3365fdf97b
FIX(apps): update app-template chart repo URL
...
- Change repo URL from bjw-s to bjw-s-labs
- Fix Helm chart repository reference
2026-01-06 15:44:22 +09:00
be6723cc55
REFACTOR(apps): migrate to app-template
...
- docusaurus: Replace with app-template, configmap in manifests/
- homer: Replace with app-template, configMapGenerator for config.yml
- crafty: Replace with app-template, pvc/ingress/service in manifests/
- mas: Replace with app-template, rbac/external-secret in manifests/
- All apps use app-template chart v3.6.1
2026-01-06 15:42:07 +09:00
753543648b
FIX(headlamp): update ingress for chart 0.39.0
...
- Update ingress hosts configuration for new chart version
- Fix breaking changes in Headlamp Helm chart
2026-01-06 15:30:07 +09:00
7661427f4b
REFACTOR(umami): move dual ingress to manifests
...
- Move ingress.yaml to manifests/ (public + protected ingress)
- Keep ingress disabled in helm-values.yaml due to complex routing
2026-01-06 15:13:42 +09:00
fb0fb44251
REFACTOR(apps): integrate ingress to helm-values
...
- code-server: move ingress to helm-values, rbac to manifests
- headlamp: move ingress to helm-values, external-secret to manifests
2026-01-06 01:57:21 +09:00
f41a6c7261
REFACTOR(immich): move pvc to manifests
...
- Move PVC configuration to manifests/ folder
- Separate persistent storage from Helm values
2026-01-06 01:38:36 +09:00
09c8ec067e
FIX(mas): correct ingress middleware name
...
- Change middleware reference to authelia-authelia-auth
- Fix Traefik routing to Authelia SSO
2026-01-05 23:37:50 +09:00
e4de543407
CHORE(mas): remove GITEA_TOKEN
...
- No longer using Gitea for source control
- Migrate to GitHub
2026-01-05 16:57:26 +09:00
79e9fbaeb7
FEAT(mas): add multi-agent system application
...
- ArgoCD Application for mas namespace
- Deployment with privileged container, hostPID for K8s access
- RBAC: ServiceAccount, ClusterRoles (viewer/writer)
- ExternalSecrets for API keys and PostgreSQL password
- Ingress at mas0213.kro.kr with Authelia SSO
2026-01-05 16:53:39 +09:00
ef3409884c
FEAT(repo): add config files for apps repo
...
- Add application.yaml for ArgoCD app-of-apps
- Add kustomization.yaml with all 8 application components
- Add renovate.json for automated updates
2026-01-05 00:43:51 +09:00
2470de07dd
REFACTOR(homer): change homer order
...
- Reorder dashboard items
- Update display order in Homer configuration
2026-01-05 00:43:51 +09:00
db7d8b0aec
REFACTOR(homer): change order in Homer
...
- Reorder dashboard items
- Update display order in Homer configuration
2026-01-05 00:43:51 +09:00
85c3c73d1f
REFACTOR(homer): reorganize dashboard tabs
...
- Rename Applications to Apps (6 items)
- Keep Platform with Code Server added (6 items)
- Add new Monitoring tab (6 items)
- Remove unused icon assets
- Sort items alphabetically within each tab
2026-01-05 00:43:51 +09:00
252118068f
REFACTOR(crafty): change storageClass
...
- Update storageClass for Crafty PVC
- Change storage backend configuration
2026-01-05 00:43:51 +09:00
67dd7c966a
FEAT(umami): add /api/send to public ingress
...
- Add /api/send path to public ingress routes
- Allow tracking data submission without auth
2026-01-05 00:43:51 +09:00
6c7af94c10
FEAT(homer): add uptime kuma to homer dashboard
...
- Add Uptime Kuma entry in Observability category
- Add kuma.svg icon
2026-01-05 00:43:51 +09:00
ded5656a22
REFACTOR(homer): reorganize categories
...
