nik/homelab
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: update fleet IPs after subnet migration to 10.10.40.0/24
Some checks failed
validate / lint (push) Has been cancelled
Details

Browse Source 
minisforum, debian, mac-mini, and gpu-node all moved from
192.168.7.0/24 to 10.10.40.0/24. Updates K3s server/agent config and
node IPs (including gpu-node's host_vars override), NFS export
allow-list and exports template, Pi-hole DNS records and
kube-vip/loadBalancerIP pins, WireGuard's pushed DNS/AllowedIPs, and
the NFS server IP baked into Jellyfin/Kavita/gitea-backup PVs and the
Ollama URL used by ai-gateway/Dashy.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This commit is contained in:
Nik Afiq 2026-08-23 05:52:41 +09:00
parent abc316d7f8
commit 7a8c73d78a
20 changed files with 66 additions and 66 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ansible/host_vars/gpu-node.yaml
View File

@ -38,7 +38,7 @@ nvidia_driver_version: "570"
cuda_version: "12-8"
# ── k3s-agent ──────────────────────────────────────────────────────────────────
k3s_server_url: "https://192.168.7.77:6443"
k3s_server_url: "https://10.10.40.53:6443"
k3s_node_token: "{{ vault_k3s_node_token }}"
# Check current cluster version with: k3s --version on minisforum

8
ansible/inventory.yaml
View File

@ -9,24 +9,24 @@ all:
k3s_server:
hosts:
minisforum:
ansible_host: 192.168.7.77
ansible_host: 10.10.40.53
ansible_port: 430
k3s_agents:
hosts:
debian:
ansible_host: 192.168.7.183
ansible_host: 10.10.40.20
ansible_port: 430
mac_mini:
hosts:
mac-mini:
ansible_host: 192.168.7.96
ansible_host: 10.10.40.30
ansible_python_interpreter: /usr/bin/python3
gpu_workstation:
hosts:
gpu-node:
ansible_host: 192.168.7.98
ansible_host: 10.10.40.12
ansible_port: 430
ansible_python_interpreter: /usr/bin/python3.12

2
ansible/roles/k3s-agent/defaults/main.yaml
View File

@ -4,5 +4,5 @@
# Description: Default variables for the k3s-agent role including version, server URL, and join token.
k3s_version: v1.32.4+k3s1
k3s_server_url: https://192.168.7.77:6443
k3s_server_url: https://10.10.40.53:6443
k3s_node_token: ""

2
ansible/roles/k3s-server/defaults/main.yaml
View File

@ -4,7 +4,7 @@
# Description: Default variables for the k3s-server role including version, IP, and server configuration.
k3s_version: v1.32.4+k3s1
k3s_server_ip: 192.168.7.77
k3s_server_ip: 10.10.40.53
k3s_server_config:
disable:

2
ansible/roles/nfs-server/defaults/main.yaml
View File

@ -4,4 +4,4 @@
# Description: Default variables for the nfs-server role including export path and allowed client IP.
nfs_export_path: /mnt/storage
nfs_allowed_ip: 192.168.7.77
nfs_allowed_ip: 10.10.40.53

4
ansible/roles/nfs-server/templates/exports.j2
View File

@ -3,5 +3,5 @@
# /etc/exports - managed by Ansible
# NFS exports for K3s cluster
/mnt/storage 192.168.7.77(ro,sync,no_subtree_check,no_root_squash,fsid=1)
/home/nik/backups 192.168.7.77(rw,sync,no_subtree_check,no_root_squash,fsid=2)
/mnt/storage 10.10.40.53(ro,sync,no_subtree_check,no_root_squash,fsid=1)
/home/nik/backups 10.10.40.53(rw,sync,no_subtree_check,no_root_squash,fsid=2)

6
ansible/roles/wireguard/tasks/main.yaml
View File

@ -139,12 +139,12 @@
[Interface]
PrivateKey = {{ phone_private_key.content | b64decode | trim }}
Address = 10.10.0.2/32
DNS = 192.168.7.77
DNS = 10.10.40.53
[Peer]
PublicKey = {{ server_public_key.stdout }}
Endpoint = {{ wireguard_endpoint }}:51820
AllowedIPs = 192.168.7.0/24, 10.10.0.0/24
AllowedIPs = 192.168.7.0/24, 10.10.40.0/24, 10.10.0.0/24
PersistentKeepalive = 25
# --- Mac client config ---
@ -158,7 +158,7 @@
[Interface]
PrivateKey = {{ mac_private_key.content | b64decode | trim }}
Address = 10.10.0.3/32
DNS = 192.168.7.77
DNS = 10.10.40.53
[Peer]
PublicKey = {{ server_public_key.stdout }}

