Date: 2026-02-06
Host running this work: drg-k8s
Goal: Migrate gitea.app.lan from old docker deployment on kryptovisor to this Kubernetes instance without recreating accounts/config.
kryptovisor.auth.home.lan (192.168.1.4)gitea-gitea-private-1 (image gitea/gitea:latest)1.24.6sqlite3/mnt/fastdata/docker/apps/gitea/data/gitea-private -> /data/mnt/bigdata/personal/projects/git -> /data/git222 -> container 22 (SSH)ROOT_URL: https://gitea-private.app.lanDOMAIN: gitea-private.app.lanSSH_PORT: 222Notes:
gitea.app.lan (not gitea-private.app.lan). We should confirm whether gitea.app.lan is an existing Traefik router/DNS alias pointing at the same instance, or a different deployment./mnt/fastdata/docker/apps/gitea//mnt/fastdata/docker/apps/gitea/config/docker/docker-compose.yml/mnt/fastdata/docker/apps/gitea/config/docker/docker-compose.gitea.private.yml.env exists at /mnt/fastdata/docker/apps/gitea/config/docker/.env and likely contains non-public values. Do not copy into docs.kubectl is currently unable to connect: kubeconfig points at https://192.168.1.216:6443 and fails with no route to host.enp1s0 has 192.168.1.9/24 (not 192.168.1.216)./etc/kubernetes/manifests/kube-apiserver.yaml is configured with --advertise-address=192.168.1.216.crictl shows both etcd and kube-apiserver containers are Exited.kube-apiserver logs show it cannot connect to etcd on 127.0.0.1:2379 (connection refused) and eventually fails creating leases./etc/hosts contains: 127.0.1.1 drg-k8s drg-k8s.auth.home.lan.Impact:
gitea.app.lan vs gitea-private.app.lan./data/git/repositories).gitea, PVC(s) backed by NFS (/mnt/fastdata or /mnt/bigdata) or an existing StorageClass./mnt/fastdata/docker/apps/gitea/config/docker/.envapp.ini contents (may include secrets)The Kubernetes control plane was moved to use 192.168.1.9 as its stable address, and 192.168.1.216 was removed from the node.
Backups/rollback artifacts are under:
/home/ax_julian/temp/reip-2026-02-06/Change record:
/srv/system-documentation/changes/2026-02-06-k8s-control-plane-reip-to-192-168-1-9.mdgitea-private.app.lan)Goal: remove legacy gitea-private.app.lan remnants from kryptovisor after the Kubernetes cutover.
Actions taken on kryptovisor.auth.home.lan (192.168.1.4):
docker rm gitea-gitea-private-1/mnt/fastdata/docker/apps/gitea/config/docker/docker-compose.gitea.private.yml/mnt/fastdata/docker/apps/gitea/backups/disabled-compose/2026-02-06//mnt/fastdata/docker/apps/gitea/data/gitea-private/mnt/fastdata/docker/apps/gitea/data/_archived/gitea-private-2026-02-06/mnt/fastdata/docker/apps/traefik/config/docker/cert_conf.ymldocker restart traefik-traefik-1) to force reloadExpected behavior:
https://gitea.app.lan/ returns 200https://gitea-private.app.lan/ returns 404