nik/homelab
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Commit Graph

  • f76b1e6f13 fix: temporarily redirect nik4nao.com to me.nik4nao.com main Nik Afiq 2026-09-18 11:28:30 +09:00
  • 2c26c227ee docs: update CLAUDE.md and README.md to include me.nik4nao.com deployment details Nik Afiq 2026-09-16 23:30:38 +09:00
  • 471e9ae8ca Add me.nik4nao.com deployment Nik Afiq 2026-09-16 23:06:00 +09:00
  • 7a64863ead fix: rewrite Filebar's malformed auth header to unblock login (temporary) Nik Afiq 2026-09-14 16:05:22 +09:00
  • 2c46ae33c9 debug: temporarily route Jellyfin ingress through header-capture proxy Nik Afiq 2026-09-14 15:51:07 +09:00
  • 40f6d05c4b fix: revert Jellyfin to 12.0 after 10.11.11 rollback broke DB compatibility Nik Afiq 2026-09-14 15:45:39 +09:00
  • b995b9f5c4 fix: update Jellyfin image to version 10.11.11 Nik Afiq 2026-09-14 15:42:09 +09:00
  • 4d613c9c06 fix: make pia-wg PreDown idempotent to prevent restart failures Nik Afiq 2026-08-27 20:08:29 +09:00
  • 8629a36278 fix: allow WireGuard road-warrior clients to reach DNS on minisforum Nik Afiq 2026-08-26 20:45:09 +09:00
  • b37a816b3e fix: route home LAN through mac WireGuard client, fix broken bool conditionals Nik Afiq 2026-08-26 20:45:09 +09:00
  • 663337f818 feat: add workaround for qBittorrent 5.2.0 stale lock issue with init container Nik Afiq 2026-08-25 22:27:47 +09:00
  • e757850c3b fix: ensure boolean evaluation for pia_force_reregister and pia_force_key_rotation in registration conditions Nik Afiq 2026-08-25 20:59:40 +09:00
  • 2e64687bb9 feat: switch browser-vpn-proxy to LoadBalancer on port 1080 Nik Afiq 2026-08-25 00:06:54 +09:00
  • 6f6c3cf0eb feat: decommission legacy gluetun-proxy in favor of browser-vpn-proxy Nik Afiq 2026-08-24 23:48:31 +09:00
  • 462a9d9c79 fix: move browser-vpn-proxy out of the canary's sync-wave gate Nik Afiq 2026-08-24 23:40:34 +09:00
  • b333b5e6d9 feat: activate browser-vpn-proxy content changes (previous commit was a bare rename) Nik Afiq 2026-08-24 23:20:26 +09:00
  • 89524d45e3 feat: activate browser-vpn-proxy (VLAN 50 SOCKS5 proxy via PIA) Nik Afiq 2026-08-24 23:19:48 +09:00
  • 9b799c5ea2 docs: drop stale rollback-file references now that rollback/ is removed Nik Afiq 2026-08-24 23:00:40 +09:00
  • 75a371e17d refactor: remove outdated REFACTOR_PLAN.md document Nik Afiq 2026-08-24 22:59:35 +09:00
  • c1cde07118 docs: mark VLAN 50/PIA gateway live, drop stale rollback file references Nik Afiq 2026-08-24 22:58:33 +09:00
  • 756fa120b3 feat: update JDownloader deployment for VLAN 50 migration with enhanced network configuration and egress guard Nik Afiq 2026-08-24 22:45:08 +09:00
  • 2f7ec5f5b1 feat: migrate qBittorrent deployment to VLAN 50 with Multus integration and enhanced configuration Nik Afiq 2026-08-24 22:33:45 +09:00
  • 28d062801a fix: use nft instead of ip6tables/sysctl for IPv6 blocking in vlan50 guard Nik Afiq 2026-08-24 22:15:12 +09:00
  • 7ce0dee711 fix: replace ip6tables with disable_ipv6 sysctl in vlan50 egress guard Nik Afiq 2026-08-24 22:08:34 +09:00
  • 26894d16ce feat: strengthen VLAN50 canary egress guard and document its lifecycle Nik Afiq 2026-08-24 22:02:27 +09:00
