From 8568a665b52bc60f32753cf654ec2908030272b0 Mon Sep 17 00:00:00 2001
From: Gabriel Simmer <g@gmem.ca>
Date: Mon, 13 Nov 2023 01:37:26 +0000
Subject: [PATCH] Homepage setup w/ Helm

---
 flake.lock                       |  36 ++--
 homelab/homepage-secrets.env.age | Bin 0 -> 675 bytes
 homelab/homepage.nix             | 275 +++++++++++++++++++++++++++++++
 homelab/ingress.yml              |   0
 homelab/kubernetes.nix           |   5 +-
 5 files changed, 296 insertions(+), 20 deletions(-)
 create mode 100644 homelab/homepage-secrets.env.age
 create mode 100644 homelab/homepage.nix
 delete mode 100644 homelab/ingress.yml

diff --git a/flake.lock b/flake.lock
index 1108234..0ba8192 100644
--- a/flake.lock
+++ b/flake.lock
@@ -223,11 +223,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1699025595,
-        "narHash": "sha256-e+o4PoSu2Z6Ww8y/AVUmMU200rNZoRK+p2opQ7Db8Rg=",
+        "lastModified": 1699663185,
+        "narHash": "sha256-hI3CZPINBWstkMN+ptyzWibw5eRtFCiEvO7zR61bGBs=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "8765d4e38aa0be53cdeee26f7386173e6c65618d",
+        "rev": "691cbcc03af6ad1b5384c0e0e0b5f2298f58c5ce",
         "type": "github"
       },
       "original": {
@@ -244,11 +244,11 @@
         "treefmt": "treefmt"
       },
       "locked": {
-        "lastModified": 1697643920,
-        "narHash": "sha256-Ti/v3lWKNF2/5u3ARTDhhdr7ijUo/ZpefKAfr8OgsK4=",
+        "lastModified": 1699581775,
+        "narHash": "sha256-Pld/UXlBcIDnQMY0JkDzChJkbof/zEcRkaiXtzvArEE=",
         "owner": "hall",
         "repo": "kubenix",
-        "rev": "ea469ff77a49f6f3df420bfc6040c39e1b861d87",
+        "rev": "fceda8451461ee5e623815414f76885df77b7217",
         "type": "github"
       },
       "original": {
@@ -284,11 +284,11 @@
         "treefmt-nix": "treefmt-nix"
       },
       "locked": {
-        "lastModified": 1699060277,
-        "narHash": "sha256-As0PilG8NEQzIMOFIzfI3zkBNH2CJHZJXRL5Rc36Ojc=",
+        "lastModified": 1699261003,
+        "narHash": "sha256-wkOVJ2wkPpTYqipDF693bEAUQ838xjloUcs6WNsTMlw=",
         "owner": "nix-community",
         "repo": "nix-eval-jobs",
-        "rev": "20a24e8b1004d3293525334ccf3254c083d6fbaa",
+        "rev": "2b55f473c960d38a40678d9831fc1dcb87615a98",
         "type": "github"
       },
       "original": {
@@ -414,11 +414,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1699222410,
-        "narHash": "sha256-qGuDXk991Mlws0f8DXNua82G+22jMBwoFG80o1sF66M=",
+        "lastModified": 1699629370,
+        "narHash": "sha256-HwoRInCXXdEUcfXEnlWb7v4nuQLUo5dT9ZWTb2C1Vik=",
         "owner": "nix-community",
         "repo": "nixpkgs-wayland",
-        "rev": "74717cb06fc24dbf57002bb1cf6d36fc50293d34",
+        "rev": "62a9b65dfb8c182530887d567a7c796fe2bb514e",
         "type": "github"
       },
       "original": {
@@ -477,11 +477,11 @@
     },
     "nixpkgs_5": {
       "locked": {
-        "lastModified": 1699186365,
-        "narHash": "sha256-Pxrw5U8mBsL3NlrJ6q1KK1crzvSUcdfwb9083sKDrcU=",
+        "lastModified": 1699343069,
+        "narHash": "sha256-s7BBhyLA6MI6FuJgs4F/SgpntHBzz40/qV0xLPW6A1Q=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "a0b3b06b7a82c965ae0bb1d59f6e386fe755001d",
+        "rev": "ec750fd01963ab6b20ee1f0cb488754e8036d89d",
         "type": "github"
       },
       "original": {
@@ -493,11 +493,11 @@
     },
     "nixpkgs_6": {
       "locked": {
-        "lastModified": 1698977350,
-        "narHash": "sha256-OUDOHWrX3EjX/MlOoCHEb3JMONklbpu4Wa+Xf5s/U+s=",
+        "lastModified": 1699236715,
+        "narHash": "sha256-oel+a6B5mBO7vA1A/I9A9VTK2jW5shnYAuu08RYhmxQ=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "4285a2a67daf39e63d9564a47773a1c2081c36a8",
+        "rev": "0d93ec62e06faec6c52331a8a87bd5721b38ce14",
         "type": "github"
       },
       "original": {
