-
c53b0fe830
chore(coturn): TURN-Rotation aus turn-secret-rotation-20260901-020001 uebernommen
main
TURN-Rotation (automatische Kanonisierung)
2026-09-01 03:23:28 +00:00
-
-
fc577ba89b
chore(coturn): automated TURN shared-secret rotation
turn-secret-rotation
2026-09-01 02:00:01 +00:00
-
-
6cd6ee618e
monitoring: the two charts on a floating range were the two left behind
Thore Cimbal
2026-08-21 12:00:00 +00:00
-
533fcdeac1
netpol: MAS reaches Synapse through haproxy now, and the rule did not know it
Thore Cimbal
2026-08-21 12:00:00 +00:00
-
07ffd0e86e
ESS: 26.4.0 -> 26.8.0 (#0051)
Thore Cimbal
2026-08-21 12:00:00 +00:00
-
fcf3169aa3
flux: upgrade the four controllers to the v2.9.4 set (#0051)
Thore Cimbal
2026-08-21 12:00:00 +00:00
-
8114b9ec1e
cert-manager: step 7 of 7 — v1.20.3 to v1.21.1, the target (#0051)
Thore Cimbal
2026-08-21 12:00:00 +00:00
-
44a884062d
cert-manager: step 6 of 7 — v1.19.6 to v1.20.3 (#0051)
Thore Cimbal
2026-08-21 12:00:00 +00:00
-
e394cf1a58
cert-manager: step 5 of 7 — v1.18.6 to v1.19.6 (#0051)
Thore Cimbal
2026-08-21 12:00:00 +00:00
-
fff5f54213
cert-manager: step 4 of 7 — v1.17.4 to v1.18.6 (#0051)
Thore Cimbal
2026-08-21 12:00:00 +00:00
-
45ce4417e9
cert-manager: step 3 of 7 — v1.16.5 to v1.17.4 (#0051)
Thore Cimbal
2026-08-21 12:00:00 +00:00
-
5507f13cae
chore: nudge the push mirror after the firewall work on the operating host
Thore Cimbal
2026-08-21 12:00:00 +00:00
-
d90861e112
cert-manager: step 2 of 7 — v1.15.5 to v1.16.5 (#0051)
Thore Cimbal
2026-08-21 12:00:00 +00:00
-
93155c2f37
cert-manager: step 1 of 7 — v1.14.0 to v1.15.5 (#0051)
Thore Cimbal
2026-08-21 12:00:00 +00:00
-
c9a3ae60f5
authentik: arm the automatic rollback again, the jump is done (#0051)
Thore Cimbal
2026-08-21 12:00:00 +00:00
-
92add9b9a2
authentik: 2026.5.6 -> 2026.8.0, the second and last step (#0051)
Thore Cimbal
2026-08-21 12:00:00 +00:00
-
a252ac0f09
authentik: 2026.2.3 -> 2026.5.6, the mandatory intermediate step (#0051)
Thore Cimbal
2026-08-21 12:00:00 +00:00
-
df6d291d81
authentik: disarm the automatic rollback before the version jump (#0051)
Thore Cimbal
2026-08-21 12:00:00 +00:00
-
90a89f338a
netpol: wave 4 — the authentication service loses its outbound too (#0088)
Thore CimbalandClaude Opus 5
2026-08-21 12:00:00 +00:00
-
c7fe0488e2
netpol: say in the manifest why the last five keep their outbound (#0088)
Thore CimbalandClaude Opus 5
2026-08-21 12:00:00 +00:00
-
d5b59eb5e9
netpol: wave 3 — the two namespaces the issue never mentioned (#0088)
Thore CimbalandClaude Opus 5
2026-08-21 12:00:00 +00:00
-
0a7b8f4bf1
netpol: wave 2 — four workloads keep exactly one destination (#0088)
Thore CimbalandClaude Opus 5
2026-08-21 12:00:00 +00:00
-
69c9ef13a1
dns: point rohana at the private path from inside the cluster (#0088)
Thore CimbalandClaude Opus 5
2026-08-21 12:00:00 +00:00
-
3fbc268e84
Reapply "netpol: wave 1 — six deploy and helper workloads lose their outbound (#0088)"
Thore Cimbal
2026-08-21 12:00:00 +00:00
-
80cf715e3c
Revert "netpol: wave 1 — six deploy and helper workloads lose their outbound (#0088)"
Thore Cimbal
