Merge remote-tracking branch 'refs/remotes/origin/master'

20125/config.yml

@@ -31,7 +31,7 @@ applications:
   - instance: homeassistant.pyrocufflink.blue
 
 - name: Nextcloud
-  url: &url https://nextcloud.pyrocufflink.net/
+  url: &url https://nextcloud.pyrocufflink.net/index.php
   icon:
     url: icons/nextcloud.png
   alerts:

firefly-iii/kustomization.yaml

@@ -55,4 +55,4 @@ patches:
               defaultMode: 0640
 images:
 - name: docker.io/fireflyiii/core
-  newTag: version-6.1.22
+  newTag: version-6.1.25

home-assistant/configuration.yaml

@@ -38,6 +38,15 @@ recorder:
   commit_interval: 0
 
 homeassistant:
+  auth_providers:
+  - type: homeassistant
+  - type: trusted_networks
+    trusted_networks:
+    - 172.31.1.81/32
+    trusted_users:
+      172.31.1.81:
+      - 03a8b3528f1145ab908e20ed5687d893
+    allow_bypass_login: true
   whitelist_external_dirs:
   - /config
   - /tmp

home-assistant/kustomization.yaml

@@ -30,6 +30,7 @@ configMapGenerator:
   - restart-diddy-mopidy.sh
   - restart-kitchen-mqttmarionette.sh
   - shell-command.yaml
+  - shutdown-kiosk.sh
   - ssh_known_hosts
   - rest-command.yaml
   options:
@@ -117,14 +118,14 @@ patches:
               name: dch-root-ca
 images:
 - name: ghcr.io/home-assistant/home-assistant
-  newTag: 2024.11.2
+  newTag: 2024.12.5
 - name: docker.io/rhasspy/wyoming-whisper
-  newTag: 2.2.0
+  newTag: 2.4.0
 - name: docker.io/rhasspy/wyoming-piper
   newTag: 1.5.0
 - name: docker.io/koenkk/zigbee2mqtt
-  newTag: 1.41.0
+  newTag: 1.42.0
 - name: docker.io/zwavejs/zwave-js-ui
-  newTag: 9.27.2
+  newTag: 9.29.0
 - name: docker.io/library/eclipse-mosquitto
   newTag: 2.0.20

home-assistant/shell-command.yaml

@@ -6,3 +6,6 @@ restart_diddy_mopidy: >-
 
 restart_kitchen_mqttmarionette: >-
   sh /run/config/restart-kitchen-mqttmarionette.sh
+
+shutdown_kiosk: >-
+  sh /run/config/shutdown-kiosk.sh

home-assistant/shutdown-kiosk.sh

@@ -0,0 +1,4 @@
+#!/bin/sh
+
+set -e
+ssh -i /run/secrets/home-assistant/sshkey.pem -oUserKnownHostsFile=/run/config/ssh_known_hosts -oBatchMode=yes kiosk@deskpanel.pyrocufflink.red doas systemctl poweroff

home-assistant/ssh_known_hosts

@@ -1,2 +1,3 @@
 diddy.pyrocufflink.red ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILx6gRqlVnvdqTIJTH16NBLJ4ORfTsBaUIEpt5ZMkkNW
 kitchen.pyrocufflink.red ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBLzMLOlFXPiovBwYLmXCVV8Md/xR36zwPj6egT9V3O7
+deskpanel.pyrocufflink.red ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEcvO0jsZ8U2mw/HHs0BHbbEI48W0fxti8f5DuNyFS2L

invoice-ninja/network-policy.yaml

@@ -29,8 +29,9 @@ spec:
     ports:
     - port: 25
   - to:
-    - ipBlock:
-        cidr: 172.30.0.147/32
+    - namespaceSelector:
+        matchLabels:
+          kubernetes.io/metadata.name: ingress-nginx
     ports:
     - port: 80
     - port: 443

paperless-ngx/kustomization.yaml

@@ -47,6 +47,6 @@ images:
 - name: ghcr.io/paperless-ngx/paperless-ngx
   newTag: 2.13.5
 - name: docker.io/gotenberg/gotenberg
-  newTag: 8.13.0
+  newTag: 8.14.1
 - name: docker.io/apache/tika
   newTag: 3.0.0.0

victoria-metrics/alerts.yml

@@ -225,32 +225,16 @@ groups:
         the issue as soon as possible.
   - alert: Last Backup Age
     expr: >-
-      time() - restic_backup_timestamp > 604800
+      time() - restic_backup_timestamp{
+        client_hostname!="luma.pyrocufflink.blue",
+        client_hostname!="toad.pyrocufflink.blue",
+      }> 604800
     annotations:
       summary: A Restic client has not backed up recently
       description: >-
         Clients are scheduled to back up every day, but at least one has not
         been backed up in at least 7 days.  Check the Restic configuration on
         that system to ensure backups are running properly.
-  - alert: No File Changes
-    expr: >-
-      max_over_time(
-        abs(
-          delta(
-            sum(restic_backup_size_total{
-              client_hostname!="pxe0.pyrocufflink.blue",
-              client_hostname!="web0.pyrocufflink.blue",
-            })
-              by (client_hostname, client_username)
-          )
-        )[7d]
-      ) == 0
-    annotations:
-      summary: The size of the Restic backup has not changed
-      description: >-
-        The size of the Restic backup for a particular client has not changed
-        in at least 7 days.  This may indicate that the backup configuration
-        is incorrect.
 
 - name: Paperless-ngx
   rules:
@@ -273,11 +257,11 @@ groups:
         for details about the task failures.
   - alert: Paperless email task not running
     expr: >-
-      absent(
+      absent_over_time(
         flower_events_total{
           type="task-started",
           task="paperless_mail.tasks.process_mail_accounts"
-        }
+        }[12h]
       )
     annotations:
       summary: Paperless task to process mail accounts has not run recently

victoria-metrics/scrape.yml

@@ -57,7 +57,7 @@ scrape_configs:
     - http://pyrocufflink.net/
     - http://ebonfire.com/
     - http://chmod777.sh/
-    - https://nextcloud.pyrocufflink.net/
+    - https://nextcloud.pyrocufflink.net/index.php
     - https://bitwarden.pyrocufflink.blue/
     - https://git.pyrocufflink.blue/
     - https://tabitha.biz/