--wip-- [skipci]

Liana64 · Nov 23, 2024 · 982e8f4 · 982e8f4
1 parent 8118b73
commit 982e8f4
Show file tree

Hide file tree

Showing 38 changed files with 570 additions and 17 deletions.
diff --git a/kubernetes/lianalabs/apps/federated/kustomization.yaml b/kubernetes/lianalabs/apps/federated/kustomization.yaml
@@ -0,0 +1,6 @@
+---
+# yaml-language-server: $schema=https://json.schemastore.org/kustomization
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./namespace.yaml
diff --git a/kubernetes/lianalabs/apps/federated/namespace.yaml b/kubernetes/lianalabs/apps/federated/namespace.yaml
@@ -0,0 +1,7 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: federated
+  labels:
+    kustomize.toolkit.fluxcd.io/prune: disabled
diff --git a/kubernetes/lianalabs/apps/labs/homepage/app/resources/services.yaml b/kubernetes/lianalabs/apps/labs/homepage/app/resources/services.yaml
@@ -1,2 +1,58 @@
 ---
+- Network:
+  #    - OPNsense:
+  #        href: https://opnsense.${SECRET_OLD_DOMAIN}
+  #        siteMonitor: https://opnsense.${SECRET_OLD_DOMAIN}
+  #        icon: opnsense
+  #        description: RSS feed
+  #        widget:
+  #          type: opnsense
+  #          url: https://opnsense.${SECRET_OLD_DOMAIN}
+  #          key: "{{HOMEPAGE_VAR_OPNSENSE_TOKEN}}"
 - Services:
+    - Miniflux:
+        href: https://rss.${SECRET_INTERNAL_DOMAIN}
+        siteMonitor: http://miniflux.labs.svc.cluster.local/healthcheck
+        icon: miniflux
+        description: RSS feed
+        widget:
+          type: miniflux
+          url: http://miniflux.labs.svc.cluster.local
+          key: "{{HOMEPAGE_VAR_MINIFLUX_TOKEN}}"
+- Media:
+    - Jellyfin:
+        href: https://${SECRET_MEDIA_DOMAIN}
+        siteMonitor: https://${SECRET_MEDIA_DOMAIN}
+        icon: jellyfin
+        description: Media streaming
+        widget:
+          type: jellyfin
+          url: https://${SECRET_MEDIA_DOMAIN}
+          key: "{{HOMEPAGE_VAR_JELLYFIN_TOKEN}}"
+    - Jellyfin:
+        href: https://jellyseerr.${SECRET_MEDIA_DOMAIN}
+        siteMonitor: https://jellyseerr.${SECRET_MEDIA_DOMAIN}
+        icon: jellyseerr
+        description: Media requests
+        widget:
+          type: jellyseerr
+          url: https://jellyseerr.${SECRET_MEDIA_DOMAIN}
+          key: "{{HOMEPAGE_VAR_JELLYSEERR_TOKEN}}"
+    - Sonarr:
+        href: https://sonarr.${SECRET_MEDIA_DOMAIN}
+        siteMonitor: https://sonarr.${SECRET_MEDIA_DOMAIN}
+        icon: sonarr
+        description: TV
+        widget:
+          type: sonarr
+          url: https://sonarr.${SECRET_MEDIA_DOMAIN}
+          key: "{{HOMEPAGE_VAR_SONARR_TOKEN}}"
+    - Radarr:
+        href: https://radarr.${SECRET_MEDIA_DOMAIN}
+        siteMonitor: https://radarr.${SECRET_MEDIA_DOMAIN}
+        icon: radarr
+        description: Movies
+        widget:
+          type: radarr
+          url: https://radarr.${SECRET_MEDIA_DOMAIN}
+          key: "{{HOMEPAGE_VAR_RADARR_TOKEN}}"
diff --git a/kubernetes/lianalabs/apps/labs/kustomization.yaml b/kubernetes/lianalabs/apps/labs/kustomization.yaml
@@ -5,11 +5,8 @@ kind: Kustomization
 resources:
   - ./namespace.yaml
   - ./homepage/ks.yaml
-  - ./archivebox/ks.yaml
   - ./miniflux/ks.yaml
   - ./changedetection/ks.yaml
   - ./atuin/ks.yaml
-  - ./it-tools/ks.yaml
-  - ./cyberchef/ks.yaml
   - ./redlib/ks.yaml
   - ./linkding/ks.yaml
diff --git a/kubernetes/lianalabs/apps/labs/netbox/app/helmrelease.yaml b/kubernetes/lianalabs/apps/labs/netbox/app/helmrelease.yaml
diff --git a/...apps/labs/archivebox/app/helmrelease.yaml → ...pps/media/archivebox/app/helmrelease.yaml b/...apps/labs/archivebox/app/helmrelease.yaml → ...pps/media/archivebox/app/helmrelease.yaml
@@ -107,6 +107,7 @@ spec:
       data:
         storageClass: local-nvme
         accessMode: ReadWriteOnce
-        size: 4Gi
+        size: 5Gi
+        retain: true
         globalMounts:
           - path: /data
diff --git a/...ps/labs/archivebox/app/kustomization.yaml → ...s/media/archivebox/app/kustomization.yaml b/...ps/labs/archivebox/app/kustomization.yaml → ...s/media/archivebox/app/kustomization.yaml
diff --git a/...es/lianalabs/apps/labs/archivebox/ks.yaml → ...s/lianalabs/apps/media/archivebox/ks.yaml b/...es/lianalabs/apps/labs/archivebox/ks.yaml → ...s/lianalabs/apps/media/archivebox/ks.yaml
@@ -6,13 +6,13 @@ metadata:
   name: &app archivebox
   namespace: flux-system
 spec:
-  targetNamespace: labs
+  targetNamespace: media
   commonMetadata:
     labels:
       app.kubernetes.io/name: *app
   dependsOn:
     - name: traefik
-  path: ./kubernetes/lianalabs/apps/labs/archivebox/app
+  path: ./kubernetes/lianalabs/apps/media/archivebox/app
   prune: true
   sourceRef:
     kind: GitRepository

