basicstack/stack.basicstack.de
2
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

Commit graph

  • c97a2d218e chore(stalwart): bump v0.16.11 -> v0.16.18 (DEV-542) main CTO 2026-08-23 16:46:31 +00:00
  • e69e3d8eb4 chore(restic): bump image 0.17.3 -> 0.19.1 (DEV-541) CTO 2026-08-23 15:52:15 +00:00
  • 96c3846202 chore(stalwart): bump alpine 3.19 -> 3.24 in backup cronjob (DEV-539) CTO Agent 2026-08-23 15:42:36 +00:00
  • 76e250c334 fix(opencloud): use Recreate rollout strategy for RWO PVC (DEV-538) CTO Agent 2026-08-23 15:39:17 +00:00
  • 0887f87c82 chore(opencloud): bump 7.2.0 -> 7.4.0 (DEV-538) CTO Agent 2026-08-23 15:35:03 +00:00
  • a7e81db4e1 chore(directus): bump 12.1.1 -> 12.3.0 (DEV-537) CTO 2026-08-23 15:27:14 +00:00
  • 777a4d0404 chore(pocket-id): bump v2.11.0 -> v2.14.0 (DEV-536) CTO 2026-08-23 15:18:23 +00:00
  • 3317401eba chore(headlamp): bump v0.43.0 -> v0.45.0 (DEV-535) CTO 2026-08-23 15:14:38 +00:00
  • 71496fc5ac chore(dozzle): bump v10.6.10 -> v10.7.3 (DEV-534) CTO Agent 2026-08-23 15:11:47 +00:00
  • 6313b85999 chore(pangolin): bump postgres 17.5 -> 17.11 (DEV-533) CTO Agent 2026-08-23 15:07:38 +00:00
  • 7cbb603ec1 chore(pangolin): bump busybox 1.37 -> 1.38.0 (DEV-532) CTO Agent 2026-08-23 15:02:26 +00:00
  • a226958b16 chore(paperclip): bump busybox 1.36 -> 1.38.0 (DEV-531) CTO Agent 2026-08-23 14:59:34 +00:00
  • e6a94ae26a chore(stalwart): remove no-op stalwart-allow-cluster-ips job (DEV-530) CTO Agent 2026-08-23 14:18:26 +00:00
  • 1c3cd31381 fix(dns): cap hostNetwork/coredns pod DNS at 3 upstreams (DEV-527) fix/DEV-527-dns-config-hostnetwork CTO Agent 2026-08-23 12:05:12 +00:00
  • e9fcf4cbb4 fix(bookstack): Recreate rollout strategy for RWO PVC (DEV-528) (#8) forgejoadmin 2026-08-23 12:01:49 +00:00
  • e155ab6a17 fix(bookstack): use Recreate rollout strategy (DEV-528) cto-agent 2026-08-23 12:01:35 +00:00
  • 862dbbf203 fix(bookstack): point probes at /status instead of / (DEV-528) (#7) forgejoadmin 2026-08-23 11:56:58 +00:00
  • 8a80068b95 fix(bookstack): point probes at /status instead of / (DEV-528) cto-agent 2026-08-23 11:56:37 +00:00
  • c9a60a56c3 Merge pull request 'fix(argocd): label argocd-oidc-secret so Argo CD reads its keys (DEV-523)' (#6) from fix/DEV-523-argocd-oidc-secret-label into main forgejoadmin 2026-08-23 10:37:11 +00:00
  • f5a0982222 fix(argocd): label argocd-oidc-secret so Argo CD reads its keys (DEV-523) fix/DEV-523-argocd-oidc-secret-label CTO Agent 2026-08-23 10:37:01 +00:00
  • 2cf6c65d23 fix(argocd): reference argocd-oidc-secret directly for OIDC (DEV-523) forgejoadmin 2026-08-23 10:34:16 +00:00
  • d1641c9047 fix(argocd): reference argocd-oidc-secret directly for OIDC (DEV-523) fix/DEV-523-argocd-oidc-secret-ref CTO Agent 2026-08-23 10:33:50 +00:00
  • e8ab9d4674 fix(argocd): server.insecure=true for TLS-terminating ingress (DEV-522) CTO Agent 2026-08-23 10:20:55 +00:00
  • 447ff93ccf fix(argocd): add forgejo internal SSH host key to values (DEV-522) CTO Agent 2026-08-23 10:18:04 +00:00
