From 489ff270047d8646ab52ff3936db736c7ecddf37 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 22 Aug 2025 17:59:53 +0000 Subject: [PATCH 01/19] chore(deps): update miniflux/miniflux docker tag to v2.2.12 --- k8s/services/miniflux/deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/services/miniflux/deployment.yaml b/k8s/services/miniflux/deployment.yaml index 2a8b131..e8ebc05 100644 --- a/k8s/services/miniflux/deployment.yaml +++ b/k8s/services/miniflux/deployment.yaml @@ -28,7 +28,7 @@ spec: spec: containers: - name: miniflux - image: miniflux/miniflux:2.2.10 + image: miniflux/miniflux:2.2.12 imagePullPolicy: Always securityContext: allowPrivilegeEscalation: false From 9e86e7d703fe52677fce59334132156825b10aa9 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 22 Aug 2025 18:01:23 +0000 Subject: [PATCH 02/19] chore(deps): update code.forgejo.org/forgejo/runner docker tag to v9.1.1 --- docker/forgejo-runner/docker-compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker/forgejo-runner/docker-compose.yml b/docker/forgejo-runner/docker-compose.yml index 8f8d6ca..be8a6b4 100644 --- a/docker/forgejo-runner/docker-compose.yml +++ b/docker/forgejo-runner/docker-compose.yml @@ -1,6 +1,6 @@ --- x-runner-common: &runner-common - image: code.forgejo.org/forgejo/runner:9.0.3 + image: code.forgejo.org/forgejo/runner:9.1.1 links: - docker-in-docker depends_on: From 5c7b0f451293cb5f7f960ac083437c08dc0f88b0 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sat, 16 Aug 2025 02:37:05 +0000 Subject: [PATCH 03/19] chore(deps): update mbround18/valheim docker tag to v3.2 --- k8s/charts/valheim-server/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/charts/valheim-server/values.yaml b/k8s/charts/valheim-server/values.yaml index 305b436..5c548fb 100644 --- a/k8s/charts/valheim-server/values.yaml +++ b/k8s/charts/valheim-server/values.yaml @@ -3,7 +3,7 @@ image: # -- Docker repository to use repository: mbround18/valheim # -- Docker tag to use - use "latest" for most current version - tag: "3.1" + tag: "3.2" # -- Image pull policy pullPolicy: Always From 71b0cffc6f8aec35e49f2a93d205c649d0193afd Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 15 Aug 2025 02:10:28 +0000 Subject: [PATCH 04/19] chore(deps): update registry-1.docker.io/bitnamicharts/elasticsearch docker tag to v22.1.6 --- k8s/argo-apps/elastic.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/argo-apps/elastic.yaml b/k8s/argo-apps/elastic.yaml index 012b40e..b65a53b 100644 --- a/k8s/argo-apps/elastic.yaml +++ b/k8s/argo-apps/elastic.yaml @@ -12,7 +12,7 @@ spec: sources: - chart: elasticsearch repoURL: registry-1.docker.io/bitnamicharts - targetRevision: 22.1.4 + targetRevision: 22.1.6 helm: valuesObject: service: From 09fc0a625e02fc7760f8a2954b546965dfdb03b2 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 26 Aug 2025 02:21:09 +0000 Subject: [PATCH 05/19] chore(deps): update helm release authentik to 2025.8.* --- k8s/argo-apps/authentik.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/argo-apps/authentik.yaml b/k8s/argo-apps/authentik.yaml index 2d94b0a..fb7dc63 100644 --- a/k8s/argo-apps/authentik.yaml +++ b/k8s/argo-apps/authentik.yaml @@ -12,7 +12,7 @@ spec: sources: - chart: authentik repoURL: https://charts.goauthentik.io/ - targetRevision: 2025.6.