diff --git a/kubernetes/lianalabs/apps/media/kustomization.yaml b/kubernetes/lianalabs/apps/media/kustomization.yaml
@@ -4,3 +4,5 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - ./namespace.yaml
+  - ./archivebox/ks.yaml
+  #- ./piped/ks.yaml
diff --git a/kubernetes/lianalabs/apps/media/piped/app/helmrelease.yaml b/kubernetes/lianalabs/apps/media/piped/app/helmrelease.yaml
@@ -0,0 +1,111 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: &app piped
+  namespace: media
+spec:
+  interval: 30m
+  chart:
+    spec:
+      chart: piped
+      version: 6.0.4
+      sourceRef:
+        kind: HelmRepository
+        name: piped
+        namespace: flux-system
+  install:
+    createNamespace: true
+    remediation:
+      retries: 3
+  upgrade:
+    cleanupOnFail: true
+    crds: Skip
+    remediation:
+      strategy: rollback
+      retries: 3
+  values:
+    postgresql:
+      enabled: false
+    frontend:
+      image:
+        repository: "docker.io/1337kavin/piped-frontend"
+        tag: "latest"
+        pullPolicy: Always
+      env:
+        BACKEND_HOSTNAME: &api api.yt.${SECRET_INTERNAL_DOMAIN}
+        TZ: ${TIMEZONE}
+
+    backend:
+      image:
+        repository: docker.io/1337kavin/piped
+        pullPolicy: "Always"
+      initContainers:
+        01-init-db:
+          image:
+            repository: ghcr.io/onedr0p/postgres-init
+            tag: "16"
+          imagePullPolicy: IfNotPresent
+          envFrom:
+            - secretRef:
+                name: &secret piped-secret
+      podAnnotations:
+        configmap.reloader.stakater.com/reload: "piped-backend-config"
+      env:
+        TZ: ${TIMEZONE}
+      config:
+        PORT: 8080
+        HTTP_WORKERS: 4
+        PROXY_PART: &proxy https://proxy.yt.${SECRET_INTERNAL_DOMAIN}
+        # DISABLE_REGISTRATION: false
+        database:
+          secret:
+            name: *secret
+            connection_url: CONNECTION_URL
+            username: INIT_POSTGRES_USER
+            password: INIT_POSTGRES_PASS
+    ingress:
+      main:
+        enabled: true
+        ingressClassName: traefik
+        annotations:
+          cert-manager.io/cluster-issuer: "letsencrypt-production"
+          gethomepage.dev/enabled: "true"
+          gethomepage.dev/group: Tools
+          gethomepage.dev/name: Piped
+          gethomepage.dev/description: YouTube client
+          gethomepage.dev/icon: mdi-youtube
+        hosts:
+          - host: &host yt.${SECRET_INTERNAL_DOMAIN}
+            paths:
+              - path: "/"
+        tls:
+          - secretName: piped-frontend-tls
+            hosts:
+              - *host
+      backend:
+        enabled: true
+        ingressClassName: traefik
+        annotations:
+          hajimari.io/enable: "false"
+        hosts:
+          - host: *api
+            paths:
+              - path: "/"
+        tls:
+          - secretName: piped-api-tls
+            hosts:
+              - *api
+      ytproxy:
+        enabled: true
+        ingressClassName: traefik
+        annotations:
+          hajimari.io/enable: "false"
+        hosts:
+          - host: &proxy proxy.yt.${SECRET_INTERNAL_DOMAIN}
+            paths:
+              - path: "/"
+        tls:
+          - secretName: piped-proxy-tls
+            hosts:
+              - *proxy
diff --git a/kubernetes/lianalabs/apps/media/piped/app/kustomization.yaml b/kubernetes/lianalabs/apps/media/piped/app/kustomization.yaml
