added homepage
This commit is contained in:
kisfenyo
@@ -658,3 +658,25 @@ spec:
|
||||
- CreateNamespace=true
|
||||
- PruneLast=true
|
||||
---
|
||||
# Homepage
|
||||
apiVersion: argoproj.io/v1alpha1
|
||||
kind: Application
|
||||
metadata:
|
||||
name: homepage
|
||||
namespace: argocd
|
||||
finalizers:
|
||||
- resources-finalizer.argocd.argoproj.io
|
||||
spec:
|
||||
project: homelab
|
||||
source:
|
||||
repoURL: https://gitea.dooplex.hu/admin/homelab-manifests.git
|
||||
targetRevision: main
|
||||
path: homepage-system
|
||||
destination:
|
||||
server: https://kubernetes.default.svc
|
||||
namespace: homepage-system
|
||||
syncPolicy:
|
||||
syncOptions:
|
||||
- CreateNamespace=true
|
||||
- PruneLast=true
|
||||
---
|
||||
|
||||
@@ -0,0 +1,509 @@
|
||||
# =============================================================================
|
||||
# Homepage - Application Dashboard
|
||||
# Version: v1.8.0
|
||||
# Namespace: homepage-system
|
||||
# Domain: homepage.dooplex.hu
|
||||
# Authentication: Authentik Proxy (Forward Auth)
|
||||
# =============================================================================
|
||||
#
|
||||
# PREREQUISITES - Create in Authentik:
|
||||
# 1. Create Proxy Provider:
|
||||
# - Name: homepage-proxy
|
||||
# - Authorization flow: default-provider-authorization-implicit-consent
|
||||
# - Mode: Forward auth (single application)
|
||||
# - External host: https://homepage.dooplex.hu
|
||||
#
|
||||
# 2. Create Application:
|
||||
# - Name: Homepage
|
||||
# - Slug: homepage
|
||||
# - Provider: (select the proxy provider created above)
|
||||
# - Launch URL: https://homepage.dooplex.hu
|
||||
#
|
||||
# 3. Create Outpost (or add to existing):
|
||||
# - Name: homepage-outpost (or use existing proxy outpost)
|
||||
# - Type: Proxy
|
||||
# - Applications: Add the Homepage application
|
||||
#
|
||||
# After deployment, Authentik will auto-create the outpost deployment.
|
||||
# Update the ingress auth-url annotation with the correct outpost service name.
|
||||
#
|
||||
# =============================================================================
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: homepage-system
|
||||
labels:
|
||||
app.kubernetes.io/name: homepage
|
||||
app.kubernetes.io/instance: homepage
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: ServiceAccount
|
||||
metadata:
|
||||
name: homepage
|
||||
namespace: homepage-system
|
||||
labels:
|
||||
app.kubernetes.io/name: homepage
|
||||
app.kubernetes.io/instance: homepage
|
||||
secrets:
|
||||
- name: homepage
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: homepage
|
||||
namespace: homepage-system
|
||||
labels:
|
||||
app.kubernetes.io/name: homepage
|
||||
app.kubernetes.io/instance: homepage
|
||||
annotations:
|
||||
kubernetes.io/service-account.name: homepage
|
||||
type: kubernetes.io/service-account-token
|
||||
---
|
||||
# ClusterRole for Homepage to discover services and get cluster metrics
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRole
|
||||
metadata:
|
||||
name: homepage
|
||||
labels:
|
||||
app.kubernetes.io/name: homepage
|
||||
app.kubernetes.io/instance: homepage
|
||||
rules:
|
||||
# Core resources for service discovery
|
||||
- apiGroups: [""]
|
||||
resources:
|
||||
- namespaces
|
||||
- pods
|
||||
- nodes
|
||||
- services
|
||||
- endpoints
|
||||
- configmaps
|
||||
- secrets
|
||||
verbs: ["get", "list", "watch"]
|
||||
# Apps resources for pod discovery
|
||||
- apiGroups: ["apps"]
|
||||
resources:
|
||||
- deployments
|
||||
- replicasets
|
||||
- statefulsets
|
||||
- daemonsets
|
||||
verbs: ["get", "list", "watch"]
|
||||
# Networking for ingress discovery
|
||||
- apiGroups: ["networking.k8s.io"]
|
||||
resources:
|
||||
- ingresses
|
||||
verbs: ["get", "list", "watch"]
|
||||