  • f1bdf11f1e fix: install missing CNI reference plugins (macvlan) for Multus on k3s Nik Afiq 2026-08-24 21:39:23 +09:00
  • c7cdcc967d fix: mount k3s CNI data parent dir into multus for symlink resolution Nik Afiq 2026-08-24 21:25:12 +09:00
  • d410c05e6d fix: correct Multus binDir/cnibin path for k3s delegate plugin exec Nik Afiq 2026-08-24 20:06:04 +09:00
  • e980fcb755 feat: add Multus manifests for VPN VLAN 50 (manual sync) Nik Afiq 2026-08-24 18:07:40 +09:00
  • 82137f6b2a feat: register multus Argo CD Application (manual sync) Nik Afiq 2026-08-24 18:05:32 +09:00
  • 7eb7072ec5 feat: add vlan50-parent role for nik-debian's tagged VLAN 50 interface Nik Afiq 2026-08-24 17:56:59 +09:00
  • 325d3bc5c7 feat: add pia-gateway role for minisforum PIA WireGuard egress Nik Afiq 2026-08-24 17:54:16 +09:00
  • 939a7c6ed1 feat: add routed UFW rules for pod traffic and open NFS/SMB on nik-debian Nik Afiq 2026-08-23 15:00:45 +09:00
  • 53d02b7522 feat: configure K3s DNS resolver and update firewall rules for new subnet Nik Afiq 2026-08-23 14:07:49 +09:00
  • 9f9bd04b4b fix: change serviceDns type from LoadBalancer to ClusterIP in Pi-hole configurations Nik Afiq 2026-08-23 11:46:23 +09:00
  • 0824404f96 fix: update host IP addresses to new subnet 10.10.40.0/24 in documentation Nik Afiq 2026-08-23 11:42:47 +09:00
  • fa53b7fee4 fix: disable both Pi-hole instances during DNS migration Nik Afiq 2026-08-23 11:40:26 +09:00
  • 12b3b48e8d fix: update SERVER_REGIONS environment variable for Gluetun to include additional locations Nik Afiq 2026-08-23 05:53:12 +09:00
  • 7a8c73d78a fix: update fleet IPs after subnet migration to 10.10.40.0/24 Nik Afiq 2026-08-23 05:52:41 +09:00
  • abc316d7f8 fix: update Gluetun image version to v3.41 for Gluetun, JDownloader, and qBittorrent deployments Nik Afiq 2026-08-19 01:23:34 +09:00
  • 5512735770 fix: update VPN server regions to use JP Tokyo format for Gluetun, JDownloader, and qBittorrent Nik Afiq 2026-08-19 01:13:51 +09:00
  • db862df82c fix: update VPN server regions to include Japan for Gluetun, JDownloader, and qBittorrent Nik Afiq 2026-08-19 01:11:27 +09:00
  • bf91e72429 Revert "fix: remove Ingress and TLS configurations for Watch Party and Portfolio services" Nik Afiq 2026-08-07 16:28:23 +09:00
  • e15911305f Revert "feat: move Gitea traffic from gitea.nik4nao.com to gitea.home.arpa" Nik Afiq 2026-08-19 00:22:27 +09:00
  • fd13b8aedb feat: move Gitea traffic from gitea.nik4nao.com to gitea.home.arpa Nik Afiq 2026-08-07 23:06:02 +09:00
  • 435f62d96f Revert "fix: remove Ingress and TLS configurations for Watch Party and Portfolio services" restore-public-ingress Nik Afiq 2026-08-07 16:28:23 +09:00
  • 3657519b17 fix: remove Ingress and TLS configurations for Watch Party and Portfolio services Nik Afiq 2026-08-07 16:22:33 +09:00
  • 36ac94ccf3 fix: increase memory requests and limits for kavita2 deployment Nik Afiq 2026-08-02 18:10:01 +09:00
  • 0a997367f0 fix: update VPN server regions for JDownloader deployment Nik Afiq 2026-08-02 03:05:05 +09:00
  • d31f85f4b3 fix: increase failureThreshold for livenessProbe in Gluetun and qBittorrent deployments Nik Afiq 2026-08-02 02:32:51 +09:00
