From 104ada28265f9b4b475a833b9e4ec5ffdcc2c7d9 Mon Sep 17 00:00:00 2001 From: j Date: Wed, 13 Aug 2025 23:19:41 +1000 Subject: [PATCH] remove it all. --- deploy/server.yaml | 40 +++--- deployments/databases/influxdb.yaml | 77 ----------- deployments/databases/kustomization.yaml | 10 -- deployments/databases/mariadb.yaml | 53 -------- deployments/databases/namespace.yaml | 5 - deployments/databases/postgresql.yaml | 145 -------------------- deployments/databases/redis.yaml | 45 ------- deployments/dns-ssl/bind.yaml | 138 ------------------- deployments/dns-ssl/certmanager.yaml | 73 ----------- deployments/dns-ssl/externaldns.yaml | 78 ----------- deployments/dns-ssl/kustomization.yaml | 8 -- deployments/home-server/authentik.yaml | 45 ------- deployments/home-server/database.yaml | 13 -- deployments/home-server/dovecot.yaml | 100 -------------- deployments/home-server/gitlab.yaml | 48 ------- deployments/home-server/kustomization.yaml | 8 -- deployments/home-server/linkwarden.yaml | 95 -------------- deployments/home-server/nextcloud.yaml | 134 ------------------- deployments/home-server/syncthing.yaml | 146 --------------------- deployments/home-server/vaultwarden.yaml | 109 --------------- deployments/kustomization.yaml | 8 -- deployments/kusts/databases.yaml | 13 -- deployments/kusts/dns-ssl.yaml | 13 -- deployments/kusts/gitrepo.yaml | 13 -- deployments/kusts/home-server.yaml | 13 -- deployments/kusts/operators.yaml | 13 -- deployments/operators/kustomization.yaml | 7 - deployments/operators/namespace.yaml | 5 - deployments/operators/replicator.yaml | 98 -------------- 29 files changed, 20 insertions(+), 1533 deletions(-) delete mode 100644 deployments/databases/influxdb.yaml delete mode 100644 deployments/databases/kustomization.yaml delete mode 100644 deployments/databases/mariadb.yaml delete mode 100644 deployments/databases/namespace.yaml delete mode 100644 deployments/databases/postgresql.yaml delete mode 100644 deployments/databases/redis.yaml delete mode 100644 deployments/dns-ssl/bind.yaml delete mode 100644 deployments/dns-ssl/certmanager.yaml delete mode 100644 deployments/dns-ssl/externaldns.yaml delete mode 100644 deployments/dns-ssl/kustomization.yaml delete mode 100644 deployments/home-server/authentik.yaml delete mode 100644 deployments/home-server/database.yaml delete mode 100644 deployments/home-server/dovecot.yaml delete mode 100644 deployments/home-server/gitlab.yaml delete mode 100644 deployments/home-server/kustomization.yaml delete mode 100644 deployments/home-server/linkwarden.yaml delete mode 100644 deployments/home-server/nextcloud.yaml delete mode 100644 deployments/home-server/syncthing.yaml delete mode 100644 deployments/home-server/vaultwarden.yaml delete mode 100644 deployments/kustomization.yaml delete mode 100644 deployments/kusts/databases.yaml delete mode 100644 deployments/kusts/dns-ssl.yaml delete mode 100644 deployments/kusts/gitrepo.yaml delete mode 100644 deployments/kusts/home-server.yaml delete mode 100644 deployments/kusts/operators.yaml delete mode 100644 deployments/operators/kustomization.yaml delete mode 100644 deployments/operators/namespace.yaml delete mode 100644 deployments/operators/replicator.yaml diff --git a/deploy/server.yaml b/deploy/server.yaml index 117220f..84eac6f 100644 --- a/deploy/server.yaml +++ b/deploy/server.yaml @@ -14,30 +14,30 @@ spec: namespace: home-server wave: 1 - - name: replicator - path: applications/10-replicator - namespace: home-server - wave: 2 + #- name: replicator + # path: applications/10-replicator + # namespace: home-server + # wave: 2 - - name: databases - path: applications/20-databases - namespace: database - wave: 2 + #- name: databases + # path: applications/20-databases + # namespace: database + # wave: 2 - - name: domain-names - path: applications/30-domain-names - namespace: home-server - wave: 2 + #- name: domain-names + # path: applications/30-domain-names + # namespace: home-server + # wave: 2 - - name: authentik - path: applications/50-authentik - namespace: home-server - wave: 3 + #- name: authentik + # path: applications/50-authentik + # namespace: home-server + # wave: 3 - - name: nextcloud - path: applications/50-nextcloud - namespace: home-server - wave: 3 + #- name: nextcloud + # path: applications/50-nextcloud + # namespace: home-server + # wave: 3 template: metadata: diff --git a/deployments/databases/influxdb.yaml b/deployments/databases/influxdb.yaml deleted file mode 100644 index a70d171..0000000 --- a/deployments/databases/influxdb.yaml +++ /dev/null @@ -1,77 +0,0 @@ ---- -apiVersion: v1 -kind: PersistentVolumeClaim -metadata: - name: influxdb-pvc - namespace: database -spec: - accessModes: - - ReadWriteOnce - resources: - requests: - storage: 10Gi - ---- -apiVersion: v1 -kind: PersistentVolume -metadata: - name: influxdb-pv - namespace: database -spec: - capacity: - storage: 20Gi - accessModes: - - ReadWriteOnce - storageClassName: local-storage - hostPath: - path: /dpool/services/influxdb/data - type: DirectoryOrCreate - persistentVolumeReclaimPolicy: Retain - nodeAffinity: - required: - nodeSelectorTerms: - - matchExpressions: - - key: kubernetes.io/hostname - operator: In - values: - - dck.hxme.net - ---- -apiVersion: apps/v1 -kind: Deployment -metadata: - name: influxdb - namespace: database -spec: - replicas: 1 - selector: - matchLabels: - app: influxdb - template: - metadata: - labels: - app: influxdb - spec: - containers: - - name: influxdb - image: influxdb:2.7.12 - ports: - - containerPort: 8086 - volumeMounts: - - name: influxdb-storage - mountPath: /var/lib/influxdb2 - env: - - name: DOCKER_INFLUXDB_INIT_MODE - value: "setup" - - name: DOCKER_INFLUXDB_INIT_USERNAME - value: "admin" - - name: DOCKER_INFLUXDB_INIT_PASSWORD - value: "adminpassword" - - name: DOCKER_INFLUXDB_INIT_ORG - value: "myorg" - - name: DOCKER_INFLUXDB_INIT_BUCKET - value: "mybucket" - volumes: - - name: influxdb-storage - persistentVolumeClaim: - claimName: influxdb-pvc diff --git a/deployments/databases/kustomization.yaml b/deployments/databases/kustomization.yaml deleted file mode 100644 index 08a47b7..0000000 --- a/deployments/databases/kustomization.yaml +++ /dev/null @@ -1,10 +0,0 @@ ---- -apiVersion: kustomize.config.k8s.io/v1beta1 -kind: Kustomization - -resources: - - namespace.yaml - - mariadb.yaml - - postgresql.yaml - - redis.yaml - - influxdb.yaml diff --git a/deployments/databases/mariadb.yaml b/deployments/databases/mariadb.yaml deleted file mode 100644 index ae86891..0000000 --- a/deployments/databases/mariadb.yaml +++ /dev/null @@ -1,53 +0,0 @@ ---- -apiVersion: source.toolkit.fluxcd.io/v1 -kind: HelmRepository -metadata: - name: mariadb-operator - namespace: flux-system -spec: - url: https://helm.mariadb.com/mariadb-operator - interval: 1h - ---- -apiVersion: helm.toolkit.fluxcd.io/v2 -kind: HelmRelease -metadata: - name: mariadb-operator-crds - namespace: database -spec: - interval: 30m - chart: - spec: - chart: mariadb-operator-crds - version: 0.38.1 - sourceRef: - kind: HelmRepository - name: mariadb-operator - namespace: flux-system - install: - createNamespace: true - upgrade: - disableWait: true - timeout: 5m - ---- -apiVersion: helm.toolkit.fluxcd.io/v2 -kind: HelmRelease -metadata: - name: mariadb-operator - namespace: database -spec: - interval: 30m - chart: - spec: - chart: mariadb-operator - version: 0.38.1 - sourceRef: - kind: HelmRepository - name: mariadb-operator - namespace: flux-system - install: - createNamespace: true - dependsOn: - - name: mariadb-operator-crds - namespace: database diff --git a/deployments/databases/namespace.yaml b/deployments/databases/namespace.yaml deleted file mode 100644 index 4c34a8f..0000000 --- a/deployments/databases/namespace.yaml +++ /dev/null @@ -1,5 +0,0 @@ ---- -apiVersion: v1 -kind: Namespace -metadata: - name: database diff --git a/deployments/databases/postgresql.yaml b/deployments/databases/postgresql.yaml deleted file mode 100644 index 5f65a9d..0000000 --- a/deployments/databases/postgresql.yaml +++ /dev/null @@ -1,145 +0,0 @@ ---- -apiVersion: v1 -kind: PersistentVolume -metadata: - name: postgres-pv - namespace: database -spec: - capacity: - storage: 5Gi - accessModes: - - ReadWriteOnce - persistentVolumeReclaimPolicy: Retain - storageClassName: local-path - hostPath: - path: /dpool/services/postgres/data - ---- -apiVersion: v1 -kind: PersistentVolumeClaim -metadata: - name: postgres-pvc - namespace: database -spec: - accessModes: - - ReadWriteOnce - storageClassName: local-path - resources: - requests: - storage: 5Gi - volumeName: postgres-pv - ---- -apiVersion: apps/v1 -kind: Deployment -metadata: - name: postgres - namespace: database -spec: - replicas: 1 - selector: - matchLabels: - app: postgres - template: - metadata: - labels: - app: postgres - spec: - nodeSelector: - role: dck - containers: - - name: postgres - image: postgres:15 - ports: - - containerPort: 5432 - envFrom: - - secretRef: - name: postgres-secret - volumeMounts: - - name: postgres-data - mountPath: /var/lib/postgresql/data - volumes: - - name: postgres-data - persistentVolumeClaim: - claimName: postgres-pvc - ---- -apiVersion: v1 -kind: Service -metadata: - name: postgres - namespace: database -spec: - selector: - app: postgres - ports: - - port: 5432 - targetPort: 5432 - ---- -apiVersion: v1 -kind: PersistentVolume -metadata: - name: postgres-backup-pv -spec: - capacity: - storage: 5Gi - accessModes: - - ReadWriteOnce - persistentVolumeReclaimPolicy: Retain - storageClassName: local-path - hostPath: - path: /dpool/services/postgres/backup - ---- -apiVersion: v1 -kind: PersistentVolumeClaim -metadata: - name: postgres-backup-pvc - namespace: database -spec: - accessModes: - - ReadWriteOnce - storageClassName: local-path - resources: - requests: - storage: 5Gi - - ---- -apiVersion: batch/v1 -kind: CronJob -metadata: - name: postgres-backup - namespace: database -spec: - schedule: "0 2 * * *" # Every day at 2 AM - jobTemplate: - spec: - template: - spec: - nodeSelector: - role: dck - restartPolicy: OnFailure - containers: - - name: pg-backup - image: postgres:15 - envFrom: - - secretRef: - name: postgres-secret - command: - - /bin/sh - - -c - - | - mkdir -p /backup - PGPASSWORD=$POSTGRES_PASSWORD pg_dump -U $POSTGRES_USER -h localhost $POSTGRES_DB > /backup/backup-$(date +'%Y-%m-%d').sql - volumeMounts: - - name: backup-volume - mountPath: /backup - volumes: - - name: backup-volume - persistentVolumeClaim: - claimName: postgres-backup-pvc - - - diff --git a/deployments/databases/redis.yaml b/deployments/databases/redis.yaml deleted file mode 100644 index 5c6f090..0000000 --- a/deployments/databases/redis.yaml +++ /dev/null @@ -1,45 +0,0 @@ ---- -apiVersion: apps/v1 -kind: Deployment -metadata: - name: redis - namespace: database -spec: - replicas: 1 - selector: - matchLabels: - app: redis - template: - metadata: - labels: - app: redis - spec: - nodeSelector: - role: dck - containers: - - name: redis - image: redis:7 - ports: - - containerPort: 6379 - volumeMounts: - - name: redis-data - mountPath: /data - volumes: - - name: redis-data - hostPath: - path: /dpool/services/redis/data - type: DirectoryOrCreate - ---- -apiVersion: v1 -kind: Service -metadata: - name: redis - namespace: database -spec: - selector: - app: redis - ports: - - port: 6379 - targetPort: 6379 - diff --git a/deployments/dns-ssl/bind.yaml b/deployments/dns-ssl/bind.yaml deleted file mode 100644 index b77a3ba..0000000 --- a/deployments/dns-ssl/bind.yaml +++ /dev/null @@ -1,138 +0,0 @@ ---- -apiVersion: v1 -kind: ConfigMap -metadata: - name: bind-master-config - namespace: home-server -data: - named.conf: | - include "/etc/bind/externaldns-key.conf"; - - options { - directory "/var/cache/bind"; - - recursion yes; - allow-query { any; }; - - listen-on port 53 { any; }; - listen-on-v6 port 53 { any; }; - - forwarders { - 10.40.0.254; - }; - - dnssec-validation auto; - }; - - zone "." IN { - type hint; - file "/usr/share/dns/root.hints"; - }; - - zone "hxme.net." IN { - type master; - file "/etc/bind/db.hxme.net"; - allow-update { key "externaldns-key"; }; - }; - db.hxme.net: | - $TTL 3600 - @ IN SOA ns1.hxme.net. admin.hxme.net. ( - 1 ; Serial - 7200 ; Refresh - 1800 ; Retry - 1209600 ; Expire - 86400 ) ; Negative Cache TTL - ; - @ IN NS ns1.hxme.net. - ns1 IN A 10.40.0.110 - @ IN A 10.40.0.110 - www IN A 10.40.0.110 ---- -apiVersion: apps/v1 -kind: DaemonSet -metadata: - name: bind-master - namespace: home-server -spec: - selector: - matchLabels: - app: bind-master - template: - metadata: - labels: - app: bind-master - spec: - hostNetwork: true - dnsPolicy: ClusterFirstWithHostNet - securityContext: - fsGroup: 999 - initContainers: - - name: fetch-root-hints - image: debian:12 - command: - - sh - - -c - - | - apt update && apt -y install curl - curl -sfSL https://www.internic.net/domain/named.cache -o /usr/share/dns/root.hints - volumeMounts: - - mountPath: /usr/share/dns - name: root-hints - containers: - - name: bind-master - image: internetsystemsconsortium/bind9:9.18 - command: ["named", "-g", "-c", "/etc/bind/named.conf"] - ports: - - containerPort: 53 - protocol: UDP - - containerPort: 53 - protocol: TCP - volumeMounts: - - name: config - mountPath: /etc/bind/named.conf - subPath: named.conf - - name: config - mountPath: /etc/bind/db.hxme.net - subPath: db.hxme.net - - name: dns-secrets - mountPath: /etc/bind/externaldns-key.conf - subPath: externaldns-key.conf - - name: bind-cache - mountPath: /var/cache/bind - - name: bind-rundir - mountPath: /var/run/named - - name: root-hints - mountPath: /usr/share/dns - volumes: - - name: dns-secrets - secret: - secretName: dns-secrets - - name: config - configMap: - name: bind-master-config - - name: bind-cache - emptyDir: {} - - name: bind-rundir - emptyDir: {} - - name: root-hints - emptyDir: {} - ---- -apiVersion: v1 -kind: Service -metadata: - name: bind-master - namespace: home-server -spec: - selector: - app: bind-master - ports: - - name: dns-udp - port: 53 - protocol: UDP - targetPort: 53 - - name: dns-tcp - port: 53 - protocol: TCP - targetPort: 53 - diff --git a/deployments/dns-ssl/certmanager.yaml b/deployments/dns-ssl/certmanager.yaml deleted file mode 100644 index 95511fd..0000000 --- a/deployments/dns-ssl/certmanager.yaml +++ /dev/null @@ -1,73 +0,0 @@ ---- -apiVersion: source.toolkit.fluxcd.io/v1 -kind: HelmRepository -metadata: - name: jetstack - namespace: flux-system -spec: - url: https://charts.jetstack.io - interval: 1h ---- -apiVersion: helm.toolkit.fluxcd.io/v2 -kind: HelmRelease -metadata: - name: cert-manager - namespace: home-server -spec: - interval: 30m - chart: - spec: - chart: cert-manager - version: v1.18.2 - sourceRef: - kind: HelmRepository - name: jetstack - namespace: flux-system - install: - crds: CreateReplace - createNamespace: true - values: - installCRDs: true - extraArgs: - - --dns01-recursive-nameservers-only - - --dns01-recursive-nameservers=8.8.8.8:53,1.1.1.1:53 ---- -apiVersion: cert-manager.io/v1 -kind: ClusterIssuer -metadata: - name: letsencrypt-rfc2136 -spec: - acme: - email: admin@hxme.net - server: https://acme-v02.api.letsencrypt.org/directory - #server: https://acme-staging-v02.api.letsencrypt.org/directory - privateKeySecretRef: - name: letsencrypt-rfc2136 - solvers: - - dns01: - rfc2136: - nameserver: hawke.hxst.com.au:53 - tsigKeyName: "hxme-update-key" - tsigAlgorithm: HMACSHA512 - tsigSecretSecretRef: - name: hxme-update-key - key: hxme-update-key ---- -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - name: wildcard-hxme-net - namespace: home-server -spec: - secretName: wildcard-hxme-net - secretTemplate: - annotations: - replicator.v1.mittwald.de/replication-allowed: "true" - replicator.v1.mittwald.de/replicate-to: "home-media" - issuerRef: - name: letsencrypt-rfc2136 - kind: ClusterIssuer - commonName: "hxme.net" - dnsNames: - - "hxme.net" - - "*.hxme.net" diff --git a/deployments/dns-ssl/externaldns.yaml b/deployments/dns-ssl/externaldns.yaml deleted file mode 100644 index c3a9736..0000000 --- a/deployments/dns-ssl/externaldns.yaml +++ /dev/null @@ -1,78 +0,0 @@ ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: external-dns -rules: - - apiGroups: [""] - resources: ["services","endpoints","pods"] - verbs: ["get","watch","list"] - - apiGroups: ["extensions","networking.k8s.io"] - resources: ["ingresses"] - verbs: ["get","watch","list"] - - apiGroups: [""] - resources: ["nodes"] - verbs: ["list","watch"] - - apiGroups: ["discovery.k8s.io"] - resources: ["endpointslices"] - verbs: ["get", "watch", "list"] - # Add DNS provider specific rules here if needed (e.g., for AWS IAM, GCP etc.) ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: external-dns-viewer -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: external-dns -subjects: - - kind: ServiceAccount - name: external-dns - namespace: home-server ---- -apiVersion: v1 -kind: ServiceAccount -metadata: - name: external-dns - namespace: home-server ---- -apiVersion: apps/v1 -kind: Deployment -metadata: - name: external-dns - namespace: home-server -spec: - replicas: 1 - selector: - matchLabels: - app: external-dns - template: - metadata: - labels: - app: external-dns - spec: - serviceAccountName: external-dns - containers: - - name: external-dns - image: bitnami/external-dns:latest - args: - - --source=service - - --source=ingress - - --provider=rfc2136 - - --rfc2136-host=bind-master.home-server.svc.cluster.local - - --rfc2136-port=53 - - --rfc2136-zone=hxme.net - - --rfc2136-tsig-secret=$(RFC2136_TSIG_SECRET) - - --rfc2136-tsig-secret-alg=hmac-sha256 - - --rfc2136-tsig-keyname=externaldns-key - - --policy=sync - - --registry=txt - - --txt-owner-id=my-cluster - env: - - name: RFC2136_TSIG_SECRET - valueFrom: - secretKeyRef: - name: dns-secrets - key: externaldns-secret - diff --git a/deployments/dns-ssl/kustomization.yaml b/deployments/dns-ssl/kustomization.yaml deleted file mode 100644 index c9c356f..0000000 --- a/deployments/dns-ssl/kustomization.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: kustomize.config.k8s.io/v1beta1 -kind: Kustomization - -resources: - - bind.yaml - - externaldns.yaml - - certmanager.yaml diff --git a/deployments/home-server/authentik.yaml b/deployments/home-server/authentik.yaml deleted file mode 100644 index 0deac30..0000000 --- a/deployments/home-server/authentik.yaml +++ /dev/null @@ -1,45 +0,0 @@ ---- -apiVersion: source.toolkit.fluxcd.io/v1 -kind: HelmRepository -metadata: - name: authentik - namespace: flux-system -spec: - url: https://charts.goauthentik.io/ - interval: 1h - ---- -apiVersion: helm.toolkit.fluxcd.io/v2 -kind: HelmRelease -metadata: - name: authentik - namespace: home-server -spec: - interval: 30m - chart: - spec: - chart: authentik - version: 2024.4.2 - sourceRef: - kind: HelmRepository - name: authentik - namespace: flux-system - install: - createNamespace: true - upgrade: - disableWait: false - timeout: 10m - valuesFrom: - - kind: Secret - name: authentik-values - values: - postgresql: - enabled: false - server: - ingress: - annotations: - external-dns.alpha.kubernetes.io/hostname: auth.hxme.net - tls: - - secretName: wildcard-hxme-net - hosts: - - auth.hxme.net diff --git a/deployments/home-server/database.yaml b/deployments/home-server/database.yaml deleted file mode 100644 index 77be256..0000000 --- a/deployments/home-server/database.yaml +++ /dev/null @@ -1,13 +0,0 @@ ---- -apiVersion: k8s.mariadb.com/v1alpha1 -kind: MariaDB -metadata: - name: mariadb - namespace: database -spec: - rootPasswordSecretKeyRef: - name: db-secrets - key: db-root-password - - storage: - size: 5Gi diff --git a/deployments/home-server/dovecot.yaml b/deployments/home-server/dovecot.yaml deleted file mode 100644 index 16f7652..0000000 --- a/deployments/home-server/dovecot.yaml +++ /dev/null @@ -1,100 +0,0 @@ ---- -apiVersion: v1 -kind: ConfigMap -metadata: - name: dovecot-config - namespace: home-server -data: - dovecot.conf: | - log_path = /dev/stdout - info_log_path = /dev/stdout - debug_log_path = /dev/stdout - syslog_facility = local0 - protocols = imap - listen = * - disable_plaintext_auth = yes - mail_location = maildir:/data/%u - base_dir = /var/run/dovecot/ - ssl = required - ssl_cert =