@@ -0,0 +1,8 @@
+---
+# yaml-language-server: $schema=https://json.schemastore.org/kustomization
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./secret.sops.yaml
+  - ./helmrelease.yaml
+  - ../../../database/cloudnative-pg/app/secret.sops.yaml
diff --git a/kubernetes/lianalabs/apps/media/piped/app/secret.sops.yaml b/kubernetes/lianalabs/apps/media/piped/app/secret.sops.yaml
@@ -0,0 +1,31 @@
+# yamllint disable
+kind: Secret
+apiVersion: v1
+type: Opaque
+metadata:
+  name: piped-secret
+stringData:
+  INIT_POSTGRES_USER: ENC[AES256_GCM,data:PClMpCo=,iv:WswYV4g8v6yC9BBc+mRwqaW7uBlLYpB/IQP0/9Xa8uU=,tag:/4UO3l/iYn2G6tWsd/J7EA==,type:str]
+  INIT_POSTGRES_PASS: null
+  DATABASE_URL: ENC[AES256_GCM,data:qubN/jEvkx3VtuYvNJcihullUJWUYmISs2/vlQOSqQLhmq2fTbXLIb1loKFmpt9XK/za17EZRKh/cAHOEePR1nvpXcflULyMf89i8+7P0UxtOtVmEJEHDaCpGw==,iv:V5cfvsj12SVUjwZsNjM4RpMB7pnWUFr3ncfT6vNeDoU=,tag:HXUs60lmP9zanDABDJxRlA==,type:str]
+  CONNECTION_URL: ENC[AES256_GCM,data:Ml4MIn1tcLLbd9woL0wVPAem/MvGq5ZeUVo4XFeJt7iZsZxZInNk4ZlhP3hNQD7Tp4qoQvXatA6YToe6,iv:bFZSz0cFBnzCU56g12Usx6gfm9NHrxnPikVQPuUEI4A=,tag:Fr3kgiADMHUDDeAILoyUDQ==,type:str]
+sops:
+  kms: []
+  gcp_kms: []
+  azure_kv: []
+  hc_vault: []
+  age:
+    - recipient: age19nu7uf8dageqlmzk23x7vl24fpn0l7cq20l3l4xxf2sk2xd5h98qss437p
+      enc: |
+        -----BEGIN AGE ENCRYPTED FILE-----
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBORHlmdTRudXlhQ0xwb1hv
+        QVZJMFhPUWJmOU5xZXdwbFhVdWxJTTdxSUdJCjdxYTVZU2ltTFMySkV6cFdqd0hH
+        VmlYUTRtQmh4L3dUb1gzNDY5Zlk3aG8KLS0tIG83ZVpwQk5pMSswMTRHczk3NTdF
+        YkI2MTZLamFIOTUyOUx2ZlZOVGw3b3cKzgoAlWBy9DBWFt3SJ6IJa5d1haTNEEmP
+        bY3ypNKP1yj0MFLDTfqnI3HtE8yRi93z551b2jFy8cViVUXlWzMWtA==
+        -----END AGE ENCRYPTED FILE-----
+  lastmodified: "2024-11-19T00:27:03Z"
+  mac: ENC[AES256_GCM,data:A1H/pyFlWoypT6NA69pUNDTxN3oI/pWuSQjmcvqytfDW/d9B1wbT2JuCa7KZu5P6FUC2cMk7y7gU8rj+g3WF6vPcGQm3bPXJJ0OX2ingztf/041gkZwooxaQTqOpZbsnbpDl3vGI1gnIwQuW18XqFVye34LxgdMmqf/9HsxQYPQ=,iv:KpBhyabXFD67gL33H7xGu0bzrZAkqMmIvMV/GkLbD5g=,tag:toFR3GZiRtZoPR4nPrph6g==,type:str]
+  pgp: []
+  encrypted_regex: ^(data|stringData)$
+  version: 3.9.1
diff --git a/kubernetes/lianalabs/apps/media/piped/ks.yaml b/kubernetes/lianalabs/apps/media/piped/ks.yaml
@@ -0,0 +1,26 @@
+---
+# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/kustomization-kustomize-v1.json
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: &app piped
+  namespace: flux-system
+spec:
+  targetNamespace: media
+  commonMetadata:
+    labels:
+      app.kubernetes.io/name: *app
+  dependsOn:
+    - name: traefik
+  path: ./kubernetes/lianalabs/apps/media/piped/app
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: k8s-gitops
+  wait: false
+  interval: 30m
+  retryInterval: 1m
+  timeout: 5m
+  postBuild:
+    substitute:
+      APP: *app
diff --git a/...labs/changedetection/app/helmrelease.yaml → ...lity/changedetection/app/helmrelease.yaml b/...labs/changedetection/app/helmrelease.yaml → ...lity/changedetection/app/helmrelease.yaml
@@ -77,7 +77,7 @@ spec:
         annotations:
           cert-manager.io/cluster-issuer: "letsencrypt-production"
           gethomepage.dev/enabled: "true"
-          gethomepage.dev/group: Services
+          gethomepage.dev/group: Observability
           gethomepage.dev/name: ChangeDetection
           gethomepage.dev/description: Change monitoring for the web
           gethomepage.dev/icon: changedetection-io.png

