3 Commits

Include renames

Author	SHA1	Message	Date
Ruben Hensen	7acb7eaa8c	Move every ExternalSecret and the ClusterSecretStore to external-secrets.io/v1 ... ESO 0.16.2 is the one release that serves both v1beta1 and v1. 0.17 stops serving v1beta1, so manifests still on v1beta1 would fail to sync from the next hop on. For these resources the schemas are name-identical (conversion strategy None); only the apiVersion changes.	2026-10-22 21:41:28 +02:00
Ruben Hensen	177dbef15b	ntfy: mount a CA bundle without the compromised eMudhra roots ... Mount patched-ca-bundle (see ca-bundle/) over /etc/ssl/certs so it stops trusting the compromised eMudhra intermediates (https://emudhra.we-have-a-problem.com).	2026-10-22 09:13:01 +02:00
Ruben Hensen	e23779044f	gatus: alert through self-hosted ntfy ... Add ntfy at ntfy2.rubenhensen.nl on the home cluster, pointed straight at the home IP like s2. s2 now alerts on mail and on s1 through it. The home services are left to s1, which sees them from outside. ntfy denies everything except the provisioned user. The user, its password hash and the Gatus token come from Vault kv/ntfy.	2026-10-20 15:34:42 +02:00