Expand homepage widgets and info panels

Add info widgets:
- Greeting: "Welcome to Blue Mops"
- DateTime with long date and short time format

Add service widgets with available credentials:
- Miniflux: RSS reader stats via API key
- Grafana: Dashboard/datasource stats via username/password

Add TODO comments for widgets needing additional setup:
- Forgejo: needs API token created
- Caddy: needs admin API enabled (currently off)
- UniFi: needs controller setup
- Glances: needs Glances deployed
- Navidrome: needs user/token/salt for Subsonic API
- Transmission: needs username/password configured
- Immich: needs API key from account settings

Also add ArgoCD to bookmarks section.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

argocd/manifests/grafana-config/ingress-tailscale.yaml

@@ -16,6 +16,10 @@ metadata:
     gethomepage.dev/description: "Metrics dashboards"
     gethomepage.dev/href: "https://grafana.ops.eblu.me"
     gethomepage.dev/pod-selector: "app.kubernetes.io/name=grafana"
+    gethomepage.dev/widget.type: "grafana"
+    gethomepage.dev/widget.url: "https://grafana.ops.eblu.me"
+    gethomepage.dev/widget.username: "{{HOMEPAGE_VAR_GRAFANA_USERNAME}}"
+    gethomepage.dev/widget.password: "{{HOMEPAGE_VAR_GRAFANA_PASSWORD}}"
 spec:
   ingressClassName: tailscale
   defaultBackend:

argocd/manifests/homepage/external-secret-grafana.yaml

@@ -0,0 +1,24 @@
+# ExternalSecret for Grafana credentials
+# Used by Homepage Grafana widget
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: homepage-grafana
+  namespace: homepage
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: onepassword-blumeops
+  target:
+    name: homepage-grafana
+    creationPolicy: Owner
+  data:
+    - secretKey: username
+      remoteRef:
+        key: Grafana (blumeops)
+        property: username
+    - secretKey: password
+      remoteRef:
+        key: Grafana (blumeops)
+        property: password

argocd/manifests/homepage/external-secret-miniflux.yaml

@@ -0,0 +1,20 @@
+# ExternalSecret for Miniflux API key
+# Used by Homepage Miniflux widget
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: homepage-miniflux
+  namespace: homepage
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: onepassword-blumeops
+  target:
+    name: homepage-miniflux
+    creationPolicy: Owner
+  data:
+    - secretKey: apikey
+      remoteRef:
+        key: miniflux
+        property: credential

argocd/manifests/homepage/values.yaml

@@ -27,16 +27,35 @@ ingress:
 env:
   - name: HOMEPAGE_ALLOWED_HOSTS
     value: "go.tail8d86e.ts.net,go.ops.eblu.me"
+  # Weather widget
   - name: HOMEPAGE_VAR_OPENWEATHERMAP_API_KEY
     valueFrom:
       secretKeyRef:
         name: homepage-openweathermap
         key: apikey
+  # Jellyfin widget
   - name: HOMEPAGE_VAR_JELLYFIN_API_KEY
     valueFrom:
       secretKeyRef:
         name: homepage-jellyfin
         key: apikey
+  # Miniflux widget
+  - name: HOMEPAGE_VAR_MINIFLUX_API_KEY
+    valueFrom:
+      secretKeyRef:
+        name: homepage-miniflux
+        key: apikey
+  # Grafana widget
+  - name: HOMEPAGE_VAR_GRAFANA_USERNAME
+    valueFrom:
+      secretKeyRef:
+        name: homepage-grafana
+        key: username
+  - name: HOMEPAGE_VAR_GRAFANA_PASSWORD
+    valueFrom:
+      secretKeyRef:
+        name: homepage-grafana
+        key: password
 
 config:
   # Host services (non-k8s, on indri or LAN)
@@ -46,6 +65,11 @@ config:
             href: https://forge.ops.eblu.me
             icon: forgejo
             description: Git forge
+            # TODO: Add Forgejo widget when API token is created
+            # widget:
+            #   type: gitea
+            #   url: https://forge.ops.eblu.me
+            #   key: "{{HOMEPAGE_VAR_FORGEJO_API_KEY}}"
         - Registry:
             href: https://registry.ops.eblu.me
             icon: docker
@@ -92,6 +116,14 @@ config:
               key: "{{HOMEPAGE_VAR_JELLYFIN_API_KEY}}"
               enableBlocks: true
               enableNowPlaying: true
+        # TODO: Add Caddy widget when admin API is enabled (currently admin off)
+        # - Caddy:
+        #     href: https://indri.tail8d86e.ts.net
+        #     icon: caddy
+        #     description: Reverse proxy
+        #     widget:
+        #       type: caddy
+        #       url: http://indri.tail8d86e.ts.net:2019
 
