jakman85 78d76fa089 merge: qBittorrent can finally write where the arrs can see it ...

qBittorrent's SavePath was /downloads and no such directory existed in the
container, so the download client had no working destination and nothing
downstream could see its output. It now mounts the same NFS export the arrs
use, narrowed to the downloads subtree via subPath — one mount, so the
EXDEV hardlink trap the bulk-tier test guards stays closed. PUID/PGID are
load-bearing: the export is owned 1000:1000 and the image's default 911 is
denied.

2026-09-12 23:36:48 -05:00

..

gitea-bootstrap-secret.sops.yaml

feat(gitea): wire native Keycloak OIDC SSO (break-glass admin retained)

2026-08-27 17:01:46 -05:00

gitea.yaml

feat(gitea): render gitea-allow-flux-ingress — prod's GitOps source, in git at last

2026-09-12 22:46:57 -05:00

jackett-oauth2-proxy-credentials.sops.yaml

feat(auth): gate jackett/qbittorrent/radarr/sonarr UIs with oauth2-proxy sidecar (rollout)

2026-08-31 08:45:46 -05:00

jackett.yaml

fix(oauth2-proxy): platform-admins may reach the media UIs — the immediate 403

2026-09-12 17:12:05 -05:00

kustomization.yaml

feat(backup): the four backup credentials become TWO objects each, one per environment

2026-09-07 01:38:22 -05:00

nextcloud-db-app.sops.yaml

refactor(apps): split monolithic apps Kustomization into dependency waves

2026-08-26 12:19:00 -05:00

nextcloud-db-backup-credentials-prod.sops.yaml

feat(backup): the four backup credentials become TWO objects each, one per environment

2026-09-07 01:38:22 -05:00

nextcloud-db-backup-credentials.sops.yaml

feat(backup): the four backup credentials become TWO objects each, one per environment

2026-09-07 01:38:22 -05:00

nextcloud-db.yaml

fix(cnpg): grant cnpg_metrics_exporter CONNECT on the nextcloud database

2026-09-12 23:22:27 -05:00

pihole-oauth2-proxy-credentials.sops.yaml

feat(auth): gate pihole UI with per-app oauth2-proxy sidecar (canary)

2026-08-31 08:36:03 -05:00

pihole.yaml

feat(dns): per-environment BASE_DOMAIN — prod moves to its own subdomain

2026-09-04 22:43:54 -05:00

plex.yaml

feat(apps): attach the media library and the legacy Nextcloud dataset over NFS

2026-09-07 23:54:13 -05:00

qbittorrent-oauth2-proxy-credentials.sops.yaml

feat(auth): gate jackett/qbittorrent/radarr/sonarr UIs with oauth2-proxy sidecar (rollout)

2026-08-31 08:45:46 -05:00

qbittorrent.yaml

feat(qbittorrent): attach the downloads area of the bulk export — the chain was broken end to end

2026-09-12 23:32:03 -05:00

semaphore-db-app.sops.yaml

refactor(apps): split monolithic apps Kustomization into dependency waves

2026-08-26 12:19:00 -05:00

semaphore-db-backup-credentials-prod.sops.yaml

feat(backup): the four backup credentials become TWO objects each, one per environment

2026-09-07 01:38:22 -05:00

semaphore-db-backup-credentials.sops.yaml

feat(backup): the four backup credentials become TWO objects each, one per environment

2026-09-07 01:38:22 -05:00

semaphore-db.yaml

feat(cnpg): synchronous replication, quorum of 1, dataDurability preferred

2026-09-07 23:54:19 -05:00

vm-demo.yaml

fix(arrs): the config PVC was mounted where the app never looks

2026-09-12 16:35:18 -05:00