Ruben Hensen
cb7cba25d0
Tunnel authentik.rubenhensen.nl through Hetzner
...
Same pattern as rss — needed so the OIDC redirect from freshrss (and
other relying parties) works for clients outside the home LAN.
2026-05-19 22:50:56 +02:00
Ruben Hensen
ff9c2d3cef
Tunnel rss.rubenhensen.nl through Hetzner
...
Point rss to the Hetzner box and reverse-proxy/SNI-passthrough back to
the home cluster so cert-manager keeps owning the certificate. Move
stalwart's HTTPS listener to 127.0.0.1:8443 so nginx can take :443 and
dispatch by SNI.
2026-05-19 22:45:55 +02:00
Ruben Hensen
790d7d6f32
Add WF_ENCRYPTION_KEY to mbgwp wordpress
2026-05-18 22:12:45 +02:00
Ruben Hensen
8aef769e78
Fix serpbear PVC permissions
2026-04-25 20:48:27 +02:00
Ruben Hensen
20dfbde02f
Add serpbear
2026-04-25 20:39:20 +02:00
Ruben Hensen
bb308a3d66
rm phocaslustrum
2026-04-10 21:53:10 +02:00
Ruben Hensen
5a84bbaead
rm ttrss
2026-04-10 21:52:08 +02:00
Ruben Hensen
0c4afc9b71
Add oidc actualbudget 3
2026-04-10 21:40:38 +02:00
Ruben Hensen
499cd6826a
Add oidc actualbudget 2
2026-04-10 21:32:19 +02:00
Ruben Hensen
068ac20693
Add oidc actualbudget
2026-04-10 21:23:50 +02:00
Ruben Hensen
579e40d2b3
Update port oidc freshrss
2026-04-10 20:59:59 +02:00
Ruben Hensen
428f14efc1
Add oidc freshrss
2026-04-10 20:49:11 +02:00
Ruben Hensen
dc85d89904
Add oidc secret for argocd
2026-04-06 18:52:21 +02:00
Ruben Hensen
0fd7bf1135
Add OIDC to argocd
2026-04-06 18:44:32 +02:00
Ruben Hensen
faaf6b6729
Remove most hensen.io refs and move from stalwart.rubenhensen.nl to mail.rubenhensen.nl
2026-04-06 18:09:24 +02:00
Ruben Hensen
c876a725c1
Move to simpler email setup
2026-04-06 17:55:48 +02:00
Ruben Hensen
cfa4c49a2b
Remove sogo
2026-04-06 17:42:06 +02:00
Ruben Hensen
1b7fd44117
Add Manage sieve
2026-04-06 14:44:56 +02:00
Ruben Hensen
b9ebe42023
Remove sogo quota
2026-04-06 14:25:26 +02:00
Ruben Hensen
07c168220b
Revert property mapping
2026-04-05 22:48:35 +02:00
Ruben Hensen
91812829c6
Add property mailalias mapping
2026-04-05 22:36:44 +02:00
Ruben Hensen
abe8fc348e
Add smtp to config sogo
2026-04-05 21:53:16 +02:00
Ruben Hensen
66a5e2600f
Lower DNS TTL from 24h to 5 minutes for all records
2026-04-04 12:38:56 +02:00
Ruben Hensen
6262ac5a93
Point mail.rubenhensen.nl to home K8s cluster instead of Hetzner
...
The CNAME to stalwart.rubenhensen.nl caused browser traffic to hit the
Hetzner server, which doesn't have a certificate for mail.rubenhensen.nl.
2026-04-04 12:33:22 +02:00
Ruben Hensen
d9964cd689
Fix the dns for rubenhensen.nl
2026-03-26 11:19:32 +01:00
Ruben Hensen
04fafd64e2
Add dkim to stalwart
2026-03-22 16:06:40 +01:00
Ruben Hensen
7a98ad0a9e
Add email domain changes
2026-03-22 15:41:06 +01:00
Ruben Hensen
fd12984bba
outpost from direct to cached
2026-03-22 14:44:57 +01:00
Ruben Hensen
fea0df17bc
set pgsslmode
2026-03-22 14:01:53 +01:00
Ruben Hensen
c1a86e02d1
disable bindasuser
2026-03-22 12:37:11 +01:00
Ruben Hensen
fea7b55691
verbose logging
2026-03-22 12:33:57 +01:00
Ruben Hensen
5c84445c0d
enable pooling for sogo
2026-03-22 12:26:27 +01:00
Ruben Hensen
c81e4d5695
Delete ssldisable
2026-03-22 12:11:44 +01:00
Ruben Hensen
6325948681
Disable postgres ssl
2026-03-22 12:09:55 +01:00
Ruben Hensen
f56e6219c3
update sogo conf
2026-03-22 00:12:32 +01:00
Ruben Hensen
3a9880bda1
update sogo
2026-03-22 00:06:17 +01:00
Ruben Hensen
02fd158540
rm old sogo
2026-03-22 00:01:19 +01:00
Ruben Hensen
b722b043ee
update sogo
2026-03-21 23:58:38 +01:00
Ruben Hensen
679bca7903
sogo changes
2026-03-21 23:54:45 +01:00
Ruben Hensen
eb56e6bc34
change port
2026-03-21 23:51:50 +01:00
Ruben Hensen
30e87eccd1
Change bitnami image to latest
2026-03-21 23:43:57 +01:00
Ruben Hensen
36044e3f00
enable memcache
2026-03-21 23:43:00 +01:00
Ruben Hensen
7a151c0a2d
Add mail changes
2026-03-21 23:30:03 +01:00
Ruben Hensen
264ce4c85b
update lb outpost
2026-03-21 20:44:17 +01:00
Ruben Hensen
ff44035b4c
Change from loadbalancer to nodeport
2026-03-21 19:53:38 +01:00
Ruben Hensen
44c31cdadd
Delete old sogo and stalwart
2026-03-21 19:40:35 +01:00
Ruben Hensen
be7412f678
Add direnv for kubeconfig
2026-03-18 09:04:40 +01:00
Ruben Hensen
bcd0e47076
Connect Stalwart to Authentik LDAP for user authentication
...
- Add LDAP directory backend in Stalwart pointing to ldap.rubenhensen.nl
- Expose Authentik LDAP outpost externally via LoadBalancer service
- Add ldap.rubenhensen.nl DNS record
2026-03-17 22:12:56 +01:00
Ruben Hensen
272864d224
No deprecated --fast
2026-03-17 21:00:30 +01:00
Ruben Hensen
d962b158e6
Working secrets with nix
2026-03-17 21:00:21 +01:00