pascaliske / infrastructure Goto Github PK

View Code? Open in Web Editor NEW

46.0 4.0 4.0 16.43 MB

Flux based GitOps repository for my home lab infrastructure.

Home Page: https://k8s.pascaliske.dev

License: MIT License

Shell 3.24% Jinja 4.22% YAML 80.99% Ruby 7.66% HCL 3.89%

unifi cloudflared home-assistant network configurations dns raspberry-pi prometheus grafana ansible

infrastructure's People

Contributors

Stargazers

Watchers

Forkers

00mjk 5l1v3r1

infrastructure's Issues

[feat] Backup Strategy

[feat] Implement Docker socket proxy

For better security the Docker socket access should be managed by a proxy.

Setup Docker socket proxy
Switch all socket references to TCP access

[feat] Outline integration

Outline

[feat] Backup Strategy - Gigaset Go Box `config`

`watchtower` → `keel/keel`

Watchtower is not compatible with Kubernetes. Possible replacement is keel (keel/keel).
But their docker image is not ARM compatible by now: keel-hq/keel#619

[feat] Switch from Travis to Actions

Convert Travis CI config to GitHub Actions workflow.

Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

Detected dependencies

ansible-galaxy

ansible/requirements.yml

flux

cluster/base/flux-system/gotk-components.yaml

fluxcd/flux2 v2.2.3

cluster/base/flux-system/gotk-sync.yaml

cluster/core/cert-manager/helm-release.yaml

cert-manager v1.14.5

cluster/core/cloudnative-pg/helm-release.yaml

cloudnative-pg 0.21.0

cluster/core/crowdsec/helm-release.yaml

crowdsec 0.10.0

cluster/core/kured/helm-release.yaml

kured 5.4.5

cluster/core/node-problem-detector/helm-release.yaml

node-problem-detector 2.3.13

cluster/core/traefik-errors/helm-release.yaml

traefik-errors 4.0.0

cluster/core/traefik/helm-release.yaml

traefik 27.0.2

cluster/core/trivy-operator/helm-release.yaml

trivy-operator 0.22.1

cluster/core/velero/helm-release.yaml

velero 6.0.0

cluster/crds/kube-prometheus-stack/source.yaml

kube-prometheus-stack-source kube-prometheus-stack-58.2.2

cluster/crds/traefik/source.yaml

traefik-source v27.0.2

cluster/crds/trivy-operator/source.yaml

trivy-operator-source v0.20.1

cluster/crds/velero/source.yaml

velero-source velero-6.0.0

cluster/services/authelia/helm-release-external.yaml

authelia 0.8.58

cluster/services/authelia/helm-release.yaml

authelia 0.8.58

cluster/services/blocky/helm-release.yaml

blocky 10.5.2

cluster/services/clickhouse/helm-release.yaml

clickhouse 0.3.0

cluster/services/cloudflared/helm-release.yaml

cloudflared 2.0.4

cluster/services/code-server/helm-release.yaml

code-server 2.0.0

cluster/services/descheduler/helm-release.yaml

descheduler 0.29.0

cluster/services/dyndns/helm-release.yaml

cloudflare-dyndns 0.1.2

cluster/services/gitlab/helm-release.yaml

gitlab 3.1.1

cluster/services/gitlab/runner/helm-release.yaml

gitlab-runner 0.64.0

cluster/services/hammond/helm-release.yaml

hammond 1.0.0

cluster/services/home-assistant/helm-release.yaml

home-assistant 13.4.2

cluster/services/homer/helm-release.yaml

homer 2.0.0

cluster/services/linkding/helm-release.yaml

linkding 2.0.0

cluster/services/monitoring/cloudflare-exporter/helm-release.yaml

cloudflare-exporter 0.1.9

cluster/services/monitoring/fritzbox-exporter/helm-release.yaml

fritzbox-exporter 2.0.3

cluster/services/monitoring/kube-prometheus-stack/helm-release.yaml

kube-prometheus-stack 58.2.2

cluster/services/monitoring/loki/helm-release.yaml

loki 6.3.4

cluster/services/monitoring/plausible-exporter/helm-release.yaml

plausible-exporter 0.0.2

cluster/services/monitoring/redis-exporter/helm-release.yaml

