jakman85 c163deaef9 Merge pull request 'feat(plex): one advertised hostname for local+remote, its own LE cert, and a LAN definition so LAN clients stop reading as remote' (#48) from feat/plex-vip-hostname-and-lan-networks into main ...

Reviewed-on: #48
Reviewed-by: Keith Jackson <[email protected]>

2026-10-04 21:47:32 +00:00

..

tests

feat(pihole): two replicas on different nodes, and fix a PVC mounted where pihole never writes

2026-10-04 01:34:52 -05:00

gitea-bootstrap-secret.sops.yaml

feat(gitea): wire native Keycloak OIDC SSO (break-glass admin retained)

2026-08-27 17:01:46 -05:00

gitea.yaml

fix(obs): twelve app SLI rules read a signal that exists; kill the dead ServiceMonitors

2026-09-13 17:11:30 -05:00

jackett-oauth2-proxy-credentials.sops.yaml

feat(auth): gate jackett/qbittorrent/radarr/sonarr UIs with oauth2-proxy sidecar (rollout)

2026-08-31 08:45:46 -05:00

jackett.yaml

fix(obs): open 44180 to ns monitoring so the forward-auth gate sidecars are actually scrapable

2026-10-04 16:05:44 -05:00

kustomization.yaml

feat(plex): one advertised hostname for local+remote, its own LE cert, and a LAN definition

2026-10-04 03:37:57 -05:00

nextcloud-db-app.sops.yaml

refactor(apps): split monolithic apps Kustomization into dependency waves

2026-08-26 12:19:00 -05:00

nextcloud-db-backup-credentials-prod.sops.yaml

feat(backup): the four backup credentials become TWO objects each, one per environment

2026-09-07 01:38:22 -05:00

nextcloud-db-backup-credentials.sops.yaml

feat(backup): the four backup credentials become TWO objects each, one per environment

2026-09-07 01:38:22 -05:00

nextcloud-db.yaml

fix(cnpg): the grant reconciler died on every Flux-managed run

2026-09-13 00:19:49 -05:00

pihole-bootstrap-secret.sops.yaml

feat(pihole): declare the admin password and adlists in git

2026-10-04 01:07:30 -05:00

pihole-dns.yaml

feat(pihole): authoritative LAN DNS for the zone on udp/53 + tcp/53 at a pinned VIP

2026-09-14 00:57:58 -05:00

pihole-oauth2-proxy-credentials.sops.yaml

feat(auth): gate pihole UI with per-app oauth2-proxy sidecar (canary)

2026-08-31 08:36:03 -05:00

pihole.yaml

Merge pull request 'feat(plex): one advertised hostname for local+remote, its own LE cert, and a LAN definition so LAN clients stop reading as remote' (#48) from feat/plex-vip-hostname-and-lan-networks into main

2026-10-04 21:47:32 +00:00

plex-cert.yaml

feat(plex): one advertised hostname for local+remote, its own LE cert, and a LAN definition

2026-10-04 03:37:57 -05:00

plex-claim-secret.sops.yaml

docs: correct CI/platform documentation that was stale, wrong, or load-bearing

2026-09-29 02:14:26 -05:00

plex-remote.yaml

feat(plex): expose tcp/32400 for remote access via a pinned LoadBalancer VIP

2026-10-03 23:30:46 -05:00

plex.yaml

feat(plex): one advertised hostname for local+remote, its own LE cert, and a LAN definition

2026-10-04 03:37:57 -05:00

qbittorrent-bootstrap-secret.sops.yaml

WIP: durable qBittorrent WebUI credential

2026-09-13 15:57:42 -05:00

qbittorrent-oauth2-proxy-credentials.sops.yaml

feat(auth): gate jackett/qbittorrent/radarr/sonarr UIs with oauth2-proxy sidecar (rollout)

2026-08-31 08:45:46 -05:00

qbittorrent.yaml

fix(obs): open 44180 to ns monitoring so the forward-auth gate sidecars are actually scrapable

2026-10-04 16:05:44 -05:00

semaphore-db-app.sops.yaml

refactor(apps): split monolithic apps Kustomization into dependency waves

2026-08-26 12:19:00 -05:00

semaphore-db-backup-credentials-prod.sops.yaml

feat(backup): the four backup credentials become TWO objects each, one per environment

2026-09-07 01:38:22 -05:00

semaphore-db-backup-credentials.sops.yaml

feat(backup): the four backup credentials become TWO objects each, one per environment

2026-09-07 01:38:22 -05:00

semaphore-db.yaml

feat(cnpg): synchronous replication, quorum of 1, dataDurability preferred

2026-09-07 23:54:19 -05:00

vm-demo.yaml

fix(obs): twelve app SLI rules read a signal that exists; kill the dead ServiceMonitors

2026-09-13 17:11:30 -05:00