feat(gitops): migrate domain to riotpiao.com, add CNPG + Forgejo HA on Redis/Postgres, wire ArgoCD apps — enables cluster rebuild after etcd wipe and unblocks the git-source chicken-egg via standalone Helm-source Applications

k8s/applications/dev-tools/README.md

@@ -9,17 +9,17 @@ Build for `linux/amd64`:
 ```bash
 cd homelab
 docker buildx build --platform linux/amd64 \
-  -t forgejo.riotpiao.homelab.com/rock/claude-terminal:latest \
+  -t forgejo.riotpiao.com/rock/claude-terminal:latest \
   -f k8s/dev-tools/Dockerfile \
   k8s/dev-tools
 
 # Log in to Forgejo registry
-docker login forgejo.riotpiao.homelab.com \
+docker login forgejo.riotpiao.com \
   --username ci-bot \
   --password "$(talos get cluster/iam/agents/ci-bot --key token)"
 
 # Push
-docker push forgejo.riotpiao.homelab.com/rock/claude-terminal:latest
+docker push forgejo.riotpiao.com/rock/claude-terminal:latest
 ```
 
 Or use the provided build script:
@@ -36,7 +36,7 @@ Update `values.yaml` if needed, then deploy via helmfile:
 helmfile apply -l name=claude-terminal
 ```
 
-Access the terminal at: **https://claude.riotpiao.homelab.com**
+Access the terminal at: **https://claude.riotpiao.com**
 
 ## Persistent Storage
 

k8s/applications/dev-tools/build.sh

@@ -1,7 +1,7 @@
 #!/bin/bash
 set -euo pipefail
 
-REGISTRY="forgejo.riotpiao.homelab.com"
+REGISTRY="forgejo.riotpiao.com"
 IMAGE_NAME="rock/claude-terminal"
 TAG="latest"
 FULL_IMAGE="${REGISTRY}/${IMAGE_NAME}:${TAG}"

k8s/applications/dev-tools/values.yaml

@@ -15,14 +15,14 @@ ingress:
   annotations:
     cert-manager.io/cluster-issuer: homelab-ca
   hosts:
-    - host: claude.riotpiao.homelab.com
+    - host: claude.riotpiao.com
       paths:
         - path: /
           pathType: Prefix
   tls:
     - secretName: claude-terminal-tls
       hosts:
-        - claude.riotpiao.homelab.com
+        - claude.riotpiao.com
 
 persistence:
   enabled: true