prometheus-redis-exporter 6.2.0

cluster/services/monitoring/speedtest-exporter/helm-release.yaml

speedtest-exporter 5.4.2

cluster/services/monitoring/unifi-poller/helm-release.yaml

unifi-poller 11.1.2

cluster/services/monitoring/vector/helm-release.yaml

vector 0.32.1

cluster/services/paperless/helm-release.yaml

paperless 5.1.0

cluster/services/plausible/helm-release.yaml

plausible 1.1.0

cluster/services/redis/helm-release.yaml

redis 1.1.4

cluster/services/snapdrop/helm-release.yaml

snapdrop 2.0.0

cluster/services/unbound/helm-release.yaml

unbound 1.0.3

cluster/services/unifi/helm-release.yaml

unifi 5.1.2

cluster/services/uptime-kuma/helm-release.yaml

uptime-kuma 2.0.0

cluster/services/vaultwarden/helm-release.yaml

vaultwarden 5.3.2

cluster/services/vikunja/helm-release.yaml

vikunja 5.0.0

github-actions

.github/workflows/ansible.yml

actions/checkout v4

ansible/ansible-lint v24.2.2

.github/workflows/docs.yml

actions/checkout v4

arduino/setup-task v1

actions/cache v4

.github/workflows/labels.yml

actions/checkout v4

crazy-max/ghaction-github-labeler v5

.github/workflows/terraform.yml

actions/checkout v4

arduino/setup-task v1

hashicorp/setup-terraform v3

terraform-linters/setup-tflint v4

actions/checkout v4

tfsec/tfsec-sarif-action v0.1.4

github/codeql-action v3.25.3

actions/checkout v4

arduino/setup-task v1

hashicorp/setup-terraform v3

actions/github-script v7

helm-values

cluster/base/flux-system/gotk-components.yaml

ghcr.io/fluxcd/source-controller v1.2.5

ghcr.io/fluxcd/kustomize-controller v1.2.2

ghcr.io/fluxcd/helm-controller v0.37.4

ghcr.io/fluxcd/notification-controller v1.2.4

cluster/core/crowdsec/helm-release.yaml

ghcr.io/crowdsecurity/crowdsec v1.6.0

metabase/metabase v0.49.7

cluster/core/kured/helm-release.yaml

ghcr.io/kubereboot/kured 1.15.1

cluster/core/node-problem-detector/helm-release.yaml

registry.k8s.io/node-problem-detector/node-problem-detector v0.8.18

cluster/core/system-upgrade/plans/master.yaml

cluster/core/system-upgrade/plans/worker.yaml

cluster/core/traefik-errors/helm-release.yaml

ghcr.io/pascaliske/traefik-errors 1.2.0

cluster/core/traefik/helm-release.yaml

traefik 2.11.2

cluster/core/velero/helm-release.yaml

velero/velero v1.13.2

cluster/services/authelia/helm-release-external.yaml

ghcr.io/authelia/authelia 4.38.8

cluster/services/authelia/helm-release.yaml

ghcr.io/authelia/authelia 4.38.8

cluster/services/blocky/helm-release.yaml

ghcr.io/0xerr0r/blocky v0.23

cluster/services/clickhouse/helm-release.yaml

clickhouse/clickhouse-server 24.3.2.23-alpine

cluster/services/cloudflared/helm-release.yaml

ghcr.io/crazy-max/cloudflared 2023.10.0

cluster/services/code-server/helm-release.yaml

ghcr.io/coder/code-server 4.23.1

cluster/services/descheduler/helm-release.yaml

registry.k8s.io/descheduler/descheduler v0.29.0

cluster/services/dyndns/helm-release.yaml

ghcr.io/pascaliske/cloudflare-dyndns 0.1.1

cluster/services/gitlab/helm-release.yaml

gitlab/gitlab-ce 16.11.1-ce.0

cluster/services/hammond/helm-release.yaml

ghcr.io/alfhou/hammond v0.0.24

cluster/services/home-assistant/helm-release.yaml

ghcr.io/home-assistant/home-assistant 2024.4.4

cluster/services/homer/helm-release.yaml

ghcr.io/bastienwirtz/homer v24.04.1

cluster/services/linkding/helm-release.yaml

sissbruecker/linkding 1.30.0

cluster/services/monitoring/cloudflare-exporter/helm-release.yaml

ghcr.io/lablabs/cloudflare_exporter 0.0.14

cluster/services/monitoring/fritzbox-exporter/helm-release.yaml

