chore(release): 0.19.0 [skip ci]

# [0.19.0](http://gitea-http.gitea:3000/alexlebens/site-documentation/compare/0.18.0...0.19.0) (2026-04-06) ### Features * add more apps ([9b906fa](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/9b906fa18fd2cb4888bccc1bf0ba51ea795a12c3)) * change to mdx ([53cbb04](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/53cbb049ed717e3b4890af864c0ce0cd205c751e))
Merge pull request 'main' (#214 ) from main into release
2026-04-06 00:10:35 +00:00 · 2026-04-06 00:08:41 +00:00 · 2026-04-05 19:05:44 -05:00 · 2026-04-05 18:48:22 -05:00 · 2026-04-05 02:40:49 +00:00 · 2026-04-05 02:38:39 +00:00
86 changed files with 4187 additions and 6482 deletions
@@ -1,136 +0,0 @@
 name: release-image-gitea
 on:
  push:
    tags:
      - 0.*
  workflow_dispatch:
 jobs:
  build:
    runs-on: ubuntu-js
    steps:
      - name: Checkout
        uses: actions/checkout@v6
      - name: Set up pnpm
        uses: pnpm/action-setup@v4
        with:
          version: 10.x
      - name: Set up Node.js
        uses: actions/setup-node@v6
        with:
          node-version: 24.13.1
          cache: pnpm
      - name: Install Dependencies
        run: pnpm install
      # - name: Lint Code
      #   run: pnpm lint
      - name: Build Project
        run: pnpm build
  release:
    runs-on: ubuntu-js
    needs: build
    steps:
      - name: Checkout
        uses: actions/checkout@v6
      - name: Login to Registry
        uses: docker/login-action@v3
        with:
          registry: ${{ vars.REPOSITORY_HOST }}
          username: ${{ gitea.actor }}
          password: ${{ secrets.REPOSITORY_TOKEN }}
      - name: Create Kubeconfig
        run: |
          mkdir $HOME/.kube
          echo "${{ secrets.KUBECONFIG_BUILDX }}" > $HOME/.kube/config
      - name: Set up Docker Buildx
        id: buildx
        uses: docker/setup-buildx-action@v3
        with:
          driver: kubernetes
          driver-opts: |
            namespace=gitea
            qemu.install=true
          buildkitd-config-inline: |
            [registry."docker.io"]
              mirrors = ["harbor.alexlebens.net/proxy-hub.docker/"]
      - name: Available Platforms
        run: echo ${{ steps.buildx.outputs.platforms }}
      - name: Extract Metadata
        id: meta
        uses: docker/metadata-action@v5
        with:
          tags: |
            type=ref,event=branch
            type=ref,event=tag
            type=sha,format=long
            type=semver,pattern={{version}}
            type=semver,pattern={{major}}.{{minor}}
            type=semver,pattern={{major}}
          images: |
            ${{ vars.REPOSITORY_HOST }}/${{ gitea.repository }}
      - name: Get Version Info
        id: version
        run: |
          echo "version=$(git describe --tags --always)" >> $GITHUB_OUTPUT
          echo "commit=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT
          if git describe --tags --exact-match HEAD 2>/dev/null; then
            echo "is_release=true" >> $GITHUB_OUTPUT
          else
            echo "is_release=false" >> $GITHUB_OUTPUT
          fi
      - name: Build and Push Image
        uses: docker/build-push-action@v6
        with:
          context: .
          push: true
          platforms: linux/amd64
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}
          build-args: |
            VERSION=${{ steps.version.outputs.version }}
            COMMIT_SHA=${{ steps.version.outputs.commit }}
            IS_RELEASE=${{ steps.version.outputs.is_release }}
          file: ./Dockerfile
      - name: ntfy Success
        uses: niniyas/ntfy-action@master
        if: success()
        with:
          url: '${{ secrets.NTFY_URL }}'
          topic: '${{ secrets.NTFY_TOPIC }}'
          title: 'Release Success - Site Documentation'
          priority: 3
          headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}'
          tags: action,successfully,completed
          details: 'Image for Site Documentation has been released!'
          icon: 'https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png'
      - name: ntfy Failed
        uses: niniyas/ntfy-action@master
        if: failure()
        with:
          url: '${{ secrets.NTFY_URL }}'
          topic: '${{ secrets.NTFY_TOPIC }}'
          title: 'Release Failure - Site Documentation'
          priority: 4
          headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}'
          tags: action,failed
          details: 'Image for Site Documentation has failed to be released.'
          icon: 'https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png'
          actions: '[{"action": "view", "label": "Open Gitea", "url": "https://gitea.alexlebens.dev/alexlebens/site-documentation/actions?workflow=release-image.yml", "clear": true}]'
          image: true
@@ -1,136 +0,0 @@
 name: release-image-harbor
 on:
  push:
    tags:
      - 0.*
  workflow_dispatch:
 jobs:
  build:
    runs-on: ubuntu-js
    steps:
      - name: Checkout
        uses: actions/checkout@v6
      - name: Set up pnpm
        uses: pnpm/action-setup@v4
        with:
          version: 10.x
      - name: Set up Node.js
        uses: actions/setup-node@v6
        with:
          node-version: 24.13.1
          cache: pnpm
      - name: Install Dependencies
        run: pnpm install
      # - name: Lint Code
      #   run: pnpm lint
      - name: Build Project
        run: pnpm build
  release:
    runs-on: ubuntu-js
    needs: build
    steps:
      - name: Checkout
        uses: actions/checkout@v6
      - name: Login to Registry
        uses: docker/login-action@v3
        with:
          registry: ${{ vars.REGISTRY_HOST }}
          username: ${{ vars.REGISTRY_USER }}
          password: ${{ secrets.REGISTRY_SECRET }}
      - name: Create Kubeconfig
        run: |
          mkdir $HOME/.kube
          echo "${{ secrets.KUBECONFIG_BUILDX }}" > $HOME/.kube/config
      - name: Set up Docker Buildx
        id: buildx
        uses: docker/setup-buildx-action@v3
        with:
          driver: kubernetes
          driver-opts: |
            namespace=gitea
            qemu.install=true
          buildkitd-config-inline: |
            [registry."docker.io"]
              mirrors = ["harbor.alexlebens.net/proxy-hub.docker/"]
      - name: Available Platforms
        run: echo ${{ steps.buildx.outputs.platforms }}
      - name: Extract Metadata
        id: meta
        uses: docker/metadata-action@v5
        with:
          tags: |
            type=ref,event=branch
            type=ref,event=tag
            type=sha,format=long
            type=semver,pattern={{version}}
            type=semver,pattern={{major}}.{{minor}}
            type=semver,pattern={{major}}
          images: |
            ${{ vars.REGISTRY_HOST }}/images/site-documentation
      - name: Get Version Info
        id: version
        run: |
          echo "version=$(git describe --tags --always)" >> $GITHUB_OUTPUT
          echo "commit=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT
          if git describe --tags --exact-match HEAD 2>/dev/null; then
            echo "is_release=true" >> $GITHUB_OUTPUT
          else
            echo "is_release=false" >> $GITHUB_OUTPUT
          fi
      - name: Build and Push Image
        uses: docker/build-push-action@v6
        with:
          context: .
          push: true
          platforms: linux/amd64
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}
          build-args: |
            VERSION=${{ steps.version.outputs.version }}
            COMMIT_SHA=${{ steps.version.outputs.commit }}
            IS_RELEASE=${{ steps.version.outputs.is_release }}
          file: ./Dockerfile
      - name: ntfy Success
        uses: niniyas/ntfy-action@master
        if: success()
        with:
          url: '${{ secrets.NTFY_URL }}'
          topic: '${{ secrets.NTFY_TOPIC }}'
          title: 'Release Success - Site Documentation'
          priority: 3
          headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}'
          tags: action,successfully,completed
          details: 'Image for Site Documentation has been released!'
          icon: 'https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png'
      - name: ntfy Failed
        uses: niniyas/ntfy-action@master
        if: failure()
        with:
          url: '${{ secrets.NTFY_URL }}'
          topic: '${{ secrets.NTFY_TOPIC }}'
          title: 'Release Failure - Site Documentation'
          priority: 4
          headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}'
          tags: action,failed
          details: 'Image for Site Documentation has failed to be released.'
