The homelab's discuss from pl4nty

Use kured for node updates

Faster than node image upgrades

https://learn.microsoft.com/en-us/azure/aks/node-updates-kured

Review tooling

Shared Renovate config for all repos
Code quality for all repos - CodeQL?
Migrate all container builds to containers repo
SPDX for all repos
Validate upstream image signatures?
dotfiles and devcontainer integration, especially git config

Deploy `external-dns` to manage `LoadBalancer` services

CloudNativePG

Backup to B2
Backup to cluster-native storage (avoid egress $$$). S3-compatible?
Custom image with extensions for crt.sh, similar to PostGIS
Read replica for crt.sh
Metrics
PgBouncer and read replicas based on metric results

Longhorn migration

Longhorn finally has SPDK in preview, and will soon have ARM and backup/restore. Should have similar perf to mayastor with improved support and features

Migrate onprem access from Cloudflare Tunnel to VPN

Onprem devices are currently exposed via authenticated Cloudflare Tunnel on RPi. 10k/day JSON API calls are breaching Cloudflare ToS as proportion of total traffic, and onprem cluster is still a while away. So need to move to P2S VPN. addons.vpn might work

Address AMD64 limitations

Currently using AKS:

Cost
4-disk limit (2 per core?)
Disk size (4Gi minimum, ^2 sizes)
Source games
Nothing currently available for Turing Pi

Photo library

Saved something relevant - facial recognition etc critical.

Possible tool for ingest? https://docs.fileflows.com/

https://it-tools.tech/

Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Warning

Renovate failed to look up the following dependencies: Failed to look up docker package msconnectedcacheprod.azurecr.io/mcc/linux/iot/mcc-ubuntu-iot-amd64.