diff --git a/homelab/homepage-secrets.env.age b/homelab/homepage-secrets.env.age
new file mode 100644
index 0000000000000000000000000000000000000000..19fecdc7e5590dfe177414608653cda90a3de9bc
GIT binary patch
literal 675
zcmV;U0$lxJXJsvAZewzJaCB*JZZ2<fXD@a!3N1b$aA|fea56PEAXaT<b#rGRK{ho^
zb8=HhH&9eaXK-v$Qb#y6IZt7BY;|mNHdsViPBT<+a(F>wbWTQN3Qc-BX-{@VaxiyD
zW=l>*Sx;<kHZxLjW>qmOXisBhYBe!ND|awfOHn~E3N1b$M{G|mXL4m>b7cxzN>DFt
zYhp?-Geb^KFE}(Sb4)owa5rs6aX3j=QE6*YOe<PxG&NB)ZE15>FiTlXIdw^HX>(Ug
zS1?pfD@<?-Xg7IkS4nPCL1lVvcw%vNaxq9paA9>gW>08hcrR)~Z%jybV@yd=RA&k;
zEiE81OG8pjQA>75M@e!*Q$$QNb!9SkYC?5ZOhiIhMNVo<Lo`=SQ*&2Ya!m@0k>ak1
zxS?@efsjQG-qUK4fFN2bY|t>F53Z8(e%cx;uD5i-dc2C0<^d_#4w?VgB8yI1lZiGf
zWj;T>-jLe6Ehn2%lGgi)F#kz_E6KhG1#nBGuH7#%2kQ4%cVSB!3o=(p+tiE{Iw2v3
zU}h*8=<6+CT~SeQUmK`~8!?QIQ3?So#blK(2Eq1e0ClAl=8q6B3KTCG3bFC%uRPS2
zUS>{6F|u{b!XYGP-Bq+BmTXz`RAJlKkJ4J#zEON!#qptq*?95maqO)Ix|q3w@Hsrf
zmh7rFb7sPU+5GO1fOyuGmv0GTo9gApZw~7DqjOdyV{Y;wFY9gO8HC6B_a<U_LqzFi
zDdY3fgZx@qHRjfNTW^TukAo%KD{wg>Mc9vj)GTVn>E0BxVwEGV+AGGb4)$fee}R^o
zYi{T9beemIdRFQ%8GyUq#j==(owF;%7mS#yal#Gy%TPm6`w=1v<2Vr^iYx43+Y#33
JNI9ac<k7Vf9cBOk

literal 0
HcmV?d00001

diff --git a/homelab/homepage.nix b/homelab/homepage.nix
new file mode 100644
index 0000000..efd6b5d
--- /dev/null
+++ b/homelab/homepage.nix
@@ -0,0 +1,275 @@
+{ lib, config, kubenix, ... }: {
+  kubernetes.helm.releases.homepage = {
+    chart = kubenix.lib.helm.fetch {
+      repo = "https://jameswynn.github.io/helm-charts";
+      chart = "homepage";
+      version = "1.2.3";
+      sha256 = "sha256-tZv/+ePFPifilp8wU4FjogSJhNEERx0PcdHUzsBxfRA=";
+    };
+    # arbitrary attrset passed as values to the helm release
+    values = {
+      replicaCount = 2;
+      image = {
+        repository = "ghcr.io/gethomepage/homepage";
+        tag = "latest";
+      };
+      serviceAccount.create = true;
+      enableRbac = true;
+      ingress.main = {
+        enabled = true;
+        ingressClassName = "nginx";
+        hosts = [
+          {
+            host = "home.gmem.ca";
+            paths = [
+              {
+                path = "/";
+                pathType = "Prefix";
+              }
+            ];
+          }
+        ];
+        tls = [
+          {
+            hosts = [ "home.gmem.ca" ];
+            secretName = "gmem-ca-wildcard";
+          }
+        ];
+      };
+      config = {
+        bookmarks = [];
+        services = [
+          {
+            Media = [
+              {  Plex = {
+                   icon = "plex.png";
+                   href = "https://app.plex.tv";
+                   description = "Plex";
+                   widget = {
+                     type = "plex";
+                     url = "http://vancouver:32400";
+                     key = "{{HOMEPAGE_VAR_PLEX_KEY}}";
+                   };
+                 };
+              }
+              { Overseerr = {
+                  icon = "overseerr.png";
+                  href = "https://request-media.gmem.ca";
+                  description = "Request movies and TV shows";
+                  widget = {
+                    type = "overseerr";
+                    url = "https://request-media.gmem.ca";
+                    key = "{{HOMEPAGE_VAR_OVERSEERR_KEY}}";
+                  };
+                };
+              }
+              { Flood = {
+                  icon = "flood.png";
+                  href = "https://flood.gmem.ca";
+                  description = "Download progress for torrents";
+                  widget = {
+                    type = "flood";
+                    url = "https://flood.gmem.ca";
+                    username = "admin";
+                    password = "{{HOMEPAGE_VAR_FLOOD_PASSWORD}}";
+                  };
+                };
+              }
+            ];
+          }
+          {
+            Reading = [
