mirror of
https://github.com/shadoll/helm-charts.git
synced 2026-08-28 03:27:08 +00:00
shaandClaude Opus 5
cf2aebf298
A session cookie scoped to one registrable domain is never sent to a host under
another, so an app on a second domain could not be protected by this instance at
all. It failed with a 500 naming the cause: "return URL host does not match any
configured cookie domain".
`domains` is now a list of {domain, authHost}, matching the upstream
`server.domains` schema. The chart previously emitted `server.hostname` and
`cookies.domain`, which are not in 4.14.1's documented options — a deprecated
form that still worked. The single-domain values remain as shorthand and fold
into one entry, so an existing release renders the same protection it did before.
`portals` is a list too. A portal is one OAuth2 client, chosen by the middleware
address, so two portals means two Pocket ID applications — which is how access
can be separated per domain rather than merely shared across them. Each portal
gets its own Middleware and its own mounted secret, under
/var/run/secrets/traefik-forward-auth/<portal>/.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Shadoll Helm Charts
A collection of custom and optimized Helm charts for self-hosted applications on Kubernetes.
Repository Structure
/<chart-name>: Individual application charts (e.g.jellyfin,home-assistant,esphome)./docs: Detailed application documentation and guides.
Quick Start
1. Clone the repository
git clone https://github.com/shadoll/helm-charts.git
cd helm-charts
2. Available Charts
| Chart | Description | Status |
|---|---|---|
| Jellyfin | Media server with PostgreSQL support | Ready |
| Home Assistant | Home automation with PostgreSQL recorder and managed secrets | Ready |
| ESPHome | ESPHome dashboard with host network for device discovery | Ready |
| Frigate | NVR with Rockchip RK3588 hardware acceleration (rkmpp + rknn) | Ready |
3. Usage with FluxCD
To use these charts in a FluxCD environment, add the repository as a Source:
apiVersion: source.toolkit.fluxcd.io/v1
kind: GitRepository
metadata:
name: shadoll-charts
namespace: flux-system
spec:
interval: 1h
url: https://github.com/shadoll/helm-charts
ref:
branch: main
Then reference the chart in your HelmRelease:
spec:
chart:
spec:
chart: ./jellyfin
sourceRef:
kind: GitRepository
name: shadoll-charts
Maintenance
To enable automated Signal alerts for chart updates, configure the following GitHub Secrets in this repository:
SIGNAL_URL: The full URL to your Signal gateway (e.g.https://signal.h.shadoll.dev/v2/send).SIGNAL_SENDER: The phone number used to send the message.SIGNAL_RECIPIENT: The phone number(s) to receive the alert.
© 2026 Shadoll. Managed with ❤️ for the Home Lab.