Files affected: kubernetes/cluster-1/mcc/mcc.yaml

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

feat(github-release): update moby/buildkit to v0.14.1

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

feat(github-release): update immich-app/immich to v1.106.4

Detected dependencies

devcontainer

.devcontainer/devcontainer.json

ghcr.io/devcontainers/features/docker-outside-of-docker 1

ghcr.io/devcontainers/features/kubectl-helm-minikube 1

ghcr.io/devcontainers-contrib/features/age 1

ghcr.io/devcontainers-contrib/features/age-keygen 1

ghcr.io/jsburckhardt/devcontainer-features/flux 1

ghcr.io/devcontainers-contrib/features/sops 1

ghcr.io/devcontainers/features/github-cli 1

ghcr.io/devcontainers/features/azure-cli 1

dockerfile

.devcontainer/Dockerfile

flux

kubernetes/base/cloudnative-pg.yaml

cloudnative-pg 0.21.5

kubernetes/base/external-dns.yaml

external-dns 1.14.5

kubernetes/base/flux-system/flux-config.yaml

flux-manifests v2.3.0

kubernetes/base/monitoring-system/k8s-monitoring.yaml

k8s-monitoring 1.2.1

kubernetes/base/monitoring-system/opentelemetry-operator.yaml

opentelemetry-operator 0.63.1

kubernetes/cluster-0/garnet.yaml

app-template 3.2.1

kubernetes/cluster-0/ghidra.yaml

app-template 3.2.1

kubernetes/cluster-0/gitlab-runner.yaml

gitlab-runner 0.66.0

kubernetes/cluster-0/system/kured.yaml

kured 5.4.5

kubernetes/cluster-0/system/repos/backube.yaml

kubernetes/cluster-0/system/volsync/volsync.yaml

kubernetes/cluster-0/tf2.yaml

app-template 3.2.1

kubernetes/cluster-1/backups/cloudflare/backup.yaml

app-template 3.2.1

kubernetes/cluster-1/backups/github/backup.yaml

app-template 3.2.1

kubernetes/cluster-1/backups/onedrive/backup.yaml

app-template 3.2.1

kubernetes/cluster-1/ctfd.yaml

app-template 3.2.1

kubernetes/cluster-1/ctfnote/ctfnote.yaml

app-template 3.2.1

kubernetes/cluster-1/cyberchef.yaml

app-template 3.2.1

kubernetes/cluster-1/fleet/fleet.yaml

fleet v6.1.0

kubernetes/cluster-1/forgejo/forgejo.yaml

forgejo 7.0.1

kubernetes/cluster-1/hedgedoc.yaml

app-template 3.2.1

kubernetes/cluster-1/home-assistant.yaml

app-template 3.2.1

kubernetes/cluster-1/hrconvert2.yaml

app-template 3.2.1

kubernetes/cluster-1/khoj/khoj.yaml

app-template 3.2.1

kubernetes/cluster-1/mcc/mcc.yaml

app-template 3.2.1

kubernetes/cluster-1/miniflux/miniflux.yaml

app-template 3.2.1

kubernetes/cluster-1/rsyslog.yaml

app-template 3.2.1

kubernetes/cluster-1/storeweb.yaml

app-template 3.2.1

kubernetes/cluster-1/system/kube-arch-scheduler.yaml

kube-arch-scheduler 0.1.2

kubernetes/cluster-1/system/longhorn/longhorn.yaml

longhorn 1.6.2

kubernetes/cluster-1/talos-factory.yaml

app-template 3.2.1

kubernetes/cluster-1/your-spotify.yaml

app-template 3.2.1

kubernetes/oke/anudegreeapp.yaml

app-template 3.2.1

kubernetes/oke/ataxx.yaml

app-template 3.2.1

kubernetes/oke/az-vnet-planner.yaml

app-template 3.2.1

kubernetes/oke/excel2latex.yaml

app-template 3.2.1

kubernetes/oke/gitlab-runner.yaml

gitlab-runner 0.66.0

kubernetes/oke/homepage.yaml

kubernetes/oke/hyperglass.yaml

app-template 3.2.1

kubernetes/oke/ipa-web.yaml

app-template 3.2.1

kubernetes/oke/it-tools.yaml

app-template 3.2.1

kubernetes/oke/jsonwebtoken.yaml

app-template 3.2.1

kubernetes/oke/jwtplayground.yaml

app-template 3.2.1

kubernetes/oke/leekspin.yaml

app-template 3.2.1

kubernetes/oke/mha.yaml

app-template 3.2.1

kubernetes/oke/openssl-webterm.yaml

app-template 3.2.1

kubernetes/oke/shapes.yaml

app-template 3.2.1

kubernetes/oke/stirling-pdf.yaml

app-template 3.2.1

kubernetes/oke/temple-trap.yaml

app-template 3.2.1

kubernetes/oke/tls-rpt-monitor.yaml

app-template 3.2.1

kubernetes/oke/tsuro.yaml

app-template 3.2.1

kubernetes/oke/wufb-ds.yaml

app-template 3.2.1

helm-values

kubernetes/base/monitoring-system/auto-instrumentation.yaml

ghcr.io/pl4nty/otel-operator-autoinstrumentation-apache-httpd sha256:4d2f0dd0b7f8593a6005e3f70feeb3cece40c2a933fc652be349e18c3f21f174

ghcr.io/pl4nty/otel-operator-autoinstrumentation-apache-httpd sha256:4d2f0dd0b7f8593a6005e3f70feeb3cece40c2a933fc652be349e18c3f21f174

ghcr.io/open-telemetry/opentelemetry-go-instrumentation/autoinstrumentation-go v0.13.0-alpha

kubernetes/cluster-0/garnet.yaml

ghcr.io/pl4nty/garnet latest@sha256:cb73898f3af80e07fe385f61dc4e19eb4ee5c5eb2860b0e7e029bf8cdaf8247b

kubernetes/cluster-0/ghidra.yaml

ghcr.io/blacktop/ghidra 11.1.1

kubernetes/cluster-0/tf2.yaml

cm2network/tf2 latest@sha256:875898b3f9579cb45e84f12261c8d3cc793a76b0e0ccf18a351ab9dc1629afc5

kubernetes/cluster-1/backups/cloudflare/backup.yaml

ghcr.io/pl4nty/flares latest@sha256:07f49f54300f43206babf8509b2e7ce0865eb6c86ed63de995ecd8289435ee61

