DevOps/truecharts
2
0
Fork 0
Code Issues Pull Requests Actions 30 Packages Projects Releases 1 Wiki Activity
2,609 Commits 1 Branch 1 Tag
eb563b8830d0858e1e918af03a3965b9da2e942e
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Kjeld Schouten-LebbingandGitHub 8418b3e7e7 (chore) increase default resource limits (#1036) 2021-09-26 20:49:03 +02:00
Kjeld Schouten-LebbingandGitHub bd3b29a278 (docs) add system requirements (#1035) 2021-09-26 20:48:50 +02:00
Kjeld Schouten-LebbingandGitHub 68a5032dad (chore) move resource(limits) to an include for easier maintenance (#1034) 2021-09-26 20:44:02 +02:00
Kjeld Schouten-LebbingGitHubStavros kois
 		acf510ea13 (feat) Standardise and Harden default app securitycontext (#1028) 
* Apply security hardened defaults to values.yaml for all apps

* Add default common securityContext to all apps

* Adjust securityContext defaults in questions.yaml, according to values.yaml

* Add default common podSecurityContext to all apps

* Clean whitespace

* Clean more whitespace

* Adjust podSecurityContext defaults in questions.yaml, according to values.yaml

* fix pgadmin

Co-authored-by: Stavros kois <s.kois@outlook.com>
 2021-09-26 20:05:21 +02:00
kjeld Schouten-Lebbing 665d7282df revert /var/run mount fix on common 2021-09-26 12:08:10 +02:00
Kjeld Schouten-LebbingandGitHub 744d8060b9 (chore) bump common to trigger release 2021-09-26 11:40:37 +02:00
kjeld Schouten-Lebbing 842cf0a65f (chore) also use s6 readonlyroot mitigation when running asNonRoot 2021-09-26 11:20:08 +02:00
kjeld Schouten-Lebbing 4076def32a (fix) limit the varrun emptyDir to s6 overlay related content 2021-09-26 11:19:35 +02:00
kjeld Schouten-Lebbing a8dd9ecc19 (fix) use the correct initcontainer for postgresql on scale 2021-09-26 10:53:36 +02:00
kjeld Schouten-Lebbing 7d74eaeffb (fix) use correct username for fireflyiii db-init container 2021-09-26 10:50:48 +02:00
Kjeld Schouten-LebbingandGitHub 4ea3185e38 add a special /var/run tmpfs mountpoint to common (#1032) 
* add a special /var/run tmpfs mountpoint to common

* common-test version in tests fix
 2021-09-25 20:31:39 +02:00
kjeld Schouten-Lebbing 961b2bfbc3 bump common 2021-09-25 19:34:45 +02:00
Kjeld Schouten-LebbingandGitHub d9dffc7952 fix common test mistake (#1031) 
* fix common test mistake

* configfile.enabled

* VPN auto permissions fix

* trigger common-test install

* more thorough fix

* fix test to use sonarr instead of homerr

* use a super simple container

* try tweaking a bit to allow run as nonroot

* try fixing tests

* fix tests... again...

* fix... AGAIN...
 2021-09-25 19:23:43 +02:00
Kjeld Schouten-LebbingandGitHub 37963de155 Add ReadOnlyRoot mitigation for S6 overlay (#1030) 
* Add ReadOnlyRoot mitigation for S6 overlay

* try to fix some tests
 2021-09-25 15:11:51 +02:00
Kjeld Schouten-LebbingandGitHub 2db56c1e42 Fix remaining VPN addon issues (#1029) 
* Fix remaining VPN addon issues

* fix minor common-test issue
 2021-09-25 14:40:14 +02:00
kjeld Schouten-Lebbing 483d29ee0e harden default security options for common 2021-09-25 12:10:24 +02:00
Kjeld Schouten-LebbingandGitHub daab1ec475 Update README.md 2021-09-24 16:31:46 +02:00
kjeld Schouten-Lebbing 45db136a31 update Apps wishlist 2021-09-23 13:18:20 +02:00
Kjeld Schouten-LebbingandGitHub e1d694ddf6 Update bug_report.md 2021-09-20 11:39:54 +02:00
Kjeld Schouten-LebbingandGitHub cee9745ac9 Update bug_report.md 2021-09-20 11:39:22 +02:00
kjeld Schouten-Lebbing 0e99d95c94 fix: ensure traefik TLSOPtions get rendered correctly 2021-09-16 22:19:12 +02:00
kjeld Schouten-Lebbing 87ea7d6ad5 add portal example incubator app 2021-09-16 12:10:12 +02:00
kjeld Schouten-Lebbing 4fffe01d1f fix small mistake in pihole demo 2021-09-16 11:33:11 +02:00
kjeld Schouten-Lebbing 0cfdf38090 add admin portal example to pihole app (wont show on current version of SCALE) 2021-09-16 11:26:07 +02:00
Kjeld Schouten-LebbingandGitHub 0fb8f8bb90 fix: make sure autopermissions sets the group owner correctly (#994) 
* fix: make sure autopermissions sets the group owner correctly

