0 Fork 0

Files

T

jakman85andClaude Opus 4.8 91aa7acab8 wip(vpn): gluetun custom-provider mode with operator's PIA .ovpn

PIA-provider server selection is flaky here (random dead IPs); the operator's .ovpn
uses sweden.privacy.network (load-balanced, reliable). Switch to custom mode
(VPN_SERVICE_PROVIDER=custom, OPENVPN_CUSTOM_CONFIG=/config/pia.ovpn), mount the
pia-custom-ovpn Secret, keep creds + kill-switch + tun-mtu 1300. Drops PIA-provider
server list/updater and native PF (Phase-6 concern). Pending the operator-provisioned
pia-custom-ovpn Secret (not merged until it exists).

Co-Authored-By: Claude Opus 4.8 <[email protected]>

2026-08-23 00:40:08 -05:00

flux

Added fixes before token usage cutoff. Added required credentials for dns api for cert-manager and external-dns

2026-08-16 23:12:25 -05:00

gitea

Codify host firewall + Gitea bootstrap as IaC (hands-off rebuild)

2026-08-16 14:52:08 -05:00

sops

wip(vpn): gluetun custom-provider mode with operator's PIA .ovpn

2026-08-23 00:40:08 -05:00

README.md

Scope Phase 1: dev/test cluster bring-up on local KVM

2026-08-16 00:48:48 -05:00

README.md

bootstrap/ — Flux + SOPS age-key bootstrap (Phase 1 T-1.4)

sops/: age key generation + Flux SOPS decryption wiring (private key NEVER committed). flux/: flux bootstrap config pointing at clusters/dev. Spec: ADR-0004, ADR-0007.