  • 82de4507a8 feat(argocd): switch to community Helm chart (DEV-521) forgejoadmin 2026-08-23 10:11:26 +00:00
  • 43610fb16d feat(argocd): switch to community Helm chart (DEV-519) feat/DEV-521-argocd-helm CTO Agent 2026-08-23 08:32:23 +00:00
  • e848d225cd os-update: generalize CP procedure to HA cp-1/cp-2/cp-3 (DEV-515) CTO Agent 2026-08-23 01:53:14 +00:00
  • 34350a03bf os-update: exclude all control-plane nodes by role, not just cp-1 (DEV-513) CTO Agent 2026-08-23 01:39:25 +00:00
  • 89cf3094d0 chore(monitoring): add restic alerts for forgejo repo (DEV-514) CTO Agent 2026-08-23 01:16:27 +00:00
  • 585d6ee114 feat(forgejo-backup): migrate to pg_dump -> restic -> Hetzner S3 (DEV-514) CTO Agent 2026-08-23 01:13:28 +00:00
  • 19af6918f0 feat(os-update): reconcile Docker + label after node updates (DEV-499) CTO Agent 2026-08-16 20:22:43 +00:00
  • 8dffba2c52 fix(forgejo-runner): pin to nodes with docker installed (DEV-498) CTO 2026-08-16 20:15:01 +00:00
  • 129464d4c7 docs(os-update): point kine guardrails and order rules to cp-1 procedure CTO Agent 2026-08-16 19:29:21 +00:00
  • 05000b3e06 docs(infra): design cp-1 OS update procedure (DEV-496) CTO Agent 2026-08-16 19:28:46 +00:00
  • 91983e8c8e docs(os-update): kine thundering-herd guardrails after DEV-495 incident CTO Agent 2026-08-16 18:35:40 +00:00
  • 810d22f0a6 feat(monitoring): prometheus-backup → restic client-side encrypted (DEV-492) CTO Agent 2026-08-16 16:29:22 +00:00
  • ef62dde67c feat(observability): wire node-exporter textfile collector for backup metrics (DEV-494) CTO Agent 2026-08-16 16:21:56 +00:00
  • b1680431c6 feat(monitoring): pull restic image from Harbor mirror (DEV-493) CTO Agent 2026-08-16 16:20:06 +00:00
  • 550d1276f7 feat(monitoring): Prometheus backup-freshness + restic alerts (DEV-490) CTO Agent 2026-08-16 16:07:55 +00:00
  • 0c1c05fc50 feat(monitoring): retire legacy backup-volumes CronJob + backup-storage PVC (DEV-489) CTO Agent 2026-08-16 15:58:43 +00:00
  • 49b724439b docs(monitoring): add restic restore runbook + first drill log (DEV-488) CTO Agent 2026-08-16 15:47:45 +00:00
  • e434fa751b feat(monitoring): backup-k8s-resources → restic --stdin to Hetzner S3 (DEV-487) CTO Agent 2026-08-16 15:39:06 +00:00
  • d495a5936f feat(monitoring): backup-grafana-restic CronJob → Hetzner S3 (DEV-486) CTO Agent 2026-08-16 15:34:37 +00:00
  • e2fd90a22b feat(monitoring): backup-loki-restic CronJob → Hetzner S3 (DEV-485) CTO Agent 2026-08-16 15:27:40 +00:00
  • 95de27437b feat(monitoring): seal restic-password into monitoring-s3-backup (DEV-484) CTO Agent 2026-08-16 13:22:10 +00:00
  • 890809c91c fix(monitoring): Loki uses Recreate strategy for RWO PVC rollouts (DEV-483) CTO Agent 2026-08-16 12:54:26 +00:00
  • e4a7e5629a fix(monitoring): pin Loki to k3s-worker-2 to unblock backup-volumes (DEV-483) CTO Agent 2026-08-16 12:50:22 +00:00
  • 8cd2829cd8 feat(stalwart): switch config/data store from RocksDB to PostgreSQL (DEV-476) paperclip 2026-08-15 14:46:29 +00:00
  • c4551495e0 fix(stalwart): co-locate stalwart-backup pod with stalwart-0 (DEV-468) CTO Agent 2026-08-15 12:11:22 +00:00