kubernetes/cluster-1/backups/github/backup.yaml

ghcr.io/josegonzalez/python-github-backup 0.45.2

kubernetes/cluster-1/backups/onedrive/backup.yaml

rclone/rclone 1.67.0

kubernetes/cluster-1/ctfd.yaml

ghcr.io/pl4nty/ctfd latest@sha256:61dfd6162b74f0488f8f9c02e1f87ea255ce4b6cd43c12884fb70920e2664969

ghcr.io/pl4nty/hacking-with-style latest@sha256:8e6c8f176426cdbe3458617df7482936ce5e299c7d7245ea1547f987d9ac24c8

kubernetes/cluster-1/ctfnote/ctfnote.yaml

quay.io/hedgedoc/hedgedoc 1.9.9

kubernetes/cluster-1/cyberchef.yaml

ghcr.io/gchq/cyberchef 10.19.0

kubernetes/cluster-1/hedgedoc.yaml

caddy 2.8.4

ghcr.io/hedgedoc/hedgedoc/backend 2.0.0-alpha.2

ghcr.io/hedgedoc/hedgedoc/frontend 2.0.0-alpha.2

kubernetes/cluster-1/home-assistant.yaml

ghcr.io/home-assistant/home-assistant 2024.6.4

kubernetes/cluster-1/hrconvert2.yaml

dwaaan/hrconvert2-docker latest@sha256:b893624e4b4dad46469b30a1d094557670db1af3374394b4a4a60324df570652

kubernetes/cluster-1/khoj/khoj.yaml

ghcr.io/khoj-ai/khoj 1.15.0

kubernetes/cluster-1/mcc/mcc.yaml

msconnectedcacheprod.azurecr.io/mcc/linux/iot/mcc-ubuntu-iot-amd64 1.2.1.1563

kubernetes/cluster-1/miniflux/miniflux.yaml

ghcr.io/pl4nty/miniflux latest@sha256:c78d894978aa2012ebbab521372ce1a901ea1b1ce4cc225d5cac5f4a7eaed62f

kubernetes/cluster-1/rsyslog.yaml

manics/rsyslog-stdout 0.1.0

kubernetes/cluster-1/storeweb.yaml

ghcr.io/pl4nty/storeweb latest@sha256:be55e3866a02c44bbf3bd3a5a649ab26b9a5f7f1a0faeb67e1169fa0b1f657f8

kubernetes/cluster-1/system/external-mdns.yaml

kubernetes/cluster-1/system/kube-arch-scheduler.yaml

ghcr.io/pl4nty/kube-arch-scheduler v0.1.0

kubernetes/cluster-1/system/kube-vip/kube-vip.yaml

ghcr.io/kube-vip/kube-vip v0.8.1

kubernetes/cluster-1/talos-factory.yaml

ghcr.io/siderolabs/image-factory v0.4.1

kubernetes/cluster-1/your-spotify.yaml

yooooomi/your_spotify_server 1.10.1

yooooomi/your_spotify_client 1.10.1

docker.io/library/mongo 6.0.4-focal

kubernetes/oke/anudegreeapp.yaml

ghcr.io/pl4nty/anudegreeapp latest@sha256:87f99bdbe31ab7e6aef4f5f22e951fbc98ccc38d5d15c891d38b2fcd34e4d9cd

quay.io/curl/curl 8.8.0

kubernetes/oke/ataxx.yaml

ghcr.io/pl4nty/ataxx latest@sha256:605e46d168434da6222431f9d833cd42c21972613b49ca85d3efe1b04e213774

kubernetes/oke/az-vnet-planner.yaml

ghcr.io/pl4nty/vnet-capacity-planner latest@sha256:83ccdc51bbcee95402c2f67c6409581ceef00edadbe3808c5df2345207f47ec2

kubernetes/oke/excel2latex.yaml

ghcr.io/pl4nty/excel2latex latest@sha256:804b638495e711ea1f37340ffec8f0810b70b6d437d79609441eb93248e45c11

kubernetes/oke/homepage.yaml

ghcr.io/gethomepage/homepage v0.9.2

kubernetes/oke/hyperglass.yaml

quay.io/timrabl/hyperglass 1.0.4-1.0.233

redis 7.2.5

ghcr.io/pl4nty/ubuntu-ssh latest@sha256:fe816b4060e7f33dc4bafdaea34e1232653ed811398e284cce3591d58934ae44

