feat(gitops): migrate domain to riotpiao.com, add CNPG + Forgejo HA on Redis/Postgres, wire ArgoCD apps — enables cluster rebuild after etcd wipe and unblocks the git-source chicken-egg via standalone Helm-source Applications

2026-08-18 15:08:02 -07:00
parent 491e88e493
commit 54bfb5ade6
86 changed files with 889 additions and 446 deletions
@@ -40,10 +40,10 @@ ingress:
  enabled: true
  className: nginx
  clusterIssuer: homelab-ca
-  host: kmsvc.riotpiao.homelab.com
+  host: kmsvc.riotpiao.com
  tlsSecretName: kmsvc-tls
  # kmsvc-cli connects via gRPC directly to --server/KMSVC_SERVER (default
-  # kmsvc.riotpiao.homelab.com:443, see kmsvc-cli's README), so raw gRPC needs an
+  # kmsvc.riotpiao.com:443, see kmsvc-cli's README), so raw gRPC needs an
  # external path too — scoped to the gRPC service's own path prefix on the
  # same host/port, rather than opening the whole host to gRPC passthrough.
  grpcEnabled: true