sealife/fritzbox-exporter 1.0

cluster/services/monitoring/loki/helm-release.yaml

grafana/loki 3.0.0

cluster/services/monitoring/plausible-exporter/helm-release.yaml

ghcr.io/riesinger/plausible-exporter 1.1.0

cluster/services/monitoring/redis-exporter/helm-release.yaml

oliver006/redis_exporter v1.59.0

cluster/services/monitoring/speedtest-exporter/helm-release.yaml

ghcr.io/miguelndecarvalho/speedtest-exporter v3.5.4

cluster/services/monitoring/unifi-poller/helm-release.yaml

ghcr.io/unpoller/unpoller v2.11.2

cluster/services/monitoring/vector/helm-release.yaml

timberio/vector 0.37.1-alpine

cluster/services/paperless/helm-release.yaml

ghcr.io/paperless-ngx/paperless-ngx 2.7.2

cluster/services/plausible/helm-release.yaml

plausible/analytics v2.0.0

ghcr.io/maxmind/geoipupdate v7.0.1

cluster/services/redis/helm-release.yaml

redis 7.2.4-alpine

cluster/services/snapdrop/helm-release.yaml

cluster/services/unbound/helm-release.yaml

ghcr.io/pascaliske/unbound 0.1.0

cluster/services/unifi/helm-release.yaml

ghcr.io/jacobalberty/unifi-docker v8.1.113

cluster/services/uptime-kuma/helm-release.yaml

louislam/uptime-kuma 1.23.13

cluster/services/vaultwarden/helm-release.yaml

ghcr.io/dani-garcia/vaultwarden 1.30.5-alpine

cluster/services/vikunja/helm-release.yaml

vikunja/vikunja 0.23.0

kubernetes

cluster/base/charts.yaml

cluster/base/config.yaml

cluster/base/core.yaml

cluster/base/crds.yaml

cluster/base/flux-system/gotk-components.yaml

ghcr.io/fluxcd/source-controller v1.2.5

ghcr.io/fluxcd/kustomize-controller v1.2.2

ghcr.io/fluxcd/helm-controller v0.37.4

ghcr.io/fluxcd/notification-controller v1.2.4

cluster/base/flux-system/gotk-patches.yaml

cluster/base/flux-system/gotk-sync.yaml

cluster/base/flux-system/kustomization.yaml

cluster/base/services.yaml

cluster/charts/aqua.yaml

cluster/charts/authelia.yaml

cluster/charts/cloudflare-exporter.yaml

cluster/charts/cloudnative-pg-charts.yaml

cluster/charts/crowdsec.yaml

cluster/charts/deliveryhero.yaml

cluster/charts/descheduler.yaml

cluster/charts/gitlab.yaml

cluster/charts/grafana.yaml

cluster/charts/jetstack.yaml

cluster/charts/k8s-at-home.yaml

cluster/charts/kured.yaml

cluster/charts/kustomization.yaml

cluster/charts/pascaliske.yaml

cluster/charts/prometheus-community.yaml

cluster/charts/traefik.yaml

cluster/charts/vector.yaml

cluster/charts/vmware-tanzu.yaml

cluster/config/kustomization.yaml

cluster/core/cert-manager/dashboard/kustomization.yaml

cluster/core/cert-manager/helm-release.yaml

cluster/core/cert-manager/issuers/kustomization.yaml

cluster/core/cert-manager/kustomization.yaml

cluster/core/cloudnative-pg/dashboard/kustomization.yaml

cluster/core/cloudnative-pg/helm-release.yaml

cluster/core/cloudnative-pg/kustomization.yaml

cluster/core/crowdsec/helm-release.yaml

cluster/core/crowdsec/kustomization.yaml

cluster/core/flux-system/dashboards/kustomization.yaml

cluster/core/flux-system/kustomization.yaml

cluster/core/flux-system/notifications/discord/alert.yaml

cluster/core/flux-system/notifications/discord/kustomization.yaml

cluster/core/flux-system/notifications/discord/provider.yaml

cluster/core/flux-system/notifications/github/alert.yaml

cluster/core/flux-system/notifications/github/kustomization.yaml

cluster/core/flux-system/notifications/github/provider.yaml

cluster/core/flux-system/notifications/grafana/alert.yaml

cluster/core/flux-system/notifications/grafana/kustomization.yaml

cluster/core/flux-system/notifications/grafana/provider.yaml

cluster/core/flux-system/notifications/kustomization.yaml

cluster/core/kured/helm-release.yaml

cluster/core/kured/kustomization.yaml

cluster/core/kustomization.yaml

cluster/core/node-problem-detector/helm-release.yaml

cluster/core/node-problem-detector/kustomization.yaml

cluster/core/system-upgrade/controller/kustomization.yaml

cluster/core/system-upgrade/kustomization.yaml

cluster/core/system-upgrade/plans/kustomization.yaml

cluster/core/system-upgrade/plans/master.yaml

cluster/core/system-upgrade/plans/worker.yaml

cluster/core/traefik-errors/helm-release.yaml

cluster/core/traefik-errors/kustomization.yaml

cluster/core/traefik/dashboard/kustomization.yaml

cluster/core/traefik/helm-release.yaml

cluster/core/traefik/kustomization.yaml

cluster/core/traefik/middlewares/kustomization.yaml

cluster/core/trivy-operator/helm-release.yaml

cluster/core/trivy-operator/kustomization.yaml

cluster/core/velero/helm-release.yaml

cluster/core/velero/kustomization.yaml

cluster/crds/cert-manager/kustomization.yaml

cluster/crds/kube-prometheus-stack/crds.yaml

cluster/crds/kube-prometheus-stack/kustomization.yaml

cluster/crds/kube-prometheus-stack/source.yaml

cluster/crds/kustomization.yaml

cluster/crds/system-upgrade/kustomization.yaml

cluster/crds/traefik/crds.yaml

cluster/crds/traefik/kustomization.yaml

cluster/crds/traefik/source.yaml

cluster/crds/trivy-operator/crds.yaml

cluster/crds/trivy-operator/kustomization.yaml

cluster/crds/trivy-operator/source.yaml

cluster/crds/velero/crds.yaml

cluster/crds/velero/kustomization.yaml

cluster/crds/velero/source.yaml

cluster/services/authelia/config/kustomization.yaml

cluster/services/authelia/helm-release-external.yaml

cluster/services/authelia/helm-release.yaml

cluster/services/authelia/kustomization.yaml

cluster/services/authelia/middlewares/kustomization.yaml

cluster/services/blocky/dashboard/kustomization.yaml

cluster/services/blocky/helm-release.yaml

cluster/services/blocky/kustomization.yaml

cluster/services/clickhouse/helm-release.yaml

cluster/services/clickhouse/kustomization.yaml

cluster/services/cloudflared/helm-release.yaml

cluster/services/cloudflared/kustomization.yaml

cluster/services/code-server/helm-release.yaml

cluster/services/code-server/kustomization.yaml

cluster/services/descheduler/helm-release.yaml

cluster/services/descheduler/kustomization.yaml

cluster/services/dyndns/helm-release.yaml

cluster/services/dyndns/kustomization.yaml

cluster/services/gitlab/config/kustomization.yaml

cluster/services/gitlab/helm-release.yaml

cluster/services/gitlab/kustomization.yaml

cluster/services/gitlab/runner/helm-release.yaml

cluster/services/gitlab/runner/kustomization.yaml

cluster/services/hammond/helm-release.yaml

cluster/services/hammond/kustomization.yaml

cluster/services/home-assistant/dashboard/kustomization.yaml

cluster/services/home-assistant/helm-release.yaml

cluster/services/home-assistant/kustomization.yaml

cluster/services/homer/helm-release.yaml

cluster/services/homer/kustomization.yaml

cluster/services/kustomization.yaml

cluster/services/linkding/database/kustomization.yaml

cluster/services/linkding/helm-release.yaml

cluster/services/linkding/kustomization.yaml

cluster/services/monitoring/cloudflare-exporter/dashboard/kustomization.yaml

cluster/services/monitoring/cloudflare-exporter/helm-release.yaml

cluster/services/monitoring/cloudflare-exporter/kustomization.yaml

cluster/services/monitoring/fritzbox-exporter/helm-release.yaml

cluster/services/monitoring/fritzbox-exporter/kustomization.yaml