- Rename Development/Infrastructure/Monitoring to new categories
- Move Longhorn, MinIO, Traefik to Platform
- Move Umami to Observability
- Move Homer, Minecraft, PgWeb to Applications
- Remove Longhorn (no longer used)
- Sort items alphabetically within each category
2026-01-05 00:43:51 +09:00
42eb875c01
REFACTOR(repo): migrate repoURL to K3S-HOME
...
- Update repository URL to K3S-HOME organization
- Change from personal to organization repo
2026-01-05 00:43:51 +09:00
renovate[bot]
2f03f56f78
CHORE(umami): update Helm release umami to v7
...
- Upgrade Umami chart to v7
- Apply new chart configuration
2026-01-05 00:43:51 +09:00
renovate[bot]
d891c364fd
CHORE(headlamp): update Helm release
...
- Update Headlamp Helm chart version
- Apply dependency updates
2026-01-05 00:43:51 +09:00
2934188c79
FEAT(traefik): add /intl to public ingress
...
- Add /intl path to public ingress routes
- Enable internationalization endpoint access
2026-01-05 00:43:51 +09:00
6aec454da1
FEAT(traefik): add /api/websites to ingress
...
- Add /api/websites path to ingress routes
- Enable website API access
2026-01-05 00:43:51 +09:00
3a6c4c9d4e
FEAT(umami): allow public share URLs
...
- Split ingress into public (umami-share) and protected (umami-ingress)
- Public paths: /share, /api/share, /_next, /script.js
- Protected paths: everything else (requires Authelia SSO)
2026-01-05 00:43:51 +09:00
c45f9f93ba
FEAT(authelia): bypass share link in authelia
...
- Add bypass rule for share link paths
- Allow public access to share URLs
2026-01-05 00:43:51 +09:00
ae59d858e1
REFACTOR(authelia): change homer, disable login
...
- Update Homer authentication settings
- Disable login requirement for dashboard
2026-01-05 00:43:51 +09:00
0592c36f34
PERF(code-server): reduce memory request
...
- Reduce memory request based on actual usage
- Optimize resource allocation
2026-01-05 00:43:51 +09:00
dba1ae56a0
FEAT(authelia): configure immich oidc
...
- Add ExternalSecret for OIDC client secret
- Add OAuth environment variables
- Remove Authelia middleware (using direct OIDC)
2026-01-05 00:43:51 +09:00
fbe5734fc1
FIX(headlamp): restore oidc config for k3s
...
- Restore OIDC configuration for K3s cluster
- Fix authentication settings
2026-01-05 00:43:51 +09:00
362ebd6c7d
REFACTOR(headlamp): switch to authelia
...
- Remove OIDC config from helm-values
- Remove ExternalSecret (not needed)
- Add Authelia middleware to ingress
- Headlamp uses ServiceAccount for K8s API access
2026-01-05 00:43:51 +09:00
4a439f8b1d
FEAT(headlamp): add oidc_validator env vars for Headlamp
...
- Add OIDC validator environment variables
- Configure OIDC authentication settings
2026-01-05 00:43:51 +09:00
1731b0ba4e
FIX(headlamp): fix OIDC env var names
...
- Correct OIDC environment variable names
- Fix authentication configuration
2026-01-05 00:43:51 +09:00
b74bc14950
FIX(headlamp): set baseURL to empty string
...
- Change baseURL to empty string
- Fix path routing configuration
2026-01-05 00:43:51 +09:00
6d19c01bf1
FIX(headlamp): use ExternalSecret for OIDC config
...
- Use externalSecret.enabled instead of env
- Add template to ExternalSecret with all OIDC fields
2026-01-05 00:43:51 +09:00
f17bbe3514
FEAT(headlamp): configure Headlamp OIDC with Authelia
...