# Traefik IngressRoute CRD (if used)
|
||||
- apiGroups: ["traefik.containo.us", "traefik.io"]
|
||||
resources:
|
||||
- ingressroutes
|
||||
verbs: ["get", "list", "watch"]
|
||||
# Gateway API (if used)
|
||||
- apiGroups: ["gateway.networking.k8s.io"]
|
||||
resources:
|
||||
- httproutes
|
||||
- gateways
|
||||
verbs: ["get", "list", "watch"]
|
||||
# Metrics
|
||||
- apiGroups: ["metrics.k8s.io"]
|
||||
resources:
|
||||
- nodes
|
||||
- pods
|
||||
verbs: ["get", "list", "watch"]
|
||||
---
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRoleBinding
|
||||
metadata:
|
||||
name: homepage
|
||||
labels:
|
||||
app.kubernetes.io/name: homepage
|
||||
app.kubernetes.io/instance: homepage
|
||||
roleRef:
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
kind: ClusterRole
|
||||
name: homepage
|
||||
subjects:
|
||||
- kind: ServiceAccount
|
||||
name: homepage
|
||||
namespace: homepage-system
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: homepage-config
|
||||
namespace: homepage-system
|
||||
labels:
|
||||
app.kubernetes.io/name: homepage
|
||||
app.kubernetes.io/instance: homepage
|
||||
data:
|
||||
# Kubernetes connection configuration
|
||||
kubernetes.yaml: |
|
||||
mode: cluster
|
||||
ingress: true
|
||||
|
||||
# Global settings
|
||||
settings.yaml: |
|
||||
title: Dooplex Dashboard
|
||||
favicon: https://dooplex.hu/favicon.ico
|
||||
theme: dark
|
||||
color: slate
|
||||
headerStyle: clean
|
||||
layout:
|
||||
Infrastructure:
|
||||
style: row
|
||||
columns: 4
|
||||
Media:
|
||||
style: row
|
||||
columns: 4
|
||||
Productivity:
|
||||
style: row
|
||||
columns: 3
|
||||
Monitoring:
|
||||
style: row
|
||||
columns: 3
|
||||
providers:
|
||||
longhorn:
|
||||
url: https://longhorn.home
|
||||
|
||||
# Services configuration - customize as needed
|
||||
services.yaml: |
|
||||
- Infrastructure:
|
||||
- ArgoCD:
|
||||
icon: argocd.png
|
||||
href: https://argocd.dooplex.hu
|
||||
description: GitOps Deployment
|
||||
namespace: argocd
|
||||
app: argocd-server
|
||||
- Authentik:
|
||||
icon: authentik.png
|
||||
href: https://authentik.dooplex.hu
|
||||
description: Identity Provider
|
||||
- Longhorn:
|
||||
icon: longhorn.png
|
||||
href: https://longhorn.home
|
||||
description: Storage Management
|
||||
- Gitea:
|
||||
icon: gitea.png
|
||||
href: https://gitea.dooplex.hu
|
||||
description: Git Repository
|
||||
|
||||
- Media:
|
||||
- Plex:
|
||||
icon: plex.png
|
||||
href: https://plex.dooplex.hu
|
||||
description: Media Server
|
||||
- Sonarr:
|
||||
icon: sonarr.png
|
||||
href: https://sonarr.home
|
||||
description: TV Shows
|
||||
widget:
|
||||
type: sonarr
|
||||
url: http://sonarr.servarr-system.svc.cluster.local:8989
|
||||
key: "{{HOMEPAGE_VAR_SONARR_API_KEY}}"
|
||||
- Radarr:
|
||||
icon: radarr.png
|
||||
href: https://radarr.home
|
||||
description: Movies
|
||||
widget:
|
||||
type: radarr
|
||||
url: http://radarr.servarr-system.svc.cluster.local:7878
|
||||
key: "{{HOMEPAGE_VAR_RADARR_API_KEY}}"
|
||||
- Prowlarr:
|
||||
icon: prowlarr.png
|
||||
href: https://prowlarr.home
|
||||
description: Indexer Manager
|
||||
|
||||
- Productivity:
|
||||
- Nextcloud:
|
||||
icon: nextcloud.png
|
||||
href: https://cloud.dooplex.hu
|
||||
description: Cloud Storage
|
||||
- Paperless:
|
||||
icon: paperless-ngx.png
|
||||
href: https://paperless.dooplex.hu
|
||||
description: Document Management
|
||||
- Vaultwarden:
|
||||
icon: bitwarden.png
|
||||
href: https://vaultwarden.dooplex.hu
|
||||
description: Password Manager
|
||||
|
||||
- Monitoring:
|
||||
- Grafana:
|
||||
icon: grafana.png
|
||||
href: https://grafana.dooplex.hu
|
||||
description: Dashboards & Metrics
|
||||
widget:
|
||||
type: grafana
|
||||
url: http://grafana.mon-system.svc.cluster.local:3000
|
||||
username: "{{HOMEPAGE_VAR_GRAFANA_USER}}"
