2026-07-19 - 2026-08-19
Overview
24 Releases published by 1 user
Published
v0.10.0
v0.10.0: Authentik OIDC Integration funktioniert
Published
v0.10.1
v0.10.1: Authentik Troubleshooting-Doku
Published
v0.2.0
v0.2.0: MatrixRTC + MAS-Stabilisierung
Published
v0.3.0
v0.3.0: Element Web Themes + Desktop-Doku
Published
v0.4.0
v0.4.0: Synapse Retention & Room Policies
Published
v0.5.0
v0.5.0: Monitoring-Stack
Published
v0.6.0
v0.6.0: TURN-Server (coturn)
Published
v0.7.0
v0.7.0: Authentik Identity Provider (Stage 1)
Published
v0.7.1
v0.7.1: Raumlisten-Experiment + ESS-26.5.0-Versuch
Published
v0.7.2
v0.7.2: oembed-Konfiguration & zweiter ESS-26.5.0-Versuch
Published
v0.8.0
v0.8.0: Custom Element Web Fork
Published
v0.8.1
v0.8.1: Raumliste v3 + aXion-Theme
Published
v0.9.0
v0.9.0: DX-Tooling - Devcontainer, Doku, CI
Published
v0.1.0
v0.1.0: Initial GitOps Bootstrap
Published
v0.13.0
v0.13.0: Default-Deny NetworkPolicies
Published
v0.13.1
v0.13.1: Call-Qualität nachgeschärft
Published
v0.13.2
v0.13.2: Backlog-Migration & Doku
Published
v0.14.0
v0.14.0: Devcontainer repariert + Datei-Rechte korrigiert
Published
v0.15.0
v0.15.0: Authentik OIDC as Code + NetworkPolicy-Scoping
Published
v0.16.0
v0.16.0: Postgres- & Media-Backups
Published
v0.17.0
v0.17.0: coturn TURN-Secret - Architektur-Fix + automatisierte Rotation
Published
v0.11.0
v0.11.0: Authentik Enrollment/Recovery/2FA repariert
Published
v0.11.1
v0.11.1: coturn Liveness-Probe-Fix
Published
v0.12.0
v0.12.0: Element Call Fork
1 Pull request merged by 1 user
Merged
#42 chore(coturn): automated TURN shared-secret rotation
45 Issues closed from 1 user
Closed
#51 [HIGH] CVE-Alarme: eine Matrix-Nachricht pro CVE flutet den Security-Raum -- Zustellung derzeit stumm
Closed
#52 [MEDIUM] Monitoring-Deploy: geaenderte Configs greifen nicht ohne --force-recreate (Inode-Falle bei Einzeldatei-Mounts)
Closed
#50 [MEDIUM] Gäste-Invite-Workflow per Bot (3-Tage-Accounts, Admin-Freischaltung, begrenzte Reaktivierung)
Closed
#48 [HIGH] Issue-Migration nach GitLab + zentrale Projekt-Roadmap (Harmonisierung)
Closed
#49 [MEDIUM] Raidplaner mit sozialer Komponente (Verfügbarkeiten, Aufgaben, Roadmap, Fotoalbum)
Closed
#47 [MEDIUM] CVE-Meldeweg v2: Metriken, Grafana-Dashboard, Alerts in eigenen Matrix-Raum
Closed
#41 [LOW] Registry-/Git-Traffic zum Gitea-Host ueber privates Hetzner-Netzwerk statt oeffentlichem Internet routen
Closed
#43 [LOW] Grafana-Dashboard für ClamAV-Scan-Ergebnisse (Issue #19)
Closed
#39 [LOW] Cleanup-Checkliste (laufend)
Closed
#40 [LOW] Neue Issues erscheinen nicht automatisch im Gitea-Kanban/Projects-Board
Closed
#34 [LOW] DSGVO/Datenschutz-Compliance konkretisieren
Closed
#35 [MEDIUM] Architektur: Monorepo-Umbau mit generalisiertem Config-Overlay
Closed
#31 [LOW] Trivy image scanning for CVEs
Closed
#30 [MEDIUM] Falco runtime monitoring
Closed
#28 [MEDIUM] Lynis security baseline
Closed
#29 [MEDIUM] CrowdSec integration
Closed
#26 [MEDIUM] auditd for file integrity & syscall audit
Closed
#27 [MEDIUM] Kernel hardening (sysctl)
Closed
#23 [MEDIUM] Disable automountServiceAccountToken where not needed
Closed
#25 [HIGH] K3s API security hardening
Closed
#21 [MEDIUM] Renovate/Dependabot for chart and image updates
Closed
#22 [MEDIUM] Security advisory monitoring (ESS/Element)
Closed
#20 [LOW] External-Secrets Operator vs. current SOPS setup
Closed
#17 [MEDIUM] Federation allowlist or closed federation decision
Closed
#16 [MEDIUM] Pod Security Admission (Restricted)
Closed
#14 [MEDIUM] Web Application Firewall (WAF)
Closed
#11 [MEDIUM] Element Call: VP9 codec retry
Closed
#9 [HIGH] External PostgreSQL Migration: CloudNativePG or Hetzner
Closed
#45 node-exporter-DaemonSet in CrashLoopBackOff (4880 Restarts) + Cluster-Scrape seit 2026-08-01 tot
Closed
#32 [HIGH] Alerting fehlt komplett - nur Observability, keine aktiven Warnungen
Closed
#44 [MEDIUM] ThreadNet-Web: Electron-Desktop-Build nicht automatisiert, Fork-Änderungen landen nicht dort