          icon: 'https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png'
          actions: '[{"action": "view", "label": "Open Gitea", "url": "https://gitea.alexlebens.dev/alexlebens/site-documentation/actions?workflow=release-image.yml", "clear": true}]'
          image: true
@@ -0,0 +1,340 @@
 name: release-image
 on:
  push:
    branches:
      - release
  workflow_dispatch:
 jobs:
  build:
    runs-on: ubuntu-js
    steps:
      - name: Checkout
        uses: actions/checkout@v6
        with:
          ref: release
      - name: Set up Node
        uses: actions/setup-node@v6
        with:
          node-version: 24.14.1
      - name: Set up Bun
        uses: oven-sh/setup-bun@v2
        with:
          bun-version: 1.3.11
      - name: Install Dependencies
        run: bun install --frozen-lockfile
      - name: Cache Astro Build Cache
        uses: actions/cache@v5
        with:
          path: |
            .astro
            node_modules/.vite
          key: ${{ runner.os }}-astro-${{ hashFiles('**/*.astro', 'astro.config.mjs') }}
          restore-keys: |
            ${{ runner.os }}-astro-
      # - name: Lint Code
      #   run: bun run lint
      - name: Build Project
        run: bun run build
      - name: ntfy Failed
        uses: niniyas/ntfy-action@master
        if: failure()
        with:
          url: '${{ secrets.NTFY_URL }}'
          topic: '${{ secrets.NTFY_TOPIC }}'
          title: 'Test Failure - Site Documentation'
          priority: 4
          headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}'
          tags: action,failed
          details: 'During release tests failed for building Site Documentation'
          icon: 'https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png'
          actions: '[{"action": "view", "label": "Open Gitea", "url": "https://gitea.alexlebens.dev/alexlebens/site-documentation/actions?workflow=release-image.yaml", "clear": true}]'
          image: true
  guarddog:
    runs-on: ubuntu-js
    steps:
      - name: Checkout
        uses: actions/checkout@v6
        with:
          ref: release
      - name: Set up Python
        uses: actions/setup-python@v6
        with:
          python-version: '3.12.13'
      - name: Install GuardDog
        run: |
          python3 -m pip install --upgrade pip
          python3 -m pip install guarddog
      - name: Run GuardDog
        run: |
          guarddog npm scan ./
      - name: ntfy Failed
        uses: niniyas/ntfy-action@master
        if: failure()
        with:
          url: '${{ secrets.NTFY_URL }}'
          topic: '${{ secrets.NTFY_TOPIC }}'
          title: 'Security Failure - Site Documentation'
          priority: 4
          headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}'
          tags: action,failed
          details: 'During release guarddog scan failed for Site Documentation'
          icon: 'https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png'
          actions: '[{"action": "view", "label": "Open Gitea", "url": "https://gitea.alexlebens.dev/alexlebens/site-documentation/actions?workflow=release-image.yaml", "clear": true}]'
          image: true
  semantic-release:
    needs: [ build, guarddog ]
    runs-on: ubuntu-js
    outputs:
      new-release-published: ${{ steps.semantic.outputs.new-release-published }}
      new-release-version: ${{ steps.semantic.outputs.new-release-version }}
      new-release-git-tag: ${{ steps.semantic.outputs.new-release-git-tag }}
    steps:
      - name: Checkout
        uses: actions/checkout@v6
        with:
          fetch-depth: 0
          token: ${{ secrets.BOT_TOKEN }}
      - name: Set up Node
        uses: actions/setup-node@v6
        with:
          node-version: 24.14.1
      - name: Set up Bun
        uses: oven-sh/setup-bun@v2
        with:
          bun-version: 1.3.11
      - name: Install Dependencies
        run: bun install --frozen-lockfile
      - name: Run Semantic Release
        id: semantic
        env:
          GITEA_TOKEN: ${{ secrets.BOT_TOKEN }}
          GITHUB_TOKEN: ${{ secrets.BOT_TOKEN }}
          NODE_PATH: ${{ github.workspace }}/node_modules
        run: |
          bun run semantic-release
  release-harbor:
    runs-on: ubuntu-js
    needs: semantic-release
    if: ${{ needs.semantic-release.outputs.new-release-published == 'true' }}
    steps:
      - name: Checkout
        uses: actions/checkout@v6
        with:
          ref: release
      - name: Login to Harbor Registry
        uses: docker/login-action@v4
        with:
          registry: ${{ vars.REGISTRY_HOST }}
          username: ${{ vars.REGISTRY_USER }}
          password: ${{ secrets.REGISTRY_SECRET }}
      - name: Login to Docker
        uses: docker/login-action@v4
        with:
          registry: ${{ vars.DH_REGISTRY }}
          username: ${{ secrets.DH_USERNAME }}
          password: ${{ secrets.DH_TOKEN }}
      - name: Create Kubeconfig
        run: |
          mkdir $HOME/.kube
          echo "${{ secrets.KUBECONFIG_BUILDX }}" > $HOME/.kube/config
      - name: Set up Docker Buildx
        id: buildx
        uses: docker/setup-buildx-action@v4
        with:
          driver: kubernetes
          driver-opts: |
            namespace=gitea
            qemu.install=true
          buildkitd-config-inline: |
            [registry."docker.io"]
              mirrors = ["harbor.alexlebens.net/proxy-hub.docker/"]
      - name: Available Platforms
        run: echo ${{ steps.buildx.outputs.platforms }}
      - name: Extract Metadata
        id: meta
        uses: docker/metadata-action@v6
        with:
          images: |
            ${{ vars.REGISTRY_HOST }}/images/site-documentation
          tags: |
            type=ref,event=branch
            type=sha,format=long
            type=raw,value=latest,enable=${{ needs.semantic-release.outputs.new-release-published == 'true' }}
            type=semver,pattern={{version}},value=${{ needs.semantic-release.outputs.new-release-version }}
            type=semver,pattern={{major}}.{{minor}},value=${{ needs.semantic-release.outputs.new-release-version }}
            type=semver,pattern={{major}},value=${{ needs.semantic-release.outputs.new-release-version }}
      - name: Build and Push Image
        uses: docker/build-push-action@v7
        with:
          context: .
          push: true
          platforms: linux/amd64
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}
          build-args: |
            APP_VERSION=${{ needs.semantic-release.outputs.new-release-version }}
            COMMIT_SHA=${{ github.sha }}
            IS_RELEASE=true
          file: ./Dockerfile
          cache-from: type=gha
          cache-to: type=gha,mode=max
      - name: ntfy Success
        uses: niniyas/ntfy-action@master
        if: success()
        with:
          url: '${{ secrets.NTFY_URL }}'
          topic: '${{ secrets.NTFY_TOPIC }}'
          title: 'Release Success - Site Documentation'
          priority: 3
          headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}'
          tags: action,successfully,completed
          details: 'Harbor Image for Site Documentation has been released!'
          icon: 'https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png'
      - name: ntfy Failed
        uses: niniyas/ntfy-action@master
        if: failure()
        with:
          url: '${{ secrets.NTFY_URL }}'
          topic: '${{ secrets.NTFY_TOPIC }}'
          title: 'Release Failure - Site Documentation'
          priority: 4
          headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}'
          tags: action,failed
          details: 'Harbor Image for Site Documentation has failed to be released.'
          icon: 'https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png'
          actions: '[{"action": "view", "label": "Open Gitea", "url": "https://gitea.alexlebens.dev/alexlebens/site-documentation/actions?workflow=release-image.yml", "clear": true}]'
          image: true
  release-gitea:
    runs-on: ubuntu-js
    needs: [ semantic-release, release-harbor ]
    if: |
      always() && 
      needs.semantic-release.outputs.new-release-published == 'true'
    steps:
      - name: Checkout
        uses: actions/checkout@v6
        with:
          ref: release
      - name: Login to Gitea Registry
        uses: docker/login-action@v4
        with:
          registry: ${{ vars.REPOSITORY_HOST }}
          username: ${{ gitea.actor }}
          password: ${{ secrets.REPOSITORY_TOKEN }}
      - name: Login to Docker
        uses: docker/login-action@v4
        with:
          registry: ${{ vars.DH_REGISTRY }}
          username: ${{ secrets.DH_USERNAME }}
          password: ${{ secrets.DH_TOKEN }}
      - name: Create Kubeconfig
        run: |
          mkdir $HOME/.kube
          echo "${{ secrets.KUBECONFIG_BUILDX }}" > $HOME/.kube/config
      - name: Set up Docker Buildx
        id: buildx
        uses: docker/setup-buildx-action@v4
        with:
          driver: kubernetes
          driver-opts: |
            namespace=gitea
            qemu.install=true
          buildkitd-config-inline: |
            [registry."docker.io"]
              mirrors = ["harbor.alexlebens.net/proxy-hub.docker/"]
      - name: Available Platforms
        run: echo ${{ steps.buildx.outputs.platforms }}
      - name: Extract Metadata
        id: meta
        uses: docker/metadata-action@v6
        with:
          images: |
            ${{ vars.REPOSITORY_HOST }}/${{ gitea.repository }}
          tags: |
            type=ref,event=branch
            type=sha,format=long
            type=raw,value=latest,enable=${{ needs.semantic-release.outputs.new-release-published == 'true' }}
            type=semver,pattern={{version}},value=${{ needs.semantic-release.outputs.new-release-version }}
            type=semver,pattern={{major}}.{{minor}},value=${{ needs.semantic-release.outputs.new-release-version }}
            type=semver,pattern={{major}},value=${{ needs.semantic-release.outputs.new-release-version }}
      - name: Build and Push Image
        uses: docker/build-push-action@v7
        with:
          context: .
