Update README.md

homeassistant https

.gitea/workflows/deploy-sync-certs-job.yml

@@ -0,0 +1,21 @@
+on: 
+  push:
+  schedule:
+    - cron: '0 16 * * *' # Every day at 16:00
+jobs:
+  deploy-to-homesrv01:
+    runs-on: "myLimbo-casa-gitea-act-runner"
+    steps:
+    - name: Checkout code
+      uses: actions/checkout@v2
+
+      # all certs and key are base64 encoded
+    - name: docker compose up
+      env:
+        KUBERNETES_SERVER: ${{ secrets.KUBERNETES_SERVER }}
+        KUBERNETES_CLIENT_CRT_DATA: ${{ secrets.KUBERNETES_CLIENT_CRT_DATA }}
+        KUBERNETES_CLIENT_KEY_DATA: ${{ secrets.KUBERNETES_CLIENT_KEY_DATA }}
+        KUBERNETES_CRT_AUTHORITY_DATA: ${{ secrets.KUBERNETES_CRT_AUTHORITY_DATA }}
+      run:  |
+          docker compose -f ./casa-limbosolutions-com/sync-certs-job/docker-compose.yaml up -d --pull always 
+

README.md

@@ -30,7 +30,7 @@ The server operates within its own VLAN (`homesrv`) but requires controlled comm
 
 ### myInfra stack
 
-docker, promtail and telegraf configuration [maintained on myInfra repo](/marcio.fernandes/myInfra).
+docker, promtail and telegraf configuration [maintained on myInfra repo](/:root/marcio.fernandes/myInfrastructure).
 
 ### docker
 
@@ -45,6 +45,15 @@ docker plugin install rclone/docker-volume-rclone:amd64 args="-v" --alias rclone
 docker plugin list
 ```
 
+if error when enabling plugin.  
+*"rclone.sock: connect: no such file or directory"*  
+remove existing cache.  
+
+```bash
+ rm -r /var/lib/docker-plugins/rclone/cache
+ mkdir -p /var/lib/docker-plugins/rclone/cache
+```
+
 [ansible role for plugin configuration](./rclone.docker-plugin.playbook.yaml)
 
 ### nginx
@@ -55,13 +64,13 @@ All sites configurations set during docker build.
 
 ### Home Assistant
 
-[Git Repo](https://git.limbosolutions.com/marcio.fernandes/homeAssistant)
+[Git Repo](/:root/marcio.fernandes/homeAssistant)
 
 ### Lyrion Music Server (LMS)
 
-For instructions on setting up the Lyrion Music Server Docker container, refer to the [LMS Git Repository](/marcio.fernandes/lms).
+For instructions on setting up the Lyrion Music Server Docker container, refer to the [LMS Git Repository](/:root/marcio.fernandes/lms).
 
-For information on integrating Lyrion Music Server with Home Assistant, visit the [Home Assistant Git Repository](/marcio.fernandes/homeassistant#squeezebox-lyrion-music-server).
+For information on integrating Lyrion Music Server with Home Assistant, visit the [Home Assistant Git Repository](/:root/marcio.fernandes/homeassistant#squeezebox-lyrion-music-server).
 
 Using [Docker Rclone plugin](https://rclone.org/docker/) for accessing the bucket where music is stored. Configuration is managed via [Ansible playbook](./rclone.docker-plugin.playbook.yml).
 
@@ -72,7 +81,7 @@ ansible-playbook ./rclone.docker-plugin.playbook.yml
 
 ### Mosquitto
 
-[Git Repo](https://git.limbosolutions.com/marcio.fernandes/mosquitto)
+[Git Repo](/:root/marcio.fernandes/mosquitto)
 
 ### Wyoming
 
@@ -88,7 +97,7 @@ Used in Rhasspy and Home Assistant for communication with voice services.
 
 This is an open standard of the Open Home Foundation.
 
-For more information about home assistant integration [check home assistant repo](/marcio.fernandes/homeassistant#wyoming).
+For more information about home assistant integration [check home assistant repo](/:root/marcio.fernandes/homeassistant#wyoming).
 
 [Docker compose file](./services/wyoming/docker-compose.yaml).
 
@@ -123,7 +132,7 @@ chown 100000:100020 /dev/serial/by-id/usb-ITead_Sonoff_Zigbee_3.0_USB_Dongle_Plu
 Links
 
 - [https://www.zigbee2mqtt.io/](https://www.zigbee2mqtt.io/)
-- [Home assistant integration](/marcio.fernandes/homeassistant#Zigbee2mqtt)
+- [Home assistant integration](/:root/marcio.fernandes/homeassistant#Zigbee2mqtt)
 - [Continuos Deploy - git action](./.gitea/workflows/services.zigbee2mqtt.yml)
 
 ## Host

casa-limbosolutions-com/sync-certs-job/docker-compose.yaml

@@ -13,8 +13,12 @@ configs:
       mkdir -p /tmp/.kube
 
       echo "Trace: Setup kube"
+   
+      echo "Trace: Processing KUBERNETES_CRT_AUTHORITY_DATA"
       base64 -d <<< "${KUBERNETES_CRT_AUTHORITY_DATA}" > "$${KUBERNETES_CRT_AUTHORITY}"
+      echo "Trace: Processing KUBERNETES_CRT_AUTHORITY_DATA"
       base64 -d <<< "${KUBERNETES_CLIENT_CRT_DATA}" > "$${KUBERNETES_CLIENT_CRT}"
+      echo "Trace: Processing KUBERNETES_CLIENT_KEY_DATA"
       base64 -d <<< "${KUBERNETES_CLIENT_KEY_DATA}" > "$${KUBERNETES_CLIENT_KEY}"
 
       # while true ; do

services/nginx/docker-compose.yaml

@@ -1,5 +1,3 @@
-version: '3'
-
 configs:
   run-sh:
     content: |
@@ -21,7 +19,6 @@ services:
       - 80:80
     networks:
       - public
-      - private
     restart: unless-stopped
     command: /bin/sh -c '/run.sh'
     configs:
@@ -39,7 +36,6 @@ networks:
   public:
     name: reverseproxy_public
     external: true
-  private:
+
-    name: reverseproxy_private
 
     

services/nginx/docker/nginx.conf.d/has.conf

@@ -5,7 +5,7 @@ map $http_upgrade $connection_upgrade {
 
 server {
     listen 80;
-    server_name casa.limbosolutions.com *.casa.limbosolutions.com;
+    server_name casa.limbosolutions.com *.casa.limbosolutions.com has.lan;
     return 301 https://has.casa.limbosolutions.com$request_uri;
 }
 

services/nginx/docker/nginx.conf.d/lms.lan.conf

@@ -1,9 +1,10 @@
-
-
 server {
-    listen 80;
+    server_name lms.casa.limbosolutions.com music.casa.limbosolutions.com;
-    proxy_buffering off;
+    listen 443 ssl;
-    server_name lms.lan music.lan;
+    ssl_certificate /etc/ssl/certs/casa-limbosolutions-com-certs/casa-limbosolutions-com-tls_tls.crt;
+    ssl_certificate_key /etc/ssl/certs/casa-limbosolutions-com-certs/casa-limbosolutions-com-tls_tls.key;
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ciphers HIGH:!aNULL:!MD5;
 
     location / {
         set $upstream lms-lms-1;
@@ -24,4 +25,8 @@ server {
     }
 }
 
-   
+server {
+    listen 80;
+    server_name lms.casa.limbosolutions.com music.casa.limbosolutions.com lms.lan music.lan;
+    return 301 https://lms.casa.limbosolutions.com$request_uri;
+}