riotpiao-poimen/homelab
2
0
Fork 0
Code Issues 10 Pull Requests 1 Actions Packages Projects 1 Releases Wiki Activity

Compare commits

merge into: riotpiao-poimen/homelab:main
Branches Tags
riotpiao-poimen/homelab:main riotpiao-poimen/homelab:fix/org-transfer-urls riotpiao-poimen/homelab:fix/argocd-repo-url riotpiao-poimen/homelab:feat/gotify-notifications riotpiao-poimen/homelab:feat/p3.9-e2e-auth-test
..
pull from: riotpiao-poimen/homelab:feat/gotify-notifications
Branches Tags
riotpiao-poimen/homelab:fix/org-transfer-urls riotpiao-poimen/homelab:main riotpiao-poimen/homelab:fix/argocd-repo-url riotpiao-poimen/homelab:feat/gotify-notifications riotpiao-poimen/homelab:feat/p3.9-e2e-auth-test
2 Commits
main .. feat/gotify-notifications
Author SHA1 Message Date
rock 3abe2a7184 fix(gotify): CNPG Postgres backend, SOPS-encrypt secrets 
- Replace SQLite + PVC with CNPG Postgres cluster (2 replicas, longhorn-cnpg)
- Connection string built at runtime via shell wrapper (env var interpolation)
- Remove gotify-data PVC (DB handles persistence)
- Encrypt secrets.yaml with SOPS
- Add db.yaml: gotify-db cluster in notifications namespace
 2026-09-10 10:34:44 +09:00
rock b0c17527f2 feat(gotify): add push notification server + SMTP email relay 
- Gotify server (ghcr.io/gotify/server:2.6.1) in notifications namespace
- SMTP emailer sidecar polls messages, forwards as email via msmtp
- Ingress at gotify.riotpiao.com with WebSocket support
- 1Gi Longhorn PVC for message persistence
- ArgoCD Application (wave 8, auto-sync)
- Secrets template for admin creds, SMTP config, tokens
- README with setup guide: tokens, Forgejo webhooks, SMTP providers

Enables PR created/merged email notifications from Forgejo.
 2026-09-10 08:25:36 +09:00
18 changed files with 48 additions and 48 deletions
Expand all files Collapse all files
k8s/argocd/apps/-1-projects.yaml
+1 -1
View File
@@ -18,7 +18,7 @@ spec:
prune: true prune: true
selfHeal: true selfHeal: true
source: source:
repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
path: k8s/argocd/projects path: k8s/argocd/projects
destination: destination:
k8s/argocd/apps/00-secrets.yaml
+1 -1
View File
@@ -17,7 +17,7 @@ spec:
syncOptions: syncOptions:
- CreateNamespace=true - CreateNamespace=true
source: source:
repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
# ksops decrypts every *.enc.yaml here at kustomize-build time (repo-server # ksops decrypts every *.enc.yaml here at kustomize-build time (repo-server
# runs `kustomize build --enable-alpha-plugins --enable-exec`). Replaces the # runs `kustomize build --enable-alpha-plugins --enable-exec`). Replaces the
k8s/argocd/apps/00-substrate.yaml
+6 -6
View File
@@ -21,7 +21,7 @@ spec:
helm: helm:
valueFiles: valueFiles:
- $values/k8s/bootstrap/cert-manager/cert-manager-values.yaml - $values/k8s/bootstrap/cert-manager/cert-manager-values.yaml
- repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git - repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
ref: values ref: values
destination: destination:
@@ -93,7 +93,7 @@ spec:
project: homelab project: homelab
revisionHistoryLimit: 3 revisionHistoryLimit: 3
source: source:
repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
# A real kustomization.yaml (resources: the 3 issuer/CA files) renders these # A real kustomization.yaml (resources: the 3 issuer/CA files) renders these
# deterministically. The previous directory.include with bare filenames # deterministically. The previous directory.include with bare filenames
@@ -127,7 +127,7 @@ spec:
project: homelab project: homelab
revisionHistoryLimit: 3 revisionHistoryLimit: 3
source: source:
repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
path: k8s/bootstrap/ingress path: k8s/bootstrap/ingress
destination: destination:
@@ -149,7 +149,7 @@ metadata:
spec: spec:
project: homelab project: homelab
source: source:
repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
path: k8s/infra/cluster-maintenance path: k8s/infra/cluster-maintenance
destination: destination:
@@ -177,7 +177,7 @@ spec:
valueFiles: valueFiles:
- $values/k8s/bootstrap/kyverno/kyverno-values.yaml - $values/k8s/bootstrap/kyverno/kyverno-values.yaml
sources: sources:
- repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git - repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
ref: values ref: values
destination: destination:
@@ -200,7 +200,7 @@ metadata:
spec: spec:
project: homelab project: homelab
source: source:
repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
path: k8s/bootstrap/kyverno path: k8s/bootstrap/kyverno
destination: destination:
k8s/argocd/apps/01-image-updater.yaml
+1 -1
View File
@@ -19,7 +19,7 @@ spec:
helm: helm:
valueFiles: valueFiles:
- $values/k8s/infra/argocd-image-updater/values.yaml - $values/k8s/infra/argocd-image-updater/values.yaml
- repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git - repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
ref: values ref: values
destination: destination:
k8s/argocd/apps/08-secret-rotation.yaml
+1 -1
View File
@@ -9,7 +9,7 @@ spec:
project: homelab project: homelab
sources: sources:
- repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git - repoURL: https://forgejo.riotpiao.com/rock/homelab.git
path: k8s/apps/secret-rotation-controller path: k8s/apps/secret-rotation-controller
targetRevision: main targetRevision: main
k8s/argocd/apps/10-storage-observability.yaml
+8 -8
View File
@@ -17,7 +17,7 @@ spec:
helm: helm:
valueFiles: valueFiles:
- $values/k8s/infra/minio/minio-operator-values.yaml - $values/k8s/infra/minio/minio-operator-values.yaml
- repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git - repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
ref: values ref: values
destination: destination:
@@ -41,7 +41,7 @@ metadata:
spec: spec:
project: homelab project: homelab
source: source:
repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
path: k8s/infra/minio path: k8s/infra/minio
destination: destination:
@@ -66,7 +66,7 @@ metadata:
spec: spec:
project: homelab project: homelab
source: source:
repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
path: k8s/infra/longhorn path: k8s/infra/longhorn
destination: destination:
@@ -102,7 +102,7 @@ spec:
skipCrds: true skipCrds: true
valueFiles: valueFiles:
- $values/k8s/infra/monitoring/prometheus-values.yaml - $values/k8s/infra/monitoring/prometheus-values.yaml
- repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git - repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
ref: values ref: values
destination: destination:
@@ -152,7 +152,7 @@ metadata:
spec: spec:
project: homelab project: homelab
source: source:
repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
path: k8s/infra/monitoring/crds path: k8s/infra/monitoring/crds
destination: destination:
@@ -183,7 +183,7 @@ metadata:
spec: spec:
project: homelab project: homelab
source: source:
repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
path: k8s/infra/monitoring path: k8s/infra/monitoring
destination: destination:
@@ -213,7 +213,7 @@ spec:
helm: helm:
valueFiles: valueFiles:
- $values/k8s/infra/monitoring/blackbox-exporter-values.yaml - $values/k8s/infra/monitoring/blackbox-exporter-values.yaml
- repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git - repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
ref: values ref: values
destination: destination:
@@ -237,7 +237,7 @@ metadata:
spec: spec:
project: homelab project: homelab
source: source:
repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
path: k8s/infra/tracing path: k8s/infra/tracing
destination: destination:
k8s/argocd/apps/20-logging.yaml
+3 -3
View File
@@ -19,7 +19,7 @@ spec:
helm: helm:
valueFiles: valueFiles:
- $values/k8s/infra/logging/loki-values.yaml - $values/k8s/infra/logging/loki-values.yaml
- repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git - repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
ref: values ref: values
destination: destination:
@@ -53,7 +53,7 @@ spec:
helm: helm:
valueFiles: valueFiles:
- $values/k8s/infra/logging/grafana-values.yaml - $values/k8s/infra/logging/grafana-values.yaml
- repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git - repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
ref: values ref: values
destination: destination:
@@ -87,7 +87,7 @@ spec:
helm: helm:
valueFiles: valueFiles:
- $values/k8s/infra/logging/promtail-values.yaml - $values/k8s/infra/logging/promtail-values.yaml
- repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git - repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
ref: values ref: values
destination: destination:
k8s/argocd/apps/30-security.yaml
+7 -7
View File
@@ -17,7 +17,7 @@ spec:
helm: helm:
valueFiles: valueFiles:
- $values/k8s/infra/iam/vault-values.yaml - $values/k8s/infra/iam/vault-values.yaml
- repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git - repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
ref: values ref: values
destination: destination:
@@ -46,7 +46,7 @@ spec:
helm: helm:
valueFiles: valueFiles:
- $values/k8s/infra/iam/authentik-values.yaml - $values/k8s/infra/iam/authentik-values.yaml
- repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git - repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
ref: values ref: values
destination: destination:
@@ -68,7 +68,7 @@ metadata:
spec: spec:
project: homelab project: homelab
source: source:
repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
path: k8s/infra/iam path: k8s/infra/iam
destination: destination:
@@ -109,7 +109,7 @@ spec:
helm: helm:
valueFiles: valueFiles:
- $values/k8s/bootstrap/phase3-forgejo/forgejo-values.yaml - $values/k8s/bootstrap/phase3-forgejo/forgejo-values.yaml
- repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git - repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
ref: values ref: values
destination: destination:
@@ -162,7 +162,7 @@ metadata:
spec: spec:
project: homelab project: homelab
source: source:
repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
path: k8s/infra/forgejo-runner path: k8s/infra/forgejo-runner
destination: destination:
@@ -190,7 +190,7 @@ metadata:
spec: spec:
project: homelab project: homelab
source: source:
repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
path: k8s/infra/forgejo-runner path: k8s/infra/forgejo-runner
helm: helm:
@@ -221,7 +221,7 @@ metadata:
spec: spec:
project: homelab project: homelab
source: source:
repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
path: k8s/infra/forgejo-runner path: k8s/infra/forgejo-runner
helm: helm:
k8s/argocd/apps/40-data.yaml
+1 -1
View File
@@ -14,7 +14,7 @@ metadata:
spec: spec:
project: homelab project: homelab
source: source:
repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
path: k8s/infra/databases path: k8s/infra/databases
destination: destination:
k8s/argocd/apps/50-memory-queues.yaml
+1 -1
View File
@@ -8,7 +8,7 @@ metadata:
spec: spec:
project: homelab project: homelab
source: source:
repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
path: k8s/apps/messaging/memory-queues path: k8s/apps/messaging/memory-queues
destination: destination:
k8s/argocd/apps/50-messaging.yaml
+1 -1
View File
@@ -68,7 +68,7 @@ metadata:
spec: spec:
project: homelab project: homelab
source: source:
repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
path: k8s/apps/messaging/kafka-cluster path: k8s/apps/messaging/kafka-cluster
destination: destination:
k8s/argocd/apps/55-api-gateway.yaml
+1 -1
View File
@@ -48,7 +48,7 @@ spec:
- repoURL: https://forgejo.riotpiao.com/rock/homelab-frontend.git - repoURL: https://forgejo.riotpiao.com/rock/homelab-frontend.git
targetRevision: main targetRevision: main
path: k8s path: k8s
- repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git - repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
path: k8s/apps/api path: k8s/apps/api
destination: destination:
k8s/argocd/apps/56-llm-serving.yaml
+1 -1
View File
@@ -20,7 +20,7 @@ spec:
project: homelab project: homelab
revisionHistoryLimit: 3 revisionHistoryLimit: 3
source: source:
repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
path: k8s/apps/llm-serving path: k8s/apps/llm-serving
destination: destination:
k8s/argocd/apps/58-comfyui.yaml
+1 -1
View File
@@ -12,7 +12,7 @@ spec:
project: homelab project: homelab
revisionHistoryLimit: 3 revisionHistoryLimit: 3
source: source:
repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
path: k8s/apps/comfyui path: k8s/apps/comfyui
destination: destination:
k8s/argocd/apps/59-gotify.yaml
+1 -1
View File
@@ -12,7 +12,7 @@ spec:
project: homelab project: homelab
revisionHistoryLimit: 3 revisionHistoryLimit: 3
source: source:
repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
path: k8s/apps/gotify path: k8s/apps/gotify
destination: destination:
k8s/argocd/apps/60-applications.yaml
+11 -11
View File
@@ -19,10 +19,10 @@ spec:
helm: helm:
valueFiles: valueFiles:
- $values/k8s/apps/temporal/temporal-values.yaml - $values/k8s/apps/temporal/temporal-values.yaml
- repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git - repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
ref: values ref: values
- repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git - repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
path: k8s/apps/temporal path: k8s/apps/temporal
destination: destination:
@@ -51,7 +51,7 @@ spec:
helm: helm:
valueFiles: valueFiles:
- $values/k8s/apps/portainer/portainer-values.yaml - $values/k8s/apps/portainer/portainer-values.yaml
- repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git - repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
ref: values ref: values
destination: destination:
@@ -74,7 +74,7 @@ metadata:
spec: spec:
project: homelab project: homelab
source: source:
repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
path: k8s/apps/cloudflared path: k8s/apps/cloudflared
destination: destination:
@@ -97,7 +97,7 @@ metadata:
spec: spec:
project: homelab project: homelab
source: source:
repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
path: k8s/apps/agent-pod path: k8s/apps/agent-pod
destination: destination:
@@ -130,7 +130,7 @@ metadata:
spec: spec:
project: homelab project: homelab
source: source:
repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
path: k8s/apps/sms path: k8s/apps/sms
destination: destination:
@@ -157,7 +157,7 @@ metadata:
spec: spec:
project: homelab project: homelab
source: source:
repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
path: k8s/apps/paperless path: k8s/apps/paperless
destination: destination:
@@ -189,7 +189,7 @@ metadata:
spec: spec:
project: homelab project: homelab
source: source:
repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
path: k8s/apps/immich path: k8s/apps/immich
destination: destination:
@@ -220,10 +220,10 @@ spec:
helm: helm:
valueFiles: valueFiles:
- $values/k8s/apps/homarr/homarr-values.yaml - $values/k8s/apps/homarr/homarr-values.yaml
- repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git - repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
ref: values ref: values
- repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git - repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
path: k8s/apps/homarr # PostSync hook: fix-probes-job.yaml path: k8s/apps/homarr # PostSync hook: fix-probes-job.yaml
destination: destination:
@@ -281,7 +281,7 @@ metadata:
spec: spec:
project: homelab project: homelab
source: source:
repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
path: k8s/infra/rbac path: k8s/infra/rbac
destination: destination:
k8s/argocd/projects/homelab-project.yaml
+1 -1
View File
@@ -17,7 +17,7 @@ spec:
- https://github.com/Riotpiaole/Poimen-workflows.git - https://github.com/Riotpiaole/Poimen-workflows.git
- https://github.com/Riotpiaole/poimen*.git - https://github.com/Riotpiaole/poimen*.git
# In-cluster Forgejo repos — explicit allowlist (no wildcard) # In-cluster Forgejo repos — explicit allowlist (no wildcard)
- https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git - https://forgejo.riotpiao.com/rock/homelab.git
- https://forgejo.riotpiao.com/rock/homelab-frontend.git - https://forgejo.riotpiao.com/rock/homelab-frontend.git
- https://forgejo.riotpiao.com/rock/kmsvc-manage.git - https://forgejo.riotpiao.com/rock/kmsvc-manage.git
- https://forgejo.riotpiao.com/rock/poimen.git - https://forgejo.riotpiao.com/rock/poimen.git
k8s/argocd/root/homelab-root.yaml
+1 -1
View File
@@ -12,7 +12,7 @@ metadata:
spec: spec:
project: homelab project: homelab
source: source:
repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git repoURL: https://forgejo.riotpiao.com/rock/homelab.git
targetRevision: main targetRevision: main
path: k8s/argocd/apps path: k8s/argocd/apps
directory: directory: