deployment changes

default/homarr.yaml

@@ -1,104 +0,0 @@
----
-# 1) Deployment
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: homarr
-  namespace: default
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: homarr
-  template:
-    metadata:
-      labels:
-        app: homarr
-    spec:
-      affinity:
-        nodeAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-            nodeSelectorTerms:
-            - matchExpressions:
-              - key: kubernetes.io/arch
-                operator: In
-                values:
-                - amd64
-      containers:
-        - name: homarr
-          image: ghcr.io/homarr-labs/homarr:latest
-          imagePullPolicy: Always
-          env:
-            - name: PUID
-              value: "1000"
-            - name: PGID
-              value: "1000"
-            - name: SECRET_ENCRYPTION_KEY
-              value: "c60b894215be5e4cc0fdd209aada8d83386b20579138ca143bc267c4c0042d08"
-          ports:
-            - containerPort: 7575
-              name: homarr-port
-          volumeMounts:
-            - name: homarr-config
-              mountPath: /appdata
-          resources:
-            requests:
-              cpu: 250m
-              memory: 512Mi
-            limits:
-              cpu: 250m
-              memory: 1Gi
-      volumes:
-        - name: homarr-config
-          persistentVolumeClaim:
-            claimName: homarr-config
----
-# 2) Service
-apiVersion: v1
-kind: Service
-metadata:
-  name: homarr
-  namespace: default
-spec:
-  type: ClusterIP
-  selector:
-    app: homarr
-  ports:
-    - port: 7575
-      targetPort: homarr-port
----
-# 3) PersistentVolumeClaim
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: homarr-config
-  namespace: default
-  annotations:
-    nfs.io/storage-path: "homarr-labs-config"
-spec:
-  storageClassName: "nfs-client"
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi
----
-# 4) Ingress
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: homarr
-  namespace: default
-spec:
-  ingressClassName: nginx
-  rules:
-    - host: homarr.lab
-      http:
-        paths:
-          - path: /
-            pathType: Prefix
-            backend:
-              service:
-                name: homarr
-                port:
-                  number: 7575

default/openwebui.yaml

@@ -26,7 +26,7 @@ spec:
               memory: "512Mi"
             limits:
               cpu: "1000m"
-              memory: "1Gi"
+              memory: "2Gi"
           volumeMounts:
             - name: openwebui-data
               mountPath: /app/backend/data

default/uptime-kuma.yaml

@@ -19,7 +19,7 @@ spec:
     spec:
       containers:
         - name: uptimekuma
-          image: louislam/uptime-kuma:1
+          image: louislam/uptime-kuma:2
           imagePullPolicy: Always
           env:
             - name: PUID
@@ -29,6 +29,13 @@ spec:
           ports:
             - containerPort: 3001
               name: uptimekuma-port
+          resources:
+            requests:
+              memory: "128Mi"
+              cpu: "100m"
+            limits:
+              memory: "256Mi"
+              cpu: "500m"
           livenessProbe:
             httpGet:
               path: /

dns/adguard-sync.yaml

@@ -74,8 +74,8 @@ spec:
             cpu: 100m
             memory: 128Mi
           limits:
-            cpu: 100m
+            cpu: 500m
-            memory: 128Mi
+            memory: 512Mi
         volumeMounts:
         - name: adguardsync-storage
           mountPath: /config

dns/adguard.yaml

@@ -30,16 +30,6 @@ spec:
       labels:
         app: adguardhome
     spec:
-      affinity:
-        nodeAffinity:
-          preferredDuringSchedulingIgnoredDuringExecution:
-          - weight: 100
-            preference:
-              matchExpressions:
-              - key: kubernetes.io/hostname
-                operator: In
-                values:
-                - nexus
       containers:
       - name: adguardhome
         image: adguard/adguardhome:latest
@@ -58,7 +48,22 @@ spec:
         resources:
           requests:
             cpu: 100m
-            memory: 256Mi
+            memory: 128Mi
+          limits:
+            cpu: 1000m
+            memory: 2Gi
+        livenessProbe:
+          httpGet:
+            path: /
+            port: 80
+          initialDelaySeconds: 30
+          periodSeconds: 10
+        readinessProbe:
+          httpGet:
+            path: /
+            port: 80
+          initialDelaySeconds: 5
+          periodSeconds: 5
         volumeMounts:
         - name: adguardhome-storage
           mountPath: /opt/adguardhome/work
@@ -74,6 +79,29 @@ kind: Service
 metadata:
   name: adguardhome-svc
   namespace: dns
+spec:
+  type: LoadBalancer
+  selector:
+    app: adguardhome
+  loadBalancerIP: 192.168.20.200
+  ports:
+  - name: dns-tcp
+    port: 53
+    targetPort: 53
+    protocol: TCP
+  - name: dns-udp
+    port: 53
+    targetPort: 53
+    protocol: UDP
+  - name: web
+    port: 80
+    targetPort: 80
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: adguardhome-lan-svc
+  namespace: dns
 spec:
   type: LoadBalancer
   selector:

docker-ingress/changedetection.yaml

@@ -20,7 +20,7 @@ metadata:
   namespace: docker-ingress
 subsets:
   - addresses:
-      - ip: 192.168.15.101
+      - ip: 192.168.20.100
     ports:
       - port: 4100
 ---

docker-ingress/dockge.yaml

@@ -9,10 +9,11 @@ metadata:
   namespace: docker-ingress
 spec:
   ports:
-    - port: 80
+    - name: http
+      protocol: TCP
+      port: 80
       targetPort: 5001
 ---
-# Endpoints
 apiVersion: v1
 kind: Endpoints
 metadata:
@@ -20,9 +21,11 @@ metadata:
   namespace: docker-ingress
 subsets:
   - addresses:
-      - ip: 192.168.15.101
+      - ip: 192.168.20.100
     ports:
-      - port: 5001
+      - name: http
+        protocol: TCP
+        port: 5001
 ---
 # Ingress
 apiVersion: networking.k8s.io/v1

docker-ingress/paperless.yaml

@@ -20,7 +20,7 @@ metadata:
   namespace: docker-ingress
 subsets:
   - addresses:
-      - ip: 192.168.15.101
+      - ip: 192.168.20.100
     ports:
       - port: 4200
 ---

docker-ingress/transmission.yaml

@@ -1,44 +0,0 @@
-# docker-node: iris.haven
-# port: 4100
-
-# Service
-apiVersion: v1
-kind: Service
-metadata:
-  name: transmission-service
-  namespace: docker-ingress
-spec:
-  ports:
-    - port: 80
-      targetPort: 3210
----
-# Endpoints
-apiVersion: v1
-kind: Endpoints
-metadata:
-  name: transmission-service
-  namespace: docker-ingress
-subsets:
-  - addresses:
-      - ip: 192.168.15.60
-    ports:
-      - port: 3210
----
-# Ingress
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: transmission-ingress
-  namespace: docker-ingress
-spec:
-  rules:
-    - host: transmission.haven
-      http:
-        paths:
-          - path: /
-            pathType: Prefix
-            backend:
-              service:
-                name: transmission-service
-                port:
-                  number: 80

infra/code-config.yaml

@@ -49,7 +49,7 @@ spec:
             claimName: code-config
         - name: k8s-config
           nfs:
-            server: 192.168.15.61
+            server: nfs-config.haven
             path: /export/config
 ---
 # 2) Service

infra/wg-easy.yaml

@@ -93,7 +93,7 @@ spec:
   type: LoadBalancer
   selector:
     app: wg-easy
-  loadBalancerIP: 192.168.15.202
+  loadBalancerIP: 192.168.20.203
   ports:
   - name: wg-port
     port: 51820

lab/nfs-pod.yaml

@@ -30,7 +30,7 @@ spec:
   - name: nfs-backup
     nfs:
       server: 192.168.15.99
-      path: /export/Backup
+      path: /srv/dev-md1/Backup
   - name: nfs-storage
     nfs:
       server: 192.168.15.99

metallb-system/address-pool.yaml

@@ -5,7 +5,12 @@ metadata:
   namespace: metallb-system
 spec:
   addresses:
-  - 192.168.15.200-192.168.15.220
+  - 192.168.15.200/32 # reserved for DNS 1
+  - 192.168.15.202/32 # reserved for wg-easy
+  - 192.168.15.203/32 # reserved for k3s ingress
+  - 192.168.20.200/32 # reserved for DNS 1
+# - 192.168.20.201 is reserved for DNS 2
+  - 192.168.20.202-192.168.20.220
 ---
 apiVersion: metallb.io/v1beta1
 kind: L2Advertisement