          push: true
          platforms: linux/amd64
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}
          build-args: |
            APP_VERSION=${{ needs.semantic-release.outputs.new-release-version }}
            COMMIT_SHA=${{ github.sha }}
            IS_RELEASE=true
          file: ./Dockerfile
          cache-from: type=gha
          cache-to: type=gha,mode=max
      - name: ntfy Success
        uses: niniyas/ntfy-action@master
        if: success()
        with:
          url: '${{ secrets.NTFY_URL }}'
          topic: '${{ secrets.NTFY_TOPIC }}'
          title: 'Release Success - Site Documentation'
          priority: 3
          headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}'
          tags: action,successfully,completed
          details: 'Gitea Image for Site Documentation has been released!'
          icon: 'https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png'
      - name: ntfy Failed
        uses: niniyas/ntfy-action@master
        if: failure()
        with:
          url: '${{ secrets.NTFY_URL }}'
          topic: '${{ secrets.NTFY_TOPIC }}'
          title: 'Release Failure - Site Documentation'
          priority: 4
          headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}'
          tags: action,failed
          details: 'Gitea Image for Site Documentation has failed to be released.'
          icon: 'https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png'
          actions: '[{"action": "view", "label": "Open Gitea", "url": "https://gitea.alexlebens.dev/alexlebens/site-documentation/actions?workflow=release-image.yaml", "clear": true}]'
          image: true
@@ -2,11 +2,7 @@ name: renovate
 on:
  schedule:
-    - cron: '@daily'
+    - cron: '0 */6 * * *'
  push:
    branches:
      - main
  workflow_dispatch:
@@ -25,8 +21,10 @@ jobs:
          RENOVATE_ENDPOINT: ${{ vars.INSTANCE_URL }}
          RENOVATE_REPOSITORIES: alexlebens/site-documentation
          RENOVATE_GIT_AUTHOR: Renovate Bot <renovate-bot@alexlebens.net>
-          LOG_LEVEL: info
+          RENOVATE_REDIS_URL: ${{ vars.RENOVATE_REDIS_URL }}
          LOG_LEVEL: debug
          RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }}
          RENOVATE_GIT_PRIVATE_KEY: ${{ secrets.RENOVATE_GIT_PRIVATE_KEY }}
          RENOVATE_GITHUB_COM_TOKEN: ${{ secrets.RENOVATE_GITHUB_COM_TOKEN }}
-          RENOVATE_REDIS_URL: ${{ vars.RENOVATE_REDIS_URL }}
+          RENOVATE_REGISTRY_ALIASES: '{"dhi.io": "dhi.io"}'
          RENOVATE_HOST_RULES: '[{"matchHost":"dhi.io","hostType":"docker","username":"${{ secrets.RENOVATE_DHI_USER }}","password":"${{ secrets.RENOVATE_DHI_TOKEN }}"}]'
@@ -4,6 +4,9 @@ on:
  push:
    branches:
      - main
    paths-ignore:
      - '.gitea/workflows/**'
      - '**.md'
  pull_request:
    branches:
@@ -16,25 +19,34 @@ jobs:
      - name: Checkout
        uses: actions/checkout@v6
-      - name: Set up pnpm
+      - name: Set up Node
        uses: pnpm/action-setup@v4
        with:
          version: 10.x
      - name: Set up Node.js
        uses: actions/setup-node@v6
        with:
-          node-version: 24.13.1
+          node-version: 24.14.1
-          cache: pnpm
+
      - name: Set up Bun
        uses: oven-sh/setup-bun@v2
        with:
          bun-version: 1.3.11
      - name: Install Dependencies
-        run: pnpm install
+        run: bun install --frozen-lockfile
      - name: Cache Astro Build Cache
        uses: actions/cache@v5
        with:
          path: |
            .astro
            node_modules/.vite
          key: ${{ runner.os }}-astro-${{ hashFiles('**/*.astro', 'astro.config.mjs') }}
          restore-keys: |
            ${{ runner.os }}-astro-
      # - name: Lint Code
-      #   run: pnpm lint
+      #   run: bun run lint
      - name: Build Project
-        run: pnpm build
+        run: bun run build
      - name: ntfy Failed
        uses: niniyas/ntfy-action@master
@@ -60,7 +72,7 @@ jobs:
      - name: Set up Python
        uses: actions/setup-python@v6
        with:
-          python-version: '3.12'
+          python-version: '3.12.13'
      - name: Install GuardDog
        run: |
@@ -1,2 +0,0 @@
 engine-strict=true
 save-exact=true
@@ -0,0 +1,17 @@
 repos:
  - repo: https://github.com/pre-commit/pre-commit-hooks
    rev: v6.0.0
    hooks:
      - id: end-of-file-fixer
      - id: trailing-whitespace
      - id: check-merge-conflict
      - id: check-json
  - repo: https://github.com/pre-commit/mirrors-prettier
    rev: v4.0.0-alpha.11
    hooks:
      - id: prettier
        types_or: [javascript, typescript, css, scss, html, json, yaml, markdown]
        additional_dependencies:
          - prettier
          - prettier-plugin-astro
          - prettier-plugin-tailwindcss
@@ -0,0 +1,18 @@
 {
  "branches": ["release"],
  "tagFormat": "${version}",
  "plugins": [
    "@semantic-release/commit-analyzer",
    "@semantic-release/release-notes-generator",
    "@semantic-release/changelog",
    "semantic-release-export-data",
    ["@semantic-release/npm", { "npmPublish": false }],
    ["@semantic-release/git", {
      "assets": ["package.json", "CHANGELOG.md"],
      "message": "chore(release): ${nextRelease.version} [skip ci]\n\n${nextRelease.notes}"
    }],
    ["@saithodev/semantic-release-gitea", {
      "giteaUrl": "https://gitea.alexlebens.dev"
    }]
  ]
 }
@@ -0,0 +1,155 @@
 # [0.19.0](http://gitea-http.gitea:3000/alexlebens/site-documentation/compare/0.18.0...0.19.0) (2026-04-06)
 ### Features
 * add more apps ([9b906fa](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/9b906fa18fd2cb4888bccc1bf0ba51ea795a12c3))
 * change to mdx ([53cbb04](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/53cbb049ed717e3b4890af864c0ce0cd205c751e))
 # [0.18.0](http://gitea-http.gitea:3000/alexlebens/site-documentation/compare/0.17.0...0.18.0) (2026-04-05)
 ### Features
 * add more apps ([58a8faf](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/58a8faf79563a7570f69a1863a3f4b056352dc2f))
 * add more apps ([3f3e353](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/3f3e35396e56a91662807971e5b09e6c25bb067a))
 # [0.17.0](http://gitea-http.gitea:3000/alexlebens/site-documentation/compare/0.16.0...0.17.0) (2026-04-05)
 ### Features
 * add more apps ([f627fbe](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/f627fbe3165af551a546fff41ef26431a919ea02))
 * add ntfy ([89649f9](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/89649f904f0304b5e1f41eaec4faa07a409f679d))
 # [0.16.0](http://gitea-http.gitea:3000/alexlebens/site-documentation/compare/0.15.0...0.16.0) (2026-04-04)
 ### Features
 * add more apps ([57aec90](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/57aec90c9e0c9b51c238a76a82f7d4f0a3a14195))
 * add more apps ([425651b](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/425651bd309ba215ec1fbd618882e98b3fad17b4))
 * add more apps ([2ccfeca](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/2ccfecaf63b623c0fc7a847d5d81ca8d54c991bd))
 * add more apps ([76a568a](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/76a568a61bb35511d84deaeb86eadc2a4643b473))
 * add more apps ([09567e2](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/09567e2c266fd1d2f66ba42f5ed6d3cb134216ae))
