jakman85 bbd4f682a6 chore(plex): fresh plex.tv claim token ...

Injected inside the plex.tv claim window per runbooks/plex-claim.md.

2026-09-29 01:31:24 -05:00

..

tests

fix(obs): twelve app SLI rules read a signal that exists; kill the dead ServiceMonitors

2026-09-13 17:11:30 -05:00

gitea-bootstrap-secret.sops.yaml

feat(gitea): wire native Keycloak OIDC SSO (break-glass admin retained)

2026-08-27 17:01:46 -05:00

gitea.yaml

fix(obs): twelve app SLI rules read a signal that exists; kill the dead ServiceMonitors

2026-09-13 17:11:30 -05:00

jackett-oauth2-proxy-credentials.sops.yaml

feat(auth): gate jackett/qbittorrent/radarr/sonarr UIs with oauth2-proxy sidecar (rollout)

2026-08-31 08:45:46 -05:00

jackett.yaml

feat(dns): exposure: internal can no longer publish a public record

2026-09-14 00:43:12 -05:00

kustomization.yaml

feat(plex): wire PLEX_CLAIM from a SOPS Secret so the server can be claimed

2026-09-28 22:26:44 -05:00

nextcloud-db-app.sops.yaml

refactor(apps): split monolithic apps Kustomization into dependency waves

2026-08-26 12:19:00 -05:00

nextcloud-db-backup-credentials-prod.sops.yaml

feat(backup): the four backup credentials become TWO objects each, one per environment

2026-09-07 01:38:22 -05:00

nextcloud-db-backup-credentials.sops.yaml

feat(backup): the four backup credentials become TWO objects each, one per environment

2026-09-07 01:38:22 -05:00

nextcloud-db.yaml

fix(cnpg): the grant reconciler died on every Flux-managed run

2026-09-13 00:19:49 -05:00

pihole-dns.yaml

feat(pihole): authoritative LAN DNS for the zone on udp/53 + tcp/53 at a pinned VIP

2026-09-14 00:57:58 -05:00

pihole-oauth2-proxy-credentials.sops.yaml

feat(auth): gate pihole UI with per-app oauth2-proxy sidecar (canary)

2026-08-31 08:36:03 -05:00

pihole.yaml

merge: internal services stop advertising themselves in public DNS

2026-09-18 20:50:43 -05:00

plex-claim-secret.sops.yaml

chore(plex): fresh plex.tv claim token

2026-09-29 01:31:24 -05:00

plex.yaml

feat(plex): wire PLEX_CLAIM from a SOPS Secret so the server can be claimed

2026-09-28 22:26:44 -05:00

qbittorrent-bootstrap-secret.sops.yaml

WIP: durable qBittorrent WebUI credential

2026-09-13 15:57:42 -05:00

qbittorrent-oauth2-proxy-credentials.sops.yaml

feat(auth): gate jackett/qbittorrent/radarr/sonarr UIs with oauth2-proxy sidecar (rollout)

2026-08-31 08:45:46 -05:00

qbittorrent.yaml

feat(dns): exposure: internal can no longer publish a public record

2026-09-14 00:43:12 -05:00

semaphore-db-app.sops.yaml

refactor(apps): split monolithic apps Kustomization into dependency waves

2026-08-26 12:19:00 -05:00

semaphore-db-backup-credentials-prod.sops.yaml

feat(backup): the four backup credentials become TWO objects each, one per environment

2026-09-07 01:38:22 -05:00

semaphore-db-backup-credentials.sops.yaml

feat(backup): the four backup credentials become TWO objects each, one per environment

2026-09-07 01:38:22 -05:00

semaphore-db.yaml

feat(cnpg): synchronous replication, quorum of 1, dataDurability preferred

2026-09-07 23:54:19 -05:00

vm-demo.yaml

fix(obs): twelve app SLI rules read a signal that exists; kill the dead ServiceMonitors

2026-09-13 17:11:30 -05:00