2
config/dashy/conf.yaml
View File

@ -228,7 +228,7 @@ sections:
id: 1_services_dashy
- title: Ollama
icon: mdi-robot-outline
url: http://192.168.7.96:11434
url: http://10.10.40.30:11434
target: newtab
id: 2_services_ollama
- title: Glances

4
manifests/core/coredns-custom.yaml
View File

@ -1,6 +1,6 @@
# Apply: kubectl apply -f manifests/core/coredns-custom.yaml
# Delete: kubectl delete -f manifests/core/coredns-custom.yaml
# Description: CoreDNS custom ConfigMap to forward .home.arpa DNS queries to Pihole at 192.168.7.77.
# Description: CoreDNS custom ConfigMap to forward .home.arpa DNS queries to Pihole at 10.10.40.53.
apiVersion: v1
kind: ConfigMap
metadata:
@ -11,5 +11,5 @@ data:
home.arpa:53 {
errors
cache 30
forward . 192.168.7.77
forward . 10.10.40.53
}

2
manifests/gitea/gitea-backup.yaml
View File

@ -96,7 +96,7 @@ spec:
accessModes:
- ReadWriteMany
nfs:
server: 192.168.7.183
server: 10.10.40.20
path: /home/nik/backups/gitea
persistentVolumeReclaimPolicy: Retain
---

2
manifests/home-services/ai-gateway.yaml
View File

@ -27,7 +27,7 @@ spec:
- name: GRPC_PORT
value: "50052"
- name: OLLAMA_URL
value: "http://192.168.7.96:11434"
value: "http://10.10.40.30:11434"
- name: OLLAMA_MODEL
value: "llama3"
- name: OLLAMA_TIMEOUT

2
manifests/homeassistant/homeassistant.yaml
View File

@ -6,7 +6,7 @@ metadata:
namespace: default
subsets:
- addresses:
- ip: 192.168.7.77
- ip: 10.10.40.53
ports:
- port: 8123
---

2
manifests/media/jellyfin.yaml
View File

@ -17,7 +17,7 @@ spec:
- ReadOnlyMany
persistentVolumeReclaimPolicy: Retain
nfs:
server: 192.168.7.183
server: 10.10.40.20
path: /mnt/storage
nodeAffinity:
required:

2
manifests/media/kavita.yaml
View File

@ -17,7 +17,7 @@ spec:
- ReadOnlyMany
persistentVolumeReclaimPolicy: Retain
nfs:
server: 192.168.7.183
server: 10.10.40.20
path: /mnt/storage/books
nodeAffinity:
required:

2
manifests/media/kavita2.yaml
View File

@ -17,7 +17,7 @@ spec:
- ReadOnlyMany
persistentVolumeReclaimPolicy: Retain
nfs:
server: 192.168.7.183
server: 10.10.40.20
path: /mnt/storage/jellyfin/other
nodeAffinity:
required:

2
manifests/network/glances-debian-ingress.yaml
View File

@ -8,7 +8,7 @@ metadata:
namespace: glances
subsets:
- addresses:
- ip: 192.168.7.183
- ip: 10.10.40.20
ports:
- port: 61208
---

2
manifests/network/watch-party-ingress.yaml
View File

@ -8,7 +8,7 @@ metadata:
namespace: default
subsets:
- addresses:
- ip: 192.168.7.96
- ip: 10.10.40.30
ports:
- port: 3000
---

2
values/gitea.yaml
View File

@ -63,7 +63,7 @@ service:
ssh:
type: LoadBalancer
port: 2222
loadBalancerIP: 192.168.7.77
loadBalancerIP: 10.10.40.53
postgresql-ha:
enabled: false

