Alex Mickelson
3251639b39
All checks were successful
Apply Kuberentes Configs / update-repo (push) Successful in 1s
Apply Kuberentes Configs / update-infrastructure (push) Successful in 3s
Apply Kuberentes Configs / notify-on-failure (push) Has been skipped
Cleanup Docker / cleanup-docker (push) Successful in 0s
Cleanup Docker / notify-on-failure (push) Has been skipped
Cleanup NixOS Generations / cleanup-generations (push) Successful in 2s
Cleanup NixOS Generations / notify-on-failure (push) Has been skipped
ZFS Backup / update-infrastructure (push) Successful in 50s
ZFS Backup / notify-on-failure (push) Has been skipped
Libation / update-repo (push) Successful in 0s
Libation / sync-audiobooks (push) Successful in 5s
Libation / notify-on-failure (push) Has been skipped
Manage Jellyfin Playlists / update-repo (push) Successful in 1s
Manage Jellyfin Playlists / run-python (push) Successful in 47s
Manage Jellyfin Playlists / notify-on-failure (push) Has been skipped
sources
note: k0s never works as well as you think
nix instructions: https://github.com/NixOS/nixpkgs/blob/master/pkgs/applications/networking/cluster/k3s/README.md
tailscale operator
helm repo add tailscale https://pkgs.tailscale.com/helmcharts
helm repo update
helm upgrade \
--install \
tailscale-operator \
tailscale/tailscale-operator \
--namespace=tailscale \
--create-namespace \
--set-string oauth.clientId="<OAauth client ID>" \
--set-string oauth.clientSecret="<OAuth client secret>" \
--wait
Currently clouflare domains cannot be CNAME'd to tailscale domains:
- https://github.com/tailscale/tailscale/issues/7650
- related, different IP addresses: https://tailscale.com/blog/choose-your-ip#natural-solutions
Kubernetes ingress controller
ingress
helm repo add ingress-nginx https://kubernetes.github.io/ingress-nginx
helm repo update
helm upgrade --install ingress-nginx ingress-nginx/ingress-nginx \
--namespace ingress-nginx \
--create-namespace \
--set controller.kind=DaemonSet \
--set controller.hostPort.enabled=true \
--set controller.hostPort.ports.http=80 \
--set controller.hostPort.ports.https=443 \
--set controller.service.type=NodePort \
--set controller.allowSnippetAnnotations=true \
--set controller.config.annotations-risk-level=Critical \
--set controller.metrics.enabled=false \
--set controller.ingressClassResource.default=true