2026-08-21 12:00:00 +00:00
-
d9ef54dc99
netpol: wave 1 — six deploy and helper workloads lose their outbound (#0088)
Thore CimbalandClaude Opus 5
2026-08-21 12:00:00 +00:00
-
59b7d288dc
drill: monthly media restore probe, proven against production (#0030)
Thore CimbalandClaude Opus 5
2026-08-21 12:00:00 +00:00
-
73f56c3414
synapse: Metadaten-Netz in die Sperrliste der URL-Vorschau (#0088)
Thore Cimbal
2026-08-20 12:00:00 +00:00
-
a6eaea6074
netpol: zehn Arbeitslasten ohne Ausgang nach draussen (#0088)
Thore Cimbal
2026-08-20 12:00:00 +00:00
-
a3d7e03d90
wiki: Gruppenpruefung wartet auf die NetworkPolicy (#0103)
Thore Cimbal
2026-08-20 12:00:00 +00:00
-
0f24fe8a54
wiki: taegliche Pruefung auf Nutzer ohne Gruppe (#0103)
Thore Cimbal
2026-08-20 12:00:00 +00:00
-
803c444885
MatrixRTC: Client-IP am SFU erhalten (externalTrafficPolicy Local)
Thore Cimbal
2026-08-20 12:00:00 +00:00
-
d87c432f89
elementWeb auf v0.6.0
Thore Cimbal
2026-08-19 12:00:00 +00:00
-
de347343b3
elementWeb auf v0.6.0-rc.3
Thore Cimbal
2026-08-19 12:00:00 +00:00
-
b319f21133
Historie: rc.2-Vorfall am Tag-Kommentar festhalten
Thore Cimbal
2026-08-19 12:00:00 +00:00
-
1c3df5badb
elementWeb zurueck auf v0.5.4 - rc.2 bricht die Raumliste
Thore Cimbal
2026-08-19 12:00:00 +00:00
-
0f45266426
elementWeb auf v0.6.0-rc.2 (Upstream-Anschluss v1.12.26)
Thore Cimbal
2026-08-19 12:00:00 +00:00
-
d809b3f695
config(element): remove the interface path to a foreign homeserver
Thore Cimbal
2026-08-19 12:00:00 +00:00
-
1e65f5b3dd
ci: stop creating pipelines that have no jobs to run
Thore Cimbal
2026-08-19 12:00:00 +00:00
-
3935f359f9
feat(synapse): close federation with an empty domain whitelist (#0060)
Thore Cimbal
2026-08-19 12:00:00 +00:00
-
e7469a36b8
feat(netpol): deny pods the metadata service, leave everything else open (#0088)
Thore CimbalandClaude Opus 5
2026-08-19 12:00:00 +00:00
-
8473a1f0e5
ci: remove the CANONIZE_TOKEN probe, it did its job
Thore CimbalandClaude Opus 5
2026-08-19 12:00:00 +00:00
-
c3e42be0d1
ci: the probe never ran - an API trigger has source api, not web
Thore CimbalandClaude Opus 5
2026-08-19 12:00:00 +00:00
-
e816d76f60
ci: drop the pruefen stage from the probe - this repo has no such stage
Thore CimbalandClaude Opus 5
2026-08-19 12:00:00 +00:00
-
e055ec511d
ci: temporary probe that CANONIZE_TOKEN reaches the pipeline
Thore CimbalandClaude Opus 5
2026-08-19 12:00:00 +00:00
-
dfb88a375e
feat(wiki): enrol every Authentik login into wiki-anwender
Thore CimbalandClaude Opus 5
2026-08-19 12:00:00 +00:00
-
ccf04608f5
ci(canonize): prune the Gitea remote, or deleted branches never disappear
Thore CimbalandClaude Opus 5
2026-08-18 12:00:00 +00:00
-
14cf9318ea
ci(canonize): skip superseded rotation branches instead of conflicting forever
Thore CimbalandClaude Opus 5
2026-08-18 12:00:00 +00:00
-
0d9cc03bfd
fix(element-web): roll out v0.5.4 — enforce the filtered send path
Thore CimbalandClaude Opus 4.8
2026-08-17 12:00:00 +00:00
-
55a06bc723
feat(element-web): roll out v0.5.3 — AI noise suppression released
Thore CimbalandClaude Opus 4.8
2026-08-17 12:00:00 +00:00
-
