Commit Graph

53 Commits

Author SHA1 Message Date
admin c308c0a85e renovate: default-allow + codify ArgoCD auto-sync in git
Two coordinated changes — open PR only, do NOT merge until dry-run passes.

1) admin-system/renovate.yaml: flip packageRules from Tier 1 allowlist to
   default-allow with safety gates. Adds prHourlyLimit=8 + prConcurrentLimit=8
   to throttle the first wave. New rules (7 total, order-sensitive):
   - "*"                    : 3-day stability gate (minimumReleaseAge)
   - minor/patch            : automerge via platformAutomerge
   - major                  : dependencyDashboardApproval (manual gate)
   - k3s-bundled (3 images) : disabled (ride k3s upgrades)
   - critical-core (6 imgs) : automerge=false (Viktor merges manually)
     - gitea/gitea, ghcr.io/goauthentik/{server,ldap,proxy},
       ghcr.io/cloudnative-pg/cloudnative-pg, quay.io/argoproj/argocd
     - ArgoCD + authentik /ldap and /proxy are no-ops (not pinned in repo)
   - termix                 : versioning=loose, extractVersion for "release-X.Y.Z"
   - wanderer-db + -web     : groupName=wanderer (one PR, prevents file race)
   enabledManagers unchanged ([kubernetes, helm-values]) — keeps Helmfile-
   managed infra invisible.

2) argocd-apps/homelab.yaml: codify per-app auto-sync intent in git
   (currently lives only on live CRs via UI — DR risk).
   - 35 existing bare-AUTO apps: add `automated: {enabled: true}` (matches live).
   - jarr, version-checker: add `automated: {enabled: true, prune: true,
     selfHeal: true}` (flipping MANUAL -> AUTO so Renovate merges deploy).
   - Untouched: admin-tools, authentik, cnpg-operator, root-apps (already
     have strict automated in git); monitoring, infrastructure, felhom,
     gitea, pihole, database-system (explicitly kept MANUAL per Viktor).
   NOTE: root-apps does NOT enforce syncPolicy.automated drift between git
   and live, so jarr + version-checker will also need a one-off kubectl
   patch after merge to actually become AUTO live. Done in go-live step.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-06-05 07:07:39 +02:00
admin d915d7f60b added JARRs Dev environment 2026-03-04 08:33:08 +01:00
admin 08586d778c added onlyoffice 2026-02-13 10:24:11 +01:00
admin 4412309a94 ignore pihole secret 2026-02-11 15:23:43 +01:00
admin 469bdf3b55 updated repo in argocd for felhom.eu 2026-02-11 08:52:16 +01:00
admin 78a129bd81 added kisfenyo-system with filebrowser 2026-01-28 16:17:28 +01:00
admin f791b4d0ca added felhom.eu 2026-01-26 16:47:31 +01:00
admin 1633cb8124 added filebrowser for orsi 2026-01-23 08:40:40 +01:00
admin c0801fd579 added infrastructure 2026-01-20 10:13:36 +01:00
admin 9008698e36 added admin-tools 2026-01-15 20:41:24 +01:00
admin 1746e9ce26 added version-checker 2026-01-12 19:07:40 +01:00
admin 6025894980 added glance 2026-01-10 17:17:13 +01:00
admin 2bddacbde6 removed homarr 2026-01-10 10:40:51 +01:00
admin 38b38131e9 added Reloader 2026-01-10 09:08:25 +01:00
admin ef4430c1b2 added homarr 2026-01-09 11:15:13 +01:00
admin 8f0e33b2a8 added webserver 2026-01-08 21:18:42 +01:00
admin cbd954d656 added cal.com 2026-01-08 16:05:58 +01:00
admin a43fdd859f added crafty 2026-01-07 10:56:15 +01:00
admin 0ebefd894e added zipline and storageclasses 2026-01-07 10:22:31 +01:00
admin 813a59d3af removed duplicati from argocd 2026-01-05 16:52:14 +01:00
admin bcfa7ceb00 changed name 2026-01-04 10:37:28 +01:00
admin 967b4087b1 fixed to lowercase 2026-01-04 10:36:06 +01:00
admin c159c378f0 added opengist 2026-01-04 10:34:47 +01:00
admin f0b14affb3 removed pastefy 2026-01-04 10:19:14 +01:00
admin 7dd3485f90 added wanderer 2026-01-03 14:14:08 +01:00
admin c48dc59727 added workout-system 2026-01-02 16:41:38 +01:00
admin 2c2042da00 added romm 2026-01-02 16:14:06 +01:00
admin 9180783166 added gokapi 2026-01-02 15:24:53 +01:00
admin 99e2f04906 added plantit 2026-01-02 14:36:07 +01:00
admin 8936039d93 added pastefy 2026-01-02 13:32:57 +01:00
kisfenyo b3424956f3 added code-server 2026-01-02 12:27:03 +01:00
kisfenyo 7f0ff18c7d added homepage 2026-01-01 16:27:21 +01:00
kisfenyo ec6ffc9a76 added headlamp 2026-01-01 11:27:51 +01:00
kisfenyo 81398d2db7 added privatebin app 2025-12-31 17:14:42 +01:00
kisfenyo 31c35bd1eb added termix 2025-12-30 12:32:08 +01:00
kisfenyo 72651daa82 added monitoring 2025-12-28 11:48:15 +01:00
kisfenyo d47aed4906 added authentik app 2025-12-27 18:57:41 +01:00
kisfenyo 2270144e51 added cnpg operator values 2025-12-27 16:41:41 +01:00
kisfenyo 20f5c99623 added db-system to argocd apps 2025-12-27 15:54:29 +01:00
kisfenyo ebf41103f7 updated cnpg app 2025-12-27 15:25:59 +01:00
kisfenyo 05cbc3dc3b CloudNativePG Application added 2025-12-27 15:11:43 +01:00
kisfenyo 16913ebbc7 added calibre and adventurelog 2025-12-20 11:34:29 +01:00
kisfenyo ab75a8f93c Add Helm repos to AppProject sourceRepos 2025-12-18 20:46:40 +01:00
kisfenyo 0a191cb089 added plex, pihole, externaldns applications 2025-12-18 20:42:27 +01:00
kisfenyo dcb392b461 vaultwarden fix 2025-12-18 20:05:16 +01:00
kisfenyo d54e2c7d5d added outline, tandoor, uptimekuma, vaultwarden 2025-12-18 19:37:10 +01:00
kisfenyo c4bbc675ea added nextcloud, gitea 2025-12-18 16:22:04 +01:00
kisfenyo 1d6c95d521 Added apps 2025-12-18 15:56:04 +01:00
kisfenyo d705cf3617 added audiobookshelf 2025-12-18 15:11:27 +01:00
kisfenyo 87106162bb added actualbudget 2025-12-18 14:56:55 +01:00