kubernetes/oke/ipa-web.yaml

ghcr.io/pl4nty/ipa-web v0.4.1

kubernetes/oke/it-tools.yaml

ghcr.io/corentinth/it-tools 2023.4.23-92bd835

kubernetes/oke/jsonwebtoken.yaml

ghcr.io/pl4nty/jsonwebtoken latest@sha256:0e22c7fad3433fe626ab30286c2929d2817442f589faecac78755b235e77b820

kubernetes/oke/jwtplayground.yaml

ghcr.io/pl4nty/jwtplayground latest@sha256:35594a4cd684f4a6b7c27270978bd89a3044cd3fa7f15e3b61fd5c3716a0eea1

kubernetes/oke/leekspin.yaml

ghcr.io/pl4nty/leekspin-no-js latest@sha256:34358f93bb15598214761a4b618ff7da36801dd62118da876dad24acbd7df20b

kubernetes/oke/mha.yaml

ghcr.io/pl4nty/mha latest@sha256:8305e2fb8f239c5f32b0e71ed955a04b0c5d0310670f5d444bb7f48cd93da540

kubernetes/oke/openssl-webterm.yaml

ghcr.io/pl4nty/openssl-webterm latest@sha256:0a731f529258c0c226664bc521253c0b0325b785114de6ede8e255cca1ee0496

kubernetes/oke/shapes.yaml

ghcr.io/pl4nty/shapes latest@sha256:6bc8c00358394e312a32c518dc848718bc5aaef85cdba70964e7f5a2679d3c92

kubernetes/oke/stirling-pdf.yaml

ghcr.io/frooodle/s-pdf 0.18.1

kubernetes/oke/temple-trap.yaml

ghcr.io/pl4nty/temple-trap latest@sha256:925a38e46042d799b9a6e21f1253c53b3c92fbce4d10f40e74ee55f05970848a

kubernetes/oke/tls-rpt-monitor.yaml

ghcr.io/pl4nty/tls-rpt-monitor latest@sha256:e9c3e1a40a027429eff4133239e5c071f0718c212656e9c2b04c5165dbabb367

kubernetes/oke/tsuro.yaml

ghcr.io/pl4nty/tsuro latest@sha256:9f80956f916a2810034fd7b2a963815366785eb1e561c48b45c83b020e969477

kubernetes/oke/wufb-ds.yaml

ghcr.io/pl4nty/wufb-ds latest@sha256:64f4478493da948c9d7094a3736246df716c685812e19fd6d233039be7930728

kubernetes

kubernetes/base/cloudflare-gateway/kustomization.yaml

Kustomization kustomize.config.k8s.io/v1beta1

kubernetes/base/cloudnative-pg.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/base/external-dns.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/base/external-snapshotter/kustomization.yaml

Kustomization kustomize.config.k8s.io/v1beta1

kubernetes/base/flux-system/bootstrap/kustomization.yaml

Kustomization kustomize.config.k8s.io/v1beta1

kubernetes/base/flux-system/flux-config.yaml

GitRepository source.toolkit.fluxcd.io/v1

Kustomization kustomize.toolkit.fluxcd.io/v1

GitRepository source.toolkit.fluxcd.io/v1

Kustomization kustomize.toolkit.fluxcd.io/v1

kubernetes/base/flux-system/flux-receiver.yaml

Receiver notification.toolkit.fluxcd.io/v1

kubernetes/base/monitoring-system/auto-instrumentation.yaml

ghcr.io/pl4nty/otel-operator-autoinstrumentation-apache-httpd sha256:4d2f0dd0b7f8593a6005e3f70feeb3cece40c2a933fc652be349e18c3f21f174

ghcr.io/pl4nty/otel-operator-autoinstrumentation-apache-httpd sha256:4d2f0dd0b7f8593a6005e3f70feeb3cece40c2a933fc652be349e18c3f21f174

ghcr.io/open-telemetry/opentelemetry-go-instrumentation/autoinstrumentation-go v0.13.0-alpha

kubernetes/base/monitoring-system/k8s-monitoring.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/base/monitoring-system/opentelemetry-operator.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/base/repos/bjw-s.yaml