42
values/pihole-debian.yaml
View File

@ -16,7 +16,7 @@ serviceDns:
type: ClusterIP
port: 53
annotations:
kube-vip.io/loadbalancerIPs: 192.168.7.183
kube-vip.io/loadbalancerIPs: 10.10.40.20
probes:
liveness:
@ -34,26 +34,26 @@ extraEnvVars:
dnsmasq:
customDnsEntries:
- address=/gitea.home.arpa/192.168.7.77
- address=/pihole.home.arpa/192.168.7.77
- address=/home.arpa/192.168.7.77
- address=/nik4nao.home.arpa/192.168.7.183
- address=/dashy.home.arpa/192.168.7.77
- address=/jellyfin.home.arpa/192.168.7.77
- address=/qbittorrent.home.arpa/192.168.7.77
- address=/jdownloader.home.arpa/192.168.7.77
- address=/glances.home.arpa/192.168.7.77
- address=/glances-debian.home.arpa/192.168.7.77
- address=/ca.home.arpa/192.168.7.77
- address=/auth.home.arpa/192.168.7.77
- address=/traefik.home.arpa/192.168.7.77
- address=/gitea.nik4nao.com/192.168.7.77
- address=/ha.home.arpa/192.168.7.77
- address=/argocd.home.arpa/192.168.7.77
- address=/gluetun.home.arpa/192.168.7.77
- address=/alert-bridge.home.arpa/192.168.7.77
- address=/books.home.arpa/192.168.7.77
- address=/books2.home.arpa/192.168.7.77
- address=/gitea.home.arpa/10.10.40.53
- address=/pihole.home.arpa/10.10.40.53
- address=/home.arpa/10.10.40.53
- address=/nik4nao.home.arpa/10.10.40.20
- address=/dashy.home.arpa/10.10.40.53
- address=/jellyfin.home.arpa/10.10.40.53
- address=/qbittorrent.home.arpa/10.10.40.53
- address=/jdownloader.home.arpa/10.10.40.53
- address=/glances.home.arpa/10.10.40.53
- address=/glances-debian.home.arpa/10.10.40.53
- address=/ca.home.arpa/10.10.40.53
- address=/auth.home.arpa/10.10.40.53
- address=/traefik.home.arpa/10.10.40.53
- address=/gitea.nik4nao.com/10.10.40.53
- address=/ha.home.arpa/10.10.40.53
- address=/argocd.home.arpa/10.10.40.53
- address=/gluetun.home.arpa/10.10.40.53
- address=/alert-bridge.home.arpa/10.10.40.53
- address=/books.home.arpa/10.10.40.53
- address=/books2.home.arpa/10.10.40.53
persistentVolumeClaim:
enabled: true

40
values/pihole.yaml
View File

@ -65,23 +65,23 @@ extraEnvVars:
dnsmasq:
customDnsEntries:
- address=/gitea.home.arpa/192.168.7.77
- address=/pihole.home.arpa/192.168.7.77
- address=/home.arpa/192.168.7.77
- address=/nik4nao.home.arpa/192.168.7.183
- address=/dashy.home.arpa/192.168.7.77
- address=/jellyfin.home.arpa/192.168.7.77
- address=/qbittorrent.home.arpa/192.168.7.77
- address=/jdownloader.home.arpa/192.168.7.77
- address=/glances.home.arpa/192.168.7.77
- address=/glances-debian.home.arpa/192.168.7.77
- address=/ca.home.arpa/192.168.7.77
- address=/auth.home.arpa/192.168.7.77
- address=/traefik.home.arpa/192.168.7.77
- address=/gitea.nik4nao.com/192.168.7.77
- address=/ha.home.arpa/192.168.7.77
- address=/argocd.home.arpa/192.168.7.77
- address=/gluetun.home.arpa/192.168.7.77
- address=/alert-bridge.home.arpa/192.168.7.77
- address=/books.home.arpa/192.168.7.77
- address=/books2.home.arpa/192.168.7.77
- address=/gitea.home.arpa/10.10.40.53
- address=/pihole.home.arpa/10.10.40.53
- address=/home.arpa/10.10.40.53
- address=/nik4nao.home.arpa/10.10.40.20
- address=/dashy.home.arpa/10.10.40.53
- address=/jellyfin.home.arpa/10.10.40.53
- address=/qbittorrent.home.arpa/10.10.40.53
- address=/jdownloader.home.arpa/10.10.40.53
- address=/glances.home.arpa/10.10.40.53
- address=/glances-debian.home.arpa/10.10.40.53
- address=/ca.home.arpa/10.10.40.53
- address=/auth.home.arpa/10.10.40.53
- address=/traefik.home.arpa/10.10.40.53
- address=/gitea.nik4nao.com/10.10.40.53
- address=/ha.home.arpa/10.10.40.53
- address=/argocd.home.arpa/10.10.40.53
- address=/gluetun.home.arpa/10.10.40.53
- address=/alert-bridge.home.arpa/10.10.40.53
- address=/books.home.arpa/10.10.40.53
- address=/books2.home.arpa/10.10.40.53