Erich Blume
8621996343
## Summary - Migrate all ArgoCD app repo URLs from `indri.tail8d86e.ts.net:2200` to `forge.ops.eblu.me:2222` - Add Immich self-hosted photo management service with: - Helm chart deployment via ArgoCD - PostgreSQL cluster with pgvecto.rs for AI vector search (immich-pg) - NFS storage on sifaka for photo library (2Ti) - Tailscale Ingress + Caddy proxy for `photos.ops.eblu.me` - Machine learning service for face/object recognition ## Deployment and Testing - [x] Update ArgoCD repo-creds-forge secret with new URL (one-time manual step) - [ ] Sync `apps` to pick up new applications - [ ] Sync all existing apps to verify new forge URL works - [ ] Sync `blumeops-pg` to deploy immich-pg cluster - [ ] Wait for immich-pg to be healthy - [ ] Create immich-db secret from auto-generated password - [ ] Sync `immich-storage` (PV, PVC, Ingress) - [ ] Sync `immich` (Helm chart) - [ ] Run `mise run provision-indri -- --tags caddy` to add photos.ops.eblu.me - [ ] Verify Immich UI is accessible 🤖 Generated with [Claude Code](https://claude.com/claude-code) Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/62
27 lines
877 B
YAML
27 lines
877 B
YAML
# Miniflux RSS Reader
|
|
# Requires: CloudNativePG PostgreSQL cluster and manual secret setup
|
|
#
|
|
# Before syncing, create the database secret:
|
|
# kubectl create namespace miniflux
|
|
# op inject -i argocd/manifests/miniflux/secret-db.yaml.tpl | kubectl apply -f -
|
|
#
|
|
# Note: The Tailscale Ingress may initially get hostname "feed-1" if "feed" is
|
|
# already claimed. After clearing the old service, delete the device from
|
|
# Tailscale admin to allow the Ingress to claim "feed".
|
|
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: miniflux
|
|
namespace: argocd
|
|
spec:
|
|
project: default
|
|
source:
|
|
repoURL: ssh://forgejo@forge.ops.eblu.me:2222/eblume/blumeops.git
|
|
targetRevision: main
|
|
path: argocd/manifests/miniflux
|
|
destination:
|
|
server: https://kubernetes.default.svc
|
|
namespace: miniflux
|
|
syncPolicy:
|
|
syncOptions:
|
|
- CreateNamespace=true
|