kisfenyo
510 lines
14 KiB
YAML
510 lines
14 KiB
YAML
# =============================================================================
|
|
# Homepage - Application Dashboard
|
|
# Version: v1.8.0
|
|
# Namespace: homepage-system
|
|
# Domain: homepage.dooplex.hu
|
|
# Authentication: Authentik Proxy (Forward Auth)
|
|
# =============================================================================
|
|
#
|
|
# PREREQUISITES - Create in Authentik:
|
|
# 1. Create Proxy Provider:
|
|
# - Name: homepage-proxy
|
|
# - Authorization flow: default-provider-authorization-implicit-consent
|
|
# - Mode: Forward auth (single application)
|
|
# - External host: https://homepage.dooplex.hu
|
|
#
|
|
# 2. Create Application:
|
|
# - Name: Homepage
|
|
# - Slug: homepage
|
|
# - Provider: (select the proxy provider created above)
|
|
# - Launch URL: https://homepage.dooplex.hu
|
|
#
|
|
# 3. Create Outpost (or add to existing):
|
|
# - Name: homepage-outpost (or use existing proxy outpost)
|
|
# - Type: Proxy
|
|
# - Applications: Add the Homepage application
|
|
#
|
|
# After deployment, Authentik will auto-create the outpost deployment.
|
|
# Update the ingress auth-url annotation with the correct outpost service name.
|
|
#
|
|
# =============================================================================
|
|
---
|
|
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
name: homepage-system
|
|
labels:
|
|
app.kubernetes.io/name: homepage
|
|
app.kubernetes.io/instance: homepage
|
|
---
|
|
apiVersion: v1
|
|
kind: ServiceAccount
|
|
metadata:
|
|
name: homepage
|
|
namespace: homepage-system
|
|
labels:
|
|
app.kubernetes.io/name: homepage
|
|
app.kubernetes.io/instance: homepage
|
|
secrets:
|
|
- name: homepage
|
|
---
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: homepage
|
|
namespace: homepage-system
|
|
labels:
|
|
app.kubernetes.io/name: homepage
|
|
app.kubernetes.io/instance: homepage
|
|
annotations:
|
|
kubernetes.io/service-account.name: homepage
|
|
type: kubernetes.io/service-account-token
|
|
---
|
|
# ClusterRole for Homepage to discover services and get cluster metrics
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
name: homepage
|
|
labels:
|
|
app.kubernetes.io/name: homepage
|
|
app.kubernetes.io/instance: homepage
|
|
rules:
|
|
# Core resources for service discovery
|
|
- apiGroups: [""]
|
|
resources:
|
|
- namespaces
|
|
- pods
|
|
- nodes
|
|
- services
|
|
- endpoints
|
|
- configmaps
|
|
- secrets
|
|
verbs: ["get", "list", "watch"]
|
|
# Apps resources for pod discovery
|
|
- apiGroups: ["apps"]
|
|
resources:
|
|
- deployments
|
|
- replicasets
|
|
- statefulsets
|
|
- daemonsets
|
|
verbs: ["get", "list", "watch"]
|
|
# Networking for ingress discovery
|
|
- apiGroups: ["networking.k8s.io"]
|
|
resources:
|
|
- ingresses
|
|
verbs: ["get", "list", "watch"]
|
|
# Traefik IngressRoute CRD (if used)
|
|
- apiGroups: ["traefik.containo.us", "traefik.io"]
|
|
resources:
|
|
- ingressroutes
|
|
verbs: ["get", "list", "watch"]
|
|
# Gateway API (if used)
|
|
- apiGroups: ["gateway.networking.k8s.io"]
|
|
resources:
|
|
- httproutes
|
|
- gateways
|
|
verbs: ["get", "list", "watch"]
|
|
# Metrics
|
|
- apiGroups: ["metrics.k8s.io"]
|
|
resources:
|
|
- nodes
|
|
- pods
|
|
verbs: ["get", "list", "watch"]
