stack.basicstack.de

basicstack/stack.basicstack.de

Fork 0

Commit graph

4ed49fc6b4 Update Stalwart stability check: SMTP transient issue during LoadBalancer transition CTO Agent 2026-07-13 21:03:26 +00:00
3b4146de65 Add weekly rolling OS-update procedure for k3s nodes (DEV-462) CTO 2026-08-09 15:55:39 +00:00
73430bf378 docs(pangolin): add apps/pangolin/README.md (DEV-461) CTO Agent 2026-08-08 16:49:22 +00:00
ee56681f86 chore(DEV-460): delete orphan apps/platform-prod forgejoadmin 2026-08-08 16:37:01 +00:00
a2f21a4d96 chore(DEV-460): delete orphan apps/platform-prod chore/DEV-460-delete-platform-prod CTO 2026-08-08 16:36:00 +00:00
1015b3bc8e fix(harbor): enable automated selfHeal on harbor Application CTO Agent 2026-08-08 15:52:55 +00:00
56e598f66c fix(harbor): set updateStrategy=Recreate for RWO PVC rollouts CTO Agent 2026-08-08 15:51:06 +00:00
64f61981ba chore(paperclip): Remove legacy plain Ingress for paperclip.basicstack.de (DEV-456) CTO Agent 2026-08-08 14:56:06 +00:00
015cbf56de Traefik: check in HelmChartConfig with DEV-457 changes for reproducibility CTO Agent 2026-08-08 14:52:29 +00:00
40c1857a7c Pangolin: point badger apiBaseUrl at FQDN so Traefik in kube-system can reach it CTO Agent 2026-08-08 14:44:15 +00:00
672387e678 fix(pangolin): Reconnect controller to fresh Postgres Pangolin, route via internal API port 3001 CTO Agent 2026-08-08 11:35:02 +00:00
05f0101684 chore(pangolin): Scale pangolin-controller to 0 pending API key re-issuance CTO Agent 2026-08-08 11:20:22 +00:00
ca23917797 fix(pangolin): Render postgres.connection_string into config.yml at startup CTO Agent 2026-08-08 11:17:40 +00:00
3fff00cfd0 feat(pangolin): Switch Pangolin database from SQLite to PostgreSQL CTO Agent 2026-08-08 11:14:43 +00:00
8215a4f77b Fix Pangolin controller sealed secret - include Bearer prefix CTO Agent 2026-08-02 17:29:54 +00:00
870b6f2b07 Fix Pangolin controller API key sealed secret CTO Agent 2026-08-02 17:23:56 +00:00
c86b6de9fe Update Pangolin controller API key sealed secret CTO Agent 2026-08-02 16:55:05 +00:00
77a7ca55d6 Update Pangolin controller API key sealed secret with correct auth header CTO Agent 2026-08-02 16:53:28 +00:00
df3554eb97 Update Pangolin controller API key to new sealed secret CTO Agent 2026-08-02 16:39:07 +00:00
78e7a6d1ab Fix Pangolin controller to poll API endpoint on port 3000 CTO Agent 2026-08-02 14:18:11 +00:00
fbdd757052 Fix pangolin-controller rollout by using Recreate strategy CTO Agent 2026-08-02 13:41:25 +00:00
ab2856f4a4 feat(pangolin): Add sealed secret for controller API key CTO Agent 2026-08-02 13:23:12 +00:00
748827434e Add Pangolin Community Edition configuration guide for paperclip.basicstack.de CTO Agent 2026-08-02 13:11:01 +00:00
129496d78d Update NETWORK_ARCHITECTURE.md to reflect Hetzner Load Balancer setup CTO Agent 2026-08-02 11:41:36 +00:00
fd0b589c10 Document Hetzner Load Balancer architecture for Stalwart CTO Agent 2026-08-02 11:16:01 +00:00
6a1e37bf07 feat(pangolin): Add API authentication to controller deployment CTO Agent 2026-08-02 10:16:36 +00:00
8149f1bbbf docs(stalwart): Document network architecture with Hetzner LB integration CTO Agent 2026-08-02 11:25:41 +00:00
055bb63438 Fix pangolin-controller probe ports to match metrics server CTO Agent 2026-08-02 10:17:46 +00:00
9b1af12d1b Add missing Traefik CRD permissions to pangolin-controller RBAC CTO Agent 2026-08-02 10:14:20 +00:00
22823ba599 Fix pangolin-kube-controller authentication and endpoint CTO Agent 2026-08-02 10:09:46 +00:00
d5618fb6c8 Deploy pangolin-kube-controller for Pangolin access policies CTO Agent 2026-08-02 10:07:44 +00:00