* + targetRevision: 2025.8.* helm: valuesObject: authentik: From a87e77240303407af8422b2f59fcef0830f8aaed Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 26 Aug 2025 02:20:32 +0000 Subject: [PATCH 06/19] chore(deps): update ghcr.io/paperless-ngx/paperless-ngx docker tag to v2.18.2 --- docker/paperless/docker-compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker/paperless/docker-compose.yml b/docker/paperless/docker-compose.yml index c99e40a..84b1175 100644 --- a/docker/paperless/docker-compose.yml +++ b/docker/paperless/docker-compose.yml @@ -14,7 +14,7 @@ services: webserver: - image: ghcr.io/paperless-ngx/paperless-ngx:2.17.1 + image: ghcr.io/paperless-ngx/paperless-ngx:2.18.2 restart: unless-stopped ports: - 8002:8000 From 163d4b0aa549a81d1803d07bec985ebc75e7deb2 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 22 Aug 2025 18:03:39 +0000 Subject: [PATCH 07/19] chore(deps): update netbirdio/signal docker tag to v0.55.1 --- docker/netbird/docker-compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker/netbird/docker-compose.yml b/docker/netbird/docker-compose.yml index 316c614..739118f 100644 --- a/docker/netbird/docker-compose.yml +++ b/docker/netbird/docker-compose.yml @@ -23,7 +23,7 @@ services: max-size: "500m" max-file: "2" signal: - image: netbirdio/signal:0.54.0 + image: netbirdio/signal:0.55.1 restart: unless-stopped volumes: - netbird-signal:/var/lib/netbird From f169af79b8a16129442fca9f681c7b0fb91013d9 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 28 Aug 2025 01:52:07 +0000 Subject: [PATCH 08/19] chore(deps): update helm release portainer to v2 --- k8s/argo-apps/portainer.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/argo-apps/portainer.yaml b/k8s/argo-apps/portainer.yaml index 1f356a3..69ad625 100644 --- a/k8s/argo-apps/portainer.yaml +++ b/k8s/argo-apps/portainer.yaml @@ -15,7 +15,7 @@ spec: sources: - repoURL: https://portainer.github.io/k8s/ chart: portainer - targetRevision: 1.0.* + targetRevision: 2.33.* helm: valuesObject: service: From 842e81a04c91cec34bddc77bf58fb04047ed3838 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 28 Aug 2025 01:51:36 +0000 Subject: [PATCH 09/19] chore(deps): update code.forgejo.org/forgejo-helm/forgejo docker tag to v14 --- k8s/argo-apps/forgejo.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/argo-apps/forgejo.yaml b/k8s/argo-apps/forgejo.yaml index 072c640..c830c2c 100644 --- a/k8s/argo-apps/forgejo.yaml +++ b/k8s/argo-apps/forgejo.yaml @@ -14,7 +14,7 @@ spec: sources: - chart: forgejo repoURL: code.forgejo.org/forgejo-helm - targetRevision: 13.0.1 + targetRevision: 14.0.0 helm: valuesObject: replicaCount: 2 From aa82b3bb83e8ae08438c0b61d721749aca947d5f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?c=C4=83t=C4=83lin?