Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• f7a9a03816 authentik HA: floating DNS hostname + failover-watcher main Scooby HuskyandClaude Sonnet 5 2026-08-20 17:43:08 -05:00
• 3e7643e67e authentik HA: fix Istio ambient mesh blocking VPS/witness streaming replication Scooby HuskyandClaude Sonnet 5 2026-08-19 00:47:34 -05:00
• a21a8601f3 Fix: replica.source is required unconditionally by the CNPG webhook Scooby Husky 2026-08-19 00:23:08 -05:00
• a095c27500 Fix CNPG distributed-topology validation errors Scooby Husky 2026-08-19 00:12:50 -05:00
• b77f0865d0 Wire CNPG streaming replication + distributed topology for pg-authentik pilot Scooby Husky 2026-08-19 00:08:23 -05:00
• a3e0ae3427 Fix etcd advertised WAN ports: 61379/61380, not 12379/12380 Scooby Husky 2026-08-19 00:01:31 -05:00
• c2f0f38012 Fix HA failover etcd: advertise via WAN port-forward, not the Netbird mesh IP Scooby Husky 2026-08-18 23:25:13 -05:00
• 5f52f2b36b Multi-site active failover pilot: home etcd member + Postgres NodePort exposure Scooby Husky 2026-08-18 21:12:45 -05:00
• 9b45cfd542 Widen VPS Authentik server liveness/readiness probes Scooby Husky 2026-08-18 19:01:01 -05:00
• 8e33cf0524 Fix n8n liveness probe: chart has no startupProbe, needs a longer runway Scooby Husky 2026-08-18 18:51:50 -05:00
• 08b8209455 Fix VPS Nextcloud DB connection (PGSSLMODE) and n8n probe timing Scooby Husky 2026-08-18 18:40:52 -05:00
• 444cb127bd Add missing n8n-main-persistence PVC on VPS Scooby Husky 2026-08-18 18:24:30 -05:00
• 5bc1be2f00 Replace DNS-flip failover watcher with static vps.huskypup.net subdomains Scooby Husky 2026-08-18 18:23:08 -05:00
• f98c997293 Vault OIDC login via Authentik: hostAlias + blueprint config Scooby Husky 2026-08-18 18:07:36 -05:00
• a1d6091122 Fix VPS replica clusters: match home's max_connections (recovery abort) Scooby Husky 2026-08-17 23:15:02 -05:00
• 6e054a46b6 Fix VPS replica clusters: barmanObjectStore serverName mismatch Scooby Husky 2026-08-17 22:56:51 -05:00
• a869a5a67f Add CNPG ScheduledBackup for authentik/n8n/nextcloud - WAL archiving alone isn't restorable Scooby Husky 2026-08-17 22:49:50 -05:00
• e86d5e1154 Fix vps-authentik presync: SA/Role/RoleBinding need PreSync hook ordering too Scooby Husky 2026-08-17 22:37:55 -05:00
• 85c916285e Phase 2: deploy n8n and Nextcloud warm standbys on the VPS Scooby Husky 2026-08-17 22:31:41 -05:00
• 1a657ad0a4 Phase 2: deploy Authentik warm standby on the VPS Scooby Husky 2026-08-17 22:28:10 -05:00
• f2213b56b4 Fix Gitea mirror: use service=git instead of service=gitlab Scooby Husky 2026-08-17 22:16:49 -05:00
• 777edf3895 Phase 2: deploy Gitea warm standby on the VPS Scooby HuskyandClaude Sonnet 5 2026-08-17 22:05:24 -05:00
• d6e8c2aa2d Optimize vault-restore: don't wait on condition=Ready (verified working already) Scooby HuskyandClaude Sonnet 5 2026-08-17 21:57:52 -05:00
• fb124201bb Fix vault-restore RBAC: add watch verb for kubectl wait Scooby HuskyandClaude Sonnet 5 2026-08-17 21:54:21 -05:00
• e2bdab8940 Fix vault-restore: authenticate raft snapshot restore with a real token Scooby HuskyandClaude Sonnet 5 2026-08-17 21:46:23 -05:00
• 62751f7d75 Fix vps-vault restore script: pod name is vps-vault-0, not vault-0 Scooby HuskyandClaude Sonnet 5 2026-08-17 21:43:26 -05:00