954853cf37 refactor(pangolin): Move controller manifests to app root for Argo CD CTO Agent 2026-08-01 15:52:49 +00:00
fd6581d263 fix(pangolin): Update controller configuration for deployment CTO Agent 2026-08-01 15:51:11 +00:00
0fe46b77ec feat(pangolin): Add Kubernetes controller manifests CTO Agent 2026-08-01 15:40:30 +00:00
dae46cecac Fix Pangolin API routing - expose port 3000 for API endpoints CTO Agent 2026-08-01 14:44:19 +00:00
b4740efc20 Upgrade Pangolin to version 1.21.1 CTO Agent 2026-08-01 14:28:07 +00:00
1e77e48e94 apps/stalwart/stalwart-config.yaml aktualisiert Andreas.Leinen.imicros 2026-08-01 10:45:38 +00:00
125a2adc0d Allow HTTP traffic for Pangolin to enable HTTP-01 ACME challenge CTO Agent 2026-08-01 10:40:52 +00:00
2f1fe3dd6b Fix Pangolin TLS certificate by switching to HTTP-01 challenge CTO Agent 2026-08-01 10:36:35 +00:00
f9c0ffa469 Document ConfigMap hardening test results (DEV-431) CTO Agent 2026-08-01 10:16:33 +00:00
6640739af6 Complete Stalwart ConfigMap mount hardening: add stalwart.toml copy CTO Agent 2026-08-01 09:52:26 +00:00
291feb96a3 Harden Stalwart ConfigMap mount to eliminate CrashLoop risk CTO Agent 2026-08-01 09:47:22 +00:00
a1b723ac62 Revert "Fix Stalwart HTTP listener access for Traefik ingress" CTO Agent 2026-08-01 08:51:59 +00:00
c060c83347 Fix Stalwart HTTP listener access for Traefik ingress CTO Agent 2026-08-01 08:48:28 +00:00
4d6f540f94 apps/opencloud/init-job.yaml gelöscht Andreas.Leinen.imicros 2026-08-01 08:46:46 +00:00
8bed4f003e Merge pull request 'chore(opencloud): Remove external OpenLDAP deployment' (#1) from chore/remove-openldap-from-opencloud into main Andreas.Leinen.imicros 2026-08-01 08:18:58 +00:00
2c1cd9c239 chore(opencloud): Remove external OpenLDAP deployment CTO Agent 2026-08-01 08:16:14 +00:00
39600eab34 chore(opencloud): Remove external OpenLDAP deployment CTO Agent 2026-08-01 08:15:16 +00:00
fa5343ca23 Fix Stalwart pod crash-loop by changing health probes to exec CTO Agent 2026-08-01 08:14:41 +00:00
b06c994c9d Fix Stalwart pod crash-loop by changing health probes to exec CTO Agent 2026-08-01 08:14:41 +00:00
2e8e8ee3eb Fix Pangolin health probes: route to Web UI port 3002 instead of Internal API port 3001 CTO Agent 2026-07-26 17:16:03 +00:00
ae1573d6e8 docs: add standalone worker node addition instruction CTO Agent 2026-07-26 16:07:40 +00:00
2a89be6707 apps/stalwart/stalwart-fresh-deployment.yaml aktualisiert andreas.leinen 2026-07-26 14:13:10 +00:00
20a9581b40 apps/stalwart/stalwart-fresh-deployment.yaml aktualisiert andreas.leinen 2026-07-26 13:31:38 +00:00
f5fc083a5a Restore Stalwart bootstrap ConfigMap (non-destructive recovery) CTO Agent 2026-07-26 13:09:20 +00:00
fcc504208e Revert "Add Stalwart bootstrap ConfigMap to GitOps tracking" CTO Agent 2026-07-26 12:56:25 +00:00
191614f895 Add Stalwart bootstrap ConfigMap to GitOps tracking CTO Agent 2026-07-26 12:27:00 +00:00
3905fb1037 Fix Pangolin config: use YAML format with required fields CTO Agent 2026-07-26 12:23:19 +00:00
0447c7378f Use environment-specific config filename (prod.toml) CTO Agent 2026-07-26 12:21:07 +00:00
954b27d457 Try mounting config at /config.toml CTO Agent 2026-07-26 12:20:34 +00:00
af85adbd53 Fix Pangolin config file mount path CTO Agent 2026-07-26 12:19:25 +00:00
1c740828ed Add Pangolin configuration file CTO Agent 2026-07-26 12:17:14 +00:00
3d0d5f3f3a Reduce Pangolin resource requests for initial deployment CTO Agent 2026-07-26 12:14:42 +00:00
2c8a7ca1e8 Add Pangolin Kubernetes manifests CTO Agent 2026-07-26 12:09:07 +00:00
