Commit Graph
44 Commits
Author SHA1 Message Date
Greg Hellings 029b71d0d4 Pass traffic through genesis
* keepalived does not work with Nebula VPN
* update Genesis firewall to allow passing through local traffic
* target all traffic directly to the LAN IP using genesis's routing
2026-08-05 22:57:58 -05:00
Greg Hellings 475fe50d19 Expand Nebula
* Add Nebula to Kubernetes node
* Update k3s nodes to support nebula keepalived
* Move external IPs to a separate structure
2026-07-25 15:18:15 -05:00
Greg Hellings f5922887bf chore: clean up IP name duplication 2026-07-07 14:08:48 -05:00
Greg Hellings 8ba503ca5d chore: upgrade Immich db to PG 18 2026-04-21 16:22:21 -05:00
Greg Hellings e84e03cd05 chore: move charts into manifests 2026-04-17 15:43:57 -05:00
Greg Hellings e9a4662620 fix: open kubelet/cadvisor prometheus ports
buildbot/nix-eval Build done. (1 warning)
buildbot/nix-build Build done.
buildbot/nix-effects Build done.
2026-03-26 05:58:52 -05:00
Greg Hellings 1bba9cee70 Fix hash values in kubernetes 2026-03-05 09:08:01 -06:00
Greg Hellings efc0bf09c2 chore: update helm chart setting
buildbot/nix-eval Build done. (1 warning)
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-zeke Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.pkg-upgrade-pg-cluster Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-linode Build done.
buildbot/nix-build Build done.
2026-02-19 23:48:31 -06:00
Greg Hellings 22beae0368 fix: remove deprecated refs 2026-02-11 09:18:22 -06:00
Greg Hellings ac35cd8a5c Avoid old, bad hostnames 2025-12-28 20:03:04 -06:00
Greg Hellings beb22dc1dc Package updates and fixes 2025-12-25 17:16:16 -06:00
Greg Hellings 854aed86e0 Updates to Flakes and Zeke
Add /dev/sda1 to Zeke
Update Flakes
Add initial colmena support
Add colmena to shells
Update kubernetes pins
2025-12-15 22:18:29 -06:00
Greg Hellings 8964529f1a Reduce amount of inputs 2025-12-07 17:53:31 -06:00
Greg Hellings d9e4ba93ac Fix formatting 2025-12-07 00:15:26 -06:00
Greg Hellings e0dec7de16 Update hash for tailscale-operator 2025-12-03 05:23:27 -06:00
Greg Hellings 98d188bf0b Use DHCP across the board 2025-12-02 21:34:13 -06:00
Greg Hellings 893db983e0 Fix broken auto-deployments 2025-11-23 14:43:36 -06:00
Greg Hellings 572419b8d3 Enable node level monitoring 2025-11-23 01:12:20 -06:00
Greg Hellings 1e7bf67597 Lots of formatting? 2025-11-02 22:59:43 -06:00
Greg Hellings 02a6004eb0 Upgrade Flux to 2.7.2 2025-10-19 21:52:57 -05:00
Greg Hellings c891c5f514 Move some auto-deploy options around 2025-09-11 23:57:10 -05:00
Greg Hellings a7e0b32df4 Make charts charty again 2025-09-11 23:00:19 -05:00
Greg Hellings 3b24d5ae26 Cleanup external references 2025-09-11 21:39:53 -05:00
Greg Hellings 52189eff57 Use nixhelm repo, add tailscale to autodeploy 2025-09-11 21:39:53 -05:00
Greg Hellings 5992fa86c0 Add external-secrets to helm distributions 2025-09-11 21:39:53 -05:00
Greg Hellings c6b96642f7 Auto-install kyverno chart 2025-09-11 21:39:53 -05:00
Greg Hellings 3cf32090d6 Move flux to NixOS and add URL hashes 2025-09-11 21:39:53 -05:00
Greg Hellings 305ca30ad5 Add cert-manager to startup process 2025-09-11 21:39:53 -05:00
Greg Hellings a573f12221 Move node annotations to Nix 2025-09-11 21:39:53 -05:00
Greg Hellings ce0fd0102a Move node labels to Nix 2025-09-11 21:39:53 -05:00
Greg Hellings c7e96d1f29 Enable Longhorn at last
Enable the iscsi services on the local hosts
Enable special NixOS style Longhorn workarounds
Enable Longhorn in Kubernetes, as well
Update host names to point at Longhorn
Expose Longhorn UI and secrets
2025-07-03 01:36:59 -05:00
Greg Hellings 9940e89d2e Add keepalived to cluster
Add keepalived for the Kubernetes cluster
Set VIP to 10.42.5.1
Set *.cluster DNS resolution to this IP address
But do not move existing *.kubernetes targets, yet, as there is a need
to ensure that subnet routers are properly configured
2025-07-02 23:07:08 -05:00
Greg Hellings f9f1357b8e Rename of Jude to Zeke
Since Jude is a now a server, we rename it to Zeke, for Ezekiel
Update of tailscale to auto-register nodes
Update kubernetes to install the etcd application
Update Zeke IP address and DNS bindings
2025-07-02 12:01:27 -05:00
Greg Hellings d7f53e53a3 Expost postgres cluster
Expose the postgres cluster outside of the Kubernetes cluster
Give myself the option of connecting to postgres from my own machines,
so that I can hopefully leverage the improved performance
Update some file linting issues in Nix
Add necessary gitlab keys so it can be updated properly the next time I
deploy to it
Add DNS entries for postgres
Update the configuraiton of Traefik to expose the appropriate ports
2025-05-28 00:10:50 -05:00
Greg Hellings ee5389baea Install Helm as objects
Rather than running helm on the client and passing it to kubectl, just
install Flux and set the Helm repos on the server side

Add resolv.conf to the Kubernetes config so that the hosts can resolve
hostnames in order to pull down the Helm repositories

Add backups to the database configurations
2025-05-27 19:16:11 -05:00
Greg Hellings 26d4e9b771 Configure Dendrite on kubernetes
Configure a matrix database
Configure Dendrite into Kubernetes
Update vps configuration to new settings
2025-05-26 23:37:24 -05:00
Greg Hellings ce5f604636 External Secrets setup
Setup the external secrets helm charts
Convert hard coded secrets to external secrets
Add BitWarden CLI for serving external secrets
2025-05-26 17:10:01 -05:00
Greg Hellings 3110cff93c Basic Kubernetes configuration up and running
Add postgres operator and cluster
Create gitlab database declaratively
Update flake
YES, YES, I KNOW THE PASSWORDS ARE DUMB AND WORLD READABLE
2025-05-26 12:20:29 -05:00
Greg Hellings 812b10e3f6 Adding kubernetes packages to module 2025-05-22 00:27:14 -05:00
Greg Hellings cefc796a1d Set the ports in the correct place 2025-05-19 23:42:29 -05:00
Greg Hellings afe5ca7752 Add kubernetes hostnames and ports 2025-05-19 22:50:20 -05:00
Greg Hellings b70c7874cc Fix Isaiah to actually work 2025-05-19 21:47:35 -05:00
Greg Hellings 6a297a4fc4 Change k3s CIDRs 2025-05-19 20:42:26 -05:00
Greg Hellings fa302301af Isaiah spin up
Bring Isaiah back into commission, this time as the core of my k3s
cluster. Standing up the basic serverInit, and also creating the core
server components that are needed.
2025-05-19 20:10:21 -05:00