ivanchandRenovate Bot
3b33ac4147
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ansible-lint](https://github.com/ansible/ansible-lint) ([changelog](https://github.com/ansible/ansible-lint/releases)) | minor | `==26.9.0` → `==26.10.1` | --- ### Release Notes <details> <summary>ansible/ansible-lint (ansible-lint)</summary> ### [`v26.10.1`](https://github.com/ansible/ansible-lint/releases/tag/v26.10.1) [Compare Source](https://github.com/ansible/ansible-lint/compare/v26.10.0...v26.10.1) #### What's Changed - fix: lower cryptography minimum version to 46.0.7 by [@​shvenkat-rh](https://github.com/shvenkat-rh) in [#​5212](https://github.com/ansible/ansible-lint/pull/5212) **Full Changelog**: <https://github.com/ansible/ansible-lint/compare/v26.10.0...v26.10.1> ### [`v26.10.0`](https://github.com/ansible/ansible-lint/releases/tag/v26.10.0) [Compare Source](https://github.com/ansible/ansible-lint/compare/v26.9.0...v26.10.0) #### What's Changed - fix: respect skip_list for yaml\[comments] during --fix by [@​shvenkat-rh](https://github.com/shvenkat-rh) in [#​5177](https://github.com/ansible/ansible-lint/pull/5177) - Fix/scorecard security improvements v2 by [@​shvenkat-rh](https://github.com/shvenkat-rh) in [#​5194](https://github.com/ansible/ansible-lint/pull/5194) - fix: correctly match symlinked PATH entries in path_inject() by [@​sushmithainjeti](https://github.com/sushmithainjeti) in [#​5205](https://github.com/ansible/ansible-lint/pull/5205) - fix(security): update dependencies \[SECURITY] by [@​renovate](https://github.com/renovate)\[bot] in [#​5206](https://github.com/ansible/ansible-lint/pull/5206) #### New Contributors - [@​sushmithainjeti](https://github.com/sushmithainjeti) made their first contribution in [#​5205](https://github.com/ansible/ansible-lint/pull/5205) **Full Changelog**: <https://github.com/ansible/ansible-lint/compare/v26.9.0...v26.10.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNDkuMyIsInVwZGF0ZWRJblZlciI6IjQ0LjE0OS4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> --------- Co-authored-by: Renovate Bot <bot@renovateapp.com> Reviewed-on: #31
Haven
A forever-work-in-progress self-hosted server setup
Runs on a multi-node k3s cluster deployed across VMs and bare-metal hosts.
Application configuration is stored on an NFS share located on a dedicated SSD. This uses nfs-subdir-external-provisioner as a dynamic storage provisioner with PVC-specific paths. Additional data is stored on a NAS exported via NFS.
The cluster runs k3s with nginx as the ingress controller. MetalLB is used in layer 2 mode for load balancing. cert-manager provides a local CA and issues certificates (required by Vaultwarden).
For setup details, see SETUP.md.
The repository name references my local TLD, .haven ;)
Repository Layout
haven/
├── bootstrap/
│ ├── namespaces.yaml # cluster namespaces
│ ├── secretstores.yaml # cluster secret stores for BitWarden ESO
│ ├── address-pool.yaml # cluster IP pool for MetalLB
│ ├── argocd-install/ # Argo CD install manifests + ingress
│ └── root-app.yaml # root Application watching apps/root
├── secrets/
│ ├── adguard.yaml # adguard credentials from BitWarden
│ ├── <app>.yaml # <app> credentials from BitWarden
│ └── ...
├── apps/
│ ├── root/
│ │ ├── kustomization.yaml # points to applicationset.yaml
│ │ └── applicationset.yaml# auto-discovers apps/*/*.yaml
│ └── <namespace>/ # e.g., dev/, default/, infra/, monitoring/
│ ├── <app-1>.yaml # all-in-one manifest per app
│ ├── <app-2>.yaml # ...
| └──── ...