 # [0.15.0](http://gitea-http.gitea:3000/alexlebens/site-documentation/compare/0.14.0...0.15.0) (2026-04-02)
 ### Features
 * add more apps ([3ce50ce](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/3ce50ceccd12c8059f3c5146f6c0ad90d75c47b7))
 # [0.14.0](http://gitea-http.gitea:3000/alexlebens/site-documentation/compare/0.13.0...0.14.0) (2026-04-01)
 ### Bug Fixes
 * **deps:** pin dependencies ([75a9af6](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/75a9af6d0b907c90dba7b0969624c1daee8a0435))
 ### Features
 * add homepage ([d894615](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/d8946158b04f49876cc9aff79004f92ccbea6a1c))
 * change code theme ([dbe3d5c](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/dbe3d5cdd20321ef276c3e36ca8877ada7739486))
 # [0.13.0](http://gitea-http.gitea:3000/alexlebens/site-documentation/compare/0.12.0...0.13.0) (2026-03-31)
 ### Features
 * documentation on vault ssh ([648fb31](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/648fb319b192ecd7826fe03599f7a0ee55a419ea))
 # [0.12.0](http://gitea-http.gitea:3000/alexlebens/site-documentation/compare/0.11.0...0.12.0) (2026-03-30)
 ### Features
 * add more apps ([e13f3e3](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/e13f3e30e2a73a712008f65cc5932cbe1e71adb2))
 * add more apps ([ef4ff67](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/ef4ff67818d2758e21b9f0076519ca9221f74bb0))
 * add more apps ([32eacf8](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/32eacf8df7cd07eaf33a46d9df88e22f22d0cbf6))
 # [0.11.0](http://gitea-http.gitea:3000/alexlebens/site-documentation/compare/0.10.0...0.11.0) (2026-03-27)
 ### Features
 * add more apps ([2221cbb](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/2221cbb0993595d7b8641fa4ffbc2fe874cdff39))
 * add more apps ([82736ec](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/82736ec2a95db97abc7337ec1849dbb97a0fca5e))
 # [0.10.0](http://gitea-http.gitea:3000/alexlebens/site-documentation/compare/0.9.0...0.10.0) (2026-03-26)
 ### Features
 * add more apps ([33b64b0](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/33b64b0122a8ff734e632d0fdcaf92a474e1d631))
 # [0.9.0](http://gitea-http.gitea:3000/alexlebens/site-documentation/compare/0.8.0...0.9.0) (2026-03-26)
 ### Features
 * add more apps ([28910c8](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/28910c8ee57a2436cbe1ca01e95b85d8600f360e))
 * collapse apps by default, too many ([79b2f0d](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/79b2f0d1c89da74693ffddd78460197cd3d91bd5))
 # [0.8.0](http://gitea-http.gitea:3000/alexlebens/site-documentation/compare/0.7.0...0.8.0) (2026-03-25)
 ### Features
 * add more apps ([c69fde3](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/c69fde38f93cd8f8fe50503c7e3b0523eeb73775))
 # [0.7.0](http://gitea-http.gitea:3000/alexlebens/site-documentation/compare/0.6.0...0.7.0) (2026-03-25)
 ### Features
 * add more apps ([8e49a12](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/8e49a12511f26de4060ff2aaef0f707446e210bd))
 * change schedule ([4077d32](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/4077d3289cd2a87d8499b31eb6a70fd460aa72e4))
 # [0.6.0](http://gitea-http.gitea:3000/alexlebens/site-documentation/compare/0.5.0...0.6.0) (2026-03-23)
 ### Features
 * add more apps ([ce3d1a4](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/ce3d1a4a27d3e7850f05cc91fd3e1bae42ef5cea))
 # [0.5.0](http://gitea-http.gitea:3000/alexlebens/site-documentation/compare/0.4.0...0.5.0) (2026-03-23)
 ### Features
 * add argo-cd ([36be56e](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/36be56e4502cbc40a7380ef1f7124b002ba7c583))
 # [0.4.0](http://gitea-http.gitea:3000/alexlebens/site-documentation/compare/0.3.0...0.4.0) (2026-03-23)
 ### Bug Fixes
 * remove react deps ([5e97a52](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/5e97a524ba045398267f80f55c40288ab40f0d47))
 ### Features
 * add and update pre-commit ([95805dc](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/95805dcd071dd08e1e6451d96b2d0d1058abedaf))
 * add applications, actual ([e21d142](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/e21d1426d23c7deee7ccd415e8ad528f3a9c0b08))
 * add argo-workflows ([abde3db](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/abde3db3c76a37ffda8232f8293b8b402eaef81e))
 * merge ([a3e6e65](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/a3e6e65c79a92d34cc4b0fffdbba7719bcb14b5d))
 * remove splash template ([3fecb72](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/3fecb72e89af7eac1d4fa04e7ec5280c6cf546c8))
 # [0.3.0](http://gitea-http.gitea:3000/alexlebens/site-documentation/compare/0.2.0...0.3.0) (2026-03-15)
 ### Features
 * add and update pre-commit ([972bbff](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/972bbffb41020489508660c261559b0e6c806ca6))
 # [0.2.0](http://gitea-http.gitea:3000/alexlebens/site-documentation/compare/0.1.7...0.2.0) (2026-03-12)
 ### Features
 * add robots ([4ef4353](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/4ef43534a0f26bc5593258c9cd6a31d62283929d))
 * switch to bun ([7413830](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/74138302a4c2ad45a850459c47a17dd09014f3ad))
 * trigger minor version update ([7a9b62d](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/7a9b62dc048ffd947bb6dd41523091bbc9346e84))
 * use alpine-dev for bun builder ([4575bfb](http://gitea-http.gitea:3000/alexlebens/site-documentation/commit/4575bfb9138bc9ca5f9d93e845155fc56d3a8491))
@@ -1,35 +1,35 @@
-ARG REGISTRY=docker.io
+ARG REGISTRY=dhi.io
-FROM ${REGISTRY}/node:24.13.1-alpine AS base
+FROM ${REGISTRY}/bun:1.3.11-alpine3.22-dev AS builder
 ENV PNPM_HOME="/pnpm"
 ENV PATH="$PNPM_HOME:$PATH"
 RUN corepack enable
 WORKDIR /app
-COPY package.json pnpm-lock.yaml ./
+COPY package.json bun.lock ./
-FROM base AS prod-deps
+FROM builder AS prod-deps
-RUN --mount=type=cache,id=pnpm,target=/pnpm/store pnpm install --prod --frozen-lockfile
+RUN --mount=type=cache,id=bun,target=/root/.bun/install/cache \
    bun install --production --frozen-lockfile
-FROM prod-deps AS build-deps
+FROM builder AS build-deps
-RUN --mount=type=cache,id=pnpm,target=/pnpm/store pnpm install --frozen-lockfile
+RUN --mount=type=cache,id=bun,target=/root/.bun/install/cache \
    bun install --frozen-lockfile
 FROM build-deps AS build
 COPY . .
-RUN pnpm run build
+RUN bun run build
 RUN pnpm prune --prod
-FROM base AS runtime
+FROM ${REGISTRY}/bun:1.3.11-alpine3.22 AS runtime
 WORKDIR /app
 COPY --from=prod-deps /app/node_modules /app/node_modules
 COPY --from=build /app/dist /app/dist
 ARG APP_VERSION=latest
 ARG APP_VERSION
 ENV HOST=0.0.0.0
 ENV SITE_URL=https://docs.alexlebens.dev
 ENV PORT=4321
-LABEL version="0.1.5"
+LABEL version=$APP_VERSION
 LABEL description="Astro based documentation website"
 EXPOSE $PORT
-CMD ["node", "./dist/server/entry.mjs"]
+CMD ["bun", "run", "./dist/server/entry.mjs"]
@@ -6,7 +6,7 @@
 pnpm create astro@latest -- --template starlight
 ```
-## 🚀 Project Structure
+## Project Structure
 Inside of your Astro + Starlight project, you'll see the following folders and files:
@@ -29,15 +29,12 @@ Images can be added to `src/assets/` and embedded in Markdown with a relative li
 Static assets, like favicons, can be placed in the `public/` directory.