  • 471b6a6109 feat(stalwart): deploy stalwart-postgres StatefulSet + backup (DEV-469) forgejoadmin 2026-08-15 12:06:08 +00:00
  • 9fe442ce0d feat(stalwart): deploy stalwart-postgres StatefulSet + backup (DEV-469) feat/DEV-469-stalwart-postgres CTO Agent 2026-08-15 12:05:25 +00:00
  • a5ceedf4da fix(monitoring): prune Prometheus S3 backups by prefix-date, not file mtime (DEV-465) CTO Agent 2026-08-09 17:40:50 +00:00
  • 63aa116ef1 Add dedicated Prometheus data backup CronJob (DEV-465) CTO Agent 2026-08-09 17:18:21 +00:00
  • 9d1996051e fix(backups): Repair three broken CronJobs blocking weekly OS updates (DEV-464) CTO Agent 2026-08-09 16:50:51 +00:00
  • 4ed49fc6b4 Update Stalwart stability check: SMTP transient issue during LoadBalancer transition CTO Agent 2026-07-13 21:03:26 +00:00
  • 3b4146de65 Add weekly rolling OS-update procedure for k3s nodes (DEV-462) CTO 2026-08-09 15:55:39 +00:00
  • 73430bf378 docs(pangolin): add apps/pangolin/README.md (DEV-461) CTO Agent 2026-08-08 16:49:22 +00:00
  • ee56681f86 chore(DEV-460): delete orphan apps/platform-prod forgejoadmin 2026-08-08 16:37:01 +00:00
  • a2f21a4d96 chore(DEV-460): delete orphan apps/platform-prod chore/DEV-460-delete-platform-prod CTO 2026-08-08 16:36:00 +00:00
  • 1015b3bc8e fix(harbor): enable automated selfHeal on harbor Application CTO Agent 2026-08-08 15:52:55 +00:00
  • 56e598f66c fix(harbor): set updateStrategy=Recreate for RWO PVC rollouts CTO Agent 2026-08-08 15:51:06 +00:00
  • 64f61981ba chore(paperclip): Remove legacy plain Ingress for paperclip.basicstack.de (DEV-456) CTO Agent 2026-08-08 14:56:06 +00:00
  • 015cbf56de Traefik: check in HelmChartConfig with DEV-457 changes for reproducibility CTO Agent 2026-08-08 14:52:29 +00:00
  • 40c1857a7c Pangolin: point badger apiBaseUrl at FQDN so Traefik in kube-system can reach it CTO Agent 2026-08-08 14:44:15 +00:00
  • 672387e678 fix(pangolin): Reconnect controller to fresh Postgres Pangolin, route via internal API port 3001 CTO Agent 2026-08-08 11:35:02 +00:00
  • 05f0101684 chore(pangolin): Scale pangolin-controller to 0 pending API key re-issuance CTO Agent 2026-08-08 11:20:22 +00:00
  • ca23917797 fix(pangolin): Render postgres.connection_string into config.yml at startup CTO Agent 2026-08-08 11:17:40 +00:00
  • 3fff00cfd0 feat(pangolin): Switch Pangolin database from SQLite to PostgreSQL CTO Agent 2026-08-08 11:14:43 +00:00
  • 8215a4f77b Fix Pangolin controller sealed secret - include Bearer prefix CTO Agent 2026-08-02 17:29:54 +00:00
  • 870b6f2b07 Fix Pangolin controller API key sealed secret CTO Agent 2026-08-02 17:23:56 +00:00
  • c86b6de9fe Update Pangolin controller API key sealed secret CTO Agent 2026-08-02 16:55:05 +00:00
  • 77a7ca55d6 Update Pangolin controller API key sealed secret with correct auth header CTO Agent 2026-08-02 16:53:28 +00:00
  • df3554eb97 Update Pangolin controller API key to new sealed secret CTO Agent 2026-08-02 16:39:07 +00:00
  • 78e7a6d1ab Fix Pangolin controller to poll API endpoint on port 3000 CTO Agent 2026-08-02 14:18:11 +00:00