   # External bookmarks
   bookmarks:
@@ -105,10 +137,21 @@ config:
         - Pulumi:
             - href: https://app.pulumi.com/eblume/blumeops-tailnet
               icon: pulumi
+        - ArgoCD:
+            - href: https://argocd.ops.eblu.me
+              icon: argocd
 
-  # Widgets on the page
-  # Note: Kubernetes widget disabled - requires metrics-server
+  # Widgets on the page (info bar at top)
   widgets:
+    - greeting:
+        text_size: xl
+        text: Welcome to Blue Mops
+    - datetime:
+        text_size: lg
+        format:
+          dateStyle: long
+          timeStyle: short
+          hour12: true
     - openweathermap:
         label: Camano
         latitude: 48.18235
@@ -117,6 +160,15 @@ config:
         provider: openweathermap
         apiKey: "{{HOMEPAGE_VAR_OPENWEATHERMAP_API_KEY}}"
         cache: 15
+    # TODO: Add UniFi widget when controller is set up
+    # - unifi_console:
+    #     url: https://192.168.1.1
+    #     username: homepage
+    #     password: "{{HOMEPAGE_VAR_UNIFI_PASSWORD}}"
+    # TODO: Add Glances widget when Glances is deployed
+    # - glances:
+    #     url: http://indri.tail8d86e.ts.net:61208
+    #     metric: cpu
 
   # Kubernetes autodiscovery
   kubernetes:

argocd/manifests/immich/ingress-tailscale.yaml

@@ -15,6 +15,12 @@ metadata:
     gethomepage.dev/description: "Photo management"
     gethomepage.dev/href: "https://photos.ops.eblu.me"
     gethomepage.dev/pod-selector: "app.kubernetes.io/name=server"
+    # TODO: Add Immich widget - requires API key from Account Settings > API Keys
+    # See: https://gethomepage.dev/widgets/services/immich/
+    # gethomepage.dev/widget.type: "immich"
+    # gethomepage.dev/widget.url: "https://photos.ops.eblu.me"
+    # gethomepage.dev/widget.key: "{{HOMEPAGE_VAR_IMMICH_API_KEY}}"
+    # gethomepage.dev/widget.version: "2"
 spec:
   ingressClassName: tailscale
   rules:

argocd/manifests/miniflux/ingress-tailscale.yaml

@@ -12,6 +12,9 @@ metadata:
     gethomepage.dev/description: "RSS reader"
     gethomepage.dev/href: "https://feed.ops.eblu.me"
     gethomepage.dev/pod-selector: "app=miniflux"
+    gethomepage.dev/widget.type: "miniflux"
+    gethomepage.dev/widget.url: "https://feed.ops.eblu.me"
+    gethomepage.dev/widget.key: "{{HOMEPAGE_VAR_MINIFLUX_API_KEY}}"
 spec:
   ingressClassName: tailscale
   defaultBackend:

argocd/manifests/navidrome/ingress-tailscale.yaml

@@ -13,6 +13,13 @@ metadata:
     gethomepage.dev/description: "Music streaming server"
     gethomepage.dev/href: "https://dj.ops.eblu.me"
     gethomepage.dev/pod-selector: "app=navidrome"
+    # TODO: Add Navidrome widget - requires user, token (md5(password+salt)), salt
+    # See: https://gethomepage.dev/widgets/services/navidrome/
+    # gethomepage.dev/widget.type: "navidrome"
+    # gethomepage.dev/widget.url: "https://dj.ops.eblu.me"
+    # gethomepage.dev/widget.user: "{{HOMEPAGE_VAR_NAVIDROME_USER}}"
+    # gethomepage.dev/widget.token: "{{HOMEPAGE_VAR_NAVIDROME_TOKEN}}"
+    # gethomepage.dev/widget.salt: "{{HOMEPAGE_VAR_NAVIDROME_SALT}}"
 spec:
   ingressClassName: tailscale
   defaultBackend:

argocd/manifests/torrent/ingress-tailscale.yaml

@@ -13,6 +13,12 @@ metadata:
     gethomepage.dev/description: "Torrent client"
     gethomepage.dev/href: "https://torrent.ops.eblu.me"
     gethomepage.dev/pod-selector: "app=transmission"
+    # TODO: Add Transmission widget - requires username/password setup in Transmission
+    # See: https://gethomepage.dev/widgets/services/transmission/
+    # gethomepage.dev/widget.type: "transmission"
+    # gethomepage.dev/widget.url: "https://torrent.ops.eblu.me"
+    # gethomepage.dev/widget.username: "{{HOMEPAGE_VAR_TRANSMISSION_USER}}"
+    # gethomepage.dev/widget.password: "{{HOMEPAGE_VAR_TRANSMISSION_PASSWORD}}"
 spec:
   ingressClassName: tailscale
   defaultBackend: