Jeffrey
3e13b76c6a
react-resume: migrate to envFrom with per-container InfisicalSecrets
...
Stores PRINTER_ENDPOINT pre-assembled instead of building it from CHROME_TOKEN via $() interpolation.
2026-08-23 23:47:13 +02:00
Jeffrey
3c24cd4b9d
gotify: migrate to envFrom with per-container InfisicalSecrets
...
Stores the fully assembled database DSN in Infisical instead of building it from three helper vars with $() interpolation, which envFrom cannot feed.
2026-08-23 23:38:16 +02:00
Jeffrey
f382c87f58
pelican: migrate to envFrom with per-container InfisicalSecrets
...
Folds the pelican-config ConfigMap into Infisical so the container has a single envFrom. Pins imagePullPolicy to IfNotPresent because ghcr.io/pelican-dev/panel no longer allows anonymous pulls.
2026-08-23 23:16:37 +02:00
Jeffrey
0329546d87
azure-ddns: migrate to envFrom with a per-container InfisicalSecret
...
Also moves the manifests into a component directory, matching the other migrated apps.
2026-08-23 22:42:09 +02:00
Jeffrey
c408522988
immich: migrate to envFrom with per-container InfisicalSecrets
...
Flat CR narrowed to recursive: false so it keeps serving the SMB credentials that immich-data-smb references by name.
2026-08-23 22:15:10 +02:00
Jeffrey
77b8bd4475
passbolt: migrate to envFrom with per-container InfisicalSecrets
...
Also removes the now-stale flat CR files for searxng, outline and passbolt, which ArgoCD would otherwise recreate pointing at emptied folders.
2026-08-23 21:54:06 +02:00
Jeffrey
fccf9074d2
outline: migrate to envFrom with per-container InfisicalSecrets
...
All 31 env entries, secrets and literals alike, now live in Infisical under /outline/outline and /outline/postgres. Manifest rationale carried across as Infisical secret comments.
2026-08-23 20:55:21 +02:00
Jeffrey
10545c03be
searxng: migrate to envFrom; move remaining literals into Infisical
...
Non-secret config now lives in Infisical alongside the secrets, so containers carry envFrom only and no loose env entries.
2026-08-23 20:34:38 +02:00
Jeffrey
14ef1c6e91
zipline: migrate to envFrom with per-container InfisicalSecrets
...
Flat CR narrowed to recursive: false so it keeps serving the SMB mount credentials that zipline-uploads-pv references by name.
2026-08-23 20:08:43 +02:00
Jeffrey
3bec829396
infisical: repoint secret CRs at the rebuilt machine identity
...
Also tracks the auth ServiceAccounts and RBAC in Git so a namespace rebuild restores Kubernetes auth on its own.
2026-08-23 20:08:28 +02:00
Jeffrey
7956c6b1b9
Migrate to using EnvFrom with the use of Infisical Secret sync for env vars
2026-08-23 18:23:56 +02:00
Jeffrey
19bab56874
Revert "infisical: add resource requests and limits to postgres and valkey"
...
This reverts commit c72c6a322e
2026-08-22 17:04:27 +02:00
Jeffrey
c72c6a322e
infisical: add resource requests and limits to postgres and valkey
...
Both ran as BestEffort QoS, making them first in line for eviction
under node memory pressure. Requests also give the scheduler real
numbers to place them with.
2026-08-22 16:55:50 +02:00
Jeffrey
1a4c765fec
Bump technitium to 15.4.0
2026-08-22 13:12:34 +02:00
Jeffrey
43af4997ab
pelican: wings-ark backend is live at 10.8.11.51
2026-08-16 21:19:22 +02:00
Jeffrey
17c84d2ba8
pelican: split wings into wings-mc and wings-ark domains
2026-08-16 21:09:00 +02:00
Jeffrey
7403edf7d5
argocd: manage namespaces via manifests instead of CreateNamespace
2026-08-16 21:08:41 +02:00
Jeffrey
39f8a78306
fix: point postgres PGDATA at the actual mounted PVC for zipline and immich
2026-08-02 12:55:18 +02:00
Jeffrey
37737670b5
infisical: bring self-hosted stack under GitOps (postgres, valkey, backend); secret.yaml excluded template
2026-07-16 21:47:28 +02:00
Jeffrey
1d026f8d57
infisical: migrate all InfisicalSecrets to Kubernetes auth; drop universal-auth secret
2026-07-16 21:18:47 +02:00
Jeffrey
7526ea0a1b
infisical: route infisical.jsme.be to infisical-backend service
2026-07-15 22:20:12 +02:00
Jeffrey
fc4ca1f3f1
infisical(netbootxyz): use autoCreateServiceAccountToken (short-lived k8s auth)
2026-07-15 22:07:22 +02:00
Jeffrey
596fa5380a
infisical(netbootxyz): switch to Kubernetes auth (pilot)
2026-07-15 21:54:43 +02:00
Jeffrey
571c5d5d0b
Move Jenkins and ntfy to deprecated
2026-07-08 09:07:03 +02:00
Jeffrey
e467340edd
Upgrade storage on Jellyfin
2026-07-04 17:41:36 +02:00
Jeffrey
fc54063272
Increate PVC size Jellyfin
2026-06-27 14:17:55 +02:00
Jeffrey
be9bd3a227
Add Outline
2026-06-22 23:32:35 +02:00
Jeffrey
c40577589d
Split manifests into infra/ and applications/
2026-06-21 12:23:20 +02:00
Jeffrey