-## 🧞 Commands
+## Commands
 All commands are run from the root of the project, from a terminal:
 | Command                | Action                                           |
 | :--------------------- | :----------------------------------------------- |
-| `pnpm install`         | Installs dependencies                            |
+| `bun install`         | Installs dependencies                            |
-| `pnpm dev`             | Starts local dev server at `localhost:4321`      |
+| `bun run dev`             | Starts local dev server at `localhost:4321`      |
-| `pnpm build`           | Build your production site to `./dist/`          |
+| `bun run build`           | Build your production site to `./dist/`          |
 | `pnpm preview`         | Preview your build locally, before deploying     |
 | `pnpm astro ...`       | Run CLI commands like `astro add`, `astro check` |
 | `pnpm astro -- --help` | Get help using the Astro CLI                     |
@@ -2,7 +2,7 @@
 import { defineConfig } from "astro/config";
 import node from "@astrojs/node";
-import tailwindcss from "@tailwindcss/vite";
+import sitemap from '@astrojs/sitemap';
 import starlight from "@astrojs/starlight";
 import starlightThemeRapide from 'starlight-theme-rapide'
@@ -13,17 +13,23 @@ const getSiteURL = () => {
  return "http://localhost:4321";
 };
 // https://astro.build/config
 export default defineConfig({
  site: getSiteURL(),
  security: { csp: true },
  prefetch: true,
  integrations: [
-    tailwindcss(),
+    sitemap(),
    starlight({
      title: "Alex Lebens Docs",
      customCss: [
        './src/styles/custom.css',
      ],
      expressiveCode: {
        themes: ['vitesse-light', 'vitesse-dark'],
      },      
      social: [
        {
          icon: "external",
@@ -45,21 +51,16 @@ export default defineConfig({
        },
        {
          label: "Applications",
          collapsed: true,
          autogenerate: { directory: "applications" },
        },
      ],
-    }),
+    })  
  ],
-  plugins: {
+  output: 'static',
    "@tailwindcss/postcss": {},
  },
  vite: {
    plugins: [tailwindcss()],
  },
  adapter: node({
-    mode: "standalone",
+    mode: 'standalone',
  }),
 });
@@ -1,7 +1,7 @@
 {
  "name": "site-documentation",
  "type": "module",
-  "version": "0.1.5",
+  "version": "0.19.0",
  "scripts": {
    "dev": "astro dev",
    "build": "astro build",
@@ -12,27 +12,37 @@
    "astro": "astro"
  },
  "dependencies": {
-    "@astrojs/mdx": "^4.3.13",
+    "@astrojs/mdx": "5.0.3",
-    "@astrojs/node": "^9.5.4",
+    "@astrojs/node": "10.0.4",
-    "@astrojs/starlight": "^0.37.6",
+    "@astrojs/sitemap": "3.7.2",
-    "@tailwindcss/postcss": "^4.2.0",
+    "@astrojs/starlight": "0.38.2",
-    "@tailwindcss/vite": "^4.2.0",
+    "@tailwindcss/postcss": "4.2.2",
-    "astro": "^5.17.3",
+    "@tailwindcss/vite": "4.2.2",
-    "motion": "^12.34.2",
+    "astro": "6.1.3",
-    "sanitize-html": "^2.17.1",
+    "sanitize-html": "2.17.2",
-    "sharp": "^0.34.5",
+    "sharp": "0.34.5",
-    "starlight-theme-rapide": "^0.5.2",
+    "starlight-theme-rapide": "0.5.2",
-    "tailwindcss": "^4.2.0"
+    "tailwindcss": "4.2.2"
  },
  "devDependencies": {
-    "@tailwindcss/typography": "^0.5.19",
+    "@saithodev/semantic-release-gitea": "2.1.0",
-    "@typescript-eslint/parser": "^8.56.0",
+    "@semantic-release/changelog": "6.0.3",
-    "eslint": "^10.0.0",
+    "@semantic-release/commit-analyzer": "13.0.1",
-    "eslint-config-prettier": "^10.1.8",
+    "@semantic-release/git": "10.0.1",
-    "eslint-plugin-astro": "^1.6.0",
+    "@semantic-release/npm": "13.1.5",
-    "prettier": "^3.8.1",
+    "@semantic-release/release-notes-generator": "14.1.0",
-    "prettier-plugin-astro": "^0.14.1",
+    "@tailwindcss/forms": "0.5.11",
-    "prettier-plugin-tailwindcss": "^0.7.2",
+    "@tailwindcss/typography": "0.5.19",
-    "typescript-eslint": "^8.56.0"
+    "@typescript-eslint/parser": "8.58.0",
    "eslint": "10.2.0",
    "eslint-config-prettier": "10.1.8",
    "eslint-plugin-astro": "1.6.0",
    "prettier": "3.8.1",
    "prettier-plugin-astro": "0.14.1",
    "prettier-plugin-tailwindcss": "0.7.2",
    "semantic-release": "25.0.3",
    "semantic-release-export-data": "1.2.0",
    "typescript": "6.0.2",
    "typescript-eslint": "8.58.0"
  }
 }
@@ -9,6 +9,7 @@
    "labels": [],
    "prHourlyLimit": 0,
    "prConcurrentLimit": 0,
    "rangeStrategy": "pin",
    "packageRules": [
        {
            "description": "Label dependency",
@@ -0,0 +1,15 @@
 ---
 title: Actual
 description: Actual Budget is a super fast and privacy-focused app for managing finances.
 hero:
  tagline: Actual Budget is a super fast and privacy-focused app for managing finances.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/actual-budget.webp
  actions:
    - text: Source
      link: https://github.com/actualbudget/actual
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/actual
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Argo CD
 description: Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. 
 hero:
  tagline: Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/argo-cd.webp
  actions:
    - text: Source
      link: https://github.com/argoproj/argo-cd
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/argocd
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Audiobookshelf
 description: Audiobookshelf is a self-hosted audiobook and podcast server.
 hero:
  tagline: Audiobookshelf is a self-hosted audiobook and podcast server.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/audiobookshelf.webp
  actions:
    - text: Source
      link: https://github.com/advplyr/audiobookshelf
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/audiobookshelf
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Authentik
 description: Authentik is an open-source Identity Provider (IdP) for modern SSO. It supports SAML, OAuth2/OIDC, LDAP, RADIUS, and more, designed for self-hosting from small labs to large production clusters.
 hero:
  tagline: Authentik is an open-source Identity Provider (IdP) for modern SSO. It supports SAML, OAuth2/OIDC, LDAP, RADIUS, and more, designed for self-hosting from small labs to large production clusters.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/authentik.webp
  actions:
    - text: Source
      link: https://github.com/goauthentik/authentik
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/authentik
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Backrest
 description: Backrest is a web-accessible backup solution built on top of restic.
 hero:
  tagline: Backrest is a web-accessible backup solution built on top of restic.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/backrest.webp
  actions:
    - text: Source
      link: https://github.com/garethgeorge/backrest
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/backrest
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Bazarr
 description: Bazarr is a companion application to Sonarr and Radarr. It manages and downloads subtitles based on your requirements. 
 hero:
  tagline: Bazarr is a companion application to Sonarr and Radarr. It manages and downloads subtitles based on your requirements. 
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/bazarr.webp
  actions:
    - text: Source
      link: https://github.com/morpheus65535/bazarr
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/bazarr
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Blocky
 description: Blocky is a DNS proxy and ad-blocker for the local network written in Go with following features.
 hero:
  tagline: Blocky is a DNS proxy and ad-blocker for the local network written in Go with following features.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/blocky.webp
  actions:
    - text: Source
      link: https://github.com/0xERR0R/blocky
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/blocky
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Cert Manager
 description: Cert Manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates.
 hero:
  tagline: Cert Manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates.
  image:
    file: https://raw.githubusercontent.com/cert-manager/cert-manager/52bddefde7b2d44841c77cf15038d51330cb9748/logo/logo.svg
  actions:
    - text: Source
      link: https://github.com/cert-manager/cert-manager
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/cert-manager
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Cilium
 description: Cilium is a networking, observability, and security solution with an eBPF-based dataplane.
 hero:
  tagline: Cilium is a networking, observability, and security solution with an eBPF-based dataplane.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/cilium.webp
  actions:
    - text: Source
      link: https://github.com/cilium/cilium
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/cilium
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: CloudNativePG
 description: CloudNativePG (CNPG) is an open-source platform designed to seamlessly manage PostgreSQL databases in Kubernetes environments.
 hero:
  tagline: CloudNativePG (CNPG) is an open-source platform designed to seamlessly manage PostgreSQL databases in Kubernetes environments.
  image:
    file: https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg.github.io/0c2d2ff561b7b8ddb6bc06ddb91bd20b73d3f82d/assets/images/hero_image.svg
  actions:
    - text: Source
      link: https://github.com/cloudnative-pg/cloudnative-pg
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/cloudnative-pg
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: CoreDNS
 description: CoreDNS is a DNS server/forwarder, written in Go, that chains plugins.
 hero:
  tagline: CoreDNS is a DNS server/forwarder, written in Go, that chains plugins.
  image:
    file: https://raw.githubusercontent.com/coredns/coredns.io/refs/heads/master/static/images/favicon.png
  actions:
    - text: Source
      link: https://github.com/coredns/coredns
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/coredns
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Dawarich
 description: Dawarich is a self-hostable web app designed to replace Google Timeline (aka Google Location History).
 hero:
  tagline: Dawarich is a self-hostable web app designed to replace Google Timeline (aka Google Location History).
