Ruben Hensen 25a6bf3a05 authentik: mount a CA bundle without the compromised eMudhra roots ...

Server and worker trusted the leaked eMudhra intermediates through the
Debian bundle (ca-certificates 20250419), Python's ssl module and certifi
2026.01.04. Mount patched-ca-bundle over /etc/ssl/certs and point
SSL_CERT_FILE and REQUESTS_CA_BUNDLE at it until an authentik image ships
a fixed bundle and certifi.

2026-10-21 12:09:41 +02:00

actual-budget

Update actual-budget to chart 1.8.9 / app 26.6.0

2026-06-03 11:28:10 +02:00

apps

authentik: mount a CA bundle without the compromised eMudhra roots

2026-10-21 12:09:41 +02:00

argocd

argocd: mount a CA bundle without the compromised eMudhra roots

2026-10-21 12:09:41 +02:00

authentik

authentik: mount a CA bundle without the compromised eMudhra roots

2026-10-21 12:09:41 +02:00

backup-testing

Add 'longhorn' to all storage things for CSI snaps

2026-01-20 22:48:15 +01:00

bolletjestrui

bolletjestrui: deploy main-10268f1 (routes, voting, push, ride uploads)

2026-08-15 17:55:37 +02:00

cert-manager

Remove syncoptions clusterissuer

2024-09-06 01:40:31 +02:00

disable

Disable mist.hensen.io

2025-03-31 12:03:20 +02:00

dns

gatus: alert through self-hosted ntfy

2026-10-20 15:34:42 +02:00

freshrss

Stop FreshRSS + MBG WordPress until PHP is patched

2026-10-21 09:18:24 +02:00

gatus

gatus: alert through self-hosted ntfy

2026-10-20 15:34:42 +02:00

ghost-blog

Remove most hensen.io refs and move from stalwart.rubenhensen.nl to mail.rubenhensen.nl

2026-04-06 18:09:24 +02:00

gitea

gitea: pin to 1.27.3 (CVE-2026-60004, CVE-2026-20896, CVE-2026-27771)

2026-09-24 11:40:12 +02:00

home-assistant

Remove most hensen.io refs and move from stalwart.rubenhensen.nl to mail.rubenhensen.nl

2026-04-06 18:09:24 +02:00

immich

Remove most hensen.io refs and move from stalwart.rubenhensen.nl to mail.rubenhensen.nl

2026-04-06 18:09:24 +02:00

lingo

Remove most hensen.io refs and move from stalwart.rubenhensen.nl to mail.rubenhensen.nl

2026-04-06 18:09:24 +02:00

longhorn

Remove most hensen.io refs and move from stalwart.rubenhensen.nl to mail.rubenhensen.nl

2026-04-06 18:09:24 +02:00

mariadb-operator

Fix MariaDB operator deployment namespace issue

2026-02-22 15:49:54 +01:00

mbgwp

Add WF_ENCRYPTION_KEY to mbgwp wordpress

2026-05-18 22:12:45 +02:00

nas

Remove most hensen.io refs and move from stalwart.rubenhensen.nl to mail.rubenhensen.nl

2026-04-06 18:09:24 +02:00

nix-infra-machine

node001: distrust the roots above the compromised eMudhra intermediates

2026-10-21 11:49:28 +02:00

ntfy

gatus: alert through self-hosted ntfy

2026-10-20 15:34:42 +02:00

secrets

add blog folder and es

2025-03-26 03:39:28 +01:00

serpbear

Fix serpbear PVC permissions

2026-04-25 20:48:27 +02:00

vault

vault: point External Secrets at the in-cluster Vault service

2026-10-20 15:45:55 +02:00

velero

Readd daily and weekly with hour ttl

2025-03-12 21:36:28 +01:00

whishper

Remove most hensen.io refs and move from stalwart.rubenhensen.nl to mail.rubenhensen.nl

2026-04-06 18:09:24 +02:00

.envrc

Add direnv for kubeconfig

2026-03-18 09:04:40 +01:00

.gitignore

Add nix-infra-machine

2026-03-15 18:31:53 +01:00

renovate.json

gatus: alert through self-hosted ntfy

2026-10-20 15:34:42 +02:00

wishlist.txt

Add ingress stalwart

2026-01-25 17:03:36 +01:00

S

Description

No description provided

2.4 MiB

0 Stars 1 Watchers 0 Forks

Languages

Nix 49.6%

Shell 46.7%

Python 2.9%

Go 0.8%