• d0c5563671 Phase 2: deploy Vault warm standby on the VPS Scooby HuskyandClaude Sonnet 5 2026-08-17 21:42:09 -05:00
• 8aed0bf98e Fix vault-raft-snapshot: mc download needs -L to follow redirects Scooby HuskyandClaude Sonnet 5 2026-08-17 21:15:40 -05:00
• 7206022a2b Pin VPS MinIO root credentials to a real Secret, fix regeneration bug Scooby HuskyandClaude Sonnet 5 2026-08-17 21:12:37 -05:00
• 7d73542645 Fix nextcloud-pvc-sync: add fsGroup for data access, fix restic cache dir Scooby HuskyandClaude Sonnet 5 2026-08-17 21:05:38 -05:00
• 7a6ecd14fe Bump rancher memory limit 2Gi -> 3Gi, was OOMKilling during restart recovery Scooby HuskyandClaude Sonnet 5 2026-08-17 21:01:48 -05:00
• 2fc7fb5b59 Fix Nextcloud Redis config: use externalRedis, not redis (bundled subchart toggle) Scooby HuskyandClaude Sonnet 5 2026-08-17 20:54:28 -05:00
• e2c8ef0fde Commit crowdsec-firewall-bouncer headless-service fix (was uncommitted) Scooby HuskyandClaude Sonnet 5 2026-08-17 20:51:47 -05:00
• 018eb3570f Build real pod-egress routing to the VPS, fix everything blocked by its absence Scooby HuskyandClaude Sonnet 5 2026-08-17 20:36:13 -05:00
• 07a59d3b34 Fix vault-raft-snapshot: detect active leader, suspend until VPS egress exists Scooby HuskyandClaude Sonnet 5 2026-08-17 19:56:12 -05:00
• e18308b750 Fix pg-n8n's long-recurring CNPG status-extraction error - missing AuthorizationPolicy rule Scooby HuskyandClaude Sonnet 5 2026-08-17 19:50:29 -05:00
• 2c8d29c51f Disable VPS MinIO backup on n8n/nextcloud/authentik CNPG clusters Scooby HuskyandClaude Sonnet 5 2026-08-17 19:45:04 -05:00
• ff638250d6 Disable CrowdSec online API - CAPI unreachable from home, egress routing gap found Scooby HuskyandClaude Sonnet 5 2026-08-17 19:37:33 -05:00
• c8643ca025 Add dedicated netbird router for crowdsec namespace Scooby HuskyandClaude Sonnet 5 2026-08-17 19:27:39 -05:00
• 33b0d018f9 Route CrowdSec CAPI/console-enroll traffic through VPS proxy Scooby HuskyandClaude Sonnet 5 2026-08-17 18:39:23 -05:00
• bbb80687ca Fix netbird-operator namespace reference in istio mesh policies Scooby HuskyandClaude Sonnet 5 2026-08-17 18:20:00 -05:00
• 3226169af8 Fix Vault kubernetes-auth reviewer token expiring 1hr after every boot Scooby HuskyandClaude Sonnet 5 2026-08-17 18:19:13 -05:00
• 9bb4ada1f5 Fix Redis CR permission denied on PVC (needs fsGroup) Scooby Husky 2026-08-17 17:20:16 -05:00
• a8b16fa4cb Fix Redis CR apiVersion/schema - v1beta2 doesn't exist, blocked whole nextcloud sync Scooby Husky 2026-08-17 16:56:20 -05:00
• 7b3669e9a6 Fix CNPG operator -> instance status communication + add CNPG health check Scooby Husky 2026-08-17 16:41:11 -05:00
• 99b8ca6be9 Fix Nextcloud OIDC client_id/secret - was hardcoded empty Scooby Husky 2026-08-17 16:33:47 -05:00
• 8372887ce1 Fix two long-standing bugs in the vault-init PreSync hook script Scooby Husky 2026-08-17 16:13:48 -05:00
• ee71e4f46f Fix DDNS/failover Cloudflare zone name and add restricted PSS securityContext Scooby Husky 2026-08-17 15:55:47 -05:00
• 983671ef50 Fix ArgoCD Redis connectivity broken by ambient mesh HBONE NetworkPolicy gap Scooby Husky 2026-08-17 15:08:33 -05:00