= Date: Fri, 22 Aug 2025 17:58:19 +0200 Subject: [PATCH 10/19] feat: add psql --- k8s/argo-apps/authentik.yaml | 4 ++-- k8s/argo-apps/forgejo.yaml | 2 +- k8s/argo-apps/psql.yaml | 26 +++++++++++++++++++++++++ k8s/services/argo/project-fuku.yaml | 1 + k8s/services/forgejo/sealedsecrets.yaml | 6 +++++- 5 files changed, 35 insertions(+), 4 deletions(-) create mode 100644 k8s/argo-apps/psql.yaml diff --git a/k8s/argo-apps/authentik.yaml b/k8s/argo-apps/authentik.yaml index fb7dc63..c88c03f 100644 --- a/k8s/argo-apps/authentik.yaml +++ b/k8s/argo-apps/authentik.yaml @@ -26,8 +26,8 @@ spec: timeout: 30 from: auth@fukurokuju.dev postgresql: - host: 192.168.1.3 - port: 55432 + host: psql15-postgres.apps-fuku.svc.cluster.local + port: 5432 name: auth user: file:///authentik-creds/pg_username password: file:///authentik-creds/pg_password diff --git a/k8s/argo-apps/forgejo.yaml b/k8s/argo-apps/forgejo.yaml index c830c2c..b2d781f 100644 --- a/k8s/argo-apps/forgejo.yaml +++ b/k8s/argo-apps/forgejo.yaml @@ -106,7 +106,7 @@ spec: redis: enabled: false redis-cluster: - enabled: false + enabled: true - path: k8s/services/forgejo repoURL: https://git.roboces.dev/catalin/fukuops.git targetRevision: main diff --git a/k8s/argo-apps/psql.yaml b/k8s/argo-apps/psql.yaml new file mode 100644 index 0000000..96bf839 --- /dev/null +++ b/k8s/argo-apps/psql.yaml @@ -0,0 +1,26 @@ +--- +apiVersion: argoproj.io/v1alpha1 +kind: Application +metadata: + name: psql15 + namespace: argocd +spec: + destination: + namespace: apps-fuku + server: 'https://kubernetes.default.svc' + sources: + - chart: postgres + targetRevision: 1.3.6 + repoURL: https://groundhog2k.github.io/helm-charts/ + helm: + valuesObject: + service: + type: LoadBalancer + storage: + accessModes: + - ReadWriteMany + className: truenas-nfs-csi + requestedSize: 150Gi + project: fuku + syncPolicy: + automated: {} diff --git a/k8s/services/argo/project-fuku.yaml b/k8s/services/argo/project-fuku.yaml index 0ad7233..1cb3714 100644 --- a/k8s/services/argo/project-fuku.yaml +++ b/k8s/services/argo/project-fuku.yaml @@ -28,3 +28,4 @@ spec: - registry-1.docker.io/bitnamicharts - https://meilisearch.github.io/meilisearch-kubernetes - https://kubetail-org.github.io/helm-charts/ + - https://groundhog2k.github.io/helm-charts/ diff --git a/k8s/services/forgejo/sealedsecrets.yaml b/k8s/services/forgejo/sealedsecrets.yaml index 4353b10..6c9aa28 100644 --- a/k8s/services/forgejo/sealedsecrets.yaml +++ b/k8s/services/forgejo/sealedsecrets.yaml @@ -66,6 +66,7 @@ spec: creationTimestamp: null name: secrets-forgejo-email namespace: apps-roboces + --- apiVersion: bitnami.com/v1alpha1 kind: SealedSecret @@ -75,12 +76,15 @@ metadata: namespace: apps-roboces spec: encryptedData: - database: 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 + database: AgBmTrm6Kdk+pgMO/p88PQVQLH/hZKiEUzaOBqxXyCPPMOpEq/uoT9kR4bcFegVmjeKaZeQC9q5VCgvqfOusAroL3Kf2OvOq0C81jESs9mp5w2vBPJ0z8kE5F7jJ3mLpu2bYmHUbx/Zxs031O6+ciLGKxAu7F1e20zs/GUDYxudAyrz15zYNwPcQgCbMRnjpDpM3Dir0FYZ3uiv/Vn5/Jvr3jHdPlRM1LPBnIsGsNdLwGcGusybk+7vlGu2+KcRYsmOi9EZph4MFwUVsT5If2h/8PSwLkRGvp5XcA6rIhzHnRv8x8N4AsNwuSSHCFUp54xK1fhw/RFsfBiPhuFhrAYbVIk+PLkM/X9p9yZkr/d6ZfAkqlgMpKx4CNzDJqqDA3MDJssUoszcK0wbtbowVz4uDvK19KZuwK8ByUusTSi41aPGjIEBOBflV52sb4F7u5ur7WEgjfPKqQYd/G0ZyPTUeC99bFpyFzvwLmCDX6jI+d1g6qBNe6BzBOahfuBY462yQc8LLD0cAg848lDKHXtOnxVfMFRjaE6BN143FNJcMcE2h95LPD8C4CzO/KGUpeyUxFY4d0b6CEDYpRlTH+ytV352lYrwYVfQ6kyK4VQ9Fy6TNkdgSxr56FxIQrvbsIPrapzlIyLPdFfKCpBrQaYPAXEFWISi9ojJIqiJgNVStpjCcoU5wRGDvCob6MtzFjDnseDzmmM+No2ON+e++tEuNcuKeC0ZYoBFH7izQpxBaT/NTx50ahqwrlovzS0yZ8bKYhMWJsOkLUzAsJPL2QGUhXUcWd0BIC2AashB8Zp6JW1bq7cDRFgFgemU8FFbl9BwxtBUdCuLN1m2AQYzywEJykg7LrV+dhbJOVd7iqQ== template: metadata: creationTimestamp: null name: secrets-forgejo-db namespace: apps-roboces + type: Opaque + + --- apiVersion: bitnami.com/v1alpha1 kind: SealedSecret From a00a63de77b740c39676b0c1687d64392361391c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?c=C4=83t=C4=83lin?