+              {  FreshRSS = {
+                   icon = "freshrss.png";
+                   href = "https://freshrss.gmem.ca";
+                   description = "FreshRSS RSS Reader";
+                   widget = {
+                     type = "freshrss";
+                     url = "https://freshrss.gmem.ca";
+                     username = "arch";
+                     password = "{{HOMEPAGE_VAR_FRESHRSS_PASSWORD}}";
+                   };
+                 };
+              }
+              {  "Lobste.rs" = {
+                   href = "https://lobste.rs";
+                   description = "News aggregator";
+                 };
+              }
+              {  "Hacker News" = {
+                   href = "https://news.ycombinator.com";
+                   description = "VC news aggregator";
+                 };
+              }
+            ];
+          }
+          {
+            "Personal Infrastructure" = [
+              {  authentik = {
+                   icon = "authentik.png";
+                   href = "https://authentik.gmem.ca";
+                   description = "OIDC SSO";
+                 };
+              }
+              {  NextDNS = {
+                   icon = "nextdns.png";
+                   href = "https://my.nextdns.io";
+                   description = "DNS provider";
+                   widget = {
+                     type = "nextdns";
+                     profile = "bcee89";
+                     key = "{{HOMEPAGE_VAR_NEXTDNS_KEY}}";
+                   };
+                 };
+              }
+              {  "Proxmox Sandbox" = {
+                   icon = "proxmox.png";
+                   href = "https://proxmox.scorpion-ghost.ts.net";
+                   description = "Sandbox proxmox instance on Hetzner";
+                   widget = {
+                     type = "proxmox";
+                     url = "https://proxmox.scorpion-ghost.ts.net";
+                     username = "api@pam!homepage";
+                     password = "{{HOMEPAGE_VAR_PROXMOX_PASSWORD}}";
+                   };
+                 };
+              }
+              {  Tailscale = {
+                   icon = "tailscale.png";
+                   href = "https://login.tailscale.com";
+                   description = "VPN provider";
+                 };
+              }
+              {  Git = {
+                   icon = "forgejo.png";
+                   href = "https://git.gmem.ca";
+                   description = "Git forge";
+                 };
+              }
+            ];
+          }
+          {
+            "Floofy.tech Infrastructure" = [
+              {  Mastodon = {
+                   icon = "mastodon.png";
+                   href = "https://floofy.tech";
+                   description = "Primary Mastodon instance";
+                   widget = {
+                     type = "mastodon";
+                     url = "https://floofy.tech";
+                   };
+                 };
+              }
+              {  Grafana = {
+                   icon = "grafana.png";
+                   href = "https://grafana.services.floofy.tech";
+                   description = "Metrics and Monitoring";
+                 };
+              }
+              {  vSphere = {
+                   icon = "vmware-esxi.png";
+                   href = "https://vcenter.services.floofy.tech";
+                   description = "Hypervisor Manager";
+                 };
+              }
+              {  "vrclub.social" = {
+                   icon = "calckey.png";
+                   href = "https://vrclub.social";
+                   description = "Firefish instance for VR clubs";
+                 };
+              }
+            ];
+          }
+          {
+            "Tools" = [
+              {  "IT Tools" = {
+                   icon = "it-tools.png";