625d8fbb17
feat(element-web): roll out v0.5.2 — way-B filter attach, gate closed
Thore CimbalandClaude Opus 4.8
2026-08-16 12:00:00 +00:00
-
0c9ffe5324
fix(element-web): roll out v0.5.1 — unmute incident from v0.5.0 resolved
Thore CimbalandClaude Opus 4.8
2026-08-16 12:00:00 +00:00
-
450ad51c39
revert(element-web): diagnostic window closed, back to v0.4.3
Thore CimbalandClaude Opus 4.8
2026-08-16 12:00:00 +00:00
-
b46040cae2
temp(element-web): v0.5.0 back up for a diagnostic window
Thore CimbalandClaude Opus 4.8
2026-08-16 12:00:00 +00:00
-
4cd23e8990
revert(element-web): back to v0.4.3 — v0.5.0 broke unmuting
Thore CimbalandClaude Opus 4.8
2026-08-16 12:00:00 +00:00
-
25c5bb6286
feat(element-web): roll out v0.5.0 with AI noise suppression
Thore CimbalandClaude Opus 4.8
2026-08-16 12:00:00 +00:00
-
83a14e1d67
feat(element): tell reporters where their report goes (#0045)
Thore CimbalandClaude Opus 4.8
2026-08-15 12:00:00 +00:00
-
82412cf43c
docs: wiki.lab is gone, Wiki.js in the stack took over
Thore CimbalandClaude Opus 4.8
2026-08-15 12:00:00 +00:00
-
afc4ad3f20
feat(authentik): reject colliding usernames case-insensitively at registration
Thore CimbalandClaude Opus 4.8
2026-08-15 12:00:00 +00:00
-
b4650dcef8
fix(coturn): pin the image, drop the last :latest tag
Thore CimbalandClaude Opus 4.8
2026-08-15 12:00:00 +00:00
-
23533c7899
docs: split CLAUDE.md into a pointer plus AGENTS.md
Thore CimbalandClaude Opus 4.8
2026-08-15 12:00:00 +00:00
-
60aaf0e068
feat(host-config): give the lab WireGuard tunnel a repo home
Thore CimbalandClaude Opus 4.8
2026-08-15 12:00:00 +00:00
-
b61dfd968e
feat(backup): monthly restore drill that proves the backups are restorable
Thore CimbalandClaude Opus 4.8
2026-08-14 12:00:00 +00:00
-
5f54fbef8e
feat(wikijs): default new users to Europe/Berlin (fork patch)
Thore CimbalandClaude Opus 4.8
2026-08-14 12:00:00 +00:00
-
2250969e4a
feat(wikijs): German default locale, migrate content de, Berlin timezone
Thore CimbalandClaude Opus 4.8
2026-08-14 12:00:00 +00:00
-
9f8eed3193
fix(wikijs): make sidebar nav targets absolute
Thore CimbalandClaude Opus 4.8
2026-08-14 12:00:00 +00:00
-
56653ffd0c
feat(wiki): add Sicherheit page to the betrieb navigation (M5)
Thore Cimbal
2026-08-14 12:00:00 +00:00
-
026c255a45
feat(wiki): bake custom navigation + HTML rendering + UX CSS into the config job
Thore Cimbal
2026-08-13 12:00:00 +00:00
-
df72744d55
refs(wiki): shrink login background, undo the branding ConfigMap split
Thore Cimbal
2026-08-13 12:00:00 +00:00
-
2154f7fe77
fix(wiki): replace remaining Wiki.js favicons; split branding ConfigMap
Thore Cimbal
2026-08-13 12:00:00 +00:00
-
cc189d3e15
feat(wiki): nightly postgres backup + TOC on the right (#0048/#0050)
Thore Cimbal
2026-08-13 12:00:00 +00:00
-
acf38107f0
feat(wiki): reader access to home page for wiki-anwender (#0048/#0049)
Thore Cimbal
2026-08-13 12:00:00 +00:00
-
dbc7dacf2a
ci(wiki): canonize wiki content Gitea->git.lab (ADR-0015)
Thore Cimbal
2026-08-13 12:00:00 +00:00
-
ece80a8153
feat(wiki): accent color + favicon (#0050)
Thore Cimbal
2026-08-13 12:00:00 +00:00
