aly.codes / infra
Hybrid cloud cluster monorepo with Ansible, K8s, NixOS, and Terraform. cute.haus
ansible terraform nix k8s
0
Fork 0

Configure Feed

Select the types of activity you want to include in your feed.

k8s: provision nextcloud namespace, TLS cert, and local valkey

Nextcloud is being migrated to a dedicated namespace. Add the namespace,
replicate the cute-haus-tls wildcard cert into it, and stand up a
nextcloud-local valkey (256mb cap) so nextcloud no longer shares the
default-ns valkey's DB 0 with paperless.

Aly Raffauf (Jul 1, 2026, 11:23 PM EDT) 5f18874c 1787d090

+46
+3
k8s/charts/cert-manager-issuers/values.yaml
··· 12 12 - name: cute-haus-tls 13 13 namespace: default 14 14 domain: cute.haus 15 + - name: cute-haus-tls 16 + namespace: nextcloud 17 + domain: cute.haus 15 18 - name: aly-social-tls 16 19 namespace: default 17 20 domain: aly.social
+1
k8s/flux/platform/kustomization.yaml
··· 7 7 - pg-shared.yaml 8 8 - tika.yaml 9 9 - valkey.yaml 10 + - valkey-nextcloud.yaml
+37
k8s/flux/platform/valkey-nextcloud.yaml
··· 1 + apiVersion: helm.toolkit.fluxcd.io/v2 2 + kind: HelmRelease 3 + metadata: 4 + name: valkey-nextcloud 5 + namespace: flux-system 6 + spec: 7 + interval: 15m 8 + releaseName: valkey 9 + targetNamespace: nextcloud 10 + install: 11 + remediation: 12 + retries: 3 13 + upgrade: 14 + remediation: 15 + retries: 3 16 + chart: 17 + spec: 18 + chart: ./k8s/charts/valkey 19 + interval: 15m 20 + reconcileStrategy: Revision 21 + sourceRef: 22 + kind: GitRepository 23 + name: flux-system 24 + namespace: flux-system 25 + valuesFrom: 26 + - kind: ConfigMap 27 + name: cute-haus-global 28 + valuesKey: values.yaml 29 + # Nextcloud-only instance: file locks + session + cache are small and 30 + # ephemeral, so cap memory well below the shared instance's 1gb. 31 + values: 32 + args: 33 + - valkey-server 34 + - --maxmemory 35 + - 256mb 36 + - --maxmemory-policy 37 + - volatile-lru
+5
k8s/flux/secrets/namespaces.yaml
··· 21 21 apiVersion: v1 22 22 kind: Namespace 23 23 metadata: 24 + name: nextcloud 25 + --- 26 + apiVersion: v1 27 + kind: Namespace 28 + metadata: 24 29 name: websites