HelmRepository source.toolkit.fluxcd.io/v1

kubernetes/base/repos/cloudnative-pg.yaml

HelmRepository source.toolkit.fluxcd.io/v1

kubernetes/base/repos/external-dns.yaml

HelmRepository source.toolkit.fluxcd.io/v1

kubernetes/base/repos/gitlab.yaml

HelmRepository source.toolkit.fluxcd.io/v1

kubernetes/base/repos/grafana.yaml

HelmRepository source.toolkit.fluxcd.io/v1

kubernetes/base/repos/opentelemetry.yaml

HelmRepository source.toolkit.fluxcd.io/v1

kubernetes/cluster-0/buildkitd/kustomization.yaml

moby/buildkit v0.13.2-rootless

Kustomization kustomize.config.k8s.io/v1beta1

kubernetes/cluster-0/garnet.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/cluster-0/ghidra.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/cluster-0/gitlab-runner.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/cluster-0/system/flux-config.yaml

Kustomization kustomize.toolkit.fluxcd.io/v1

kubernetes/cluster-0/system/kured.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/cluster-0/system/repos/backube.yaml

GitRepository source.toolkit.fluxcd.io/v1

kubernetes/cluster-0/system/repos/kured.yaml

HelmRepository source.toolkit.fluxcd.io/v1

kubernetes/cluster-0/system/volsync/volsync.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/cluster-0/tf2.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/cluster-1/backups/cloudflare/backup.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/cluster-1/backups/github/backup.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/cluster-1/backups/onedrive/backup.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/cluster-1/ctfd.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/cluster-1/ctfnote/ctfnote.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/cluster-1/cyberchef.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/cluster-1/fleet/fleet.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/cluster-1/forgejo/forgejo.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/cluster-1/hedgedoc.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/cluster-1/home-assistant.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/cluster-1/hrconvert2.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/cluster-1/khoj/khoj.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/cluster-1/mcc/mcc.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/cluster-1/miniflux/miniflux.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/cluster-1/rsyslog.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/cluster-1/storeweb.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/cluster-1/system/external-mdns.yaml

ClusterRole rbac.authorization.k8s.io/v1

ClusterRoleBinding rbac.authorization.k8s.io/v1

Deployment apps/v1

kubernetes/cluster-1/system/flux-config.yaml

Kustomization kustomize.toolkit.fluxcd.io/v1

kubernetes/cluster-1/system/kube-arch-scheduler.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/cluster-1/system/kube-vip/kube-vip.yaml

ghcr.io/kube-vip/kube-vip v0.8.1

DaemonSet apps/v1

kubernetes/cluster-1/system/kube-vip/kustomization.yaml

Kustomization kustomize.config.k8s.io/v1beta1

kubernetes/cluster-1/system/longhorn/longhorn.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/cluster-1/system/longhorn/storageclass.yaml

StorageClass storage.k8s.io/v1

StorageClass storage.k8s.io/v1

kubernetes/cluster-1/system/repos/fleet.yaml

HelmRepository source.toolkit.fluxcd.io/v1

kubernetes/cluster-1/system/repos/forgejo.yaml

HelmRepository source.toolkit.fluxcd.io/v1

kubernetes/cluster-1/system/repos/immich.yaml

HelmRepository source.toolkit.fluxcd.io/v1

kubernetes/cluster-1/system/repos/kube-arch-scheduler.yaml

HelmRepository source.toolkit.fluxcd.io/v1

kubernetes/cluster-1/system/repos/longhorn.yaml

HelmRepository source.toolkit.fluxcd.io/v1

kubernetes/cluster-1/talos-factory.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/cluster-1/your-spotify.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/oke/anudegreeapp.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/oke/ataxx.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/oke/az-vnet-planner.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/oke/buildkitd/kustomization.yaml

moby/buildkit v0.13.2-rootless

Kustomization kustomize.config.k8s.io/v1beta1

kubernetes/oke/excel2latex.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/oke/gitlab-runner.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/oke/homepage.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/oke/hyperglass.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/oke/ipa-web.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/oke/it-tools.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/oke/jsonwebtoken.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/oke/jwtplayground.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/oke/leekspin.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/oke/mha.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/oke/openssl-webterm.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/oke/shapes.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/oke/stirling-pdf.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/oke/system/flux-config.yaml

