Ruben Hensen 9e88a92ff7 Merge pull request #53 from rubenhensen/netpol-infra ...

NetworkPolicies for the infrastructure namespaces

2026-10-26 23:42:21 +01:00

.github/workflows

Render and validate every app on PRs and pushes

2026-10-25 03:57:24 +01:00

actual-budget

networkpolicy: let Envoy reach cert-manager's HTTP-01 solver

2026-10-26 23:19:28 +01:00

apps

default: deny all, through a folder app of its own

2026-10-26 23:26:47 +01:00

argocd

Set resource requests from measured usage

2026-10-25 07:08:16 +01:00

authentik

networkpolicy: let Envoy reach cert-manager's HTTP-01 solver

2026-10-26 23:19:28 +01:00

backup-testing

backup-testing: read Velero's key for Garage

2026-10-25 17:10:32 +01:00

bolletjestrui

networkpolicy: let Envoy reach cert-manager's HTTP-01 solver

2026-10-26 23:19:28 +01:00

ca-bundle

Remove ghost-blog and whishper

2026-10-22 10:11:06 +02:00

cert-manager

cert-manager: NetworkPolicy

2026-10-26 23:25:28 +01:00

cloudnative-pg

cnpg-system: NetworkPolicy, through a folder app of its own

2026-10-26 23:25:55 +01:00

default

default: deny all, through a folder app of its own

2026-10-26 23:26:47 +01:00

dns

dns: NetworkPolicy

2026-10-26 23:26:38 +01:00

docs

docs: Velero on Garage, and the off-site copy from the bucket

2026-10-26 22:57:35 +01:00

external-secrets

external-secrets: NetworkPolicy, through a folder app of its own

2026-10-26 23:26:06 +01:00

freshrss

networkpolicy: let Envoy reach cert-manager's HTTP-01 solver

2026-10-26 23:19:28 +01:00

gateway

envoy-gateway-system: NetworkPolicy

2026-10-26 23:28:05 +01:00

gatus

networkpolicy: let Envoy reach cert-manager's HTTP-01 solver

2026-10-26 23:19:28 +01:00

gitea

networkpolicy: let Envoy reach cert-manager's HTTP-01 solver

2026-10-26 23:19:28 +01:00

home-assistant

Replace the Ingresses with Certificate resources

2026-10-23 21:20:25 +02:00

immich

networkpolicy: let Envoy reach cert-manager's HTTP-01 solver

2026-10-26 23:19:28 +01:00

longhorn

Replace the Ingresses with Certificate resources

2026-10-23 21:20:25 +02:00

mariadb-operator

mariadb-system: NetworkPolicy

2026-10-26 23:26:25 +01:00

mbgwp

networkpolicy: let Envoy reach cert-manager's HTTP-01 solver

2026-10-26 23:19:28 +01:00

nas/garage

nas: Garage keeps its metadata in SQLite

2026-10-25 17:08:13 +01:00

nix-infra-machine

node001: send the visitor's address to the home cluster

2026-10-26 23:11:38 +01:00

ntfy

networkpolicy: let Envoy reach cert-manager's HTTP-01 solver

2026-10-26 23:19:28 +01:00

serpbear

networkpolicy: let Envoy reach cert-manager's HTTP-01 solver

2026-10-26 23:19:28 +01:00

tools

Merge pull request #27 from rubenhensen/renovate/github.com-canonical-go-dqlite-v3-3.x

2026-10-25 12:24:30 +01:00

vault

networkpolicy: let Envoy reach cert-manager's HTTP-01 solver

2026-10-26 23:19:28 +01:00

velero

velero: NetworkPolicy

2026-10-26 23:26:15 +01:00

.envrc

Add direnv for kubeconfig

2026-03-18 09:04:40 +01:00

.gitignore

Remove commented-out files, the empty secrets app and a stale script copy

2026-10-25 03:27:32 +01:00

renovate.json

renovate: patch updates of low-risk apps merge themselves

2026-10-26 23:23:25 +01:00

S

Description

No description provided

2.4 MiB

0 Stars 1 Watchers 0 Forks

Languages

Nix 49.6%

Shell 46.7%

Python 2.9%

Go 0.8%