 Ruben Hensen
|
72f49bed51
|
Set resource requests from measured usage
|
2026-10-25 07:08:16 +01:00 |
|
|
Ruben Hensen
|
f4b42757cd
|
backup-testing: remove k3s's anonymous volumes too
|
2026-10-25 07:04:17 +01:00 |
|
|
Ruben Hensen
|
f529bd99ee
|
docs: triage PR 31
|
2026-10-25 07:02:07 +01:00 |
|
|
Ruben Hensen
|
74dec430b8
|
docs: the restore test is ready to run
|
2026-10-25 07:01:04 +01:00 |
|
|
Ruben Hensen
|
6fe0acc061
|
backup-testing: a restore test from a read-only copy of the bucket
|
2026-10-25 07:00:49 +01:00 |
|
|
Ruben Hensen
|
bb34b601d9
|
docs: the system backups' snapshots hold 258 GiB
|
2026-10-25 04:35:58 +01:00 |
|
|
Ruben Hensen
|
e98668d5fa
|
docs: the cluster check has six parts
|
2026-10-25 04:35:02 +01:00 |
|
|
Ruben Hensen
|
389f911823
|
gatus: also report unhealthy Argo CD apps and CNPG clusters
|
2026-10-25 04:34:32 +01:00 |
|
|
Ruben Hensen
|
8f1c6a5b6e
|
docs: record the repo rules
|
2026-10-25 04:33:01 +01:00 |
|
|
Ruben Hensen
|
770631fdc0
|
ci: check the repo's own manifests for secrets in git and unpinned images
|
2026-10-25 04:32:13 +01:00 |
|
|
Ruben Hensen
|
855317b84d
|
freshrss: pin the alpine/git init container
|
2026-10-25 04:32:13 +01:00 |
|
|
Ruben Hensen
|
d69f2638d1
|
docs: record the vulnerability scan and the old Longhorn instance manager
|
2026-10-25 04:29:57 +01:00 |
|
|
Ruben Hensen
|
90e552c9f5
|
docs: update the roadmap's state
|
2026-10-25 04:25:43 +01:00 |
|
|
Ruben Hensen
|
ad14995ba0
|
docs: record the wider Renovate coverage
|
2026-10-25 04:25:10 +01:00 |
|
|
Ruben Hensen
|
c359384ade
|
renovate: look at every app folder, and at CNPG images
|
2026-10-25 04:24:56 +01:00 |
|
|
Ruben Hensen
|
a4fc386ee8
|
docs: record the new probes
|
2026-10-25 04:22:28 +01:00 |
|
|
Ruben Hensen
|
0dc0bc4322
|
docs: authentik's base URL is already set
|
2026-10-25 04:22:06 +01:00 |
|
|
Ruben Hensen
|
d843f31d86
|
serpbear: add health probes
|
2026-10-25 04:19:29 +01:00 |
|
|
Ruben Hensen
|
da23357946
|
freshrss: add health probes
|
2026-10-25 04:19:29 +01:00 |
|
|
Ruben Hensen
|
b9d88f41b9
|
gitea: add health probes
|
2026-10-25 04:19:29 +01:00 |
|
|
Ruben Hensen
|
3c4a8cc8db
|
docs: bring the authentik README up to date
|
2026-10-25 04:16:48 +01:00 |
|
|
Ruben Hensen
|
d17e78130d
|
docs: record metrics-server and plan the restore test
|
2026-10-25 04:15:43 +01:00 |
|
|
Ruben Hensen
|
22c5a325d6
|
Add metrics-server
|
2026-10-25 04:11:59 +01:00 |
|
|
Ruben Hensen
|
ef07307f93
|
renovate: keep CI's Helm at Argo CD's version
|
2026-10-25 04:10:30 +01:00 |
|
|
Ruben Hensen
|
aa940134ea
|
docs: record the CI and the Renovate triage
|
2026-10-25 04:10:14 +01:00 |
|
|
Ruben Hensen
|
f86ed09cd8
|
renovate: drop the github-tags manager, which duplicated the argocd one
|
2026-10-25 04:09:52 +01:00 |
