Ruben Hensen 307bd23500 freshrss: start again on 1.30.3 with fixed PHP ...

freshrss/freshrss:1.30.3, released today, runs PHP 8.4.27 from Debian
trixie security (8.4.27-1~deb13u1), which fixes CVE-2026-109618 and
CVE-2026-109619. Pin it instead of :latest so the running version is the
checked one. Its ca-certificates (20250419+deb13u1) also no longer
carries the roots above the compromised eMudhra intermediates.

2026-10-21 17:43:08 +02:00

actual-budget

actual-budget: use a CA bundle without the compromised eMudhra roots

2026-10-21 12:09:41 +02:00

apps

authentik: mount a CA bundle without the compromised eMudhra roots

2026-10-21 12:09:41 +02:00

argocd

argocd: mount a CA bundle without the compromised eMudhra roots

2026-10-21 12:09:41 +02:00

authentik

authentik: mount a CA bundle without the compromised eMudhra roots

2026-10-21 12:09:41 +02:00

backup-testing

Point Velero and the NAS services back at 192.168.1.99

2026-10-21 15:25:16 +02:00

bolletjestrui

bolletjestrui: deploy main-10268f1 (routes, voting, push, ride uploads)

2026-08-15 17:55:37 +02:00

cert-manager

Remove syncoptions clusterissuer

2024-09-06 01:40:31 +02:00

disable

Disable mist.hensen.io

2025-03-31 12:03:20 +02:00

dns

gatus: alert through self-hosted ntfy

2026-10-20 15:34:42 +02:00

freshrss

freshrss: start again on 1.30.3 with fixed PHP

2026-10-21 17:43:08 +02:00

gatus

gatus: alert through self-hosted ntfy

2026-10-20 15:34:42 +02:00

ghost-blog

Remove most hensen.io refs and move from stalwart.rubenhensen.nl to mail.rubenhensen.nl

2026-04-06 18:09:24 +02:00

gitea

gitea: pin to 1.27.3 (CVE-2026-60004, CVE-2026-20896, CVE-2026-27771)

2026-09-24 11:40:12 +02:00

home-assistant

Remove most hensen.io refs and move from stalwart.rubenhensen.nl to mail.rubenhensen.nl

2026-04-06 18:09:24 +02:00

immich

Remove most hensen.io refs and move from stalwart.rubenhensen.nl to mail.rubenhensen.nl

2026-04-06 18:09:24 +02:00

lingo

Remove most hensen.io refs and move from stalwart.rubenhensen.nl to mail.rubenhensen.nl

2026-04-06 18:09:24 +02:00

longhorn

Remove most hensen.io refs and move from stalwart.rubenhensen.nl to mail.rubenhensen.nl

2026-04-06 18:09:24 +02:00

mariadb-operator

Fix MariaDB operator deployment namespace issue

2026-02-22 15:49:54 +01:00

mbgwp

Add WF_ENCRYPTION_KEY to mbgwp wordpress

2026-05-18 22:12:45 +02:00

nas

Point Velero and the NAS services back at 192.168.1.99

2026-10-21 15:25:16 +02:00

nix-infra-machine

node001: distrust the roots above the compromised eMudhra intermediates

2026-10-21 11:49:28 +02:00

ntfy

gatus: alert through self-hosted ntfy

2026-10-20 15:34:42 +02:00

secrets

add blog folder and es

2025-03-26 03:39:28 +01:00

serpbear

Fix serpbear PVC permissions

2026-04-25 20:48:27 +02:00

vault

vault: point External Secrets at the in-cluster Vault service

2026-10-20 15:45:55 +02:00

velero

Point Velero and the NAS services back at 192.168.1.99

2026-10-21 15:25:16 +02:00

whishper

Remove most hensen.io refs and move from stalwart.rubenhensen.nl to mail.rubenhensen.nl

2026-04-06 18:09:24 +02:00

.envrc

Add direnv for kubeconfig

2026-03-18 09:04:40 +01:00

.gitignore

Add nix-infra-machine

2026-03-15 18:31:53 +01:00

renovate.json

gatus: alert through self-hosted ntfy

2026-10-20 15:34:42 +02:00

wishlist.txt

Add ingress stalwart

2026-01-25 17:03:36 +01:00

S

Description

No description provided

2.4 MiB

0 Stars 1 Watchers 0 Forks

Languages

Nix 49.6%

Shell 46.7%

Python 2.9%

Go 0.8%