- Add OIDC configuration (clientID, issuerURL, scopes)
- Add ExternalSecret for OIDC client secret from Vault
- Remove Authelia middleware (using direct OIDC auth)
2026-01-05 00:43:51 +09:00
6ea23f1995
CHORE(authelia): disable local auth and add Authelia SSO
...
- code-server: Change --auth password to --auth none
- code-server: Add Authelia middleware to ingress
- immich: Add Authelia middleware to ingress
- umami: Add Authelia middleware to ingress
2026-01-05 00:43:51 +09:00
5bc34a7674
REFACTOR(longhorn): migrate storage from Longhorn to local-path
...
- code-server: storageClassName -> local-path-retain
- crafty: storageClassName -> local-path-retain
- immich: storageClassName -> local-path-retain
2026-01-05 00:43:51 +09:00
b822514532
REFACTOR(traefik): use Certificate resource instead of Ingress
...
- Remove conflicting Ingress that was also routing to crafty
- Use cert-manager Certificate directly for TLS cert issuance
- Only IngressRoute handles routing to backend
2026-01-05 00:43:51 +09:00
dfd981e394
REFACTOR(traefik): use IngressRoute with proper ServersTransport
...
- Convert from standard Ingress to Traefik IngressRoute
- IngressRoute directly references ServersTransport for HTTPS backend
- Keep minimal Ingress for cert-manager TLS certificate issuance
2026-01-05 00:43:51 +09:00
33ce678e83
FIX(repo): fix ServersTransport reference with namespace
...
- Add namespace prefix to ServersTransport reference
- Fix Traefik routing configuration
2026-01-05 00:43:51 +09:00
7fd9c6ed17
REFACTOR(crafty): simplify Crafty storage to 6Gi
...
- Remove backups PVC (using Velero)
- Remove logs PVC (using Loki/Promtail)
- Remove import PVC (not needed for new servers)
2026-01-05 00:43:51 +09:00
2eede3a3d7
FIX(crafty): fix permissions and add backend HTTPS
...
- Add initContainer to set proper file permissions (chown 1000:0)
- Add fsGroup: 0 for root group permissions
- Add ServersTransport for Traefik backend HTTPS with insecureSkipVerify
- Add traefik.ingress.kubernetes.io/service.serversscheme annotation
2026-01-05 00:43:51 +09:00
ee1f8e3d81
FEAT(crafty): add crafty minecraft server manager
...
- Crafty Controller 4 for managing Minecraft servers
- Ingress at crafty0213.kro.kr
- Longhorn PVCs for persistent storage
- LoadBalancer service for Minecraft ports 25565-25569
2026-01-05 00:43:51 +09:00
a5931861c1
FIX(immich): fix Immich for chart v0.10.x
...
- Update configuration for chart v0.10.x compatibility
- Set library PVC size appropriately
2026-01-05 00:43:51 +09:00
93858e5088
REFACTOR(immich): remove Gitea, add Homer dashboard
...
- Remove Gitea integration
- Add Homer dashboard entry
2026-01-05 00:43:51 +09:00
48b719c229
REFACTOR(repo): change order in Homer
...
- Reorder dashboard items
- Update display priority
2026-01-05 00:43:51 +09:00
cfe238ffa5
PERF(umami): reduce umami replicas to 1
2026-01-05 00:43:51 +09:00
1cd32b1446
FEAT(authentik): add authentik in homer
2026-01-05 00:43:51 +09:00
4521226ae1
FEAT(traefik): add karma and traefik in homer
2026-01-05 00:43:51 +09:00
9ae6d4cfcc
FEAT(homer): integrate prod and demo tabs in dashboard
...
- Merge production and demo tabs
- Update dashboard configuration
2026-01-05 00:43:51 +09:00
7bebfca3be
REFACTOR(repo): remove template annot from ignoreD
...
- Allow ArgoCD to detect pod template annotation changes
- Required for source-hash based deployment triggers
2026-01-05 00:43:51 +09:00