Commit Graph

1196 Commits

Author SHA1 Message Date
renovate[bot] c425c77eb4 Update helm chart cloudnative-pg to v0.28.3 2026-06-10 15:55:36 +00:00
Ruben Hensen a11309263e Update home cluster IP to 62.41.86.27 2026-06-06 09:52:36 +02:00
Ruben Hensen 379c050bb3 Update actual-budget to chart 1.8.9 / app 26.6.0 2026-06-03 11:28:10 +02:00
Ruben Hensen 20128bcd73 Add gitea at git.rubenhensen.nl
Single-pod sqlite install (simplest path for a home git host). HTTPS-only,
no SSH listener for now. Wired into the Hetzner tunnel like the other
rubenhensen.nl services.

First visitor to git.rubenhensen.nl can register; Gitea auto-promotes the
first user to admin.
2026-05-19 23:19:21 +02:00
Ruben Hensen ffe8830b5e Tunnel argocd/ha/longhorn/lingo/blog/serpbear through Hetzner
Refactor node001 nginx to drive both the SNI map and the port-80 vhosts
from a single tunneledHosts list so adding a service is one line.
2026-05-19 23:14:04 +02:00
Ruben Hensen 8d383d4261 Tunnel ynab.rubenhensen.nl through Hetzner 2026-05-19 23:04:02 +02:00
Ruben Hensen 00d46b6bd6 Tunnel vault.rubenhensen.nl through Hetzner 2026-05-19 22:56:52 +02:00
Ruben Hensen cb7cba25d0 Tunnel authentik.rubenhensen.nl through Hetzner
Same pattern as rss — needed so the OIDC redirect from freshrss (and
other relying parties) works for clients outside the home LAN.
2026-05-19 22:50:56 +02:00
Ruben Hensen ff9c2d3cef Tunnel rss.rubenhensen.nl through Hetzner
Point rss to the Hetzner box and reverse-proxy/SNI-passthrough back to
the home cluster so cert-manager keeps owning the certificate. Move
stalwart's HTTPS listener to 127.0.0.1:8443 so nginx can take :443 and
dispatch by SNI.
2026-05-19 22:45:55 +02:00
Ruben Hensen 790d7d6f32 Add WF_ENCRYPTION_KEY to mbgwp wordpress 2026-05-18 22:12:45 +02:00
Ruben Hensen 8aef769e78 Fix serpbear PVC permissions 2026-04-25 20:48:27 +02:00
Ruben Hensen 20dfbde02f Add serpbear 2026-04-25 20:39:20 +02:00
Ruben Hensen bb308a3d66 rm phocaslustrum 2026-04-10 21:53:10 +02:00
Ruben Hensen 5a84bbaead rm ttrss 2026-04-10 21:52:08 +02:00
Ruben Hensen 0c4afc9b71 Add oidc actualbudget 3 2026-04-10 21:40:38 +02:00
Ruben Hensen 499cd6826a Add oidc actualbudget 2 2026-04-10 21:32:19 +02:00
Ruben Hensen 068ac20693 Add oidc actualbudget 2026-04-10 21:23:50 +02:00
Ruben Hensen 579e40d2b3 Update port oidc freshrss 2026-04-10 20:59:59 +02:00
Ruben Hensen 428f14efc1 Add oidc freshrss 2026-04-10 20:49:11 +02:00
Ruben Hensen dc85d89904 Add oidc secret for argocd 2026-04-06 18:52:21 +02:00
Ruben Hensen 0fd7bf1135 Add OIDC to argocd 2026-04-06 18:44:32 +02:00
Ruben Hensen faaf6b6729 Remove most hensen.io refs and move from stalwart.rubenhensen.nl to mail.rubenhensen.nl 2026-04-06 18:09:24 +02:00
Ruben Hensen c876a725c1 Move to simpler email setup 2026-04-06 17:55:48 +02:00
Ruben Hensen cfa4c49a2b Remove sogo 2026-04-06 17:42:06 +02:00
Ruben Hensen 1b7fd44117 Add Manage sieve 2026-04-06 14:44:56 +02:00
Ruben Hensen b9ebe42023 Remove sogo quota 2026-04-06 14:25:26 +02:00
Ruben Hensen 07c168220b Revert property mapping 2026-04-05 22:48:35 +02:00
Ruben Hensen 91812829c6 Add property mailalias mapping 2026-04-05 22:36:44 +02:00
Ruben Hensen abe8fc348e Add smtp to config sogo 2026-04-05 21:53:16 +02:00
Ruben Hensen 66a5e2600f Lower DNS TTL from 24h to 5 minutes for all records 2026-04-04 12:38:56 +02:00
Ruben Hensen 6262ac5a93 Point mail.rubenhensen.nl to home K8s cluster instead of Hetzner
The CNAME to stalwart.rubenhensen.nl caused browser traffic to hit the
Hetzner server, which doesn't have a certificate for mail.rubenhensen.nl.
2026-04-04 12:33:22 +02:00
Ruben Hensen d9964cd689 Fix the dns for rubenhensen.nl 2026-03-26 11:19:32 +01:00
Ruben Hensen 04fafd64e2 Add dkim to stalwart 2026-03-22 16:06:40 +01:00
Ruben Hensen 7a98ad0a9e Add email domain changes 2026-03-22 15:41:06 +01:00
Ruben Hensen fd12984bba outpost from direct to cached 2026-03-22 14:44:57 +01:00
Ruben Hensen fea0df17bc set pgsslmode 2026-03-22 14:01:53 +01:00
Ruben Hensen c1a86e02d1 disable bindasuser 2026-03-22 12:37:11 +01:00
Ruben Hensen fea7b55691 verbose logging 2026-03-22 12:33:57 +01:00
Ruben Hensen 5c84445c0d enable pooling for sogo 2026-03-22 12:26:27 +01:00
Ruben Hensen c81e4d5695 Delete ssldisable 2026-03-22 12:11:44 +01:00
Ruben Hensen 6325948681 Disable postgres ssl 2026-03-22 12:09:55 +01:00
Ruben Hensen f56e6219c3 update sogo conf 2026-03-22 00:12:32 +01:00
Ruben Hensen 3a9880bda1 update sogo 2026-03-22 00:06:17 +01:00
Ruben Hensen 02fd158540 rm old sogo 2026-03-22 00:01:19 +01:00
Ruben Hensen b722b043ee update sogo 2026-03-21 23:58:38 +01:00
Ruben Hensen 679bca7903 sogo changes 2026-03-21 23:54:45 +01:00
Ruben Hensen eb56e6bc34 change port 2026-03-21 23:51:50 +01:00
Ruben Hensen 30e87eccd1 Change bitnami image to latest 2026-03-21 23:43:57 +01:00
Ruben Hensen 36044e3f00 enable memcache 2026-03-21 23:43:00 +01:00
Ruben Hensen 7a151c0a2d Add mail changes 2026-03-21 23:30:03 +01:00