diff --git a/...bs/changedetection/app/kustomization.yaml → ...ty/changedetection/app/kustomization.yaml b/...bs/changedetection/app/kustomization.yaml → ...ty/changedetection/app/kustomization.yaml
diff --git a/...analabs/apps/labs/changedetection/ks.yaml → ...pps/observability/changedetection/ks.yaml b/...analabs/apps/labs/changedetection/ks.yaml → ...pps/observability/changedetection/ks.yaml
diff --git a/kubernetes/lianalabs/apps/observability/gatus/app/helmrelease.yaml b/kubernetes/lianalabs/apps/observability/gatus/app/helmrelease.yaml
@@ -138,7 +138,7 @@ spec:
         annotations:
           cert-manager.io/cluster-issuer: "letsencrypt-production"
           gethomepage.dev/enabled: "true"
-          gethomepage.dev/group: Services
+          gethomepage.dev/group: Observability
           gethomepage.dev/name: Gatus
           gethomepage.dev/description: Status monitoring page
           gethomepage.dev/icon: gatus

diff --git a/kubernetes/lianalabs/apps/observability/kube-prometheus-stack/app/helmrelease.yaml b/kubernetes/lianalabs/apps/observability/kube-prometheus-stack/app/helmrelease.yaml
@@ -74,7 +74,7 @@ spec:
         annotations:
           cert-manager.io/cluster-issuer: "letsencrypt-production"
           gethomepage.dev/enabled: "true"
-          gethomepage.dev/group: Services
+          gethomepage.dev/group: Observability
           gethomepage.dev/name: Prometheus
           gethomepage.dev/description: Time-series event monitoring
           gethomepage.dev/icon: prometheus.png
@@ -143,7 +143,7 @@ spec:
         annotations:
           cert-manager.io/cluster-issuer: "letsencrypt-production"
           gethomepage.dev/enabled: "true"
-          gethomepage.dev/group: Services
+          gethomepage.dev/group: Observability
           gethomepage.dev/name: Grafana
           gethomepage.dev/description: Data visualization
           gethomepage.dev/icon: grafana.png
@@ -159,7 +159,7 @@ spec:
         annotations:
           cert-manager.io/cluster-issuer: "letsencrypt-production"
           gethomepage.dev/enabled: "true"
-          gethomepage.dev/group: Services
+          gethomepage.dev/group: Observability
           gethomepage.dev/name: Alert Manager
           gethomepage.dev/description: Alert handler for kube-prometheus-stack
           gethomepage.dev/icon: alertmanager.png

diff --git a/kubernetes/lianalabs/apps/observability/kustomization.yaml b/kubernetes/lianalabs/apps/observability/kustomization.yaml
@@ -7,4 +7,5 @@ resources:
   - ./kube-prometheus-stack/ks.yaml
   - ./loki/ks.yaml
   - ./netshoot/ks.yaml
+  - ./speedtest-tracker/ks.yaml
   #- ./gatus/ks.yaml