• 7990f1fa47 Add VPS warm-standby/backup site (Phase 0-1b) Scooby Husky 2026-08-17 14:59:26 -05:00
• 5163403e24 Scale down non-critical replicas for homelab resource savings Scooby HuskyandClaude Opus 4.6 2026-03-15 23:00:48 -05:00
• fa23e5084c Reduce GitLab latency: increase Gitaly CPU limit and Puma workers Scooby HuskyandClaude Opus 4.6 2026-03-15 22:47:39 -05:00
• a8b9064248 Set Grafana deployment strategy to Recreate for RWO PVC compatibility Scooby HuskyandClaude Opus 4.6 2026-03-15 22:33:16 -05:00
• ff00f666a0 Add privileged PodSecurity label to 8 namespaces for NetBird router Scooby HuskyandClaude Opus 4.6 2026-03-15 22:27:39 -05:00
• 02632d06a4 Fix NetBird service annotations: use netbird.io/expose for operator Scooby HuskyandClaude Opus 4.6 2026-03-15 16:25:35 -05:00
• 2edc8a156e Fix netbird-operator: add self-hosted management URL Scooby HuskyandClaude Opus 4.6 2026-03-15 16:08:51 -05:00
• 0c16785116 Fix Guacamole OIDC session persistence via Istio DestinationRule Scooby HuskyandClaude Opus 4.6 2026-03-15 15:11:15 -05:00
• f71dbdb689 Add Envoy Gateway cookie-based session persistence for Guacamole OIDC Scooby HuskyandClaude Opus 4.6 2026-03-15 14:55:53 -05:00
• b9fd5a9461 Add session affinity to Guacamole service for OIDC flow Scooby HuskyandClaude Opus 4.6 2026-03-15 14:47:25 -05:00
• e29eb9611b Make Authentik the primary login method for Guacamole Scooby HuskyandClaude Opus 4.6 2026-03-15 14:24:53 -05:00
• 987f91c877 Enable CephFS CSI driver for SMB gateway and CephFS volumes Scooby HuskyandClaude Opus 4.6 2026-03-15 12:27:00 -05:00
• 7eae427d1a Scale services to 2+ replicas for HA Scooby HuskyandClaude Opus 4.6 2026-03-15 03:08:49 -05:00
• 38b1c16c1e Update rook-ceph-operator chart to v1.19.2 and remove stale comment Scooby HuskyandClaude Opus 4.6 2026-03-14 21:25:22 -05:00
• 5d09fb86e7 Add GitLab Redis initializer ordering fix Scooby HuskyandClaude Opus 4.6 2026-03-14 20:26:24 -05:00
• c0fd93c73b Upgrade Ceph to v19.2.3 (Squid) Scooby HuskyandClaude Opus 4.6 2026-03-14 18:38:10 -05:00
• a93df9375a Add talos-cp-02 back to Rook-Ceph nodes list Scooby HuskyandClaude Opus 4.6 2026-03-14 16:31:13 -05:00
• 2643d5e0bf Fix TeslaMate DB corruption and Rook-Ceph reconcile hang Scooby HuskyandClaude Opus 4.6 2026-03-14 14:53:31 -05:00
• 8df30c11ee Re-enable Ceph dashboard SSL to fix SAML http/https URL mismatch Scooby HuskyandClaude Opus 4.6 2026-03-14 13:56:33 -05:00
• fb0ed0071f Set X-Forwarded-Proto header for Ceph dashboard SAML authentication Scooby HuskyandClaude Opus 4.6 2026-03-14 13:48:35 -05:00
• 7c184f9d14 Fix Ceph dashboard DestinationRule: disable TLS to match dashboard config Scooby HuskyandClaude Opus 4.6 2026-03-14 13:41:57 -05:00
• bc37f9d1a4 Complete OSD migration: remove temp Kyverno policy, fix talos-cp-02 device name Scooby HuskyandClaude Opus 4.6 2026-03-13 03:47:14 -05:00
• 1a8ef4347f Restore Ceph dashboard Istio VirtualService on port 7000 Scooby HuskyandClaude Opus 4.6 2026-03-13 00:19:11 -05:00
• d27b90ba19 Revert external-dns gateway-httproute source Scooby HuskyandClaude Opus 4.6 2026-03-13 00:11:23 -05:00
• 3244fdf611 Allow envoy-gateway-system ingress to vault and authentik Scooby HuskyandClaude Opus 4.6 2026-03-12 23:59:53 -05:00