Closed
#33 [LOW] Gitea Actions Workflows existieren, laufen aber nie (kein Runner)
Closed
#24 [HIGH] Host: unattended-upgrades
Closed
#13 [MEDIUM] MAS account page: direct link to 2FA/Passkey setup
Closed
#19 [LOW] Content scanner for uploaded media
Closed
#18 [MEDIUM] Mjolnir/Draupnir moderation bot
Closed
#12 [MEDIUM] ThreadNet-Web: fix full-rebuild blockers
Closed
#38 [MEDIUM] coturn Shared-Secret Rotationspolitik klaeren
Closed
#6 [CRITICAL] Database Backup Strategy: CloudNativePG vs Hetzner Postgres
Closed
#15 [HIGH] Synapse media PVC backups
Closed
#37 [MEDIUM] authentik-postgresql NetworkPolicy quellenoffen - auf internen Zugriff begrenzen
Closed
#36 [MEDIUM] Authentik OIDC-Provider/Application-Config nicht als Code erfasst
Closed
#10 [HIGH] NetworkPolicies: Default-Deny in Matrix Namespace
Closed
#8 [HIGH] Element Call Fork: Custom Video/Audio Constraints
Closed
#7 [HIGH] Authentik End-to-End Test: Login Flow Verification
40 Issues created by 0 users
Opened
#11 [MEDIUM] Element Call: VP9 codec retry
Opened
#12 [MEDIUM] ThreadNet-Web: fix full-rebuild blockers
Opened
#13 [MEDIUM] MAS account page: direct link to 2FA/Passkey setup
Opened
#14 [MEDIUM] Web Application Firewall (WAF)
Opened
#15 [HIGH] Synapse media PVC backups
Opened
#16 [MEDIUM] Pod Security Admission (Restricted)
Opened
#17 [MEDIUM] Federation allowlist or closed federation decision
Opened
#18 [MEDIUM] Mjolnir/Draupnir moderation bot
Opened
#19 [LOW] Content scanner for uploaded media
Opened
#20 [LOW] External-Secrets Operator vs. current SOPS setup
Opened
#21 [MEDIUM] Renovate/Dependabot for chart and image updates
Opened
#22 [MEDIUM] Security advisory monitoring (ESS/Element)
Opened
#23 [MEDIUM] Disable automountServiceAccountToken where not needed
Opened
#24 [HIGH] Host: unattended-upgrades
Opened
#25 [HIGH] K3s API security hardening
Opened
#26 [MEDIUM] auditd for file integrity & syscall audit
Opened
#27 [MEDIUM] Kernel hardening (sysctl)
Opened
#28 [MEDIUM] Lynis security baseline
Opened
#29 [MEDIUM] CrowdSec integration
Opened
#30 [MEDIUM] Falco runtime monitoring
Opened
#31 [LOW] Trivy image scanning for CVEs
Opened
#32 [HIGH] Alerting fehlt komplett - nur Observability, keine aktiven Warnungen
Opened
#33 [LOW] Gitea Actions Workflows existieren, laufen aber nie (kein Runner)
Opened
#34 [LOW] DSGVO/Datenschutz-Compliance konkretisieren
Opened
#35 [MEDIUM] Architektur: Monorepo-Umbau mit generalisiertem Config-Overlay
Opened
#36 [MEDIUM] Authentik OIDC-Provider/Application-Config nicht als Code erfasst
Opened
#37 [MEDIUM] authentik-postgresql NetworkPolicy quellenoffen - auf internen Zugriff begrenzen
Opened
#38 [MEDIUM] coturn Shared-Secret Rotationspolitik klaeren
Opened
#39 [LOW] Cleanup-Checkliste (laufend)
Opened
#40 [LOW] Neue Issues erscheinen nicht automatisch im Gitea-Kanban/Projects-Board
Opened
#41 [LOW] Registry-/Git-Traffic zum Gitea-Host ueber privates Hetzner-Netzwerk statt oeffentlichem Internet routen
Opened
#43 [LOW] Grafana-Dashboard für ClamAV-Scan-Ergebnisse (Issue #19)
Opened
#44 [MEDIUM] ThreadNet-Web: Electron-Desktop-Build nicht automatisiert, Fork-Änderungen landen nicht dort
Opened
#45 node-exporter-DaemonSet in CrashLoopBackOff (4880 Restarts) + Cluster-Scrape seit 2026-08-01 tot
Opened
#47 [MEDIUM] CVE-Meldeweg v2: Metriken, Grafana-Dashboard, Alerts in eigenen Matrix-Raum
Opened
#48 [HIGH] Issue-Migration nach GitLab + zentrale Projekt-Roadmap (Harmonisierung)
Opened
#49 [MEDIUM] Raidplaner mit sozialer Komponente (Verfügbarkeiten, Aufgaben, Roadmap, Fotoalbum)
Opened
#50 [MEDIUM] Gäste-Invite-Workflow per Bot (3-Tage-Accounts, Admin-Freischaltung, begrenzte Reaktivierung)
Opened
#51 [HIGH] CVE-Alarme: eine Matrix-Nachricht pro CVE flutet den Security-Raum -- Zustellung derzeit stumm
Opened
#52 [MEDIUM] Monitoring-Deploy: geaenderte Configs greifen nicht ohne --force-recreate (Inode-Falle bei Einzeldatei-Mounts)