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/dawarich.webp
  actions:
    - text: Source
      link: https://github.com/Freika/dawarich
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/dawarich
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Democratic CSI
 description: Democratic CSI implements the csi (container storage interface) spec providing storage for various container orchestration systems.
 hero:
  tagline: Democratic CSI implements the csi (container storage interface) spec providing storage for various container orchestration systems.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/kubernetes.webp
  actions:
    - text: Source
      link: https://github.com/democratic-csi/democratic-csi
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/democratic-csi-synology-iscsi
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Descheduler
 description: Dependency Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
 hero:
  tagline: Dependency Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
  image:
    file: https://avatars.githubusercontent.com/u/40258585
  actions:
    - text: Source
      link: https://github.com/DependencyTrack/dependency-track
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/dependency-track
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Descheduler
 description: Descheduler, based on its policy, finds pods that can be moved and evicts them.
 hero:
  tagline: Descheduler, based on its policy, finds pods that can be moved and evicts them.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/kubernetes.webp
  actions:
    - text: Source
      link: https://github.com/kubernetes-sigs/descheduler
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/descheduler
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Directus
 description: Directus is a real-time API and App dashboard for managing SQL database content.
 hero:
  tagline: Directus is a real-time API and App dashboard for managing SQL database content.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/directus.webp
  actions:
    - text: Source
      link: https://github.com/directus/directus
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/directus
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Elastic Cloud on Kubernetes
 description: Elastic Cloud on Kubernetes automates the deployment, provisioning, management, and orchestration of Elasticsearch, Kibana, APM Server, Enterprise Search, Beats, Elastic Agent, Elastic Maps Server, Logstash, Elastic AutoOps Agent, and Elastic Package Registry on Kubernetes based on the operator pattern.
 hero:
  tagline: Elastic Cloud on Kubernetes automates the deployment, provisioning, management, and orchestration of Elasticsearch, Kibana, APM Server, Enterprise Search, Beats, Elastic Agent, Elastic Maps Server, Logstash, Elastic AutoOps Agent, and Elastic Package Registry on Kubernetes based on the operator pattern.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/elastic.webp
  actions:
    - text: Source
      link: https://github.com/elastic/cloud-on-k8s
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/elastic-operator
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Element Web
 description: Element (formerly known as Vector and Riot) is a Matrix web & desktop client built using the Matrix JS SDK.
 hero:
  tagline: Element (formerly known as Vector and Riot) is a Matrix web & desktop client built using the Matrix JS SDK.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/element.webp
  actions:
    - text: Source
      link: https://github.com/element-hq/element-web
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/element-web
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Eraser
 description: Eraser helps Kubernetes admins remove a list of non-running images from all Kubernetes nodes in a cluster.
 hero:
  tagline: Eraser helps Kubernetes admins remove a list of non-running images from all Kubernetes nodes in a cluster.
  image:
    file: https://raw.githubusercontent.com/eraser-dev/eraser/20576a24c512feb83c26ed867353d4143717d798/docs/static/img/eraser.svg
  actions:
    - text: Source
      link: https://github.com/eraser-dev/eraser
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/eraser
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Excalidraw
 description: Excalidraw is an open source virtual hand-drawn style whiteboard.
 hero:
  tagline: Excalidraw is an open source virtual hand-drawn style whiteboard.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/excalidraw.webp
  actions:
    - text: Source
      link: https://github.com/excalidraw/excalidraw
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/excalidraw
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: ExternalDNS
 description: ExternalDNS synchronizes exposed Kubernetes Services and Ingresses with DNS providers.
 hero:
  tagline: ExternalDNS synchronizes exposed Kubernetes Services and Ingresses with DNS providers.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/kubernetes.webp
  actions:
    - text: Source
      link: https://github.com/kubernetes-sigs/external-dns
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/external-dns
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: External Secrets Operator
 description: External Secrets Operator is a Kubernetes operator that integrates external secret management systems.
 hero:
  tagline: External Secrets Operator is a Kubernetes operator that integrates external secret management systems.
  image:
    file: https://raw.githubusercontent.com/external-secrets/external-secrets/a16e618c8607b599a2360dd08725015e78cafa1a/assets/eso-round-logo.svg
  actions:
    - text: Source
      link: https://github.com/external-secrets/external-secrets
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/external-secrets
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Foldergram
 description: Local-only photo and video gallery for folders, with an Instagram-inspired browsing pattern.
 hero:
  tagline: Local-only photo and video gallery for folders, with an Instagram-inspired browsing pattern.
  image:
    file: https://raw.githubusercontent.com/foldergram/foldergram/263f2c2c48e4362bf46fc349040d6376737d512b/client/public/favicon.svg
  actions:
    - text: Source
      link: https://github.com/foldergram/foldergram
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/foldergram
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: FreshRSS
 description: FreshRSS is a self-hosted RSS feed aggregator. It is lightweight, easy to work with, powerful, customizable, and has been translated into many languages.
 hero:
  tagline: FreshRSS is a self-hosted RSS feed aggregator. It is lightweight, easy to work with, powerful, customizable, and has been translated into many languages.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/freshrss.webp
  actions:
    - text: Source
      link: https://github.com/FreshRSS/FreshRSS
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/freshrss
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Garage
 description: Garage is an S3-compatible distributed object storage service designed for self-hosting at a small-to-medium scale.
 hero:
  tagline: Garage is an S3-compatible distributed object storage service designed for self-hosting at a small-to-medium scale.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/garage.webp
  actions:
    - text: Source
      link: https://git.deuxfleurs.fr/Deuxfleurs/garage
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/garage
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Gatus
 description: Gatus is a developer-oriented health dashboard that gives you the ability to monitor your services using HTTP, ICMP, TCP, and even DNS queries as well as evaluate the result of said queries by using a list of conditions on values like the status code, the response time, the certificate expiration, the body and many others.
 hero:
  tagline: Gatus is a developer-oriented health dashboard that gives you the ability to monitor your services using HTTP, ICMP, TCP, and even DNS queries as well as evaluate the result of said queries by using a list of conditions on values like the status code, the response time, the certificate expiration, the body and many others.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/gatus.webp
  actions:
    - text: Source
      link: https://github.com/TwiN/gatus
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/gatus
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Generic Device Plugin
 description: Generic Device Plugin enables allocating generic Linux devices, such as serial devices, the FUSE device, or video cameras, to Kubernetes Pods. 
 hero:
  tagline: Generic Device Plugin enables allocating generic Linux devices, such as serial devices, the FUSE device, or video cameras, to Kubernetes Pods. 
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/kubernetes.webp
  actions:
    - text: Source
      link: https://github.com/squat/generic-device-plugin
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/generic-device-plugin
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Gitea
 description: Git with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CD
 hero:
  tagline: Git with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CD
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/gitea.webp
  actions:
    - text: Source
      link: https://github.com/go-gitea/gitea
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/gitea
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Grafana Operator
 description: Grafana Operator is a Kubernetes operator built to help you manage your Grafana instances and its resources in and outside of Kubernetes.
 hero:
  tagline: Grafana Operator is a Kubernetes operator built to help you manage your Grafana instances and its resources in and outside of Kubernetes.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/grafana.webp
  actions:
    - text: Source
      link: https://github.com/grafana/grafana-operator
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/grafana-operator
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Grimmory
 description: Grimmory is a self-hosted application for managing your entire book collection in one place.
 hero:
  tagline: Grimmory is a self-hosted application for managing your entire book collection in one place.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/booklore.webp
  actions:
    - text: Source
      link: https://github.com/grimmory-tools/grimmory
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/grimmory
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Harbor
 description: Harbor is an open source trusted cloud native registry project that stores, signs, and scans content.
 hero:
  tagline: Harbor is an open source trusted cloud native registry project that stores, signs, and scans content.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/harbor.webp
  actions:
    - text: Source
      link: https://github.com/goharbor/harbor
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/harbor
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Headlamp
 description: Headlamp is an easy-to-use and extensible Kubernetes web UI and was created to blend the traditional feature set of other web UIs/dashboards with added functionality.
 hero:
  tagline: Headlamp is an easy-to-use and extensible Kubernetes web UI and was created to blend the traditional feature set of other web UIs/dashboards with added functionality.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/headlamp.webp
  actions:
    - text: Source
      link: https://github.com/kubernetes-sigs/headlamp
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/headlamp
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Home Assistant
 description: Open source home automation that puts local control and privacy first. Powered by a worldwide community of tinkerers and DIY enthusiasts.
 hero:
  tagline: Open source home automation that puts local control and privacy first. Powered by a worldwide community of tinkerers and DIY enthusiasts.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/home-assistant.webp
  actions:
    - text: Source
      link: https://github.com/home-assistant/core
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/home-assistant
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Homepage
 description: A highly customizable homepage (or startpage / application dashboard) with Docker and service API integrations.
 hero:
  tagline: A highly customizable homepage (or startpage / application dashboard) with Docker and service API integrations.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/homepage.webp
  actions:
    - text: Source
      link: https://github.com/gethomepage/homepage
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/homepage
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Houndarr
 description: Automated missing-media search for your *arr stack. Small batches. Polite intervals. Zero indexer abuse.
 hero:
  tagline: Automated missing-media search for your *arr stack. Small batches. Polite intervals. Zero indexer abuse.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/houndarr.webp
  actions:
    - text: Source
      link: https://github.com/av1155/houndarr
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/houndarr
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Immich
 description: High performance self-hosted photo and video management solution.
 hero:
  tagline: High performance self-hosted photo and video management solution.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/immich.webp
  actions:
    - text: Source
      link: https://github.com/immich-app/immich
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/immich
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Intel Device Plugins Operator
 description: Intel Device Plugins Operator manages plugins, then the GPU device plugin provides access to discrete and integrated Intel GPU device files.
 hero:
  tagline: Intel Device Plugins Operator manages plugins, then the GPU device plugin provides access to discrete and integrated Intel GPU device files.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/kubernetes.webp
  actions:
    - text: Source
      link: https://github.com/intel/intel-device-plugins-for-kubernetes
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/intel-device-plugin
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Jellyfin
 description: Jellyfin is a Free Software Media System that puts you in control of managing and streaming your media.
 hero:
  tagline: Jellyfin is a Free Software Media System that puts you in control of managing and streaming your media.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/jellyfin.webp
  actions:
    - text: Source
      link: https://github.com/jellyfin/jellyfin
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/jellyfin
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Jellystat
 description: Jellystat is a free and open source Statistics App for Jellyfin!
 hero:
  tagline: Jellystat is a free and open source Statistics App for Jellyfin!