= Date: Thu, 4 Sep 2025 21:19:16 +0200 Subject: [PATCH 11/19] feat: disable forgejo's own redis-cluster --- k8s/argo-apps/forgejo.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/argo-apps/forgejo.yaml b/k8s/argo-apps/forgejo.yaml index b2d781f..c830c2c 100644 --- a/k8s/argo-apps/forgejo.yaml +++ b/k8s/argo-apps/forgejo.yaml @@ -106,7 +106,7 @@ spec: redis: enabled: false redis-cluster: - enabled: true + enabled: false - path: k8s/services/forgejo repoURL: https://git.roboces.dev/catalin/fukuops.git targetRevision: main From 73f48389d79a318c3439064a92094f41f3b648f9 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sun, 7 Sep 2025 02:02:50 +0000 Subject: [PATCH 12/19] chore(deps): update helm release kured to 5.10.* --- k8s/argo-apps/kured.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/argo-apps/kured.yaml b/k8s/argo-apps/kured.yaml index f89360e..c2c8d84 100644 --- a/k8s/argo-apps/kured.yaml +++ b/k8s/argo-apps/kured.yaml @@ -13,7 +13,7 @@ spec: source: chart: kured repoURL: https://kubereboot.github.io/charts - targetRevision: 5.6.* + targetRevision: 5.10.* helm: valuesObject: configuration.rebootDays: From f5a268e00fad011ef2eaebe0ce8adee72a1579ea Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 16 Sep 2025 02:37:10 +0000 Subject: [PATCH 13/19] chore(deps): update code.forgejo.org/forgejo-helm/forgejo docker tag to v14.0.2 --- k8s/argo-apps/forgejo.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/argo-apps/forgejo.yaml b/k8s/argo-apps/forgejo.yaml index c830c2c..e871fdc 100644 --- a/k8s/argo-apps/forgejo.yaml +++ b/k8s/argo-apps/forgejo.yaml @@ -14,7 +14,7 @@ spec: sources: - chart: forgejo repoURL: code.forgejo.org/forgejo-helm - targetRevision: 14.0.0 + targetRevision: 14.0.2 helm: valuesObject: replicaCount: 2 From 5eb03c0433f1a5182844d5e0db074f6d0208b7ec Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sat, 30 Aug 2025 01:41:38 +0000 Subject: [PATCH 14/19] chore(deps): update helm release postgres to v1.5.7 --- k8s/argo-apps/psql.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/argo-apps/psql.yaml b/k8s/argo-apps/psql.yaml index 96bf839..5e95747 100644 --- a/k8s/argo-apps/psql.yaml +++ b/k8s/argo-apps/psql.yaml @@ -10,7 +10,7 @@ spec: server: 'https://kubernetes.default.svc' sources: - chart: postgres - targetRevision: 1.3.6 + targetRevision: 1.5.7 repoURL: https://groundhog2k.github.io/helm-charts/ helm: valuesObject: From 06ac539d2166c89c9db35e3a03600561c0c5c610 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?c=C4=83t=C4=83lin?