cluster/services/monitoring/kube-prometheus-stack/dashboard/kustomization.yaml

cluster/services/monitoring/kube-prometheus-stack/helm-release.yaml

cluster/services/monitoring/kube-prometheus-stack/kustomization.yaml

cluster/services/monitoring/kustomization.yaml

cluster/services/monitoring/loki/datasource/kustomization.yaml

cluster/services/monitoring/loki/helm-release.yaml

cluster/services/monitoring/loki/kustomization.yaml

cluster/services/monitoring/magicmirror/dashboard/kustomization.yaml

cluster/services/monitoring/magicmirror/kustomization.yaml

cluster/services/monitoring/minio/dashboard/kustomization.yaml

cluster/services/monitoring/minio/kustomization.yaml

cluster/services/monitoring/plausible-exporter/dashboard/kustomization.yaml

cluster/services/monitoring/plausible-exporter/helm-release.yaml

cluster/services/monitoring/plausible-exporter/kustomization.yaml

cluster/services/monitoring/redis-exporter/dashboard/kustomization.yaml

cluster/services/monitoring/redis-exporter/helm-release.yaml

cluster/services/monitoring/redis-exporter/kustomization.yaml

cluster/services/monitoring/speedtest-exporter/dashboard/kustomization.yaml

cluster/services/monitoring/speedtest-exporter/helm-release.yaml

cluster/services/monitoring/speedtest-exporter/kustomization.yaml

cluster/services/monitoring/unifi-poller/dashboard/kustomization.yaml

cluster/services/monitoring/unifi-poller/helm-release.yaml

cluster/services/monitoring/unifi-poller/kustomization.yaml

cluster/services/monitoring/vector/dashboard/kustomization.yaml

cluster/services/monitoring/vector/helm-release.yaml

cluster/services/monitoring/vector/kustomization.yaml

cluster/services/paperless/helm-release.yaml

cluster/services/paperless/kustomization.yaml

cluster/services/plausible/database/kustomization.yaml

cluster/services/plausible/helm-release.yaml

cluster/services/plausible/kustomization.yaml

cluster/services/redis/helm-release.yaml

cluster/services/redis/kustomization.yaml

cluster/services/snapdrop/helm-release.yaml

cluster/services/snapdrop/kustomization.yaml

cluster/services/unbound/helm-release.yaml

cluster/services/unbound/kustomization.yaml

cluster/services/unifi/helm-release.yaml

cluster/services/unifi/kustomization.yaml

cluster/services/unifi/middlewares/kustomization.yaml

cluster/services/uptime-kuma/dashboard/kustomization.yaml

cluster/services/uptime-kuma/helm-release.yaml

cluster/services/uptime-kuma/kustomization.yaml

cluster/services/vaultwarden/database/kustomization.yaml

cluster/services/vaultwarden/helm-release.yaml

cluster/services/vaultwarden/kustomization.yaml

cluster/services/vikunja/database/kustomization.yaml

cluster/services/vikunja/helm-release.yaml

cluster/services/vikunja/kustomization.yaml

kustomize

cluster/core/system-upgrade/controller/kustomization.yaml

rancher/system-upgrade-controller v0.13.4

rancher/system-upgrade-controller v0.13.4

npm

package.json

@commitlint/cli ^19.0.0

@commitlint/config-conventional ^19.0.0

husky ^9.0.0

pip_requirements

docs/requirements.txt

material-plausible-plugin ==0.2.0

regex

cluster/crds/cert-manager/kustomization.yaml

cluster/crds/kube-prometheus-stack/source.yaml

kube-prometheus-stack 58.2.2

cluster/crds/system-upgrade/kustomization.yaml

rancher/system-upgrade-controller v0.13.4

cluster/crds/velero/source.yaml

velero 6.0.0

cluster/core/system-upgrade/plans/master.yaml

k3s-io/k3s v1.29.4+k3s1

cluster/core/system-upgrade/plans/worker.yaml

k3s-io/k3s v1.29.4+k3s1

cluster/services/blocky/config.yml