|
||||
password: "{{HOMEPAGE_VAR_GRAFANA_PASS}}"
|
||||
- Prometheus:
|
||||
icon: prometheus.png
|
||||
href: https://prometheus.home
|
||||
description: Metrics Collection
|
||||
- Uptime Kuma:
|
||||
icon: uptime-kuma.png
|
||||
href: https://uptime.dooplex.hu
|
||||
description: Uptime Monitoring
|
||||
|
||||
# Widgets configuration
|
||||
widgets.yaml: |
|
||||
- logo:
|
||||
icon: https://dooplex.hu/logo.png
|
||||
- greeting:
|
||||
text_size: xl
|
||||
text: "Welcome to Dooplex"
|
||||
- datetime:
|
||||
text_size: l
|
||||
format:
|
||||
dateStyle: long
|
||||
timeStyle: short
|
||||
hour12: false
|
||||
- kubernetes:
|
||||
cluster:
|
||||
show: true
|
||||
cpu: true
|
||||
memory: true
|
||||
showLabel: true
|
||||
label: "dooplex"
|
||||
nodes:
|
||||
show: true
|
||||
cpu: true
|
||||
memory: true
|
||||
showLabel: true
|
||||
- longhorn:
|
||||
expanded: true
|
||||
total: true
|
||||
labels: true
|
||||
nodes: false
|
||||
- search:
|
||||
provider: duckduckgo
|
||||
target: _blank
|
||||
|
||||
# Bookmarks
|
||||
bookmarks.yaml: |
|
||||
- Developer:
|
||||
- GitHub:
|
||||
- abbr: GH
|
||||
href: https://github.com
|
||||
icon: github.png
|
||||
- Gitea:
|
||||
- abbr: GT
|
||||
href: https://gitea.dooplex.hu
|
||||
icon: gitea.png
|
||||
- Documentation:
|
||||
- Kubernetes:
|
||||
- abbr: K8s
|
||||
href: https://kubernetes.io/docs
|
||||
icon: kubernetes.png
|
||||
- ArgoCD:
|
||||
- abbr: Argo
|
||||
href: https://argo-cd.readthedocs.io
|
||||
icon: argocd.png
|
||||
|
||||
# Docker settings (not used in k8s mode)
|
||||
docker.yaml: ""
|
||||
|
||||
# Custom CSS
|
||||
custom.css: ""
|
||||
|
||||
# Custom JS
|
||||
custom.js: ""
|
||||
---
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: homepage
|
||||
namespace: homepage-system
|
||||
labels:
|
||||
app.kubernetes.io/name: homepage
|
||||
app.kubernetes.io/instance: homepage
|
||||
app.kubernetes.io/version: "v1.8.0"
|
||||
spec:
|
||||
replicas: 1
|
||||
strategy:
|
||||
type: RollingUpdate
|
||||
rollingUpdate:
|
||||
maxSurge: 1
|
||||
maxUnavailable: 0
|
||||
selector:
|
||||
matchLabels:
|
||||
app.kubernetes.io/name: homepage
|
||||
app.kubernetes.io/instance: homepage
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app.kubernetes.io/name: homepage
|
||||
app.kubernetes.io/instance: homepage
|
||||
app.kubernetes.io/version: "v1.8.0"
|
||||
spec:
|
||||
serviceAccountName: homepage
|
||||
automountServiceAccountToken: true
|
||||
dnsPolicy: ClusterFirst
|
||||
enableServiceLinks: true
|
||||
containers:
|
||||
- name: homepage
|
||||
image: ghcr.io/gethomepage/homepage:v1.8.0
|
||||
imagePullPolicy: IfNotPresent
|
||||
env:
|
||||
# Required for external access
|
||||
- name: HOMEPAGE_ALLOWED_HOSTS
|
||||
value: "homepage.dooplex.hu,homepage.home"
|
||||
# Timezone
|
||||
- name: TZ
|
||||
value: "Europe/Budapest"
|
||||
# Optional: Widget API keys (create secret with these if needed)
|
||||
- name: HOMEPAGE_VAR_SONARR_API_KEY
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: homepage-secrets
|
||||
key: sonarr-api-key
|
||||
- name: HOMEPAGE_VAR_RADARR_API_KEY
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: homepage-secrets
|
||||
key: radarr-api-key
|
||||
- name: HOMEPAGE_VAR_GRAFANA_USER
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: homepage-secrets
|
||||
key: grafana-user
|
||||
- name: HOMEPAGE_VAR_GRAFANA_PASS
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: homepage-secrets
|
||||
key: grafana-pass
|
||||
ports:
|
||||
- name: http
|
||||
containerPort: 3000
|
||||
protocol: TCP
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /api/healthcheck
|
||||
port: http
|
||||
initialDelaySeconds: 30
|
||||
periodSeconds: 30
|
||||
timeoutSeconds: 10
|
||||
failureThreshold: 3
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /api/healthcheck