-
32ca547be3
feat(wiki): configurable site title via WIKI_SITE_TITLE
Thore Cimbal
2026-08-13 12:00:00 +00:00
-
5d7301c4d2
feat(wiki): git-storage sync to Gitea (ADR-0015)
Thore Cimbal
2026-08-13 12:00:00 +00:00
-
63460e798c
fix(flux): stop stripping branding images from the build artifact
Thore Cimbal
2026-08-13 12:00:00 +00:00
-
7164e4f61c
feat(wiki): brand login page via mounted static assets (#0050)
Thore Cimbal
2026-08-13 12:00:00 +00:00
-
c4e67244fe
fix(wiki-config): hide local login via hideLocal, keep strategy enabled
Thore Cimbal
2026-08-13 12:00:00 +00:00
-
f034eabdd6
feat(wiki-config): disable local login after bootstrap (Variante B)
Thore Cimbal
2026-08-12 12:00:00 +00:00
-
81d66c25a0
fix(wiki-config): encode strategy config values as {v: ...}
Thore Cimbal
2026-08-12 12:00:00 +00:00
-
026b499d1d
feat(wiki): deployable Wiki.js config job (#0049) — headless setup + OIDC + roles
Thore Cimbal
2026-08-12 12:00:00 +00:00
-
3844f42f1f
feat(wiki): randomized admin secret + wiki-anwender group (deployable #0049)
Thore Cimbal
2026-08-12 12:00:00 +00:00
-
3c6d9549fb
feat(authentik): declare wiki-admin/wiki-betrieb/wiki-anwender groups (#0049)
Thore Cimbal
2026-08-12 12:00:00 +00:00
-
64d60b4428
feat(authentik): set the wiki OIDC redirect_uri to the real Wiki.js callback
Thore Cimbal
2026-08-12 12:00:00 +00:00
-
22da5a7910
fix(authentik): let Authentik generate the wiki OIDC client_id/secret
Thore Cimbal
2026-08-12 12:00:00 +00:00
-
e110918d5f
feat(wiki): wire up the wikijs-postgres-secret (created by sorb)
Thore Cimbal
2026-08-12 12:00:00 +00:00
-
ea01c0bc6d
feat: add wiki oicd blueprint
Thore Cimbal
2026-08-12 19:26:21 +00:00
-
1744de074f
feat(wiki): deploy Wiki.js in the suite (#0048) — waits on the DB secret
Thore Cimbal
2026-08-12 12:00:00 +00:00
-
3200865bbb
docs(wiki): guide 10 - Wiki.js access via wiki.axion1337.chat + native OIDC
Thore Cimbal
2026-08-12 12:00:00 +00:00
-
27a5395e17
docs(wiki-auth): add a Fehlerbild section (denial = not in wiki-zugang)
Thore Cimbal
2026-08-12 12:00:00 +00:00
-
065b13086b
feat: add authentik blueprint for forwarded wiki authentication
Thore Cimbal
2026-08-12 15:39:13 +00:00
-
cac2b88fb3
docs(wiki-auth): clarify Outpost vs Outpost Integration in step 2.2
Thore Cimbal
2026-08-12 12:00:00 +00:00
-
310bb65b98
docs(wiki-auth): decide hostname axionwiki.lab (#0024), detail steps 2-3
Thore Cimbal
2026-08-11 12:00:00 +00:00
-
a661ceda11
docs: prepare Authentik forward-auth for the Docusaurus wiki (not deployed)
Thore Cimbal
2026-08-11 12:00:00 +00:00
-
eb5442e7bf
docs: runbook for calls failing due to a missing profiles row
Thore Cimbal
2026-08-11 12:00:00 +00:00
-
ef04d86bc4
fix(mas): reject upstream logins whose localpart already exists
Thore Cimbal
2026-08-11 12:00:00 +00:00
-
151ef3c8d0
docs: index the concierge bot guide added earlier today
Thore Cimbal
2026-08-09 12:00:00 +00:00
-
9d9a87b598
docs: fix theme count and names, stale since 2026-08-06
Thore Cimbal
2026-08-09 12:00:00 +00:00
-
f6d2761025
feat: add the concierge bot for expiring guest invitations
Thore Cimbal
2026-08-09 12:00:00 +00:00