* add test fix
 2021-09-14 23:59:19 +02:00
kjeld Schouten-Lebbing 742137951f fix: fix authelia being broken 2021-09-14 20:15:48 +02:00
kjeld Schouten-Lebbing 725aa5c6b6 fix: ensure oidc keys get generated on existing authelia installations 2021-09-14 17:52:28 +02:00
kjeld Schouten-Lebbing 60f68b4cf6 fix: update pihole digest and versioning to mirror 2021-09-14 10:56:51 +02:00
kjeld Schouten-Lebbing e537decf08 fix: update pihole versioning to 2021 scheme 2021-09-14 10:38:50 +02:00
kjeld Schouten-Lebbing e9a7aa6b32 fix: correct image tag for Syncthing on SCALE 
Fixes: #986
 2021-09-13 22:56:07 +02:00
kjeld Schouten-Lebbing ab1b39b88e cleanup authentication credentials for OpenVPN 2021-09-13 21:18:11 +02:00
kjeld Schouten-Lebbing e64d26aef8 fix: use correct authelia tag on SCALE installs 2021-09-13 21:06:48 +02:00
Kjeld Schouten-LebbingGitHubRenovate Bot
 		2349bb4d40 feat: add new GUI and VPN support to all Apps (#977) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-09-13 18:49:14 +02:00
kjeld Schouten-Lebbing 75aa360d57 bump common on postgresql 2021-09-13 14:15:13 +02:00
Kjeld Schouten-LebbingandGitHub 642cf20b7b feat: Add VPN addon and move some config to includes (#973) 
* add addon include to all apps

* move groups to include

* move controller to includes

* move container config to include

* move serviceList to include

* move persistence list to includes

* move ingressList to includes

* fix appdaemon digest

* move deviceList to includes and add to deconz

Fixes #967 related to #966
 2021-09-13 12:58:34 +02:00
kjeld Schouten-Lebbing 90ee94cf11 move more standard questions.yaml portions to includes 2021-09-13 11:14:23 +02:00
kjeld Schouten-Lebbing b910d2b69f fix: make sure questions.yaml includes are actually included 2021-09-13 10:52:56 +02:00
kjeld Schouten-Lebbing 0390a88229 Move VPN section of testbed to include 2021-09-13 10:46:07 +02:00
kjeld Schouten-Lebbing eeea600e67 update testbed to include newest common vpn changes 2021-09-13 09:37:55 +02:00
kjeld Schouten-Lebbing 0970b3a8d3 fix: ensure wireguard env vars get created 2021-09-13 09:25:38 +02:00
kjeld Schouten-Lebbing 60b87ae314 update testbed 2021-09-12 22:58:48 +02:00
kjeld Schouten-Lebbing 9ccdfcb7d8 fix: nuke all VPN volumes that we don't use (yet) out of Common 2021-09-12 22:49:18 +02:00
kjeld Schouten-Lebbing f28a835122 bump testbed common 2021-09-12 22:43:27 +02:00
kjeld Schouten-Lebbing e15b80e105 fix: completely remove unused volumes and correctly enable used volumes for VPN 2021-09-12 22:30:05 +02:00
kjeld Schouten-Lebbing 4f680a23e0 correct bump 2021-09-12 22:17:47 +02:00
kjeld Schouten-Lebbing 5f3c775af1 bump common in testbed 2021-09-12 22:15:14 +02:00
kjeld Schouten-Lebbing b34f57e386 fix: remove old configmap and secret references for VPN config/scripts 2021-09-12 22:10:48 +02:00
kjeld Schouten-Lebbing c8f2a5ed3e bump common on test bed 2021-09-12 21:59:35 +02:00
kjeld Schouten-Lebbing d072cb3b3a fix: correct vpn securityContext 2021-09-12 21:51:10 +02:00
kjeld Schouten-Lebbing f6b544ceb4 correct mistake in vpn selector of testbed app 2021-09-12 21:40:16 +02:00
kjeld Schouten-Lebbing 808b2d5803 fix autoscaler and vpn EnvList on testbed 2021-09-12 21:29:38 +02:00
Kjeld Schouten-LebbingandGitHub d92cb0b615 Release protonmailbridge to fix permissions 2021-09-12 21:21:57 +02:00
kjeld Schouten-Lebbing e70abf1e76 bump testbed 2021-09-12 20:40:27 +02:00
kjeld Schouten-Lebbing 431572f984 Merge branch 'master' of github.com:truecharts/apps 2021-09-12 20:36:01 +02:00
kjeld Schouten-Lebbing 82af2510d7 test app add some fixes 2021-09-12 20:35:33 +02:00
kjeld Schouten-Lebbing 092be36236 bump common version on test app 2021-09-12 20:28:48 +02:00
Kjeld Schouten-LebbingandGitHub a6037c62fa fix: ensure annotationLists and labelLists don't get processed for disabled objects (#971) 2021-09-12 20:28:22 +02:00
kjeld Schouten-Lebbing ab3e886299 testbed vpn should default to disabled 2021-09-12 18:10:53 +02:00
kjeld Schouten-Lebbing a67164b7b0 Integrate expert settings into current catagories for testbed 2021-09-12 18:05:54 +02:00
kjeld Schouten-Lebbing c31d4dc7b7 move networking expert config to networking section 2021-09-12 18:00:20 +02:00
Kjeld Schouten-LebbingandGitHub 93d5f42056 Work on GUI and VPN support (#969) 
* Work on GUI and VPN support

* revert crap

* bump common version
 2021-09-12 17:45:43 +02:00
Kjeld Schouten-LebbingandGitHub b660bbf457 improv: improve dns and vpn values.yaml syntaxis (#970) 
* improv: improve dns and vpn values.yaml syntaxis

* hmm

* fix tests

* no message
 2021-09-12 17:39:01 +02:00
kjeld Schouten-Lebbing 389e5d5803 remove testbed for now 2021-09-12 17:09:53 +02:00
kjeld Schouten-Lebbing b24cecbb71 revert broken test patches 2021-09-12 17:03:59 +02:00
kjeld Schouten-Lebbing 6843e8d181 fix the same mistake again 2021-09-12 15:15:08 +02:00
kjeld Schouten-Lebbing 0e98c87f88 fix mistake in gui test 2021-09-12 15:11:11 +02:00
kjeld Schouten-Lebbing ddeaf81b2d test different test gui options 2021-09-12 15:06:47 +02:00
kjeld Schouten-Lebbing 4fc1844098 Try multiple show-if for new gui 2021-09-12 14:31:04 +02:00
Kjeld Schouten-LebbingandGitHub 1cdc1b00df Add another GUI testbed (#968) 
* Initial work on new GUI

* group
 2021-09-12 14:09:19 +02:00
kjeld Schouten-Lebbing 0b4fbcdfbb chore: move custom-app to stable 2021-09-12 10:13:40 +02:00
kjeld Schouten-Lebbing 64d906efe7 fixup new release pipeline a bit 2021-09-12 10:06:15 +02:00
kjeld Schouten-Lebbing 074b556c11 push test version of jackett to test new release pipeline 2021-09-12 09:57:49 +02:00
kjeld Schouten-Lebbing 2d1b2537a9 feat: add catalog cleaning script to release pipeline 2021-09-12 09:55:20 +02:00
kjeld Schouten-Lebbing 040786356c typofix 2021-09-11 22:55:57 +02:00
kjeld Schouten-Lebbing 48b8c27c08 also set default resources (which we use everywhere in SCALE anyway) in the common chart... 2021-09-11 22:40:27 +02:00
kjeld Schouten-Lebbing e196216aea fix: bump postgresql on nextcloud to a working version 2021-09-11 21:55:39 +02:00
kjeld Schouten-Lebbing 2f6623c244 fix: correct release pipeline typo 2021-09-11 21:44:25 +02:00
kjeld Schouten-Lebbing fd29f5d9f0 fix: use correct appversion string 2021-09-11 21:39:25 +02:00
kjeld Schouten-Lebbing 94664171fa chore: update nextcloud to latest postgresql and common 2021-09-11 21:22:05 +02:00
Kjeld Schouten-LebbingandGitHub 238e2bc0c6 chore: Use bitnami instead of stock postgresql container (#960) 
* chore: Setup all apps to use bitnami instead of stock postgresql container

