1681 Commits

Author SHA1 Message Date
4874ccda4d vaultwarden: pin to arm64 workers 2026-01-18 03:09:40 -03:00
8b8d2c4aa8 vaultwarden: add retry safeguards and db tuning 2026-01-18 03:00:24 -03:00
343d41ecc7 monitoring: add glue dashboard and tag cronjobs 2026-01-18 02:50:07 -03:00
a6ac0c363e nextcloud-mail-sync: harden keycloak fetch 2026-01-18 02:37:26 -03:00
0d27107411 mailu: backfill mailu_enabled for legacy users 2026-01-18 02:03:13 -03:00
c9cb088198 keycloak: rerun realm settings job 2026-01-18 01:58:17 -03:00
7cd2f3c587 vault: allow portal to read postmark relay 2026-01-18 01:17:52 -03:00
4c4c0867a7 bstein-dev-home: add smtp env for access requests 2026-01-18 01:14:15 -03:00
9c2cb1b037 mailu: preserve keycloak profile fields 2026-01-18 01:08:31 -03:00
418d201da0 mailu: gate sync to approved users 2026-01-18 00:47:38 -03:00
f753f114c7 bstein-dev-home: bump images to 0.1.1-102 2026-01-18 00:44:11 -03:00
74f089dc21 bstein-dev-home: bump images to 0.1.1-101 2026-01-18 00:33:09 -03:00
a9b94c87be comms: route live host login to mas 2026-01-17 20:49:11 -03:00
792b7b1417 comms: rerun mas local users and secrets jobs 2026-01-17 20:30:13 -03:00
0ddbb5ec79 comms: restart mas after db ensure 2026-01-17 20:27:11 -03:00
e64ba4ca3c comms: re-run mas db ensure 2026-01-17 20:23:32 -03:00
758610dff0 core: pin coredns to rpi workers 2026-01-17 20:15:51 -03:00
b576da53c2 comms: pin livekit token hostnames 2026-01-17 19:49:19 -03:00
f91459e55a comms: restart livekit to reload vault keys 2026-01-17 19:32:04 -03:00
e729adc6ef comms: drop livekit token host alias 2026-01-17 19:12:00 -03:00
96b93a1687 comms: use sh for Element host-config script 2026-01-17 18:38:36 -03:00
578ef5e830 comms: add Element host-config entrypoint script 2026-01-17 18:29:42 -03:00
ebb300b939 comms: mount host-specific Element config file 2026-01-17 18:22:36 -03:00
be10e01c2f comms: serve host-specific Element config alias 2026-01-17 18:16:45 -03:00
5f1b61d25e comms: pin guest rename job to rpi5 nodes 2026-01-17 18:04:53 -03:00
0e3c8ef952 comms: add harbor pull secret to vault serviceaccount 2026-01-17 17:57:57 -03:00
6997d5e202 comms: use guest-tools image for guest rename 2026-01-17 17:51:21 -03:00
f9830c6678 comms: prune stale guests after 14 days 2026-01-17 17:30:07 -03:00
1293ffe0a5 comms: pin mas/synapse host aliases for DNS 2026-01-17 17:21:46 -03:00
69d67b39a5 comms: make guest register server threaded 2026-01-17 16:59:57 -03:00
931e41a76f comms: harden guest register provisioning 2026-01-17 16:51:40 -03:00
f15b80872e comms: add default server name to element config 2026-01-17 16:31:53 -03:00
df3a56656d core: route budget and money to traefik 2026-01-17 08:16:57 -03:00
309931f7a5 finance: run firefly entrypoint after vault env 2026-01-17 08:12:14 -03:00
6cf46cf789 core: point internal dns at traefik service 2026-01-17 08:05:33 -03:00
16b7fcd120 finance: let firefly init nginx config 2026-01-17 07:54:27 -03:00
8192dfeebe platform: restore cert-manager and encrypt budget storage 2026-01-17 07:38:38 -03:00
71bab17665 comms: fix matrix login routing and prune guests 2026-01-17 07:32:57 -03:00
356dba3a33 core: add finance hosts to coredns 2026-01-17 06:56:45 -03:00
268a1d9449 sso: retry mas secret lookup 2026-01-17 03:29:36 -03:00
acfab6a150 sso: retry keycloak secret jobs 2026-01-17 03:24:30 -03:00
728f2cd2ee vault: pin cronjobs to service IP 2026-01-17 03:17:36 -03:00
ef5ac62544 vault: make retry helper resilient 2026-01-17 03:09:33 -03:00
ee622cbb0b finance: source firefly env in shell 2026-01-17 03:03:16 -03:00
a9c2d3c5e8 vault: retry vault cli operations 2026-01-17 03:00:25 -03:00
008130f8d0 finance: roll firefly after secrets 2026-01-17 02:59:38 -03:00
376eae3fa1 finance: migrate actual db before bootstrap 2026-01-17 02:55:20 -03:00
ba546bf63f portal: retry vaultwarden cred sync 2026-01-17 02:54:38 -03:00
84fa9e7dbc finance: prepare actual data dirs 2026-01-17 02:50:11 -03:00
9a3c3a3d3e vault: retry status checks in config jobs 2026-01-17 02:49:25 -03:00