|
||||
port: http
|
||||
initialDelaySeconds: 10
|
||||
periodSeconds: 10
|
||||
timeoutSeconds: 5
|
||||
failureThreshold: 3
|
||||
resources:
|
||||
requests:
|
||||
cpu: 50m
|
||||
memory: 128Mi
|
||||
limits:
|
||||
cpu: 500m
|
||||
memory: 512Mi
|
||||
volumeMounts:
|
||||
- name: config
|
||||
mountPath: /app/config/kubernetes.yaml
|
||||
subPath: kubernetes.yaml
|
||||
- name: config
|
||||
mountPath: /app/config/settings.yaml
|
||||
subPath: settings.yaml
|
||||
- name: config
|
||||
mountPath: /app/config/services.yaml
|
||||
subPath: services.yaml
|
||||
- name: config
|
||||
mountPath: /app/config/widgets.yaml
|
||||
subPath: widgets.yaml
|
||||
- name: config
|
||||
mountPath: /app/config/bookmarks.yaml
|
||||
subPath: bookmarks.yaml
|
||||
- name: config
|
||||
mountPath: /app/config/docker.yaml
|
||||
subPath: docker.yaml
|
||||
- name: config
|
||||
mountPath: /app/config/custom.css
|
||||
subPath: custom.css
|
||||
- name: config
|
||||
mountPath: /app/config/custom.js
|
||||
subPath: custom.js
|
||||
volumes:
|
||||
- name: config
|
||||
configMap:
|
||||
name: homepage-config
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: homepage
|
||||
namespace: homepage-system
|
||||
labels:
|
||||
app.kubernetes.io/name: homepage
|
||||
app.kubernetes.io/instance: homepage
|
||||
spec:
|
||||
type: ClusterIP
|
||||
ports:
|
||||
- name: http
|
||||
port: 3000
|
||||
targetPort: http
|
||||
protocol: TCP
|
||||
selector:
|
||||
app.kubernetes.io/name: homepage
|
||||
app.kubernetes.io/instance: homepage
|
||||
---
|
||||
# Ingress WITH Authentik proxy authentication
|
||||
# Update the auth-url annotation with your actual outpost service name after Authentik creates it
|
||||
apiVersion: networking.k8s.io/v1
|
||||
kind: Ingress
|
||||
metadata:
|
||||
name: homepage
|
||||
namespace: homepage-system
|
||||
labels:
|
||||
app.kubernetes.io/name: homepage
|
||||
app.kubernetes.io/instance: homepage
|
||||
annotations:
|
||||
cert-manager.io/cluster-issuer: letsencrypt-prod
|
||||
external-dns.alpha.kubernetes.io/hostname: homepage.dooplex.hu,homepage.home
|
||||
nginx.ingress.kubernetes.io/ssl-redirect: "true"
|
||||
nginx.ingress.kubernetes.io/proxy-buffer-size: "16k"
|
||||
nginx.ingress.kubernetes.io/proxy-buffers-number: "4"
|
||||
nginx.ingress.kubernetes.io/proxy-busy-buffers-size: "32k"
|
||||
# Authentik Forward Auth annotations
|
||||
# Update 'homepage-outpost' with your actual outpost name
|
||||
nginx.ingress.kubernetes.io/auth-url: http://ak-outpost-homepage-outpost.auth-system.svc.cluster.local:9000/outpost.goauthentik.io/auth/nginx
|
||||
nginx.ingress.kubernetes.io/auth-signin: https://homepage.dooplex.hu/outpost.goauthentik.io/start?rd=$escaped_request_uri
|
||||
nginx.ingress.kubernetes.io/auth-response-headers: Set-Cookie,X-authentik-username,X-authentik-groups,X-authentik-email
|
||||
nginx.ingress.kubernetes.io/auth-snippet: |
|
||||
proxy_set_header X-Forwarded-Host $http_host;
|
||||
# Homepage auto-discovery annotation
|
||||
gethomepage.dev/enabled: "true"
|
||||
gethomepage.dev/name: "Homepage"
|
||||
gethomepage.dev/description: "Application Dashboard"
|
||||
gethomepage.dev/group: "Infrastructure"
|
||||
gethomepage.dev/icon: "homepage.png"
|
||||
spec:
|
||||
ingressClassName: nginx-internal
|
||||
rules:
|
||||
- host: homepage.dooplex.hu
|
||||
http:
|
||||
paths:
|
||||
- path: /
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: homepage
|
||||
port:
|
||||
number: 3000
|
||||
- host: homepage.home
|
||||
http:
|
||||
paths:
|
||||
- path: /
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: homepage
|
||||
port:
|
||||
number: 3000
|
||||
tls:
|
||||
- hosts:
|
||||
- homepage.dooplex.hu
|
||||
secretName: homepage-tls
|
||||
---
|
||||
Reference in New Issue
Block a user