* Actually don't bump major as there is no breaking change (as people using it will default to the migration initscript)
 2021-09-11 20:58:37 +02:00
kjeld Schouten-Lebbing 9e02fb55a6 try standardising nextcloud reference 2021-09-11 14:55:26 +02:00
kjeld Schouten-Lebbing ced7d182c2 fix some dockertags being wrong 2021-09-11 13:52:00 +02:00
kjeld Schouten-Lebbing 7cd88d5f43 fix: correct typo in release pipeline 2021-09-11 13:10:31 +02:00
Kjeld Schouten-LebbingandGitHub a8670a1482 feat: pin all container references to digests (#963) 2021-09-11 13:00:39 +02:00
kjeld Schouten-Lebbing a7cc1b79ef pin jacket to fake digest for test 2021-09-11 12:37:36 +02:00
kjeld Schouten-Lebbing 26af07c3ab try different way of digest pinning 2021-09-11 12:19:33 +02:00
kjeld Schouten-Lebbing 10c922a14c try pinning digests 2021-09-11 12:16:42 +02:00
kjeld Schouten-Lebbing 3b8005b04e fix: remove duplicate securitycontext from autopermissions 2021-09-11 12:08:06 +02:00
Kjeld Schouten-LebbingandGitHub 0090c9e1b6 chore: move most remaining Apps to GHCR mirror (#959) 
* chore: move most remaining Apps to GHCR mirror

* remove apps that are official on dockerhub

* add thelounge

* move collarbora to mirror

* move piware to mirror
 2021-09-11 12:03:46 +02:00
kjeld Schouten-Lebbing 9543598475 fix small typo's 2021-09-10 22:11:05 +02:00
Kjeld Schouten-LebbingandGitHub bbd570a6f8 chore: move more dockerhub containers to GHCR mirror (#958) 
* chore: move dockerhub containers to mirror GHCR registry

* part 2
 2021-09-10 22:07:55 +02:00
Kjeld Schouten-LebbingandGitHub a6925e1cf4 chore: move all LSIO containers to github registry (#957) 2021-09-10 20:56:46 +02:00
kjeld Schouten-Lebbing 20bacc444e add start of commands cheatsheet 2021-09-10 18:44:28 +02:00
kjeld Schouten-Lebbing 7015791dac feat: Move some common containers to our own containers 2021-09-10 17:05:36 +02:00
Kjeld Schouten-LebbingandGitHub 00e9bd819f refactor: change image layout to enable renovate updates of sidecarts (#955) 
* some cleanup for common (+6 squashed commit)

Squashed commit:

[43a501de8] bump sogo

[62c009b63] some tryouts

[6840fafdb] try to fix rendering of new format

[003d3c81b] move seperate apps to new format and fix mistake in common

[752ae2c68] more work on the image refactor

[edfc28533] refactor common images

* sogo scale differently

* slight release build fix

* fix issues with release script and multiple tags
 2021-09-10 16:57:08 +02:00
kjeld Schouten-Lebbing 9ebd1111ea fix: repair wrong initcontainer format on nextcloud 2021-09-10 15:56:58 +02:00
kjeld Schouten-Lebbing d144cb38d8 fix: update common to ensure initcontainer can always be run as root 2021-09-10 15:43:02 +02:00
Kjeld Schouten-LebbingandGitHub 982297ec17 fix: move runAsNonRoot to container securityContext to allow root sidecarts (#954) 
* fix: move runAsNonRoot to container securityContext to prevent sidecarts from being affected

* also bump some versions...

* also override some of the problematic settings in common.yaml

* whoops
 2021-09-10 15:26:10 +02:00
kjeld Schouten-Lebbing 9db96fe986 Dont run crlf remover on all PC's 2021-09-10 14:50:28 +02:00
Kjeld Schouten-LebbingandGitHub 3c8418b803 feat: have VPN use a hostPath for the configfile instead of configmap (#953) 
* feat: have VPN use a hostPath for the configfile instead of configmap

* whoopsies

* fix some tests and actually append configFile mount to persistence

* addon -> addons
 2021-09-10 14:07:50 +02:00