  • bcc697db7e feat: add second Kavita instance with NFS and IngressRoute at books2.home.arpa fix: update Pi-hole configurations to include DNS entry for books2.home.arpa Nik Afiq 2026-08-02 02:30:17 +09:00
  • 423d9eacab feat: add Kavita e-book server configuration with NFS and IngressRoute Nik Afiq 2026-08-02 01:54:23 +09:00
  • 47e3a8992a feat: add custom DNS entries for books.home.arpa in Pi-hole configurations Nik Afiq 2026-08-02 01:53:59 +09:00
  • 6277c7fa33 alert-bridge: switch ingress from HTTPS to plain HTTP Nik Afiq 2026-08-01 23:00:06 +09:00
  • 85cc8494fa feat: add alert bridge service and related configurations Nik Afiq 2026-08-01 22:51:59 +09:00
  • d95806cd32 fix: update JDownloader script to include download password in crawljob format Nik Afiq 2026-07-26 03:10:50 +09:00
  • c354e6c39f feat: enhance JDownloader script to handle .torrent files and save them to output directory Nik Afiq 2026-07-26 02:20:30 +09:00
  • fb3e2976e2 feat: add documentation for JDownloader integration and package naming Nik Afiq 2026-07-26 01:47:07 +09:00
  • c625461e30 fix: update JDownloader script to extract package name from URL for crawljob Nik Afiq 2026-07-26 01:37:03 +09:00
  • 9dc4bbe249 fix: update JDownloader script to write 'text' instead of 'url' for crawljob Nik Afiq 2026-07-26 01:29:16 +09:00
  • a70a3a8014 fix: update cnl-bridge container and service ports from 9666 to 9667 Nik Afiq 2026-07-26 01:01:01 +09:00
  • f3cef5cd1d feat: add alexa-bridge deployment, service, and TLS certificate for mTLS communication Nik Afiq 2026-07-26 00:51:01 +09:00
  • 710f3be427 feat: add init container for model initialization and change models volume to emptyDir Nik Afiq 2026-07-25 02:33:18 +09:00
  • 4257e83522 fix: update deployment strategy to Recreate for tts-gateway to prevent GPU deadlock Nik Afiq 2026-07-25 00:24:47 +09:00
  • d93aa3541c test: temporarily disable tts-gateway mTLS for Mac-side testing Nik Afiq 2026-07-25 00:22:20 +09:00
  • 12718203ac fix: k3s-agent label/taint tasks use undefined ansible_hostname Nik Afiq 2026-07-25 00:13:22 +09:00
  • 69d880186a fix: open Flannel/K3s ports in gpu-node's UFW rules Nik Afiq 2026-07-25 00:05:54 +09:00
  • f2261a2676 feat: add tts-gateway service, pinned to nik-gpu for GPU inference Nik Afiq 2026-07-24 23:50:40 +09:00
  • df07062cd1 fix: restore nik4nao.home.arpa DNS entry -- wrongly removed as "orphaned" Nik Afiq 2026-07-24 12:18:00 +09:00
  • f006090fea fix: remove Immich entirely Nik Afiq 2026-07-23 20:21:05 +09:00
  • 7fbab2561a fix: revert Gitea DB password to plaintext -- existingSecret doesn't work with this chart Nik Afiq 2026-07-23 19:56:21 +09:00
  • 8f3e04f179 fix: sealed-secrets chart repo moved to bitnami.github.io Nik Afiq 2026-07-23 19:31:54 +09:00
  • a93818146a fix: qbittorrent/jdownloader crash-loop from today's rollout Nik Afiq 2026-07-23 19:15:54 +09:00
  • 9afc7e8005 fix: resolve REPLACE_ME placeholder in argocd/apps/authentik.yaml Nik Afiq 2026-07-23 18:47:51 +09:00
  • 09d087fb11 docs: mark all 9 REFACTOR_PLAN.md stages done at the file level Nik Afiq 2026-07-23 18:22:53 +09:00
  • 7435b7583f chore: add CI validation workflow, widen secrets-scanner scope, document validation commands Nik Afiq 2026-07-23 18:22:38 +09:00
