Ruben Hensen 278f6fc55f authentik: limit personal apps to authentik Admins ...

Actual Budget, Argo CD, FreshRSS, Stalwart and Vault had no policy
binding, so any authentik user could sign in to them. Scouts Online
members are about to get accounts in this authentik for immich; bind
each app to the authentik Admins group, as Longhorn already was.

2026-10-24 13:04:33 +02:00

actual-budget

Replace the Ingresses with Certificate resources

2026-10-23 21:20:25 +02:00

apps

longhorn: enable the internal NetworkPolicies

2026-10-24 00:02:32 +02:00

argocd

argocd: track resources by annotation

2026-10-23 23:54:06 +02:00

authentik

authentik: limit personal apps to authentik Admins

2026-10-24 13:04:33 +02:00

backup-testing

Point Velero and the NAS services back at 192.168.1.99

2026-10-21 15:25:16 +02:00

bolletjestrui

Replace the Ingresses with Certificate resources

2026-10-23 21:20:25 +02:00

ca-bundle

Remove ghost-blog and whishper

2026-10-22 10:11:06 +02:00

cert-manager

gateway: take over ports 80 and 443 from ingress-nginx

2026-10-23 21:02:52 +02:00

dns

Move every ExternalSecret and the ClusterSecretStore to external-secrets.io/v1

2026-10-22 21:41:28 +02:00

docs

docs: record the immich 3 upgrade

2026-10-24 12:33:43 +02:00

freshrss

Replace the Ingresses with Certificate resources

2026-10-23 21:20:25 +02:00

gateway

gateway: retry requests on dropped backend connections

2026-10-24 12:19:37 +02:00

gatus

gatus: expect the authentik redirect for Longhorn

2026-10-23 21:24:00 +02:00

gitea

Replace the Ingresses with Certificate resources

2026-10-23 21:20:25 +02:00

home-assistant

Replace the Ingresses with Certificate resources

2026-10-23 21:20:25 +02:00

immich

immich: upgrade to v3.3.5 and chart 0.13.4

2026-10-24 12:29:35 +02:00

longhorn

Replace the Ingresses with Certificate resources

2026-10-23 21:20:25 +02:00

mariadb-operator

Fix MariaDB operator deployment namespace issue

2026-02-22 15:49:54 +01:00

mbgwp

mbgwp: remove the unused wordpress-external NodePort

2026-10-24 00:08:19 +02:00

nix-infra-machine

gatus: expect the authentik redirect for Longhorn

2026-10-23 21:24:00 +02:00

ntfy

Replace the Ingresses with Certificate resources

2026-10-23 21:20:25 +02:00

secrets

Remove ghost-blog and whishper

2026-10-22 10:11:06 +02:00

serpbear

Replace the Ingresses with Certificate resources

2026-10-23 21:20:25 +02:00

tools/dqlite-vacuum

Add a tool to VACUUM the k8s-dqlite database

2026-10-23 22:03:30 +02:00

vault

Replace the Ingresses with Certificate resources

2026-10-23 21:20:25 +02:00

velero

velero: upgrade to 1.18.2 (chart 12.2.1)

2026-10-23 22:47:27 +02:00

.envrc

Add direnv for kubeconfig

2026-03-18 09:04:40 +01:00

.gitignore

Add nix-infra-machine

2026-03-15 18:31:53 +01:00

renovate.json

longhorn: upgrade to 1.12.1

2026-10-23 22:58:29 +02:00

wishlist.txt

Add ingress stalwart

2026-01-25 17:03:36 +01:00

S

Description

No description provided

2.4 MiB

0 Stars 1 Watchers 0 Forks

Languages

Nix 49.6%

Shell 46.7%

Python 2.9%

Go 0.8%