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRoleBinding
|
|
metadata:
|
|
name: homepage
|
|
labels:
|
|
app.kubernetes.io/name: homepage
|
|
app.kubernetes.io/instance: homepage
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: ClusterRole
|
|
name: homepage
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: homepage
|
|
namespace: homepage-system
|
|
---
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: homepage-config
|
|
namespace: homepage-system
|
|
labels:
|
|
app.kubernetes.io/name: homepage
|
|
app.kubernetes.io/instance: homepage
|
|
data:
|
|
# Kubernetes connection configuration
|
|
kubernetes.yaml: |
|
|
mode: cluster
|
|
ingress: true
|
|
|
|
# Global settings
|
|
settings.yaml: |
|
|
title: Dooplex Dashboard
|
|
favicon: https://dooplex.hu/favicon.ico
|
|
theme: dark
|
|
color: slate
|
|
headerStyle: clean
|
|
layout:
|
|
Infrastructure:
|
|
style: row
|
|
columns: 4
|
|
Media:
|
|
style: row
|
|
columns: 4
|
|
Productivity:
|
|
style: row
|
|
columns: 3
|
|
Monitoring:
|
|
style: row
|
|
columns: 3
|
|
providers:
|
|
longhorn:
|
|
url: https://longhorn.home
|
|
|
|
# Services configuration - customize as needed
|
|
services.yaml: |
|
|
- Infrastructure:
|
|
- ArgoCD:
|
|
icon: argocd.png
|
|
href: https://argocd.dooplex.hu
|
|
description: GitOps Deployment
|
|
namespace: argocd
|
|
app: argocd-server
|
|
- Authentik:
|
|
icon: authentik.png
|
|
href: https://authentik.dooplex.hu
|
|
description: Identity Provider
|
|
- Longhorn:
|
|
icon: longhorn.png
|
|
href: https://192.168.0.209
|
|
description: Storage Management
|
|
- Gitea:
|
|
icon: gitea.png
|
|
href: https://gitea.dooplex.hu
|
|
description: Git Repository
|
|
|
|
- Media:
|
|
- Plex:
|
|
icon: plex.png
|
|
href: https://plex.dooplex.hu
|
|
description: Media Server
|
|
- Sonarr:
|
|
icon: sonarr.png
|
|
href: https://sonarr.dooplex.hu
|
|
description: TV Shows
|
|
widget:
|
|
type: sonarr
|
|
url: http://sonarr.servarr-system.svc.cluster.local:8989
|
|
key: "{{HOMEPAGE_VAR_SONARR_API_KEY}}"
|
|
- Radarr:
|
|
icon: radarr.png
|
|
href: https://radarr.dooplex.hu
|
|
description: Movies
|
|
widget:
|
|
type: radarr
|
|
url: http://radarr.servarr-system.svc.cluster.local:7878
|
|
key: "{{HOMEPAGE_VAR_RADARR_API_KEY}}"
|
|
- Prowlarr:
|
|
icon: prowlarr.png
|
|
href: https://prowlarr.dooplex.hu
|
|
description: Indexer Manager
|
|
|
|
- Productivity:
|
|
- Nextcloud:
|
|
icon: nextcloud.png
|
|
href: https://nextcloud.dooplex.hu
|
|
description: Cloud Storage
|
|
- Paperless:
|
|
icon: paperless-ngx.png
|
|
href: https://paperless.dooplex.hu
|
|
description: Document Management
|
|
- Vaultwarden:
|
|
icon: bitwarden.png
|
|
href: https://vaultwarden.dooplex.hu
|
|
description: Password Manager
|
|
|
|
- Monitoring:
|
|
- Grafana:
|
|
icon: grafana.png
|
|
href: https://grafana.dooplex.hu
|
|
description: Dashboards & Metrics
|
|
widget:
|
|
type: grafana
|
|
url: http://grafana.mon-system.svc.cluster.local:3000
|
|
username: "{{HOMEPAGE_VAR_GRAFANA_USER}}"
|
|
password: "{{HOMEPAGE_VAR_GRAFANA_PASS}}"
|
|
- Prometheus:
|
|
icon: prometheus.png
|
|
href: https://prometheus.home
|
|
description: Metrics Collection
|
|
- Uptime Kuma:
|
|
icon: uptime-kuma.png
|
|
href: https://uptimekuma.dooplex.hu
|
|
description: Uptime Monitoring