cluster/services/homer/config.yml

terraform

terraform/main.tf

cloudflare 4.30.0

hashicorp/terraform >= 1.3.3

terraform/providers.tf

terraform-version

terraform/.terraform-version

hashicorp/terraform 1.8.2

Check this box to trigger a request for Renovate to run again on this repository

[feat] Traefik Error Pages // Responsive Styles

→ https://github.com/pascaliske/docker-traefik-errors

[feat] Backup Strategy - FRITZ!Box `config`

https://github.com/the2masters/fritzbox-config-downloader

[feat] Traefik Error Pages

Create docker based error page service
Configure Traefik error pages
#48

[feat] Operate Pi-hole in high availability mode

~~Scale up Pi-hole cluster deployment~~ → Switch to https://github.com/0xERR0R/blocky/
~~Synchronize gravity databases of all replicas~~

[feat] Implement DNS via Terraform

[docs] Finalize documentation

[feat] Shlink integration

Install shlink using k8s-at-home/shlink
Configure shlink IngressRoute: go.{{ domain }}

[feat] Optimize SSO portal

[feat] Prometheus & Grafana Integration

[feat] Backup Strategy - TP-Link Switches `config`

[feat] Add update playbook

Add playbook for updating all nodes
- Update apt
- Update docker containers

[feat] Switch to blocky

Install blocky using k8s-at-home/blocky
Configure blocky for cloudflared
Configure high availability for blocky and cloudflared with two replicas

[feat] Implement longhorn distributed storage

[feat] Zigbee Sensor Integration

[feat] Optimize monitoring stack

Migrate to Kubernetes service discovery config
Integrate kube-state-metrics → prometheus-community/kube-state-metrics
Update grafana dashboards

[feat] Add `RateLimit` middleware to traefik

See their docs for more information.

`fail2ban` → ?

Is fail2ban needed after the cluster migration?
How to implement it with traefik inside k3s?

[feat] Integrate `cert-manager` with Traefik

Setup cert-manager using cert-manager/cert-manager
Create a ClusterIssuer for a DNS01 challenge via DigitalOcean
Create Certificates for all services
Configure all IngressRoutes with their respective Certificates

https://www.padok.fr/en/blog/traefik-kubernetes-certmanager

[feat] Implement Shlink web client

Install web client in cluster: https://shlink.io/documentation/shlink-web-client/installation/
Pre-configuring servers for web client: https://shlink.io/documentation/shlink-web-client/pre-configuring-servers/
Configure IngressRoute for sub path serving via /admin – authenticated by Authelia

See here for more information: https://shlink.io/documentation/shlink-web-client/

[feat] Vaultwarden integration

Install Vaultwarden
Configure Vaultwarden behind reverse proxy (vault.{{ domain }})

[feat] Monitoring optimizations

Alerts should be usable and meaningful.
Grafana dashboards should be configurable as code.

Links:

[feat] Nextcloud integration

Install Nextcloud
Configure Nextcloud behind reverse proxy (docs.{{ domain }})
Configure external storage for paperless-ng consumer

[feat] Mealie integration

Install mealie using k8s-at-home/mealie
Configure IngressRoute: mealie.{{ domain }}

[feat] Fail2ban integration

Setup fail2ban docker container
~~Configure Traefik for fail2ban~~
Configure Authelia for fail2ban

[feat] Implement Ansible Vault

[feat] Loki Integration

Configure Loki
Configure Promtail
Capture Traefik access logs
Capture container logs

Action Required: Fix Renovate Configuration

There is an error with this repository's Renovate configuration that needs to be fixed. As a precaution, Renovate will stop PRs until it is resolved.

