Erich Blume
8621996343
## Summary - Migrate all ArgoCD app repo URLs from `indri.tail8d86e.ts.net:2200` to `forge.ops.eblu.me:2222` - Add Immich self-hosted photo management service with: - Helm chart deployment via ArgoCD - PostgreSQL cluster with pgvecto.rs for AI vector search (immich-pg) - NFS storage on sifaka for photo library (2Ti) - Tailscale Ingress + Caddy proxy for `photos.ops.eblu.me` - Machine learning service for face/object recognition ## Deployment and Testing - [x] Update ArgoCD repo-creds-forge secret with new URL (one-time manual step) - [ ] Sync `apps` to pick up new applications - [ ] Sync all existing apps to verify new forge URL works - [ ] Sync `blumeops-pg` to deploy immich-pg cluster - [ ] Wait for immich-pg to be healthy - [ ] Create immich-db secret from auto-generated password - [ ] Sync `immich-storage` (PV, PVC, Ingress) - [ ] Sync `immich` (Helm chart) - [ ] Run `mise run provision-indri -- --tags caddy` to add photos.ops.eblu.me - [ ] Verify Immich UI is accessible 🤖 Generated with [Claude Code](https://claude.com/claude-code) Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/62
25 lines
731 B
YAML
25 lines
731 B
YAML
# ArgoCD Application for Tailscale Kubernetes Operator
|
|
# Note: OAuth secret is managed separately (not in git)
|
|
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: tailscale-operator
|
|
namespace: argocd
|
|
spec:
|
|
project: default
|
|
# Tailscale operator mutates externalName from "placeholder" to actual proxy service
|
|
ignoreDifferences:
|
|
- group: ""
|
|
kind: Service
|
|
jsonPointers:
|
|
- /spec/externalName
|
|
source:
|
|
repoURL: ssh://forgejo@forge.ops.eblu.me:2222/eblume/blumeops.git
|
|
targetRevision: main
|
|
path: argocd/manifests/tailscale-operator
|
|
destination:
|
|
server: https://kubernetes.default.svc
|
|
namespace: tailscale
|
|
syncPolicy:
|
|
syncOptions:
|
|
- CreateNamespace=true
|