Default Branch

main 020e736541 · Merge pull request 'feat(dns): public names via the Cloudflare Tunnel (Phase 2) — proxied CNAMEs, Plex/Headlamp LAN-only' (#156) from feat/dns-via-cloudflare-tunnel into main · Updated 2026-11-09 01:27:06 +00:00

ZIP  TAR.GZ

Branches

feat/automated-upgrades dbdb215651 · fix(unattended-upgrades): Debian has no reboot-sentinel package, so ship the writer · Updated 2026-10-18 06:39:20 +00:00    gitea-admin	178 1	Compare	ZIP  TAR.GZ
fix/coredns-ha 5642881c4d · fix(coredns): hold in-cluster DNS at 2 replicas via an HPA, because k3s owns the Deployment · Updated 2026-10-18 05:44:09 +00:00    gitea-admin	178 0	#74 Merged	ZIP  TAR.GZ
feat/keycloak-passkeys 16894b7b73 · feat(keycloak): declare passkey (WebAuthn passwordless) login for the homelab realm · Updated 2026-10-18 04:23:36 +00:00    gitea-admin	178 0	#72 Merged	ZIP  TAR.GZ
fix/oauth2-proxy-oidc-startup-race c150327a30 · fix(oauth2-proxy): gate startup on Keycloak discovery, or a cold boot CrashLoops the proxy · Updated 2026-10-18 03:47:30 +00:00    gitea-admin	180 0	#70 Merged	ZIP  TAR.GZ
feat/graceful-cluster-shutdown 2f2e98aa19 · feat(shutdown): configure graceful node shutdown, and never scale a Delete-policy StatefulSet · Updated 2026-10-18 03:26:47 +00:00    gitea-admin	180 0	#71 Merged	ZIP  TAR.GZ
plex/volume-expamsion 0132c680b3 · Update apps/wave-0/plex.yaml · Updated 2026-10-10 16:09:53 +00:00    jakman85	182 0	#68 Merged	ZIP  TAR.GZ
fix/bulk-nfs-truenas 0747849837 · fix(bulk-nfs): repoint at the TrueNAS (192.168.2.30); the PVs must be recreated, not reconciled · Updated 2026-10-07 06:15:04 +00:00    gitea-admin	185 0	#67 Merged	ZIP  TAR.GZ
fix/peers-configmap-content-hash 2acfed460a · fix(vpn-ingress): content-hash the peer register, or a merged peer never reaches the tunnel · Updated 2026-10-06 07:55:59 +00:00    gitea-admin	187 0	#66 Merged	ZIP  TAR.GZ
vpn/add-keith-phone 23db97b958 · Added my phone to peers · Updated 2026-10-06 07:39:23 +00:00    gitea-admin	189 0	#65 Merged	ZIP  TAR.GZ
fix/new-peer-ignores-template-comments 146dd9a906 · fix(vpn-ingress): new-peer.sh counted its own commented-out example as an allocated address · Updated 2026-10-06 07:28:37 +00:00    gitea-admin	191 0	#64 Merged	ZIP  TAR.GZ
fix/vpn-ingress-ip-forward 5c43fbac65 · fix(vpn-ingress): stop trying to set net.ipv4.ip_forward — a hostNetwork pod cannot, and wg-quick dies on a failed PostUp · Updated 2026-10-06 06:30:08 +00:00    gitea-admin	193 0	#63 Merged	ZIP  TAR.GZ
feature/add-private-key-for-wireguard be23cf3e26 · Changed secret · Updated 2026-10-06 06:11:56 +00:00    gitea-admin	195 0	#62 Merged	ZIP  TAR.GZ
fix/vpn-server-key-in-sops 8059297036 · fix(devcontainer): bake wg + qrencode into the image instead of splitting the VPN procedure across host and container · Updated 2026-10-06 05:48:32 +00:00    gitea-admin	202 0	#60 Merged	ZIP  TAR.GZ
docs/pm-agent-registry-pull-prereq 90a79d29d3 · docs(node): name the exact Ansible command that applies the pin, not 'run the play' · Updated 2026-10-06 05:44:26 +00:00    gitea-admin	200 0	#59 Merged	ZIP  TAR.GZ
fix/vpn-runbook-ansible-command 18f741d744 · fix(runbooks): vpn-remote-access step 1 named a nonexistent script; step 2 cited the wrong gitignore rule · Updated 2026-10-06 04:08:19 +00:00    gitea-admin	213 0	#58 Merged	ZIP  TAR.GZ
feat/pm-agent-issue-to-pr 867a82d8ad · docs(pm-agent): correct the handoff — a STALE approval still satisfies the gate · Updated 2026-10-06 04:03:28 +00:00    gitea-admin	207 0	#57 Merged	ZIP  TAR.GZ
docs/agents-work-in-their-own-workspace 2cb891c05d · docs(agents): one workspace per agent run — the shared checkout is off-limits · Updated 2026-10-06 03:31:40 +00:00    gitea-admin	217 0	#56 Merged	ZIP  TAR.GZ
feat/vpn-remote-access-wireguard f92707f38c · feat(vpn-ingress): WireGuard remote access on udp/51820 (hostNetwork, declarative peers) · Updated 2026-10-06 03:29:46 +00:00    gitea-admin	217 0	#55 Merged	ZIP  TAR.GZ
feat/cilium-roll-out-on-config-change d0db63911a · feat(cilium): roll the agents when cilium-config changes (merged config was silently inert) · Updated 2026-10-06 02:19:13 +00:00    gitea-admin	219 0	#53 Merged	ZIP  TAR.GZ
docs/oauth2-sidecar-scrape-verified 81f627167d · docs(obs): record that the gate-sidecar scrape works — four places still said it did not · Updated 2026-10-06 02:18:33 +00:00    gitea-admin	220 0	#54 Closed	ZIP  TAR.GZ