gitea-admin
0 Followers · 0 Following
Joined on 2026-09-05
Repositories Projects Packages Public Activity Starred Repositories
gitea-admin pushed to main at Home-Network/home-network-k3s-impl 2026-09-13 05:21:03 +00:00
16b7fcd677 fix(cnpg): the grant reconciler died on every Flux-managed run
gitea-admin pushed to main at Home-Network/home-network-k3s-impl 2026-09-13 05:15:26 +00:00
5fa893095b merge: the placeholder guard test was hiding a RED, not a pass
87c3d83dff fix(conformance): placeholder-guard-coupling actually RUNS — it was skipping forever
Compare 2 commits »
gitea-admin pushed to main at Home-Network/home-network-k3s-impl 2026-09-13 05:13:10 +00:00
e49b86eb41 merge: 35 runbooks, served, with a guard that they resolve
d616fd4025 merge: promtool is in the toolchain, so the alert unit tests actually run
bce8778096 docs(runbooks): forward-auth IS enforced — correct the posture note
78d0f1b0f6 feat(ci): promtool in the pinned toolchain, one alert-rule harness, and the gaps declared
55b90849d1 merge: the arrs had no download client at all, and now agree on paths
Compare 8 commits »
gitea-admin pushed to main at Home-Network/home-network-k3s-impl 2026-09-13 04:50:47 +00:00
4865734c5f merge: alert when a backup schedule has NEVER run, and when one is paused
b9f8807aa6 merge: whole-repo L0 invariants are DECLARED, not hand-wired per test
7057bbb711 fix(monitoring): alert when a Velero schedule has NEVER backed up, or is paused
5fa278f61c fix(ci): declare whole-repo scope instead of hand-writing a gate stage per invariant
Compare 4 commits »
gitea-admin pushed to main at Home-Network/home-network-k3s-impl 2026-09-13 04:37:29 +00:00
78d76fa089 merge: qBittorrent can finally write where the arrs can see it
9e7d919d12 merge: CNPG primaries spread one per node, and the condition is now reported
78bc53afc7 feat(qbittorrent): attach the downloads area of the bulk export — the chain was broken end to end
505083fded feat(cnpg): alert when >1 CNPG primary shares a node — the drift CNPG cannot prevent
Compare 4 commits »
gitea-admin pushed to main at Home-Network/home-network-k3s-impl 2026-09-13 04:34:20 +00:00
9b4744d450 fix(devcontainer): dev.sh defaults to prod — dev is decommissioned
gitea-admin pushed to main at Home-Network/home-network-k3s-impl 2026-09-13 04:29:07 +00:00
df77affc23 merge: the nextcloud database has never been monitored
501d587541 merge: CNPG DR alerts scoped to the cluster, and the hint that lied
bacb4c61ee fix(cnpg): the alert told the on-call to run the command that lies
7880d84bce fix(cnpg): grant cnpg_metrics_exporter CONNECT on the nextcloud database
5e7ab65c65 docs: kubectl get backup lies on this cluster — ambiguous Backup short name
Compare 6 commits »
gitea-admin pushed to main at Home-Network/home-network-k3s-impl 2026-09-13 03:58:41 +00:00
ebce6dfabb docs: the Flux->Gitea allowance is rendered and Flux-adopted — debt closed
gitea-admin pushed to main at Home-Network/home-network-k3s-impl 2026-09-13 03:54:52 +00:00
eda4a9f674 merge: the Flux->Gitea allowance is rendered, not hand-applied
d617983e83 feat(gitea): render gitea-allow-flux-ingress — prod's GitOps source, in git at last
1f20506829 feat(renderer): inClusterClients — authorable direct east-west ingress (schema 1.5.0)
a863542bf7 docs: record the apex migration, the GitOps deadlock, and the live-only policy
Compare 4 commits »
gitea-admin pushed to main at Home-Network/home-network-k3s-impl 2026-09-13 03:14:29 +00:00
f252ecec25 fix(gitops): prod's source is the in-cluster Service, not a public name
gitea-admin pushed to main at Home-Network/home-network-k3s-impl 2026-09-13 03:10:58 +00:00
ae37e27f14 fix(gitops): move prod's own Git source with the apex flip
gitea-admin pushed to main at Home-Network/home-network-k3s-impl 2026-09-13 03:09:37 +00:00
9161cab9cd feat(dns): prod takes the apex — home.keithjackson.dev
gitea-admin pushed to main at Home-Network/home-network-k3s-impl 2026-09-13 02:37:13 +00:00
b9c0970232 merge: Keycloak client URLs reconcile, not just secrets
f7d4648851 docs(keycloak): record the URL-reconciliation decisions
6202d92c27 test(conformance): gate the URL desired state, and prove the selftest can fail
23ea72d01e feat(keycloak): reconcile client redirect URIs, not just client secrets
51d8676f90 feat(keycloak): render the client-URL desired state from the realm import
Compare 5 commits »
gitea-admin pushed to main at Home-Network/home-network-k3s-impl 2026-09-13 02:14:27 +00:00
fa4deac877 fix(conformance): the dirty-tree assertion must judge HONOURED evidence
a317493bca merge: R-NET-06 re-proven on prod (recovery in <=3s)
c66a7e29e9 fix(conformance): the harness contradicted itself in two places
155df8ee3f test(conformance): R-NET-06 PROVEN on prod — vpn-killswitch re-run from a clean tree
9d0814ae61 test(conformance): R-NET-06 run against prod — L1 proven, L3 pass recorded -dirty
Compare 5 commits »
242951a000 fix(gitea-actions): wait for dind daemon to accept connections before starting runner
7a34590b19 fix(dns): add resilient fallback resolver to k3s nodes (PiHole primary + pfSense fallback)
gitea-admin pushed to main at Home-Network/home-network-k3s-impl 2026-09-12 23:16:24 +00:00
19fc8bcb27 merge: VPN egress gateway on prod, plus three datapath fixes
53e09a2610 docs(vpn): dev recovered the minute prod left the shared PIA server
9b97e073e2 merge: main (velero R2 + arr config PVC) into feat/vpn-egress-prod
38e4bf1459 docs(vpn): record the PIA server collision, and the accidental proof it handed us
37a6c94168 fix(vpn): two gateways on one pinned PIA server evict each other every 2 minutes
Compare 8 commits »
gitea-admin pushed to main at Home-Network/home-network-k3s-impl 2026-09-12 22:22:09 +00:00
839f7fed4a merge: velero works against R2 — plugin pin, NFS volume policy, metrics
2d5171e064 feat(velero): scrape the backup controller — three critical alerts could never fire
2e259a808f fix(velero): prod backups could not write metadata to R2, and opt-out FSB would have shipped 8.6 TiB
Compare 3 commits »