build homekit-bridge image

.woodpecker/build-homekit.yml

@@ -0,0 +1,35 @@
+when:
+  event: [tag]
+
+steps:
+  build-homekit-arm64:
+    image: docker:27.2.0-dind
+    privileged: true
+    environment:
+      REGISTRY:
+        from_secret: local_registry
+      USERNAME:
+        from_secret: local_username
+      PASSWORD:
+        from_secret: local_password
+    commands:
+      - echo "Logging in to registry $REGISTRY as $USERNAME"
+      - echo "$PASSWORD" | docker login "$REGISTRY" -u "$USERNAME" --password-stdin
+      - docker version
+      - echo "Enabling binfmt for multi-arch builds"
+      - docker run --privileged --rm tonistiigi/binfmt --install all
+      - echo "Creating and bootstrapping buildx builder"
+      - docker buildx create --use --name multiarch-builder || docker buildx use multiarch-builder
+      - docker buildx inspect --bootstrap
+      - export IMAGE_TAG="${FORGE_NAME}/${CI_REPO}/homekit:${CI_COMMIT_TAG}"
+      - echo "Building ARM64 image: $IMAGE_TAG"
+      - docker buildx build \
+          --platform linux/arm64 \
+          -f apps/homekit/Dockerfile \
+          -t "$IMAGE_TAG" \
+          --push .
+    when:
+      event: [tag]
+      ref:
+        exclude:
+          - refs/tags/*-configchange

.woodpecker/build.yml

@@ -1,3 +1,6 @@
+when:
+  event: [tag]
+
 matrix:
   APP:
     - ui

.woodpecker/deploy.yml

@@ -1,3 +1,10 @@
+when:
+  event: [tag]
+
+depends_on:
+  - build
+  - predeploy
+
 matrix:
   APP:
     - ui
@@ -24,6 +31,3 @@ steps:
         exclude:
           - refs/tags/*-configchange
 
-depends_on:
-  - build
-  - predeploy

.woodpecker/ingress.yml

@@ -0,0 +1,23 @@
+when:
+  event: [tag]
+
+depends_on:
+  - deploy
+
+steps:
+  apply_ingress:
+    image: quay.io/wollud1969/k8s-admin-helper:0.3.4
+    environment:
+      KUBE_CONFIG_CONTENT:
+        from_secret: kube_config
+      NAMESPACE: "homea2"
+    commands:
+      - printf "$KUBE_CONFIG_CONTENT" > /tmp/kubeconfig
+      - export KUBECONFIG=/tmp/kubeconfig
+      - kubectl apply -f deployment/ingress.yaml -n $NAMESPACE
+    when:
+      event: [tag]
+      ref:
+        exclude:
+          - refs/tags/*-configchange
+

.woodpecker/predeploy.yml

@@ -1,3 +1,6 @@
+when:
+  event: [tag]
+
 steps:
   create_namespace:
     image: quay.io/wollud1969/k8s-admin-helper:0.3.4

apps/abstraction/Dockerfile

@@ -10,7 +10,9 @@ ENV PYTHONDONTWRITEBYTECODE=1 \
     MQTT_PORT=1883 \
     REDIS_HOST=localhost \
     REDIS_PORT=6379 \
-    REDIS_DB=0
+    REDIS_DB=0 \
+    REDIS_CHANNEL=ui:updates
+
 
 # Create non-root user
 RUN addgroup -g 10001 -S app && \

apps/homekit/Dockerfile

@@ -0,0 +1,30 @@
+FROM python:3.12-slim
+
+# Environment defaults (can be overridden at runtime)
+ENV PYTHONUNBUFFERED=1 \
+    HOMEKIT_NAME="Home Automation Bridge" \
+    HOMEKIT_PIN="031-45-154" \
+    HOMEKIT_PORT="51826" \
+    API_BASE="http://api:8001" \
+    HOMEKIT_API_TOKEN="" \
+    HOMEKIT_PERSIST_FILE="/data/homekit.state"
+
+WORKDIR /app
+
+# Copy only requirements first for better build caching
+COPY apps/homekit/requirements.txt ./apps/homekit/requirements.txt
+
+RUN pip install --no-cache-dir --upgrade pip \
+    && pip install --no-cache-dir -r apps/homekit/requirements.txt
+
+# Copy full source tree
+COPY . /app
+
+# Expose HomeKit TCP port (mDNS uses UDP 5353 via host network)
+EXPOSE 51826/tcp
+
+# Volume for persistent HomeKit state (pairings etc.)
+VOLUME ["/data"]
+
+# Start the HomeKit bridge
+CMD ["python", "-m", "apps.homekit.main"]

apps/homekit/docker-compose.yaml

@@ -0,0 +1,28 @@
+services:
+  homekit-bridge:
+    build:
+      context: ../..
+      dockerfile: apps/homekit/Dockerfile
+    container_name: homekit-bridge
+
+    # Required for mDNS/Bonjour to work properly
+    network_mode: host
+
+    environment:
+      - HOMEKIT_NAME=Home Automation Bridge
+      - HOMEKIT_PIN=031-45-154
+      - HOMEKIT_PORT=51826
+      
+      - API_BASE=http://homea2-api-internal.hottis.de
+      - HOMEKIT_API_TOKEN=
+
+      - HOMEKIT_PERSIST_FILE=/data/homekit.state
+
+    volumes:
+      - homekit_data:/data
+
+    restart: unless-stopped
+
+volumes:
+  homekit_data:
+    driver: local

apps/rules/Dockerfile

@@ -6,7 +6,7 @@ FROM python:3.14-alpine
 # Prevent Python from writing .pyc files and enable unbuffered output
 ENV PYTHONDONTWRITEBYTECODE=1 \
     PYTHONUNBUFFERED=1 \
-    RULES_CONFIG=config/rules.yaml \
+    RULES_CONFIG=/app/config/rules.yaml \
     MQTT_BROKER=172.16.2.16 \
     MQTT_PORT=1883 \
     REDIS_HOST=localhost \

deployment/api-deployment.yaml

@@ -52,11 +52,6 @@ spec:
             configMapKeyRef:
               name: home-automation-environment
               key: SHARED_REDIS_DB
-        - name: REDIS_CHANNEL
-          valueFrom:
-            configMapKeyRef:
-              name: home-automation-environment
-              key: API_REDIS_CHANNEL
         volumeMounts:
         - name: config-volume
           mountPath: /app/config

deployment/configmap.yaml

@@ -16,8 +16,6 @@ data:
   UI_API_BASE: "https://homea2-api.hottis.de"
   UI_BASE_PATH: "/"
   
-  # API specific environment variables
-  API_REDIS_CHANNEL: "ui:updates"
   
-  # Rules specific environment variables
-  RULES_RULES_CONFIG: "/app/config/rules.yaml"
+  
+  

deployment/ingress.yaml

@@ -59,4 +59,21 @@ spec:
       services:
         - name: api
           port: 80
-
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: api-internal
+spec:
+  ingressClassName: traefik-internal
+  rules:
+    - host: homea2-api-internal.hottis.de
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: api
+                port:
+                  number: 80

deployment/rules-deployment.yaml

@@ -48,11 +48,6 @@ spec:
             configMapKeyRef:
               name: home-automation-environment
               key: SHARED_REDIS_DB
-        - name: RULES_CONFIG
-          valueFrom:
-            configMapKeyRef:
-              name: home-automation-environment
-              key: RULES_RULES_CONFIG
         volumeMounts:
         - name: config-volume
           mountPath: /app/config