= Date: Tue, 16 Sep 2025 16:07:36 +0200 Subject: [PATCH 15/19] misc: reverte 5eb03c0433 --- k8s/argo-apps/forgejo.yaml | 1 - k8s/argo-apps/psql.yaml | 2 +- 2 files changed, 1 insertion(+), 2 deletions(-) diff --git a/k8s/argo-apps/forgejo.yaml b/k8s/argo-apps/forgejo.yaml index e871fdc..d6b16e0 100644 --- a/k8s/argo-apps/forgejo.yaml +++ b/k8s/argo-apps/forgejo.yaml @@ -89,7 +89,6 @@ spec: NO_REPLY_ADDRESS: git@fukurokuju.dev server: ROOT_URL: https://git.roboces.dev/ - additionalConfigSources: - secret: secretName: gitea-ini-redis diff --git a/k8s/argo-apps/psql.yaml b/k8s/argo-apps/psql.yaml index 5e95747..96bf839 100644 --- a/k8s/argo-apps/psql.yaml +++ b/k8s/argo-apps/psql.yaml @@ -10,7 +10,7 @@ spec: server: 'https://kubernetes.default.svc' sources: - chart: postgres - targetRevision: 1.5.7 + targetRevision: 1.3.6 repoURL: https://groundhog2k.github.io/helm-charts/ helm: valuesObject: From af8d8a4d2317df3703187ef2229333731ad1e2a8 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 17 Sep 2025 01:53:28 +0000 Subject: [PATCH 16/19] chore(deps): update ghcr.io/paperless-ngx/paperless-ngx docker tag to v2.18.4 --- docker/paperless/docker-compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker/paperless/docker-compose.yml b/docker/paperless/docker-compose.yml index 84b1175..fec42d7 100644 --- a/docker/paperless/docker-compose.yml +++ b/docker/paperless/docker-compose.yml @@ -14,7 +14,7 @@ services: webserver: - image: ghcr.io/paperless-ngx/paperless-ngx:2.18.2 + image: ghcr.io/paperless-ngx/paperless-ngx:2.18.4 restart: unless-stopped ports: - 8002:8000 From 8a958739458b9ac576f7ebfb8ffc55d4fc22b455 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 17 Sep 2025 01:54:24 +0000 Subject: [PATCH 17/19] chore(deps): update helm release meilisearch to 0.17.* --- k8s/argo-apps/meili.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/argo-apps/meili.yaml b/k8s/argo-apps/meili.yaml index 579d937..64b6f10 100644 --- a/k8s/argo-apps/meili.yaml +++ b/k8s/argo-apps/meili.yaml @@ -18,7 +18,7 @@ spec: targetRevision: main - chart: meilisearch repoURL: https://meilisearch.github.io/meilisearch-kubernetes - targetRevision: 0.15.* + targetRevision: 0.17.* helm: valuesObject: environment: From 03456118d09e55e95cacdbdbfa4e33007f6d4b67 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 18 Sep 2025 01:44:44 +0000 Subject: [PATCH 18/19] chore(deps): update helm release renovate to 43.49.* --- k8s/argo-apps/renovate.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/argo-apps/renovate.yaml b/k8s/argo-apps/renovate.yaml index cc40bf0..187929e 100644 --- a/k8s/argo-apps/renovate.yaml +++ b/k8s/argo-apps/renovate.yaml @@ -13,7 +13,7 @@ spec: sources: - chart: renovate repoURL: https://docs.renovatebot.com/helm-charts - targetRevision: 43.15.* + targetRevision: 43.49.* helm: valuesObject: renovate: From 7f9cc9d8031a88e7f6b194d73bf1d1dca88c91a1 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 19 Sep 2025 02:17:27 +0000 Subject: [PATCH 19/19] chore(deps): update miniflux/miniflux docker tag to v2.2.13 --- k8s/services/miniflux/deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/services/miniflux/deployment.yaml b/k8s/services/miniflux/deployment.yaml index 2a8b131..051af01 100644 --- a/k8s/services/miniflux/deployment.yaml +++ b/k8s/services/miniflux/deployment.yaml @@ -28,7 +28,7 @@ spec: spec: containers: - name: miniflux - image: miniflux/miniflux:2.2.10 + image: miniflux/miniflux:2.2.13 imagePullPolicy: Always securityContext: allowPrivilegeEscalation: false