73 Commits
Author SHA1 Message Date
junv 222d7477fb Update 2026-07-20 16:15:57 +10:00
Junv (via Hermes) 3a860bb486 remove: K8s security-audit cronjob (path not available on node, switching to Hermes cron) 2026-06-13 15:26:14 +10:00
Junv (via Hermes) e99ec79ae5 add: cronjob for weekly security audit (Sat 7:50 AM) 2026-06-13 15:20:38 +10:00
junv fccba836df Whitelist VPN IPs in CrowdSec sync 2026-06-13 09:40:46 +10:00
junv b579775729 Update token refresh 2026-06-13 09:34:27 +10:00
Junv (via Hermes) a8b6890a99 chore: upgrade Docker images batch — June 2026
Updates 7 Docker images across the infrastructure manifests (PG14 kept as-is):

  media/jackett.yaml
    linuxserver/jackett: 0.24.1124 → 0.24.1985 (patch)

  media/media.yaml
    linuxserver/qbittorrent: version-5.1.2-r4 → version-5.2.1_v2.0.12 (major 5.1→5.2)

  home-apps/n8n.yaml
    n8nio/n8n: 2.15.0 → 2.23.1 (minor)

  db/qdrant.yaml
    qdrant/qdrant: v1.16-unprivileged → v1.18.1-unprivileged (minor)

  kube-vip/daemonset.yaml
    kube-vip/kube-vip: v0.4.4 → v0.9.2 (conservative, stayed within v0.x)

  on-demand/once-etcd-job.yaml
    etcd: 3.5.1-0 → 3.5.30-0 (patch)

  adhoc-config/oauth2-proxy.yaml
    oauth2-proxy/oauth2-proxy: v7.6.0 → v7.15.2 (minor)

Note: postgres:14 kept unchanged per PR review feedback.
kube-vip kept at v0.9.2 (latest v0.x) instead of v1.2.0 to avoid
v0→v1 breaking changes.
2026-06-01 16:52:51 +10:00
小黑 (AI Bot) b0c19a6a2e Grant ai-bot full admin ownership of home-apps namespace 2026-04-14 11:27:47 +10:00
小黑 (AI Bot) 37052f3971 Add RBAC for ai-bot to manage EndpointSlices in home-apps namespace 2026-04-14 11:21:53 +10:00
junv a27a8362dc Update 2026-04-01 20:01:53 +11:00
junv 5c6786231f Update auto ban 2026-04-01 19:54:01 +11:00
junv 7ae2616308 Add crowdsec auto ban 2026-04-01 19:51:16 +11:00
junv f540312aa9 Apply links role binding 2026-04-01 19:36:04 +11:00
junv 1dbe5dce32 Update bitwarden pv 2026-01-16 16:29:43 +11:00
junv c0c6d83fbe Update bitwarden 2026-01-16 16:25:04 +11:00
junv d37a9fe7e8 Add issuer back 2026-01-07 10:51:53 +11:00
junv 175c872d60 Update adhoc pvc 2025-12-11 13:42:44 +11:00
junv 0fece9b495 Update 2025-12-08 22:29:08 +11:00
junv f75cfd24f2 Update bitwarden 2025-12-08 22:10:20 +11:00
junv 2cf2b36cb3 Update 2025-12-07 10:17:01 +11:00
junv 16acda3b38 Update nfs to 1.5 which is the feiniu 2025-12-07 10:11:17 +11:00
junv c8a8075a0b Remove duplicated clusterissuer and let it managed by terraform 2025-12-01 14:29:44 +11:00
junv 53f1ebe0e9 Update configuration 2025-12-01 13:40:19 +11:00
junv 36e22529bf Add nodeAffinity 2025-12-01 11:29:16 +11:00
junv 8ef4c9a6f2 Add grafana adhoc pv 2025-12-01 11:26:43 +11:00
junv 880abde6dc Update configUpdate n8n 2025-11-28 10:02:27 +11:00
junv 780a593183 Update redirect url 2025-11-24 12:47:44 +11:00
junv 7680bac23b Whitelist *.junv.cc 2025-11-24 12:40:52 +11:00
junv 7ed0ddeab8 Update pass 2025-11-24 12:16:37 +11:00
junv 11cab9b360 Update 2025-11-24 11:22:56 +11:00
junv 135b451583 Add pocket-id local pv 2025-11-24 11:20:56 +11:00
junv 54a9c382ca Update pvc 2025-09-29 07:41:46 +10:00
junv 4c01b697f9 Add links local pv 2025-09-29 07:41:01 +10:00
junv a7d8ddcde6 Update grafana nginx 2025-08-09 20:57:13 +10:00
junv f2c6e78def Update gitignore 2025-06-20 15:35:40 +10:00
junv 66d582781c NO longer create k8s.junv.cc through adhoc, instead through helm in argocd 2025-01-21 15:17:07 +11:00
junv f5b221e049 archive badges cloudflare tunnel 2024-07-15 11:27:50 +10:00
junv 35b90e722b Add home ingress endpoints 2024-07-12 17:16:01 +10:00
junv 0a28837111 Remove invalid metalb pool 2024-05-19 16:55:33 +10:00
junv 596a5c6b5c Add k8s api ingress 2024-05-19 16:50:44 +10:00
junv 80c3e3f8cb Add k8s ingress 2024-05-19 16:46:30 +10:00
junv 46faa9d4e8 Update L2Advertisement 2024-05-06 16:52:59 +10:00
junv 7e0a240756 Add qrant vector database 2024-05-05 20:37:00 +10:00
junv 444ffdd771 Update domain to junv.cc 2024-03-21 06:54:53 +11:00
junv b7332ef8b2 Add redis local pv and pvc 2024-01-29 15:49:25 +11:00
junv b4b1cc99e5 Update name for home proxy service ports 2024-01-27 12:05:10 +11:00
junv d98830dde7 Update proxy to use caddy 2024-01-27 11:44:38 +11:00
junv 3562465e9e Run aria on controller 2024-01-16 15:35:42 +11:00
junv b0e68482c5 Updatre metallb pool 2023-04-18 14:27:59 +10:00
junv 1db83304e6 Update pool 2023-04-18 13:20:19 +10:00
junv 527d3caad0 Update setting 2023-04-18 13:13:27 +10:00