Default¶
Namespace: default
| App | Storage | Notes |
|---|---|---|
| actual | — | |
| authentik | ceph-ssd | SSO provider, Postgres + Dragonfly, external access, cross-namespace ReferenceGrant |
| filebrowser | ceph-ssd | File manager, external access (drive.domain), kopiur backup |
| homebox | ceph-ssd | Postgres (cnpg component), kopiur backup |
| homepage | — | |
| immich | ceph-ssd | Postgres (immich17 cluster), Dragonfly (db2), GPU, external access |
| komga | ceph-ssd | External access, zeroscaler, kopiur backup |
| mealie | ceph-ssd | Postgres (cnpg component), external access, kopiur backup |
| pairdrop | — | |
| radicale | ceph-ssd | CalDAV/CardDAV server, external access, kopiur backup |
| rclone | — | NFS backup scaler via zeroscaler (nfs_bkup_probe) |
| rustfs | ceph-ssd | S3-compatible object storage, external access, native OIDC, kopiur backup |
| searxng | ceph-ssd | Dragonfly (db3), kopiur backup |
| smtp-relay | — | Outbound email relay, cluster-internal only |
| spoolman | ceph-ssd | ext-auth-internal, kopiur backup |
| thelounge | ceph-ssd | IRC client, kopiur backup |
| vaultwarden | ceph-ssd | Password manager, external access, kopiur backup |
Config Notes¶
Authentik
The SSO provider for the cluster. Runs its own Postgres database and Dragonfly cache. Uses a cross-namespace ReferenceGrant because other namespaces reference its outpost service (ak-outpost-authentik-embedded-outpost.default.svc.cluster.local:9000) in their SecurityPolicy resources.
Immich
Photo management with AI features. Uses the immich17 CNPG cluster (vectorchord extension for vector search), not the general pgsql-cluster. Dragonfly db2 for caching. Intel i915 GPU for machine learning tasks. External access via envoy-external.
RustFS
S3-compatible object storage. Exposes two routes: the web console at rustfs.${SECRET_DOMAIN} (port 9001) and the S3 API at r3.${SECRET_DOMAIN} (port 9000). Both are external via envoy-external. Native OIDC login via Authentik. Replaced MinIO in April 2026.
Searxng
Metasearch engine using Dragonfly db3 for caching. No external access — internal only.