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/jellystat.webp
  actions:
    - text: Source
      link: https://github.com/CyferShepard/Jellystat
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/jellystat
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Karakeep
 description: Karakeep is a self-hostable bookmark-everything app with a touch of AI for the data hoarders out there.
 hero:
  tagline: Karakeep is a self-hostable bookmark-everything app with a touch of AI for the data hoarders out there.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/karakeep.webp
  actions:
    - text: Source
      link: https://github.com/karakeep-app/karakeep
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/karakeep
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Kiwix
 description: Kiwix is an open-source software that allows you to have the whole Wikipedia at your fingertips.
 hero:
  tagline: Kiwix is an open-source software that allows you to have the whole Wikipedia at your fingertips.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/kiwix.webp
  actions:
    - text: Source
      link: https://github.com/kiwix
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/kiwix
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Komodo
 description: Komodo is a tool to build and deploy software across many servers.
 hero:
  tagline: Komodo is a tool to build and deploy software across many servers.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/komodo.webp
  actions:
    - text: Source
      link: https://github.com/moghtech/komodo
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/komodo
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Prometheus
 description: Prometheus, a Cloud Native Computing Foundation project, is a systems and service monitoring system.
 hero:
  tagline: Prometheus, a Cloud Native Computing Foundation project, is a systems and service monitoring system.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/prometheus.webp
  actions:
    - text: Source
      link: https://github.com/prometheus/prometheus
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/kube-prometheus-stack
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Kubelet Serving Certificate Approver
 description: Kubelet Serving Certificate Approver is a custom approving controller which approves kubernetes.io/kubelet-serving Certificate Signing Request that kubelet use to serve TLS endpoints.
 hero:
  tagline: Kubelet Serving Certificate Approver is a custom approving controller which approves kubernetes.io/kubelet-serving Certificate Signing Request that kubelet use to serve TLS endpoints.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/kubernetes.webp
  actions:
    - text: Source
      link: https://github.com/alex1989hu/kubelet-serving-cert-approver
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/kubelet-serving-cert-approver
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Kubernetes Cloudflare DDNS
 description: This is a simple Kubernetes cronjob which can be used for updating a DNS record on Cloudflare.
 hero:
  tagline: This is a simple Kubernetes cronjob which can be used for updating a DNS record on Cloudflare.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/cloudflare.webp
  actions:
    - text: Source
      link: https://github.com/kubitodev/kubernetes-cloudflare-ddns
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/kubernetes-cloudflare-ddns
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: LanguageTool
 description: LanguageTool is open-source proofreading software for English, Spanish, French, German, Portuguese, Polish, Dutch, and more than 20 other languages. It finds many errors that a simple spell checker cannot detect.
 hero:
  tagline: LanguageTool is open-source proofreading software for English, Spanish, French, German, Portuguese, Polish, Dutch, and more than 20 other languages. It finds many errors that a simple spell checker cannot detect.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/languagetool.webp
  actions:
    - text: Source
      link: https://github.com/languagetool-org/languagetool
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/languagetool
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Libation
 description: Libation is a free, open-source application for downloading and managing your Audible audiobooks. It decrypts your library, removes DRM, and lets you own your audiobooks forever.
 hero:
  tagline: Libation is a free, open-source application for downloading and managing your Audible audiobooks. It decrypts your library, removes DRM, and lets you own your audiobooks forever.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/libation.webp
  actions:
    - text: Source
      link: https://github.com/rmcrackan/Libation
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/libation
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Lidarr
 description: Lidarr is a music collection manager for Usenet and BitTorrent users.
 hero:
  tagline: Lidarr is a music collection manager for Usenet and BitTorrent users.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/lidarr.webp
  actions:
    - text: Source
      link: https://github.com/Lidarr/Lidarr
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/lidarr
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Local Path Provisioner
 description: Dynamically provisioning persistent local storage with Kubernetes 
 hero:
  tagline: Dynamically provisioning persistent local storage with Kubernetes 
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/kubernetes.webp
  actions:
    - text: Source
      link: https://github.com/rancher/local-path-provisioner
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/local-path-provisioner
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Loki
 description: Loki is a horizontally-scalable, highly-available, multi-tenant log aggregation system inspired by Prometheus.
 hero:
  tagline: Loki is a horizontally-scalable, highly-available, multi-tenant log aggregation system inspired by Prometheus.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/loki.webp
  actions:
    - text: Source
      link: https://github.com/grafana/loki
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/loki
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: MariaDB Operator
 description: Run and operate MariaDB in a cloud native way. Declaratively manage your MariaDB using Kubernetes CRDs rather than imperative commands.
 hero:
  tagline: Run and operate MariaDB in a cloud native way. Declaratively manage your MariaDB using Kubernetes CRDs rather than imperative commands.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/mariadb.webp
  actions:
    - text: Source
      link: https://github.com/mariadb-operator/mariadb-operator
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/mariadb-operator
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Matrix Synapse
 description: Matrix is the open standard for secure and interoperable real-time communications. Synapse is an open source Matrix homeserver implementation, written and maintained by Element.
 hero:
  tagline: Matrix is the open standard for secure and interoperable real-time communications. Synapse is an open source Matrix homeserver implementation, written and maintained by Element.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/matrix.webp
  actions:
    - text: Source
      link: https://github.com/element-hq/synapse
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/matrix-synapse
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: MediaLyze
 description: Self-hosted media library analysis for large video collections.
 hero:
  tagline: Self-hosted media library analysis for large video collections.
  image:
    file: https://raw.githubusercontent.com/frederikemmer/MediaLyze/d8f69c0628bac7c047b90f91a66341648029c273/frontend/public/favicon.svg
  actions:
    - text: Source
      link: https://github.com/frederikemmer/MediaLyze
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/mediaLyze
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Metrics Server
 description: Metrics Server is a scalable, efficient source of container resource metrics for Kubernetes built-in autoscaling pipelines.
 hero:
  tagline: Metrics Server is a scalable, efficient source of container resource metrics for Kubernetes built-in autoscaling pipelines.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/kubernetes.webp
  actions:
    - text: Source
      link: https://github.com/kubernetes-sigs/metrics-server
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/metrics-server
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Music Grabber
 description: A self-hosted music acquisition service. Search YouTube, SoundCloud, Soulseek, MP3Phoenix and Monochrome (Tidal lossless), tap a result and it downloads the best quality audio straight into your music library.
 hero:
  tagline: A self-hosted music acquisition service. Search YouTube, SoundCloud, Soulseek, MP3Phoenix and Monochrome (Tidal lossless), tap a result and it downloads the best quality audio straight into your music library.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/music-grabber.webp
  actions:
    - text: Source
      link: https://gitlab.com/g33kphr33k/musicgrabber
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/music-grabber
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Navidrome
 description: Navidrome is an open source web-based music collection server and streamer. It gives you freedom to listen to your music collection from any browser or mobile device.
 hero:
  tagline: Navidrome is an open source web-based music collection server and streamer. It gives you freedom to listen to your music collection from any browser or mobile device.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/navidrome.webp
  actions:
    - text: Source
      link: https://github.com/navidrome/navidrome
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/navidrome
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Node Feature Discovery
 description: Node Feature Discovery is a Kubernetes add-on for detecting hardware features and system configuration.
 hero:
  tagline: Node Feature Discovery is a Kubernetes add-on for detecting hardware features and system configuration.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/kubernetes.webp
  actions:
    - text: Source
      link: https://github.com/kubernetes-sigs/node-feature-discovery
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/node-feature-discovery
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: ntfy
 description: ntfy (pronounced "notify") is a simple HTTP-based pub-sub notification service.
 hero:
  tagline: ntfy (pronounced "notify") is a simple HTTP-based pub-sub notification service.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/ntfy.webp
  actions:
    - text: Source
      link: https://github.com/binwiederhier/ntfy
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/ntfy
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Ollama
 description: Get up and running with Kimi-K2.5, GLM-5, MiniMax, DeepSeek, gpt-oss, Qwen, Gemma and other models.
 hero:
  tagline: Get up and running with Kimi-K2.5, GLM-5, MiniMax, DeepSeek, gpt-oss, Qwen, Gemma and other models.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/ollama.webp
  actions:
    - text: Source
      link: https://github.com/ollama/ollama
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/ollama
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: OmniTools
 description: Self-hosted collection of powerful web-based tools for everyday tasks. No ads, no tracking, just fast, accessible utilities right from your browser!
 hero:
  tagline: Self-hosted collection of powerful web-based tools for everyday tasks. No ads, no tracking, just fast, accessible utilities right from your browser!
