1314 Commits

Author SHA1 Message Date
a9c2d3c5e8 vault: retry vault cli operations 2026-01-17 03:00:25 -03:00
008130f8d0 finance: roll firefly after secrets 2026-01-17 02:59:38 -03:00
376eae3fa1 finance: migrate actual db before bootstrap 2026-01-17 02:55:20 -03:00
ba546bf63f portal: retry vaultwarden cred sync 2026-01-17 02:54:38 -03:00
84fa9e7dbc finance: prepare actual data dirs 2026-01-17 02:50:11 -03:00
9a3c3a3d3e vault: retry status checks in config jobs 2026-01-17 02:49:25 -03:00
36d0df817a finance: roll actual bootstrap 2026-01-17 02:46:16 -03:00
cee565892b finance: harden actual openid bootstrap 2026-01-17 02:43:25 -03:00
b0ac30e719 comms: retry mas local users and rerun 2026-01-17 02:43:15 -03:00
3cf34b53e9 finance: bump actual server image 2026-01-17 02:36:08 -03:00
c5b8396bd8 comms: retry mas jobs and rerun 2026-01-17 02:34:36 -03:00
6028d82aa3 finance: expand actual openid env 2026-01-17 02:29:47 -03:00
1cc1b9bea5 comms: rerun mas-dependent jobs 2026-01-17 02:28:21 -03:00
3274b9257c comms: restart mas after db sync 2026-01-17 02:24:50 -03:00
1a3d35094e finance: switch vault seed to python 2026-01-17 02:22:59 -03:00
9047dfa3b5 finance: rerun secrets seed job 2026-01-17 02:17:29 -03:00
9dd2a72063 mailu: retry sync and rerun job 2026-01-17 02:16:13 -03:00
9eedcad520 finance: ensure vault init ordering 2026-01-17 02:10:28 -03:00
cd60ebc982 mailu: bump sync job 2026-01-17 02:01:53 -03:00
928b2a8706 comms: bump mas admin secret job 2026-01-17 02:00:14 -03:00
7b009caf97 keycloak: bump portal admin secret job 2026-01-17 01:54:15 -03:00
86ea701ff0 jobs: bump names after affinity update 2026-01-17 01:52:16 -03:00
6ec0414fcd jobs: prefer arm64 workers 2026-01-17 01:47:53 -03:00
33e35193fb sso: harden keycloak jobs and rerun 2026-01-17 01:41:39 -03:00
1b4f46bb41 sso: rerun realm settings and vault oidc job 2026-01-17 01:36:48 -03:00
5eff31595e maintenance: add k3s agent restart daemonset 2026-01-17 01:28:13 -03:00
622c7acaa4 jobs: rerun keycloak realm + mas db ensure 2026-01-17 01:11:45 -03:00
8f990031f1 finance: fix vault seed job 2026-01-17 01:07:46 -03:00
a9351bc737 jobs: drop apk installs and prefer arm64 2026-01-17 01:02:58 -03:00
f4c6827c8c keycloak: bump realm settings job 2026-01-17 01:00:12 -03:00
62fa6ef371 finance: seed vault secrets 2026-01-17 00:54:49 -03:00
3e3061fe5b finance: add actual budget and firefly 2026-01-16 23:52:56 -03:00
2f176d5a36 planka: allow project creation for all users 2026-01-16 17:58:20 -03:00
1fb7b27de4 keycloak: rerun realm and user overrides 2026-01-16 17:47:34 -03:00
1eb7d58259 keycloak: enforce bstein group membership 2026-01-16 17:36:07 -03:00
401df4d68c longhorn: use harbor mirrors and vault pull secret 2026-01-16 17:31:29 -03:00
9f3d2db63d platform: add cert-manager and align postgres vault path 2026-01-16 11:14:48 -03:00
beb646f78f jellyfin: move cache to emptyDir 2026-01-16 09:43:01 -03:00
4faa039a8e maintenance: avoid blocking on k3s traefik cleanup 2026-01-16 09:38:14 -03:00
ef504eea80 maintenance: allow traefik cleanup watch 2026-01-16 09:33:11 -03:00
671d4d5dce maintenance: cleanup k3s traefik and wger attrs 2026-01-16 09:27:22 -03:00
9474ab97f2 maintenance: disable k3s traefik; keycloak portal admin roles 2026-01-16 07:53:04 -03:00
cf5d7dfa00 jellyfin: set traefik tls annotations 2026-01-16 04:01:27 -03:00
5cd196e043 vault/keycloak: restore kv access and wger sync rbac 2026-01-16 03:46:07 -03:00
8ad9f0a664 vault: allow admin kv browse 2026-01-16 03:20:32 -03:00
f5231d282b vault: allow UI mount listing for admins 2026-01-16 02:06:31 -03:00
bb1bf3c017 fix ingress tls routing 2026-01-16 01:40:50 -03:00
b1489a8dd9 fix logging pipeline secret and scheduling 2026-01-16 00:15:58 -03:00
5816d4f399 comms: fix mas vault file paths 2026-01-15 23:56:32 -03:00
d90950b82e gitea: expose ssh via metallb shared IP 2026-01-15 16:39:04 -03:00