b5517f757a
PERF(resources): increase CPU limit to VPA × 3 for startup burst
...
- Change CPU limit multiplier from 1.5x to 3x
- Prevents throttling during app startup
- Affected: code-server, crafty, docusaurus, gitea, headlamp,
homer, immich, mas, umami
2026-01-07 23:35:06 +09:00
8353cf22bc
FEAT(repo): add startupProbe for CPU-limited apps
...
- Add startupProbe to code-server, crafty, mas, umami, immich
- Configure 300s startup timeout (10s × 30 attempts)
- Set initialDelaySeconds to 0 for liveness/readiness
- Reduce immich-ml memory from 2Gi to 1Gi (node memory limit)
2026-01-07 23:25:06 +09:00
3bc0b76135
PERF(repo): apply CPU/Memory limits based on VPA
...
- Set CPU request to VPA recommendation
- Set CPU limit to VPA × 1.5 for burst allowance
- Set Memory limit to VPA × 1.5 to prevent OOM
- Prevent cascading failure on node failure
2026-01-07 23:07:30 +09:00
d65596309b
REFACTOR(secrets): flatten Vault paths
...
- Change secret paths from <category>/<app> to <app>
- applications/code-server → code-server
- applications/umami → umami
- databases/postgresql → postgresql
- cluster-infrastructure/authelia → authelia
2026-01-06 16:53:02 +09:00
068d9339b9
REFACTOR(repo): move vault/ to manifests/
...
- Move ExternalSecret files from vault/ to manifests/secret.yaml
- Merge multiple secrets with --- separator (immich)
- Update kustomization.yaml references
- Remove vault/ folders
Apps: umami, immich, code-server
2026-01-06 16:43:34 +09:00
f41a6c7261
REFACTOR(immich): move pvc to manifests
...
- Move PVC configuration to manifests/ folder
- Separate persistent storage from Helm values
2026-01-06 01:38:36 +09:00
42eb875c01
REFACTOR(repo): migrate repoURL to K3S-HOME
...
- Update repository URL to K3S-HOME organization
- Change from personal to organization repo
2026-01-05 00:43:51 +09:00
dba1ae56a0
FEAT(authelia): configure immich oidc
...
- Add ExternalSecret for OIDC client secret
- Add OAuth environment variables
- Remove Authelia middleware (using direct OIDC)
2026-01-05 00:43:51 +09:00
6ea23f1995
CHORE(authelia): disable local auth and add Authelia SSO
...
- code-server: Change --auth password to --auth none
- code-server: Add Authelia middleware to ingress
- immich: Add Authelia middleware to ingress
- umami: Add Authelia middleware to ingress
2026-01-05 00:43:51 +09:00
5bc34a7674
REFACTOR(longhorn): migrate storage from Longhorn to local-path
...
- code-server: storageClassName -> local-path-retain
- crafty: storageClassName -> local-path-retain
- immich: storageClassName -> local-path-retain
2026-01-05 00:43:51 +09:00
a5931861c1
FIX(immich): fix Immich for chart v0.10.x
...
- Update configuration for chart v0.10.x compatibility
- Set library PVC size appropriately
2026-01-05 00:43:51 +09:00
93858e5088
REFACTOR(immich): remove Gitea, add Homer dashboard
...
- Remove Gitea integration
- Add Homer dashboard entry
2026-01-05 00:43:51 +09:00