aly.codes
[READ-ONLY] Mirror of https://github.com/alyraffauf/infra. Hybrid cloud cluster monorepo with Ansible, K8s, NixOS, and Terraform.
cute.haus
ansible
k8s
nix
nix-flake
nixos
terraform
1{
2 "$schema": "https://docs.renovatebot.com/renovate-schema.json",
3 "extends": ["config:recommended", ":dependencyDashboard"],
4 "timezone": "America/New_York",
5 "schedule": ["* 22-23,0-5 * * *"],
6 "labels": ["dependencies"],
7
8 "nix": {
9 "enabled": true
10 },
11
12 "flux": {
13 "managerFilePatterns": ["/^k8s/flux/.*\\.ya?ml$/"]
14 },
15
16 "lockFileMaintenance": {
17 "enabled": true,
18 "automerge": true
19 },
20
21 "customManagers": [
22 {
23 "customType": "regex",
24 "managerFilePatterns": ["/^k8s/charts/.*\\.ya?ml$/"],
25 "matchStrings": [
26 "\\s*(?:image|imageName|pluginImage):\\s+[\"']?(?<depName>[^\\s\"'{}]+?):(?<currentValue>[^\\s\"'@{}]+)@(?<currentDigest>sha256:[a-f0-9]{64})[\"']?"
27 ],
28 "datasourceTemplate": "docker"
29 },
30 {
31 "customType": "regex",
32 "managerFilePatterns": ["/^k8s/charts/.*\\.ya?ml$/"],
33 "matchStrings": [
34 "repository:\\s+[\"']?(?<depName>[^\\s\"']+)[\"']?\\s+tag:\\s+[\"']?(?<currentValue>[^\\s\"'@]+)@(?<currentDigest>sha256:[a-f0-9]{64})[\"']?"
35 ],
36 "datasourceTemplate": "docker"
37 },
38 {
39 "description": "Shared image pins in the global values file (the cute-haus-global ConfigMap is generated from it)",
40 "customType": "regex",
41 "managerFilePatterns": ["/^k8s/flux/sources/global\\.values\\.ya?ml$/"],
42 "matchStrings": [
43 "\\s+\\w+:\\s+(?<depName>[^:\\s]+(?:/[^:\\s]+)*):(?<currentValue>[^@\\s]+)@(?<currentDigest>sha256:[a-f0-9]{64})"
44 ],
45 "datasourceTemplate": "docker"
46 },
47 {
48 "description": "Plex plugin/scanner bundles pinned to a git commit (repo/branch/rev)",
49 "customType": "regex",
50 "managerFilePatterns": ["/^k8s/charts/.*\\.ya?ml$/"],
51 "matchStrings": [
52 "repo:\\s+[\"']?(?<depName>[^\\s\"']+)[\"']?\\s+branch:\\s+[\"']?(?<currentValue>[^\\s\"']+)[\"']?\\s+rev:\\s+[\"']?(?<currentDigest>[a-f0-9]{40})[\"']?"
53 ],
54 "packageNameTemplate": "https://github.com/{{{depName}}}",
55 "datasourceTemplate": "git-refs"
56 }
57 ],
58
59 "packageRules": [
60 {
61 "description": "Skip tranquil-pds (atcr.io needs separate creds)",
62 "enabled": false,
63 "matchPackageNames": ["/tranquil/"]
64 },
65 {
66 "description": "Skip Forgejo (Forgejo registries resolve with skopeo but return no-result in Renovate)",
67 "enabled": false,
68 "matchPackageNames": [
69 "codeberg.org/forgejo/forgejo",
70 "data.forgejo.org/forgejo/forgejo"
71 ]
72 },
73 {
74 "description": "Auto-merge routine updates after CI passes",
75 "matchUpdateTypes": ["minor", "patch", "digest", "pin", "pinDigest"],
76 "automerge": true
77 },
78 {
79 "description": "Major bumps stay manual",
80 "matchUpdateTypes": ["major"],
81 "automerge": false
82 }
83 ],
84
85 "vulnerabilityAlerts": {
86 "enabled": true,
87 "labels": ["security"]
88 }
89}