Kustomization kustomize.toolkit.fluxcd.io/v1

kubernetes/oke/system/repos/homepage.yaml

HelmRepository source.toolkit.fluxcd.io/v1

kubernetes/oke/system/repos/metrics-server.yaml

HelmRepository source.toolkit.fluxcd.io/v1

kubernetes/oke/temple-trap.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/oke/tls-rpt-monitor.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/oke/tsuro.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kubernetes/oke/wufb-ds.yaml

HelmRelease helm.toolkit.fluxcd.io/v2

kustomize

kubernetes/base/cloudflare-gateway/kustomization.yaml

kubernetes-sigs/gateway-api v1.1.0

pl4nty/cloudflare-kubernetes-gateway v0.5.0

kubernetes/base/external-snapshotter/kustomization.yaml

kubernetes-csi/external-snapshotter v8.0.1

kubernetes/base/flux-system/bootstrap/kustomization.yaml

fluxcd/flux2 v2.3.0

regex

archive/immich/immich.yaml

immich-app/immich v1.94.1

kubernetes/cluster-0/buildkitd/kustomization.yaml

moby/buildkit v0.13.2

kubernetes/cluster-0/garnet.yaml

kubernetes/cluster-0/ghidra.yaml

kubernetes/cluster-0/tf2.yaml

kubernetes/cluster-1/backups/cloudflare/backup.yaml

kubernetes/cluster-1/backups/github/backup.yaml

kubernetes/cluster-1/backups/onedrive/backup.yaml

kubernetes/cluster-1/ctfd.yaml

kubernetes/cluster-1/ctfnote/ctfnote.yaml

kubernetes/cluster-1/cyberchef.yaml

kubernetes/cluster-1/hedgedoc.yaml

kubernetes/cluster-1/home-assistant.yaml

kubernetes/cluster-1/hrconvert2.yaml

kubernetes/cluster-1/khoj/khoj.yaml

kubernetes/cluster-1/mcc/mcc.yaml

kubernetes/cluster-1/miniflux/miniflux.yaml

kubernetes/cluster-1/rsyslog.yaml

kubernetes/cluster-1/storeweb.yaml

kubernetes/cluster-1/system/kube-vip/kustomization.yaml

kubernetes/cluster-1/talos-factory.yaml

kubernetes/cluster-1/your-spotify.yaml

kubernetes/oke/anudegreeapp.yaml

kubernetes/oke/ataxx.yaml

kubernetes/oke/az-vnet-planner.yaml

kubernetes/oke/buildkitd/kustomization.yaml

moby/buildkit v0.13.2

kubernetes/oke/excel2latex.yaml

kubernetes/oke/hyperglass.yaml

kubernetes/oke/ipa-web.yaml

kubernetes/oke/it-tools.yaml

kubernetes/oke/jsonwebtoken.yaml

kubernetes/oke/jwtplayground.yaml

kubernetes/oke/leekspin.yaml

kubernetes/oke/mha.yaml

kubernetes/oke/openssl-webterm.yaml

kubernetes/oke/shapes.yaml

kubernetes/oke/stirling-pdf.yaml

kubernetes/oke/temple-trap.yaml

kubernetes/oke/tls-rpt-monitor.yaml

kubernetes/oke/tsuro.yaml

kubernetes/oke/wufb-ds.yaml

Check this box to trigger a request for Renovate to run again on this repository

https://technitium.com/dns/

If I end up doing selfhosted DNS

Standardise redis and mongodb deployments

Redis sentinel and mongodb operator seem unnecessary. any issues with just using bitnami?

could use shared instances depending on resource usage. but per-app instances are easier to move. redis can be stateless depending on the app (immich uses it for queues though)

Trial honeycomb.io with OpenTelemetry as replacement for Grafana Cloud

Grafana dashboards are excellent, but the 10k metrics and 14 day retention is annoying. Especially with the non-configurable 15k metric limit causing the agents to fail...

Can start by moving from Grafana Agent Operator to OpenTelemetry Collector

Browser emulators?

https://github.com/fcambus/jsemu

Spotify dashboards

https://github.com/Yooooomi/your_spotify

Test CS servers

Especially 1.6, not responding on RCON port (27015)

File conversion tool

https://github.com/zelon88/HRConvert2

Test issue

very test much wow

Automated security tooling

L4 traffic policies, dynamic scanner, static scanner (build pipelines)

Replace startpage

Hajimari's ingress detection isn't useful to me, and it's effectively abandoned. other options in a similar style eg https://github.com/pawelmalak/flame

https://webtrees.net/

Signal proxy? not sure if still relevant

https://signal.org/blog/run-a-proxy/

Rocket chat for the meme

`imagePullSecrets` fail to deploy with Flux

Recipe management - Tandoor

https://github.com/TandoorRecipes/recipes

Ingest physical media and share

Devpod

In-cluster dev environments would be handy

Expose MCC via mDNS

Docs reckon Windows clients (maybe just 11?) use DNS-SD to discover MCC. Undocumented service hostname is _microsoft_mcc._tcp.local. hostNetwork didn't work, but https://github.com/blake/external-mdns might once blake/external-mdns#14 is resolved

Typing

https://github.com/monkeytypegame/monkeytype
https://github.com/dprovodnikov/rapid_typing

https://github.com/fastenhealth/fasten-onprem

Backups

asciinema

https://github.com/asciinema/asciinema-server/

Requires postgres and smtp

Action Required: Fix Renovate Configuration

There is an error with this repository's Renovate configuration that needs to be fixed. As a precaution, Renovate will stop PRs until it is resolved.

Location: .github/renovate.json5
Error type: The renovate configuration file contains some invalid settings
Message: Custom Manager contains disallowed fields: matchUpdateTypes, matchPackageNames, automerge, customManagers[3].matchPackageNames: matchPackageNames should be inside a packageRule only, customManagers[3].matchUpdateTypes: matchUpdateTypes should be inside a packageRule only

Support raw layer 4

https://github.com/nginxinc/nginx-kubernetes-gateway/blob/main/docs/gateway-api-compatibility.md

Fixes tf2-vanilla

Support websockets

nginxinc/nginx-gateway-fabric#315, should fix tsuro

ARM by default

Testing ARM compatibility to prepare for on-prem Talos cluster. OKE is a good test case. Current issues:

~~csgo: missing arch. fork upstream to pl4nty/containers~~
home-assistant, rclone-backup: stateful, not expecting ARM issues though
storeweb: open-telemetry/opentelemetry-dotnet-instrumentation#2314
tsuro: missing arch. add to pl4nty/containers

Obsidian LiveSync

Better mobile support, faster sync, and safe now that volsync is working

Serves 404 on unexpected domains

Serves default ingress-nginx backend on cluster DNS names/IPs, bypassing firewall. Fix: kubernetes/ingress-nginx#4464

Custom RSS feeds

And/or reader, feedly's great but folder limit is awful

https://gitlab.com/stormking/feedropolis
https://docs.rsshub.app/en/social-media.html

Uptime Kuma? Or public grafana/cloudflare equivalent

SDR?

https://github.com/f4exb/sdrangelcli

Could be fun for CTF chals

regex tool

missing from tools.tplant

Scalable multi-cluster ingress

Posted in k8s-at-home. Currently, wildcards are routed via Cloudflare Tunnels to traefik which parses HTTPRoutes. This prevents a domain from being shared across clusters.

Long-term moving routing to Tunnels would be ideal, particularly with traefik's ongoing Gateway API bugs. But there's no Gateway implementation for Tunnels, only an operator using CRDs. Maybe they'll write one eventually? I'm not ready to commit to it myself yet

pl4nty / homelab Goto Github PK

homelab's Issues

Open

Ignored or Blocked

Detected dependencies

Recommend Projects

Recommend Topics

Recommend Org