Location: renovate.json
Error type: Invalid JSON (parsing failed)
Message: Syntax error near // Gi

[feat] Paperless NG integration

Install Paperless
Configure Paperless behind reverse proxy (docs.{{ domain }})

[feat] Migrate `dathomir` to new 8GB RAM Pi

Shutdown old 2GB RAM Pi
Switch sd card, data cable & ZigBee stick
Startup new 8GB RAM Pi
Update documentation

[feat] Switch back to `info` if watchtower was updated to `v1.1.7`

infrastructure/roles/common/vars/main.yml

Lines 3 to 8 in 69224e3

    
           watchtower_slack_level: warn # TODO: switch back to 'info' if watchtower was updated to v1.1.7 
        
           watchtower_slack_url: "slack://watchtower@{{ lookup('env', 'WATCHTOWER_SLACK_TOKENS') }}" 
        
           watchtower_slack_template: "{{ '{{range .}}[' ~ ansible_play_name ~ '] {{.Message}}{{println}}{{end}}' }}" 
        
           watchtower_http_api_token: "{{ lookup('env', 'WATCHTOWER_HTTP_API_TOKEN') }}" 
        
           watchtower_http_api_metrics: "true" 
        
           watchtower_cleanup: "true"

This issue was generated by todo based on a `TODO` comment in `69224e3` when #14 was merged. cc @pascaliske.

[feat] Configure Alerting

Configure Alertmanager
~~Configure Alert rules~~ → Moved to #32.

[feat] High Availability

Add nodes
~~Setup longhorn~~

[bug] Switch badge URLs to new format

See here: badges/shields#8671

[feat] Boot from USB

Setup USB boot - https://jamesachambers.com/new-raspberry-pi-4-bootloader-usb-network-boot-guide/
Ensure SD card polling is disabled - https://jamesachambers.com/raspberry-pi-reclaim-1-cpu-usage-when-ssd-msd-booting/

[feat] Configure alert rules

Follow up on #12

See Awesome Prometheus Alerts for some example rules.

[feat] Enable Flux' automatic image updates

https://fluxcd.io/docs/guides/image-update/

[feat] Backups Reloaded – `autorestic` → `velero`

Setup minio with minio-console
Integrate velero using vmware-tanzu/velero
Ensure fsfreeze is available in all deployments with PVC's
Configure minio as backup storage provider
Create BackupStorageLocation manifests
Create Schedule manifests

[feat] Reverse Proxy Integration

[feat] Integrate SSO authentication

[feat] Automate K3s updates

Perfect fit would be a combination of:

Automated Upgrades via system-upgrade-controller & k3s-upgrade
A regex based manager for Renovate

[feat] Uptime Kuma integration

Install uptime-kuma using pascaliske/uptime-kuma
Configure uptime-kuma IngressRoute: status.{{ domain }}

[feat] Manage Uberspace account through Ansible

Add uberspace server to inventory
Write playbook for email account management

[feat] Docker Compose → K3s Cluster

Recommend Projects

React

A declarative, efficient, and flexible JavaScript library for building user interfaces.
Vue.js

🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript

TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
TensorFlow

An Open Source Machine Learning Framework for Everyone
Django

The Web framework for perfectionists with deadlines.
Laravel

A PHP framework for web artisans
D3

Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

javascript

JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
web

Some thing interesting about web. New door for the world.
server

A server is a program made to process requests and deliver data to clients.
Machine learning

Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Visualization

Some thing interesting about visualization, use data art
Game

Some thing interesting about game, make everyone happy.

Recommend Org

Facebook

We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft

Open source projects and samples from Microsoft.
Google

Google ❤️ Open Source for everyone.
Alibaba

Alibaba Open Source for everyone
D3

Data-Driven Documents codes.
Tencent

China tencent open source team.

	watchtower_slack_level: warn # TODO: switch back to 'info' if watchtower was updated to v1.1.7
	watchtower_slack_url: "slack://watchtower@{{ lookup('env', 'WATCHTOWER_SLACK_TOKENS') }}"
	watchtower_slack_template: "{{ '{{range .}}[' ~ ansible_play_name ~ '] {{.Message}}{{println}}{{end}}' }}"
	watchtower_http_api_token: "{{ lookup('env', 'WATCHTOWER_HTTP_API_TOKEN') }}"
	watchtower_http_api_metrics: "true"
	watchtower_cleanup: "true"