Commit Graph

13 Commits

Author SHA1 Message Date
a051b67030 PERF(resources): remove CPU limits - keep memory limits only
- CPU throttling prevents app startup, not crashes
- Memory OOM is the real cascading failure cause
- CPU request ensures fair scheduling
2026-01-07 23:48:31 +09:00
b5517f757a PERF(resources): increase CPU limit to VPA × 3 for startup burst
- Change CPU limit multiplier from 1.5x to 3x
- Prevents throttling during app startup
- Affected: code-server, crafty, docusaurus, gitea, headlamp,
  homer, immich, mas, umami
2026-01-07 23:35:06 +09:00
8353cf22bc FEAT(repo): add startupProbe for CPU-limited apps
- Add startupProbe to code-server, crafty, mas, umami, immich
- Configure 300s startup timeout (10s × 30 attempts)
- Set initialDelaySeconds to 0 for liveness/readiness
- Reduce immich-ml memory from 2Gi to 1Gi (node memory limit)
2026-01-07 23:25:06 +09:00
3bc0b76135 PERF(repo): apply CPU/Memory limits based on VPA
- Set CPU request to VPA recommendation
- Set CPU limit to VPA × 1.5 for burst allowance
- Set Memory limit to VPA × 1.5 to prevent OOM
- Prevent cascading failure on node failure
2026-01-07 23:07:30 +09:00
d65596309b REFACTOR(secrets): flatten Vault paths
- Change secret paths from <category>/<app> to <app>
- applications/code-server → code-server
- applications/umami → umami
- databases/postgresql → postgresql
- cluster-infrastructure/authelia → authelia
2026-01-06 16:53:02 +09:00
068d9339b9 REFACTOR(repo): move vault/ to manifests/
- Move ExternalSecret files from vault/ to manifests/secret.yaml
- Merge multiple secrets with --- separator (immich)
- Update kustomization.yaml references
- Remove vault/ folders

Apps: umami, immich, code-server
2026-01-06 16:43:34 +09:00
f41a6c7261 REFACTOR(immich): move pvc to manifests
- Move PVC configuration to manifests/ folder
- Separate persistent storage from Helm values
2026-01-06 01:38:36 +09:00
42eb875c01 REFACTOR(repo): migrate repoURL to K3S-HOME
- Update repository URL to K3S-HOME organization
- Change from personal to organization repo
2026-01-05 00:43:51 +09:00
dba1ae56a0 FEAT(authelia): configure immich oidc
- Add ExternalSecret for OIDC client secret
- Add OAuth environment variables
- Remove Authelia middleware (using direct OIDC)
2026-01-05 00:43:51 +09:00
6ea23f1995 CHORE(authelia): disable local auth and add Authelia SSO
- code-server: Change --auth password to --auth none
- code-server: Add Authelia middleware to ingress
- immich: Add Authelia middleware to ingress
- umami: Add Authelia middleware to ingress
2026-01-05 00:43:51 +09:00
5bc34a7674 REFACTOR(longhorn): migrate storage from Longhorn to local-path
- code-server: storageClassName -> local-path-retain
- crafty: storageClassName -> local-path-retain
- immich: storageClassName -> local-path-retain
2026-01-05 00:43:51 +09:00
a5931861c1 FIX(immich): fix Immich for chart v0.10.x
- Update configuration for chart v0.10.x compatibility
- Set library PVC size appropriately
2026-01-05 00:43:51 +09:00
93858e5088 REFACTOR(immich): remove Gitea, add Homer dashboard
- Remove Gitea integration
- Add Homer dashboard entry
2026-01-05 00:43:51 +09:00