ivanchandRenovate Bot
40f81be60f
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/bakito/adguardhome-sync](https://github.com/bakito/adguardhome-sync) | patch | `v0.9.5` → `v0.9.6` | --- ### Release Notes <details> <summary>bakito/adguardhome-sync (ghcr.io/bakito/adguardhome-sync)</summary> ### [`v0.9.6`](https://github.com/bakito/adguardhome-sync/releases/tag/v0.9.6) [Compare Source](https://github.com/bakito/adguardhome-sync/compare/v0.9.5...v0.9.6) #### Changelog - [`eb74300`](https://github.com/bakito/adguardhome-sync/commit/eb74300c54963c14a5b2862cda44ff4e2376ece2): fix: set default docker base image to scratch ([#​979](https://github.com/bakito/adguardhome-sync/issues/979)) ([@​bakito](https://github.com/bakito)) - [`e59d0b3`](https://github.com/bakito/adguardhome-sync/commit/e59d0b395995292c8d1f76f00794f7bc4999c47f): fix: simplify base image handling in docker builds ([#​981](https://github.com/bakito/adguardhome-sync/issues/981)) ([@​bakito](https://github.com/bakito)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODEuNSIsInVwZGF0ZWRJblZlciI6IjQ0LjE4MS41IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> --------- Co-authored-by: Renovate Bot <bot@renovateapp.com> Reviewed-on: https://git.ivanch.me/ivanch/haven/pulls/41
Haven
A forever-work-in-progress self-hosted server setup
Runs on a multi-node k3s cluster deployed across VMs and bare-metal hosts.
Application configuration is stored on an NFS share located on a dedicated SSD. This uses nfs-subdir-external-provisioner as a dynamic storage provisioner with PVC-specific paths. Additional data is stored on a NAS exported via NFS.
The cluster runs k3s with nginx as the ingress controller. MetalLB is used in layer 2 mode for load balancing. cert-manager provides a local CA and issues certificates (required by Vaultwarden).
For setup details, see SETUP.md.
The repository name references my local TLD, .haven ;)
Repository Layout
haven/
├── bootstrap/
│ ├── namespaces.yaml # cluster namespaces
│ ├── secretstores.yaml # cluster secret stores for BitWarden ESO
│ ├── address-pool.yaml # cluster IP pool for MetalLB
│ ├── argocd-install/ # Argo CD install manifests + ingress
│ └── root-app.yaml # root Application watching apps/root
├── secrets/
│ ├── adguard.yaml # adguard credentials from BitWarden
│ ├── <app>.yaml # <app> credentials from BitWarden
│ └── ...
├── apps/
│ ├── root/
│ │ ├── kustomization.yaml # points to applicationset.yaml
│ │ └── applicationset.yaml# auto-discovers apps/*/*.yaml
│ └── <namespace>/ # e.g., dev/, default/, infra/, monitoring/
│ ├── <app-1>.yaml # all-in-one manifest per app
│ ├── <app-2>.yaml # ...
| └──── ...