+                   href = "https://tools.gmem.ca";
+                   description = "Various useful tools";
+                 };
+              }
+              {  Cyberchef = {
+                   icon = "cyberchef.png";
+                   href = "https://gchq.github.io/CyberChef/";
+                   description = "More useful tools, mostly text manipulation";
+                 };
+              }
+            ];
+          }
+          {
+            "Backup Status" = [
+              {  "gsimmer backups" = {
+                   icon = "healthchecks.png";
+                   href = "https://healthchecks.gmem.ca";
+                   description = "Uptime monitor for recurring tasks";
+                   widget = {
+                     type = "healthchecks";
+                     url = "https://healthchecks.gmem.ca";
+                     key = "{{HOMEPAGE_VAR_HEALTHCHECKS_KEY}}";
+                     uuid = "617d460f-69f6-444f-852a-421861543327";
+                   };
+                 };
+              }
+              {  "becki backups" = {
+                   icon = "healthchecks.png";
+                   href = "https://healthchecks.gmem.ca";
+                   description = "Uptime monitor for recurring tasks";
+                   widget = {
+                     type = "healthchecks";
+                     url = "https://healthchecks.gmem.ca";
+                     key = "{{HOMEPAGE_VAR_HEALTHCHECKS_KEY}}";
+                     uuid = "9d01d3dd-2a56-4c70-9b5c-9cb99a1466db";
+                   };
+                 };
+              }
+              {  "apps backups" = {
+                   icon = "healthchecks.png";
+                   href = "https://healthchecks.gmem.ca";
+                   description = "Uptime monitor for recurring tasks";
+                   widget = {
+                     type = "healthchecks";
+                     url = "https://healthchecks.gmem.ca";
+                     key = "{{HOMEPAGE_VAR_HEALTHCHECKS_KEY}}";
+                     uuid = "37a854b0-9191-4452-aa30-df3969d59b09";
+                   };
+                 };
+              }
+            ];
+          }
+        ];
+        settings = {
+          title = "Arch's Homepage";
+          background = {
+            image = "https://images.unsplash.com/photo-1502790671504-542ad42d5189?auto=format&fit=crop&w=2560&q=80";
+            blur = "sm";
+            opacity = 50;
+          };
+          base = "https://home.gmem.ca";
+          layout.Media.style = "row";
+          layout.Media.columns = "3";
+          layout."Backup Status".style = "row";
+          layout."Backup Status".columns = "3";
+        };
+        kubernetes.mode = "cluster";
+        widgets = [
+          {
+            kubernetes = {
+              cluster.show = true;
+              nodes.show = true;
+            };
+          }
+          {
+            search = {
+              provider = "duckduckgo";
+            };
+          }
+        ];
+      };
+    };
+  };
+
+  kubernetes.resources.deployments.homepage = {
+    metadata.namespace = "default";
+    spec.template.spec.containers.homepage.envFrom = [ { secretRef.name = "homepage-config"; } ];
+  };
+}
diff --git a/homelab/ingress.yml b/homelab/ingress.yml
deleted file mode 100644
index e69de29..0000000
diff --git a/homelab/kubernetes.nix b/homelab/kubernetes.nix
index 3cb05c7..aa1b762 100644
--- a/homelab/kubernetes.nix
+++ b/homelab/kubernetes.nix
@@ -1,6 +1,7 @@
 { lib, config, kubenix, ... }: {
-  imports = [ kubenix.modules.k8s
+  imports = [ kubenix.modules.k8s kubenix.modules.helm
               (import ./custom.nix)
               (import ./tclip.nix)
-              (import ./vrchat-prometheus-exporter.nix) ];
+              (import ./vrchat-prometheus-exporter.nix)
+              (import ./homepage.nix) ];
 }