ivanchandRenovate Bot
747e2ff573
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/bakito/adguardhome-sync](https://github.com/bakito/adguardhome-sync) | patch | `v0.9.3` → `v0.9.4` | --- ### Release Notes <details> <summary>bakito/adguardhome-sync (ghcr.io/bakito/adguardhome-sync)</summary> ### [`v0.9.4`](https://github.com/bakito/adguardhome-sync/releases/tag/v0.9.4) [Compare Source](https://github.com/bakito/adguardhome-sync/compare/v0.9.3...v0.9.4) #### Fixes - Allow /readyz to return 200 while a sync is in progress [#​949](https://github.com/bakito/adguardhome-sync/issues/949) - edns\_cs\_custom\_ip causes unnecessary resyncs to replica, even though no DNS Config list has changed [#​943](https://github.com/bakito/adguardhome-sync/issues/943) - tlsConfig sync silently fails after the origin's certificate is renewed (private key is never synced) [#​942](https://github.com/bakito/adguardhome-sync/issues/942) - POST api should not send content type [#​933](https://github.com/bakito/adguardhome-sync/issues/933) #### Changelog - [`bed1306`](https://github.com/bakito/adguardhome-sync/commit/bed13060debfd2aff131732cca37c46c14592252): feat(config): support \_FILE env vars for docker secrets ([#​937](https://github.com/bakito/adguardhome-sync/issues/937)) ([@​DennisGaida](https://github.com/DennisGaida)) - [`fb96a98`](https://github.com/bakito/adguardhome-sync/commit/fb96a9885cc47e68424afc131335e21431d33745): feat: print rejected tls config ([#​945](https://github.com/bakito/adguardhome-sync/issues/945)) ([@​bakito](https://github.com/bakito)) - [`1ad8ff5`](https://github.com/bakito/adguardhome-sync/commit/1ad8ff51ceca1639e4a6f7cf8858c04c0e11f94e): feat: readyz check stays successful during sync of replicas ([#​950](https://github.com/bakito/adguardhome-sync/issues/950)) ([@​bakito](https://github.com/bakito)) - [`641a01a`](https://github.com/bakito/adguardhome-sync/commit/641a01a6dedbfe15bc293f95bdddf81921f33a65): fix: clean edns config ([#​944](https://github.com/bakito/adguardhome-sync/issues/944)) ([@​bakito](https://github.com/bakito)) - [`326b9c5`](https://github.com/bakito/adguardhome-sync/commit/326b9c52515d8589f5f2163c7330c868473063f1): fix: no content type for empty body ([#​948](https://github.com/bakito/adguardhome-sync/issues/948)) ([@​bakito](https://github.com/bakito)) #### 🦠 VirusTotal Report 🔎 | File | Archive | Binary | Last Scan | | ------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | adguardhome-sync\_0.9.4\_windows\_386.zip | [](https://www.virustotal.com/gui/file-analysis/MzQ5MjIyZGU2NzE1ZGRhMjU2MGMwN2FkMzM3NGI2Y2I6MTc5MTU2MTg2MQ==/detection) | [](https://www.virustotal.com/gui/file-analysis/YmI1ZjFmNDljMzc1NDg3Yzg3NzM0MWJkMTMxMzM0NGI6MTc5MTU2MTg2OA==/detection) | [](https://www.virustotal.com/gui/file-analysis/YmI1ZjFmNDljMzc1NDg3Yzg3NzM0MWJkMTMxMzM0NGI6MTc5MTU2MTg2OA==/detection) | | adguardhome-sync\_0.9.4\_windows\_amd64.zip | [](https://www.virustotal.com/gui/file-analysis/OWM0NzZhNzA2MTAyMWQ0OTQ3OTc1Njc4NmMzYzFhODg6MTc5MTU2MTg3Mg==/detection) | [](https://www.virustotal.com/gui/file-analysis/ZDAxNjFiMGEzZTA1NzUzOTVjZTQ2YjUzMTRhM2IzODQ6MTc5MTU2MTg3OA==/detection) | [](https://www.virustotal.com/gui/file-analysis/ZDAxNjFiMGEzZTA1NzUzOTVjZTQ2YjUzMTRhM2IzODQ6MTc5MTU2MTg3OA==/detection) | </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzIuNSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzMi41IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> --------- Co-authored-by: Renovate Bot <bot@renovateapp.com> Reviewed-on: https://git.ivanch.me/ivanch/haven/pulls/24
Haven
A forever-work-in-progress self-hosted server setup
Runs on a multi-node k3s cluster deployed across VMs and bare-metal hosts.
Application configuration is stored on an NFS share located on a dedicated SSD. This uses nfs-subdir-external-provisioner as a dynamic storage provisioner with PVC-specific paths. Additional data is stored on a NAS exported via NFS.
The cluster runs k3s with nginx as the ingress controller. MetalLB is used in layer 2 mode for load balancing. cert-manager provides a local CA and issues certificates (required by Vaultwarden).
For setup details, see SETUP.md.
The repository name references my local TLD, .haven ;)
Repository Layout
haven/
├── bootstrap/
│ ├── namespaces.yaml # cluster namespaces
│ ├── secretstores.yaml # cluster secret stores for BitWarden ESO
│ ├── address-pool.yaml # cluster IP pool for MetalLB
│ ├── argocd-install/ # Argo CD install manifests + ingress
│ └── root-app.yaml # root Application watching apps/root
├── secrets/
│ ├── adguard.yaml # adguard credentials from BitWarden
│ ├── <app>.yaml # <app> credentials from BitWarden
│ └── ...
├── apps/
│ ├── root/
│ │ ├── kustomization.yaml # points to applicationset.yaml
│ │ └── applicationset.yaml# auto-discovers apps/*/*.yaml
│ └── <namespace>/ # e.g., dev/, default/, infra/, monitoring/
│ ├── <app-1>.yaml # all-in-one manifest per app
│ ├── <app-2>.yaml # ...
| └──── ...