|
|
Ruben Hensen
|
6d2bc379ba
|
ci: retry when a registry rate-limits
|
2026-10-25 04:06:53 +01:00 |
|
|
Ruben Hensen
|
67c21c30d8
|
Render and validate every app on PRs and pushes
|
2026-10-25 03:57:24 +01:00 |
|
|
Ruben Hensen
|
0c52d8a467
|
apps: list external-snapshotter's automated sync once
|
2026-10-25 03:57:24 +01:00 |
|
|
Ruben Hensen
|
f2e4c5aff6
|
docs: record the backup check
|
2026-10-25 03:49:43 +01:00 |
|
|
Ruben Hensen
|
d836e4608c
|
gatus: check backups and Vault's seal from inside the cluster
|
2026-10-25 03:48:05 +01:00 |
|
|
Ruben Hensen
|
1f56e67e8b
|
docs: what the disk did in the last day, and foto's DNS
|
2026-10-25 03:42:13 +01:00 |
|
|
Ruben Hensen
|
cadac4cebf
|
docs: record the cleanup and what is left of it
|
2026-10-25 03:29:55 +01:00 |
|
|
Ruben Hensen
|
bc71061db7
|
Remove commented-out files, the empty secrets app and a stale script copy
|
2026-10-25 03:27:32 +01:00 |
|
|
Ruben Hensen
|
7d3a64e5c8
|
docs: record the NetworkPolicies for the other apps and Vault
|
2026-10-25 03:24:07 +01:00 |
|
|
Ruben Hensen
|
e137e79b75
|
vault: only ESO, Envoy and the node reach Vault
|
2026-10-25 03:21:53 +01:00 |
|
|
Ruben Hensen
|
67dc4f0783
|
Limit the other public apps to their own pods, DNS and the internet
|
2026-10-25 03:21:53 +01:00 |
|
|
Ruben Hensen
|
684f536f2f
|
docs: record the NetworkPolicies for immich, mbgwp and authentik
|
2026-10-25 03:17:11 +01:00 |
|
|
Ruben Hensen
|
1439466af4
|
authentik: limit the pods to each other, DNS and the internet
|
2026-10-25 03:15:20 +01:00 |
|
|
Ruben Hensen
|
57514c3c14
|
immich: limit the pods to each other, DNS and the internet
|
2026-10-25 03:12:02 +01:00 |
|
|
Ruben Hensen
|
57851bf43a
|
mbgwp: limit WordPress to its database, DNS and the internet
|
2026-10-25 03:09:06 +01:00 |
|
|
Ruben Hensen
|
ada909ee02
|
docs: plan off-site backups through a friend's bucket
|
2026-10-25 03:05:39 +01:00 |
|
|
Ruben Hensen
|
345de16552
|
docs: record the Vault 2.2.1 upgrade
|
2026-10-25 02:52:52 +01:00 |
|
|
Ruben Hensen
|
7396cc3ed6
|
vault: fix the listing-visibility flag in the OIDC job
|
2026-10-25 02:52:02 +01:00 |
|
|
Ruben Hensen
|
26ca83457c
|
vault: upgrade to 2.2.1, with a script to roll the pods
|
2026-10-25 02:40:45 +01:00 |
|
|
Ruben Hensen
|
4709194483
|
docs: tick off the authentik login test
|
2026-10-25 02:40:45 +01:00 |
|
|
Ruben Hensen
|
ad2d6fbae5
|
docs: record the authentik 2026.8 upgrade
|
2026-10-25 02:34:51 +01:00 |
|
|
Ruben Hensen
|
077711472e
|
authentik: upgrade to 2026.8.5
|
2026-10-25 02:31:00 +01:00 |
|
|
Ruben Hensen
|
43f741141d
|
authentik: upgrade to 2026.5.6
|
2026-10-25 02:23:15 +01:00 |
|
|
Ruben Hensen
|
cbee4955d3
|
authentik: drop the redis values, which the chart no longer has
|
2026-10-25 02:23:15 +01:00 |
|