||
|
||||
@@ -26,7 +26,7 @@ import { Aside } from '@astrojs/starlight/components';
|
||||
|
||||
# Purpose
|
||||
|
||||
Manages metadata for tv shows.
|
||||
Manages metadata for TV shows.
|
||||
|
||||
# Notes
|
||||
|
||||
|
||||
@@ -1,25 +0,0 @@
|
||||
---
|
||||
title: Stalwart
|
||||
description: All-in-one Mail & Collaboration server. Secure, scalable and fluent in every protocol (IMAP, JMAP, SMTP, CalDAV, CardDAV, WebDAV).
|
||||
hero:
|
||||
tagline: All-in-one Mail & Collaboration server. Secure, scalable and fluent in every protocol (IMAP, JMAP, SMTP, CalDAV, CardDAV, WebDAV).
|
||||
image:
|
||||
file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/stalwart.webp
|
||||
actions:
|
||||
- text: Source
|
||||
link: https://github.com/stalwartlabs/mail-server
|
||||
icon: right-arrow
|
||||
- text: Deployment Chart
|
||||
link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/stalwart
|
||||
icon: right-arrow
|
||||
---
|
||||
|
||||
# Purpose
|
||||
|
||||
Email server.
|
||||
|
||||
# Notes
|
||||
|
||||
Configuration seems to be only through UI.
|
||||
|
||||
Not currently used.
|
||||
@@ -20,10 +20,10 @@ import { Aside } from '@astrojs/starlight/components';
|
||||
|
||||
# Purpose
|
||||
|
||||
Runs healthchecks on media files.
|
||||
Runs health checks on media files.
|
||||
|
||||
# Notes
|
||||
|
||||
Need to check the error queue, sometimes there are false errors.
|
||||
|
||||
Runs the files through ffmpeg on either cpu or gpu, but gpu generates more false errors.
|
||||
Runs the files through ffmpeg on either CPU or GPU, but GPU generates more false errors.
|
||||
|
||||
@@ -24,4 +24,4 @@ Gateway for the cluster, enables external access of the webpages for both host r
|
||||
|
||||
# Notes
|
||||
|
||||
Really want to swap it out for Cillium's built in Gateway implementation.
|
||||
Really want to swap it out for Cillium's built-in Gateway implementation.
|
||||
|
||||
@@ -16,8 +16,8 @@ hero:
|
||||
|
||||
# Purpose
|
||||
|
||||
Archives Youtube videos.
|
||||
Archives YouTube videos.
|
||||
|
||||
# Notes
|
||||
|
||||
Mostly to ensure I get to keep videos that may be deleted or removed from Youtube. Also for videos I want to save to watch locally.
|
||||
Mostly to ensure I get to keep videos that may be deleted or removed from YouTube. Also for videos I want to save to watch locally.
|
||||
|
||||
@@ -20,7 +20,7 @@ import { Aside } from '@astrojs/starlight/components';
|
||||
|
||||
# Purpose
|
||||
|
||||
Geneates metrics from the Ubqituiy network devices.
|
||||
Generates metrics from the Ubiquity network devices.
|
||||
|
||||
# Notes
|
||||
|
||||
|
||||
@@ -24,8 +24,8 @@ Secrets manager.
|
||||
|
||||
# Notes
|
||||
|
||||
Retrieved by [External Secrets](https://docs.alexlebens.dev/applications/external-secrets/) for making them availible in cluster.
|
||||
Retrieved by [External Secrets](https://docs.alexlebens.dev/applications/external-secrets/) for making them available in cluster.
|
||||
|
||||
Can store other secrets, but primarily used for cluster secrets.
|
||||
|
||||
And by 'secrets' this means passwords, keys, etc, that are confidential and non public.
|
||||
And by 'secrets' this means passwords, keys, etc, that are confidential and non-public.
|
||||
|
||||
@@ -11,7 +11,7 @@ hero:
|
||||
|
||||
[Reference OpenBao Documentation](https://openbao.org/docs/secrets/ssh/signed-ssh-certificates/)
|
||||
|
||||
I have set the documenation to use my own defaults and configuration. This also assumes a running and active OpenBao instance.
|
||||
I have set the documentation to use my own defaults and configuration. This also assumes a running and active OpenBao instance.
|
||||
|
||||
## Enable the SSH CA
|
||||
|
||||
@@ -103,7 +103,7 @@ alias bao-renew='bao write -field=signed_key ssh-client-signer/sign/alexlebens p
|
||||
|
||||
### View Cert Details
|
||||
|
||||
For troubleshooting purposes or clafification use the follow to inspect the cert.
|
||||
For troubleshooting purposes or clarification use the follow to inspect the cert.
|
||||
```bash
|
||||
ssh-keygen -Lf ~/.ssh/id_rsa_host-cert.pub
|
||||
```
|
||||
@@ -13,7 +13,7 @@ hero:
|
||||
|
||||
import { Card, CardGrid, LinkCard } from '@astrojs/starlight/components';
|
||||
|
||||
## Hightlights
|
||||
## Highlights
|
||||
|
||||
<CardGrid stagger>
|
||||
<LinkCard
|
||||
@@ -30,5 +30,5 @@ import { Card, CardGrid, LinkCard } from '@astrojs/starlight/components';
|
||||
title="Get started with the 3D Printer"
|
||||
description="Guide for setting up OrcaSlicer"
|
||||
href="https://docs.alexlebens.dev/guides/3d-printer/orcaslicer/"
|
||||
></LinkCard>
|
||||
></LinkCard>
|
||||
</CardGrid>
|
||||
|
||||
Reference in New Issue
Block a user