 Story Crater Bot
|
4b3f664502
|
feat(dns): add git.riotpiao.com subdomain for Forgejo SSH access
Adds CoreDNS rewrite: git.riotpiao.com → forgejo-gitea-ssh.cicd.svc.cluster.local
Separates SSH from HTTPS access:
- forgejo.riotpiao.com → HTTPS/Web UI (192.168.1.160, ingress)
- git.riotpiao.com → SSH (192.168.1.165:2222, LoadBalancer)
Usage:
git remote set-url origin ssh://[email protected]:2222/riotpiao.com/homelab.git
git push
External access requires /etc/hosts entry:
192.168.1.165 git.riotpiao.com
|
2026-07-22 09:33:07 -07:00 |
|
|
Story Crater Bot
|
84aefc8db2
|
feat(homarr): complete wiring for landing page deployment
Adds Homarr landing page with Authentik SSO:
- k8s/argocd/apps/60-applications.yaml: multi-source Application (homarr
chart from homarr-labs + in-repo values), ns dashboard, wave 8
- k8s/bootstrap/ingress/ingress.yaml: homarr.riotpiao.com → dashboard/homarr:3000
- k8s/bootstrap/coredns/coredns-configmap.yaml: rewrite homarr.riotpiao.com
to ingress controller
- k8s/security/iam/scripts/authentik-provision.py: added 'homarr' to SERVICES
(generates OAuth provider/app + homarr-oidc secret with client-id/secret)
- k8s/security/iam/rbac-dashboard-rolebinding.yaml: grants authentik-provisioner
SA access to dashboard ns for secret management
- k8s/security/iam/kustomization.yaml: includes new RoleBinding
Homarr now fully wired:
- Ingress: https://homarr.riotpiao.com
- SSO: redirects to Authentik, login as rock
- Persistence: 5Gi RWO on longhorn-wffc (3-replica HA)
- Tile config: UI-managed (saved to PVC)
|
2026-07-22 09:04:27 -07:00 |
|