• 7a9703f3bc Add gateway-httproute source to external-dns Scooby HuskyandClaude Opus 4.6 2026-03-12 23:50:58 -05:00
• 13ff2dafd6 Remove old Istio VirtualService for Ceph dashboard Scooby HuskyandClaude Opus 4.6 2026-03-12 23:49:32 -05:00
• 59dd4dcda2 Enable directory recursion for Cilium manifests source Scooby HuskyandClaude Opus 4.6 2026-03-12 23:35:09 -05:00
• c199715276 Allow envoy-gateway-system ingress to rook-ceph for dashboard Scooby HuskyandClaude Opus 4.6 2026-03-12 23:24:26 -05:00
• 31113ecf16 Fix Ceph dashboard Backend to use HTTP port 7000 Scooby HuskyandClaude Opus 4.6 2026-03-12 22:32:09 -05:00
• b795f5aa8f Add Kyverno PolicyExceptions for third-party charts Scooby HuskyandClaude Opus 4.6 2026-03-10 22:43:22 -05:00
• 0d39bcddc9 Add ServiceEntry for wildcard host to fix Kiali KIA0104 Scooby HuskyandClaude Opus 4.6 2026-03-10 22:35:20 -05:00
• 9385a13d5f Add manifests source to scylla-manager ArgoCD Application Scooby HuskyandClaude Opus 4.6 2026-03-10 22:28:10 -05:00
• e1960d7071 Fix create-block-db-symlink to use activate-osd volume Scooby HuskyandClaude Opus 4.6 2026-03-10 22:25:31 -05:00
• 550ee8fd13 Fix Kyverno OSD policy init container ordering Scooby HuskyandClaude Opus 4.6 2026-03-10 22:15:20 -05:00
• 64723eb0ba Allow kube-apiserver webhook calls to netbird namespace Scooby HuskyandClaude Opus 4.6 2026-03-10 22:09:55 -05:00
• 511ba55b30 Remove dedicated DB devices from Rook-Ceph OSD configuration Scooby HuskyandClaude Opus 4.6 2026-03-10 22:06:34 -05:00
• 34a7cf95d0 Add HTTP proxy trust config to Home Assistant init container Scooby HuskyandClaude Opus 4.6 2026-03-10 21:51:24 -05:00
• f8eea2ed45 Remove nessus from cluster configuration Scooby HuskyandClaude Opus 4.6 2026-03-10 21:02:45 -05:00
• c5e13377bd Fix talos client key PEM header for nginx compatibility Scooby HuskyandClaude Opus 4.6 2026-03-10 20:31:31 -05:00
• 4ed06c1aa1 Add envoy-gateway to Kiali gateway_api_classes Scooby HuskyandClaude Opus 4.6 2026-03-10 20:28:15 -05:00
• 712307da14 Fix ztunnel PodMonitor port name to match actual container port Scooby HuskyandClaude Opus 4.6 2026-03-10 20:03:03 -05:00
• 6646943a98 Fix talos-client-cert secret namespace Scooby HuskyandClaude Opus 4.6 2026-03-10 20:00:36 -05:00
• 7a8eb2046f Fix n8n, gitlab, and netbird-operator degraded states Scooby HuskyandClaude Opus 4.6 2026-03-10 19:53:10 -05:00
• 1d5e216b68 Add skipCrds for envoy-gateway to avoid CRD conflicts Scooby HuskyandClaude Opus 4.6 2026-03-10 19:48:06 -05:00
• 8bde33f4d1 Remove nessus app and fix envoy-gateway OCI chart bug Scooby HuskyandClaude Opus 4.6 2026-03-10 19:41:36 -05:00
• d304bd257d Increase GitLab webservice resources to fix slow initial response Scooby HuskyandClaude Opus 4.6 2026-03-10 19:39:32 -05:00
• aa7c5d2cb2 Add ignoreDifferences for crowdsec-lapi secret checksum Scooby HuskyandClaude Opus 4.6 2026-03-10 19:12:21 -05:00
• f7cb1c6986 Disable auto-sync for envoy-gateway (ArgoCD OCI bug) Scooby HuskyandClaude Opus 4.6 2026-03-10 19:08:56 -05:00
• c87abdf17a Revert envoy-gateway chart format to use chart field Scooby HuskyandClaude Opus 4.6 2026-03-10 19:03:38 -05:00
• 8a0b64203d Fix envoy-gateway OCI chart reference Scooby HuskyandClaude Opus 4.6 2026-03-10 18:19:29 -05:00