  • 992a00c2db docs: add cold-rebuild runbook reflecting closed GitOps gaps Nik Afiq 2026-07-23 18:22:31 +09:00
  • d44295f569 fix: add resource requests/limits and probes to workloads that had none Nik Afiq 2026-07-23 18:21:03 +09:00
  • d0887ac648 fix: Argo CD bootstrap normalization -- adopt cert-manager/Authentik config, fix policy drift Nik Afiq 2026-07-23 18:20:54 +09:00
  • a859e83ea6 docs: track refactor plan progress, record new findings from live cluster checks Nik Afiq 2026-07-23 18:15:17 +09:00
  • 5a00f5767b fix: Ansible cleanup -- merge dual config, pin collections, align K3s version, fix bugs Nik Afiq 2026-07-23 18:15:12 +09:00
  • 57a78fd8e7 fix: remove orphaned DNS entry, sync Pi-hole DNS drift between primary/secondary Nik Afiq 2026-07-23 18:14:54 +09:00
  • 08d2b97410 chore: add yamllint and ansible-lint configs for local validation Nik Afiq 2026-07-23 18:14:50 +09:00
  • e6550d0e39 fix: rotate Gitea DB password and Dashy API key off plaintext, fix internal CA issuerRef Nik Afiq 2026-07-23 18:14:46 +09:00
  • f0d2f23a0f feat: add SwitchBot token and secret to environment configuration and update ha-gateway secret and deployment Nik Afiq 2026-07-23 13:57:07 +09:00
  • 791c0a5fa5 feat: add infrastructure change reviewer and secrets leak scanner, update CLAUDE.md with operational guidance Nik Afiq 2026-07-23 11:25:20 +09:00
  • e7718ce356 feat: add GPU node setup with Docker and NVIDIA support, including configuration files and playbook updates Nik Afiq 2026-07-23 11:07:18 +09:00
  • f80848c57e fix: update JDownloader VPN configuration to use Singapore server region Nik Afiq 2026-05-24 17:05:53 +09:00
  • 0bf7f0f597 feat: add configuration for GPU node setup and update Ollama role for cross-platform support Nik Afiq 2026-05-20 23:17:23 +09:00
  • d3069eb234 fix: update SSH configuration for security and add inotify limits Nik Afiq 2026-05-16 18:50:01 +09:00
  • 7a2caa824d fix: update HTTPPROXY_LISTENING_ADDRESS format to include port prefix Nik Afiq 2026-05-16 17:28:45 +09:00
  • 620068624d fix: update Gluetun image version to v3.41.1 in Gluetun, JDownloader, and qBittorrent deployments Nik Afiq 2026-05-16 17:26:21 +09:00
  • 21f3c545b9 feat: add health checks for Gluetun proxy, JDownloader, and qBittorrent deployments Nik Afiq 2026-05-16 17:25:16 +09:00
  • 3e0ed35e24 fix: update SERVER_REGIONS for Gluetun proxy to include South Korea and Taiwan Nik Afiq 2026-05-16 06:59:55 +09:00
  • cce74a88e8 fix: update SERVER_REGIONS for JDownloader and qBittorrent to include additional locations Nik Afiq 2026-05-16 06:58:29 +09:00
  • 0e0d74d816 fix: update ignoreDifferences for loki-stack ConfigMap to include /data Nik Afiq 2026-05-15 04:11:39 +09:00
  • cc070cee61 feat: add Gluetun proxy deployment and service configuration Nik Afiq 2026-05-13 22:30:26 +09:00
  • 5fde45b374 feat: add Gluetun proxy deployment and service configuration Nik Afiq 2026-05-13 22:28:50 +09:00
  • c39ae7bd3c feat: add new services and status items to Dashy configuration Nik Afiq 2026-05-13 01:07:59 +09:00
  • c373b828d1 fix: remove Photoview references from configuration and documentation Nik Afiq 2026-05-13 00:40:15 +09:00