Scooby HuskyandClaude Sonnet 5 ca94282552 GitLab cross-site replication Phase 1b: secret material sync ...

PushSecret (home) + ExternalSecret (VPS) pairs for the four
chart-generated secrets whose values must match before Phase 1c's
Postgres replication goes live: gitlab-rails-secret (secret_key_base/
db_key_base/otp_key_base/openid_connect_signing_key, all in one
secrets.yml key - confirmed live, not four separate keys as first
assumed), gitlab-gitlab-shell-secret, gitlab-gitaly-secret,
gitlab-praefect-secret (the latter two also needed for Phase 2's
cross-site gRPC auth). Same pattern as
infrastructure/authentik/manifests/ha-postgres-app-pushsecret.yaml.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-08-22 13:08:22 -05:00

apps

GitLab cross-site replication Phase 1b: secret material sync

2026-08-22 13:08:22 -05:00

argocd-apps

Deploy real GitLab on the VPS (not just Gitea)

2026-08-20 21:04:48 -05:00

charts

Remove nessus app and fix envoy-gateway OCI chart bug

2026-03-10 19:41:36 -05:00

environments

Initial commit

2026-03-09 20:21:35 -05:00

hooks

Initial commit

2026-03-09 20:21:35 -05:00

infrastructure

GitLab cross-site replication Phase 1b: secret material sync

2026-08-22 13:08:22 -05:00

scripts

authentik HA: floating DNS hostname + failover-watcher

2026-08-20 17:43:08 -05:00

.gitignore

Initial commit

2026-03-09 20:21:35 -05:00

bootstrap.yaml

Set GitLab repo URL and update ArgoCD hostAliases

2026-03-09 22:18:26 -05:00

CLAUDE.md

Initial commit

2026-03-09 20:21:35 -05:00

S

Description

No description provided

1.1 MiB

Languages

Shell 94%

Go Template 6%