629882d29d Add Pangolin repository structure and DNS configuration CTO Agent 2026-07-26 11:58:00 +00:00
38f970b0e9 Fix Paperclip storage and permissions CTO Agent 2026-07-26 11:10:14 +00:00
797ac22512 apps/paperclip/ingress.yaml aktualisiert andreas.leinen 2026-07-26 10:39:45 +00:00
49c6a2cd4a apps/paperclip/deployment.yaml aktualisiert andreas.leinen 2026-07-26 10:39:10 +00:00
ad28439642 Add namespace.yaml to prevent accidental deletion CTO Agent 2026-07-26 10:09:40 +00:00
c0dd78d172 Use exec probe for health checks instead of HTTP probe CTO Agent 2026-07-26 10:07:16 +00:00
c0aecf125a Fix Paperclip health check endpoint path CTO Agent 2026-07-26 10:05:50 +00:00
c7c0ac2998 Revert "Use existing encrypted PVCs and postgres deployment" CTO Agent 2026-07-26 10:04:28 +00:00
8cac765a64 Use existing encrypted PVCs and postgres deployment CTO Agent 2026-07-26 10:03:33 +00:00
1b613f06f5 Fix Paperclip deployment scheduling and ArgoCD degraded status CTO Agent 2026-07-26 10:00:04 +00:00
4773547808 Add complete Paperclip deployment manifests to apps/paperclip CTO Agent 2026-07-26 09:47:55 +00:00
325462b0f9 Consolidate Forgejo backup into forgejo namespace CTO Agent 2026-07-26 09:35:31 +00:00
311ec15b07 Consolidate Forgejo backup into main Forgejo app CTO Agent 2026-07-26 09:24:51 +00:00
a5a1190c3b Fix Passbolt ArgoCD degraded status CTO Agent 2026-07-26 09:17:04 +00:00
cfceb6d28c Remove obsolete passbolt-ingress.yaml file CTO Agent 2026-07-25 17:44:11 +00:00
487ac113d4 Fix Passbolt ingress class from nginx to traefik CTO Agent 2026-07-25 17:38:46 +00:00
d6532697aa Move Passbolt deployment configuration to Git CTO Agent 2026-07-25 16:57:35 +00:00
ef5ef56784 Fix Forgejo deployment hanging in Argo CD sync CTO Agent 2026-07-25 15:25:23 +00:00
8c2cc6fa27 Fix Stalwart ArgoCD degraded status by ignoring unsealed secrets CTO Agent 2026-07-25 15:15:42 +00:00
2eaf4db8c4 Fix Harbor ArgoCD degraded status by ignoring unsealed secret CTO Agent 2026-07-25 15:05:37 +00:00
58ffdc9bf4 Add IgnoreExtraneous annotation to Directus sealed secrets CTO Agent 2026-07-25 14:57:27 +00:00
1f81d61642 Fix Directus health check 403 errors (DEV-376) CTO Agent 2026-07-25 14:30:14 +00:00
38ed8316dd Add Directus license key as sealed secret CTO Agent 2026-07-25 14:20:31 +00:00
a309c6873c Add complete Directus configuration and update to v12.1.1 CTO Agent 2026-07-25 13:45:47 +00:00
8c66f6c955 Add metrics.k8s.io permissions to Dozzle ClusterRole CTO Agent 2026-07-25 11:34:26 +00:00
b91cbc1e09 Fix Dozzle websocket timeouts by increasing oauth2-proxy upstream timeout CTO Agent 2026-07-25 11:14:44 +00:00
1068e74deb apps/dozzle/ingress.yaml aktualisiert andreas.leinen 2026-07-25 11:06:17 +00:00
b3d252c375 apps/dozzle/ingress.yaml aktualisiert andreas.leinen 2026-07-25 10:59:15 +00:00
e51b191f4b Fix Dozzle websocket connection stability CTO Agent 2026-07-25 10:52:13 +00:00
c0a1bcb673 Change Stalwart externalTrafficPolicy to Cluster for multi-node LB CTO Agent 2026-07-25 09:35:16 +00:00
c6b14ff0bc Fix Harbor PostgreSQL data directory permissions CTO Agent 2026-07-25 08:46:33 +00:00
38639f369e Document stable routing solution for Stalwart Mail CTO Agent 2026-07-22 18:07:38 +00:00
a551ee5235 Remove insecure mail ports 143 (IMAP) and 465 (SMTPS) CTO Agent 2026-07-22 18:04:05 +00:00
d0dc5dc735 Fix Dozzle connection issues and restarts CTO Agent 2026-07-19 16:37:46 +00:00
6de215aeca apps/dozzle/deployment.yaml aktualisiert andreas.leinen 2026-07-19 16:17:17 +00:00
5797b106a6 Add health probes to Dozzle container to fix startup race condition CTO Agent 2026-07-19 14:59:35 +00:00