|
|
|
|
# Widgets configuration
|
|
widgets.yaml: |
|
|
- logo:
|
|
icon: https://dooplex.hu/logo.png
|
|
- greeting:
|
|
text_size: xl
|
|
text: "Welcome to Dooplex"
|
|
- datetime:
|
|
text_size: l
|
|
format:
|
|
dateStyle: long
|
|
timeStyle: short
|
|
hour12: false
|
|
- kubernetes:
|
|
cluster:
|
|
show: true
|
|
cpu: true
|
|
memory: true
|
|
showLabel: true
|
|
label: "dooplex"
|
|
nodes:
|
|
show: true
|
|
cpu: true
|
|
memory: true
|
|
showLabel: true
|
|
- longhorn:
|
|
expanded: true
|
|
total: true
|
|
labels: true
|
|
nodes: false
|
|
- search:
|
|
provider: duckduckgo
|
|
target: _blank
|
|
|
|
# Bookmarks
|
|
bookmarks.yaml: |
|
|
- Developer:
|
|
- GitHub:
|
|
- abbr: GH
|
|
href: https://github.com
|
|
icon: github.png
|
|
- Gitea:
|
|
- abbr: GT
|
|
href: https://gitea.dooplex.hu
|
|
icon: gitea.png
|
|
- Documentation:
|
|
- Kubernetes:
|
|
- abbr: K8s
|
|
href: https://kubernetes.io/docs
|
|
icon: kubernetes.png
|
|
- ArgoCD:
|
|
- abbr: Argo
|
|
href: https://argo-cd.readthedocs.io
|
|
icon: argocd.png
|
|
|
|
# Docker settings (not used in k8s mode)
|
|
docker.yaml: ""
|
|
|
|
# Custom CSS
|
|
custom.css: ""
|
|
|
|
# Custom JS
|
|
custom.js: ""
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: homepage
|
|
namespace: homepage-system
|
|
labels:
|
|
app.kubernetes.io/name: homepage
|
|
app.kubernetes.io/instance: homepage
|
|
app.kubernetes.io/version: "v1.8.0"
|
|
spec:
|
|
replicas: 1
|
|
strategy:
|
|
type: RollingUpdate
|
|
rollingUpdate:
|
|
maxSurge: 1
|
|
maxUnavailable: 0
|
|
selector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: homepage
|
|
app.kubernetes.io/instance: homepage
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/name: homepage
|
|
app.kubernetes.io/instance: homepage
|
|
app.kubernetes.io/version: "v1.8.0"
|
|
spec:
|
|
serviceAccountName: homepage
|
|
automountServiceAccountToken: true
|
|
dnsPolicy: ClusterFirst
|
|
enableServiceLinks: true
|
|
containers:
|
|
- name: homepage
|
|
image: ghcr.io/gethomepage/homepage:v1.8.0
|
|
imagePullPolicy: IfNotPresent
|
|
env:
|
|
# Required for external access
|
|
- name: HOMEPAGE_ALLOWED_HOSTS
|
|
value: "*"
|
|
# Timezone
|
|
- name: TZ
|
|
value: "Europe/Budapest"
|
|
# Optional: Widget API keys (create secret with these if needed)
|
|
- name: HOMEPAGE_VAR_SONARR_API_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: homepage-secrets
|
|
key: sonarr-api-key
|
|
- name: HOMEPAGE_VAR_RADARR_API_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: homepage-secrets
|
|
key: radarr-api-key
|
|
- name: HOMEPAGE_VAR_GRAFANA_USER
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: homepage-secrets
|
|
key: grafana-user
|
|
- name: HOMEPAGE_VAR_GRAFANA_PASS
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: homepage-secrets
|
|
key: grafana-pass
|
|
ports:
|
|
- name: http
|
|
containerPort: 3000
|
|
protocol: TCP
|
|
livenessProbe:
|
|
httpGet:
|
|
path: /api/healthcheck
|
|
port: http
|
|
initialDelaySeconds: 30
|
|
periodSeconds: 30
|
|
timeoutSeconds: 10
|
|
failureThreshold: 3
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /api/healthcheck
|
|
port: http
|
|
initialDelaySeconds: 10
|
|
periodSeconds: 10
|
|
timeoutSeconds: 5
|
|
failureThreshold: 3
|
|
resources:
|
|
requests:
|
|
cpu: 50m
|
|
memory: 128Mi
|
|
limits:
|
|
cpu: 500m
|
|
memory: 512Mi
|
|
volumeMounts:
|
|
- name: config
|
|
mountPath: /app/config/kubernetes.yaml
|
|
subPath: kubernetes.yaml
|
|
- name: config
|
|
mountPath: /app/config/settings.yaml
|
|
subPath: settings.yaml
|
|
- name: config
|
|
mountPath: /app/config/services.yaml
|
|
subPath: services.yaml
|
|
- name: config
|
|
mountPath: /app/config/widgets.yaml
|
|
subPath: widgets.yaml
|
|
- name: config
|
|
mountPath: /app/config/bookmarks.yaml
|
|
subPath: bookmarks.yaml
|
|
- name: config
|
|
mountPath: /app/config/docker.yaml
|
|
subPath: docker.yaml
|
|
- name: config
|
|
mountPath: /app/config/custom.css
|
|
subPath: custom.css
|
|
- name: config
|
|
mountPath: /app/config/custom.js
|
|
subPath: custom.js
|
|
volumes:
|
|
- name: config
|
|
configMap:
|
|
name: homepage-config
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: homepage
|
|
namespace: homepage-system
|
|
labels:
|
|
app.kubernetes.io/name: homepage
|
|
app.kubernetes.io/instance: homepage
|
|
spec:
|
|
type: ClusterIP
|
|
ports:
|
|
- name: http
|
|
port: 3000
|
|
targetPort: http
|
|
protocol: TCP
|
|
selector:
|
|
app.kubernetes.io/name: homepage
|
|
app.kubernetes.io/instance: homepage
|
|
---
|
|
# Ingress WITH Authentik proxy authentication
|
|
# Update the auth-url annotation with your actual outpost service name after Authentik creates it
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: Ingress
|
|
metadata:
|
|
name: homepage
|
|
namespace: homepage-system
|
|
labels:
|
|
app.kubernetes.io/name: homepage
|
|
app.kubernetes.io/instance: homepage
|
|
annotations:
|
|
cert-manager.io/cluster-issuer: letsencrypt-prod
|
|
external-dns.alpha.kubernetes.io/hostname: homepage.dooplex.hu,homepage.home
|
|
nginx.ingress.kubernetes.io/ssl-redirect: "true"
|
|
nginx.ingress.kubernetes.io/proxy-buffer-size: "16k"
|
|
nginx.ingress.kubernetes.io/proxy-buffers-number: "4"
|
|
nginx.ingress.kubernetes.io/proxy-busy-buffers-size: "32k"
|
|
# Authentik Forward Auth annotations
|
|
# Update 'homepage-outpost' with your actual outpost name
|
|
nginx.ingress.kubernetes.io/auth-url: http://ak-outpost-homepage-outpost.auth-system.svc.cluster.local:9000/outpost.goauthentik.io/auth/nginx
|
|
nginx.ingress.kubernetes.io/auth-signin: https://homepage.dooplex.hu/outpost.goauthentik.io/start?rd=$escaped_request_uri
|
|
nginx.ingress.kubernetes.io/auth-response-headers: Set-Cookie,X-authentik-username,X-authentik-groups,X-authentik-email
|
|
nginx.ingress.kubernetes.io/auth-snippet: |
|
|
proxy_set_header X-Forwarded-Host $http_host;
|
|
# Homepage auto-discovery annotation
|
|
gethomepage.dev/enabled: "true"
|
|
gethomepage.dev/name: "Homepage"
|
|
gethomepage.dev/description: "Application Dashboard"
|
|
gethomepage.dev/group: "Infrastructure"
|
|
gethomepage.dev/icon: "homepage.png"
|
|
spec:
|
|
ingressClassName: nginx-internal
|
|
rules:
|
|
- host: homepage.dooplex.hu
|
|
http:
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
backend:
|
|
service:
|
|
name: homepage
|
|
port:
|
|
number: 3000
|
|
- host: homepage.home
|
|
http:
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
backend:
|
|
service:
|
|
name: homepage
|
|
port:
|
|
number: 3000
|
|
tls:
|
|
- hosts:
|
|
- homepage.dooplex.hu
|
|
secretName: homepage-tls
|
|
---
|