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/omnitools.webp
  actions:
    - text: Source
      link: https://github.com/iib0011/omni-tools
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/omni-tools
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Outline
 description: A fast, collaborative, knowledge base for your team built using React and Node.js.
 hero:
  tagline: A fast, collaborative, knowledge base for your team built using React and Node.js.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/outline.webp
  actions:
    - text: Source
      link: https://github.com/outline/outline
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/outline
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Paperless-ngx
 description: A community-supported supercharged document management system; scan, index and archive all your documents.
 hero:
  tagline: A community-supported supercharged document management system; scan, index and archive all your documents.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/paperless-ngx.webp
  actions:
    - text: Source
      link: https://github.com/paperless-ngx/paperless-ngx
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/paperless-ngx
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Plex
 description: Plex organizes video, music and photos from personal media libraries and streams them to smart TVs, streaming boxes and mobile devices. 
 hero:
  tagline: Plex organizes video, music and photos from personal media libraries and streams them to smart TVs, streaming boxes and mobile devices. 
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/plex.webp
  actions:
    - text: Source
      link: https://github.com/linuxserver/docker-plex
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/plex
      icon: right-arrow
 ---
@@ -0,0 +1,15 @@
 ---
 title: Version Checker
 description: Kubernetes utility for exposing image versions in use, compared to latest available upstream, as metrics.
 hero:
  tagline: Kubernetes utility for exposing image versions in use, compared to latest available upstream, as metrics.
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/kubernetes.webp
  actions:
    - text: Source
      link: https://github.com/jetstack/version-checker
      icon: right-arrow
    - text: Deployment Chart
      link: https://gitea.alexlebens.dev/alexlebens/infrastructure/src/branch/main/clusters/cl01tl/helm/version-checker
      icon: right-arrow
 ---
@@ -1,6 +1,10 @@
 ---
 title: Talos Upgrade 1.12.0
 description: Steps followed for the v1.12.0 upgrade process
 hero:
  tagline: Steps followed for the v1.12.0 upgrade process
  image:
    file: https://raw.githubusercontent.com/siderolabs/docs/3989ed11f0622252d7cee03b3ba3a3052be242d7/public/images/talos.svg
 ---
 The upgrade to this version was more extension as there have been migrations to using configuration documents. This required rewriting the configuration document to a series of patches and provide a deterministic generation command for the different host types. In addition there was also a change to storage layout to separate ceph, local-path, and ephemeral storage on the NUC hosts.
@@ -1,6 +1,10 @@
 ---
 title: Talos Upgrade Generic
 description: Steps followed for the standard upgrade process
 hero:
  tagline: Steps followed for the v1.12.0 upgrade process
  image:
    file: https://raw.githubusercontent.com/siderolabs/docs/3989ed11f0622252d7cee03b3ba3a3052be242d7/public/images/talos.svg
 ---
 This is the standard upgrade process for Talos. Relatively simple, just verify, run commands, and verify.
@@ -0,0 +1,109 @@
 ---
 title: Vault SSH Certificate Authority
 description: Steps followed to enable using Vault as a CA for ssh login
 hero:
  tagline: Steps followed for the v1.12.0 upgrade process
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/vault.webp
 ---
 # Setup
 [Reference Vault Documentation](https://developer.hashicorp.com/vault/docs/secrets/ssh/signed-ssh-certificates#host-key-signing)
 I have set the documenation to use my own defaults and configuration. This also assumes a running and active Vault instance.
 ## Enable the SSH CA
 I followed the defaults mostly in the docs, reference the above link for details. Use either root or a role with permissions for the endpoints.
 Start with enabling the mount.
 ```bash
 vault secrets enable -path=ssh-client-signer ssh
 ```
 Generate a key. This will be used only for signing and not for client authentication. Keep it in a secure location, rename the path the key will be written to.
 ```bash
 ssh-keygen -t rsa -C "alexanderlebens@gmail.com"
 ```
 Add the above signing key.
 ```bash
 vault write ssh-client-signer/config/ca private_key="..." public_key="..."
 ```
 ## Create Client Role and Key
 Once the above is complete, create a role to use to sign your own client cert. I used my common username and configurations. This can also be done in the Vault UI.
 ```bash
 vault write ssh-client-signer/roles/alexlebens -<<"EOH"
 {
  "algorithm_signer": "rsa-sha2-256",
  "allow_user_certificates": true,
  "allowed_users": "*",
  "allowed_extensions": "permit-pty,permit-port-forwarding",
  "default_extensions": {
    "permit-pty": ""
  },
  "key_type": "ca",
  "default_user": "alexlebens",
  "ttl": "30m0s"
 }
 EOH
 ```
 ## Create Client Key
 Generate the ssh key to use to authenticate to your hosts. This is the one to keep in ~/.ssh.
 ```bash
 ssh-keygen -t rsa -C "alexanderlebens@gmail.com"
 ```
 ## Configure SSH to use the Key and Cert
 SSH will defailt to using the cert when using the matching name "id_rsa_host-cert.pub" as shown in the renewal certificate section. Use the principal as signed by Vault as the User and set the IdentityFile to the Key as generated above.
 ```
 Host ps08rp
    Hostname 10.232.1.51
    User alexlebens
    IdentityFile ~/.ssh/id_rsa_host
 ```
 # Operations
 ## Prepare Target Host
 Download the public cert from the endpoint.
 ```bash
 curl -o /etc/ssh/trusted-user-ca-keys.pem https://vault.alexlebens.net/v1/ssh-client-signer/public_key
 ```
 Then add that file to the sshd config.
 ```
 TrustedUserCAKeys /etc/ssh/trusted-user-ca-keys.pem
 ```
 ### Automation
 This step is currently manual as I have few hosts that I need ssh for. The most common tool for automation would be Ansible. But this would only be useful for my RaspberyPis and I plan to migrate those to Talos and Kubernetes in the future.
 ## Renew Client Certificate
 Sign the client cert, on your machine, with the Vault CA.
 ```bash
 vault write -field=signed_key ssh-client-signer/sign/alexlebens public_key=@$HOME/.ssh/id_rsa_host.pub > ~/.ssh/id_rsa_host-cert.pub
 ```
 I added the following to my .zshrc to make this easier. So now I just run "vault-renew" before I need to ssh.
 ```
 # Vault
 export VAULT_ADDR="https://vault.alexlebens.net"
 alias vault-renew='vault write -field=signed_key ssh-client-signer/sign/alexlebens public_key=@$HOME/.ssh/id_rsa_host.pub > ~/.ssh/id_rsa_host-cert.pub'
 ```
 ### View Cert Details
 For troubleshooting purposes or clafification use the follow to inspect the cert.
 ```bash
 ssh-keygen -Lf ~/.ssh/id_rsa_host-cert.pub
 ```
@@ -1,7 +1,6 @@
 ---
 title: Documentation for my Homelab
 description: Guides and reference for my homelab infrastructure.
 template: splash
 hero:
  tagline: Guides and reference for my homelab infrastructure.
  image:
@@ -1,6 +1,10 @@
 ---
 title: Introduction
 description: Overiew of the homelab
 hero:
  tagline: Steps followed for the v1.12.0 upgrade process
  image:
    file: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/docs-collaboration.webp
 sidebar:
  order: 1     
 ---
@@ -0,0 +1,14 @@
 // https://docs.astro.build/en/guides/integrations-guide/sitemap/#usage
 import type { APIRoute } from 'astro';
 const getRobotsTxt = (sitemapURL: URL) => `\
 User-agent: *
 Allow: /
 Sitemap: ${sitemapURL.href}
 `;
 export const GET: APIRoute = ({ site }) => {
  const sitemapURL = new URL('sitemap-index.xml', site);
  return new Response(getRobotsTxt(sitemapURL));
 };