  • fbdd757052 Fix pangolin-controller rollout by using Recreate strategy CTO Agent 2026-08-02 13:41:25 +00:00
  • ab2856f4a4 feat(pangolin): Add sealed secret for controller API key CTO Agent 2026-08-02 13:23:12 +00:00
  • 748827434e Add Pangolin Community Edition configuration guide for paperclip.basicstack.de CTO Agent 2026-08-02 13:11:01 +00:00
  • 129496d78d Update NETWORK_ARCHITECTURE.md to reflect Hetzner Load Balancer setup CTO Agent 2026-08-02 11:41:36 +00:00
  • fd0b589c10 Document Hetzner Load Balancer architecture for Stalwart CTO Agent 2026-08-02 11:16:01 +00:00
  • 6a1e37bf07 feat(pangolin): Add API authentication to controller deployment CTO Agent 2026-08-02 10:16:36 +00:00
  • 8149f1bbbf docs(stalwart): Document network architecture with Hetzner LB integration CTO Agent 2026-08-02 11:25:41 +00:00
  • 055bb63438 Fix pangolin-controller probe ports to match metrics server CTO Agent 2026-08-02 10:17:46 +00:00
  • 9b1af12d1b Add missing Traefik CRD permissions to pangolin-controller RBAC CTO Agent 2026-08-02 10:14:20 +00:00
  • 22823ba599 Fix pangolin-kube-controller authentication and endpoint CTO Agent 2026-08-02 10:09:46 +00:00
  • d5618fb6c8 Deploy pangolin-kube-controller for Pangolin access policies CTO Agent 2026-08-02 10:07:44 +00:00
  • 954853cf37 refactor(pangolin): Move controller manifests to app root for Argo CD CTO Agent 2026-08-01 15:52:49 +00:00
  • fd6581d263 fix(pangolin): Update controller configuration for deployment CTO Agent 2026-08-01 15:51:11 +00:00
  • 0fe46b77ec feat(pangolin): Add Kubernetes controller manifests CTO Agent 2026-08-01 15:40:30 +00:00
  • dae46cecac Fix Pangolin API routing - expose port 3000 for API endpoints CTO Agent 2026-08-01 14:44:19 +00:00
  • b4740efc20 Upgrade Pangolin to version 1.21.1 CTO Agent 2026-08-01 14:28:07 +00:00
  • 1e77e48e94 apps/stalwart/stalwart-config.yaml aktualisiert Andreas.Leinen.imicros 2026-08-01 10:45:38 +00:00
  • 125a2adc0d Allow HTTP traffic for Pangolin to enable HTTP-01 ACME challenge CTO Agent 2026-08-01 10:40:52 +00:00
  • 2f1fe3dd6b Fix Pangolin TLS certificate by switching to HTTP-01 challenge CTO Agent 2026-08-01 10:36:35 +00:00
  • f9c0ffa469 Document ConfigMap hardening test results (DEV-431) CTO Agent 2026-08-01 10:16:33 +00:00
  • 6640739af6 Complete Stalwart ConfigMap mount hardening: add stalwart.toml copy CTO Agent 2026-08-01 09:52:26 +00:00
  • 291feb96a3 Harden Stalwart ConfigMap mount to eliminate CrashLoop risk CTO Agent 2026-08-01 09:47:22 +00:00
  • a1b723ac62 Revert "Fix Stalwart HTTP listener access for Traefik ingress" CTO Agent 2026-08-01 08:51:59 +00:00
  • c060c83347 Fix Stalwart HTTP listener access for Traefik ingress CTO Agent 2026-08-01 08:48:28 +00:00
  • 4d6f540f94 apps/opencloud/init-job.yaml gelöscht Andreas.Leinen.imicros 2026-08-01 08:46:46 +00:00
  • 8bed4f003e Merge pull request 'chore(opencloud): Remove external OpenLDAP deployment' (#1) from chore/remove-openldap-from-opencloud into main Andreas.Leinen.imicros 2026-08-01 08:18:58 +00:00