-
c8fc91ff1d
CLAUDE.md: Backlogs-Repo heisst jetzt management (Framework-Umbau 2026-08-01)

Thore CimbalandClaude Fable 5
2026-08-01 12:00:00 +00:00
-
8331bb212d
CLAUDE.md: Topologie-Update nach Backlogs-Umzug + Issue-Migration (gitops#48)

Thore CimbalandClaude Fable 5
2026-08-01 12:00:00 +00:00
-
018a4b7d83
Merge: element-web auf kanonisches CI-Image v0.3.0 (Freigabe sorb, ThreadNet-Web#8)

Thore CimbalandClaude Fable 5
2026-08-01 12:00:00 +00:00
-
-
d4f3fc4c97
element-web: Bump auf kanonisches CI-Image v0.3.0 (ThreadNet-Web#8)

Thore CimbalandClaude Fable 5
2026-08-01 12:00:00 +00:00
-
-
dfe7ff9fc0
element-values: Originalformat wiederhergestellt, Aenderung chirurgisch

Thore CimbalandClaude Fable 5
2026-08-01 12:00:00 +00:00
-
af63755f1e
element-web: Client-Feature-Defaults an Desktop angeglichen (ThreadNet-Web#1)

Thore CimbalandClaude Fable 5
2026-08-01 12:00:00 +00:00
-
-
11f97b935f
element-web: Feature-Defaults an Desktop-Config angeglichen (ThreadNet-Web#1)

Thore CimbalandClaude Fable 5
2026-08-01 12:00:00 +00:00
-
-
44d3e7dae1
CLAUDE.md: Topologie-Ausnahme fuer Rotations-PRs + .gitlab-ci.yml in Struktur

Thore CimbalandClaude Fable 5
2026-08-01 12:00:00 +00:00
-
717638d12c
chore(coturn): TURN-Rotation 2026-08-01 uebernommen (kanonischer Weg via git.lab)

Thore CimbalandClaude Fable 5
2026-08-01 12:00:00 +00:00
-
-
3c26cf2504
CLAUDE.md bearbeiten
Thore Cimbal
2026-08-01 12:00:00 +00:00
-
60248bfd92
chore(coturn): automated TURN shared-secret rotation
turn-secret-rotation
2026-08-01 12:00:00 +00:00
-
228807fcc8
monitoring: doppelten node-exporter entfernt (gitops#45)

Thore CimbalandClaude Fable 5
2026-08-01 12:00:00 +00:00
-
-
6f761da1a4
monitoring: Alloy-Synapse-Scrape auf den echten Metrics-Port 9001 korrigiert

Thore CimbalandClaude Fable 5
2026-08-01 12:00:00 +00:00
-
8ad921519f
docs: Session-Log 2026-07-30..08-01 (CI-Umzug, Windows-Strecke, Registry, Rueckbau)
Thore Cimbal
2026-07-31 12:00:00 +00:00
-
b28ef2c97a
docs: Repo-Topologie dokumentiert - git.lab kanonisch, rohana Mirror + Flux-Quelle
Thore Cimbal
2026-07-31 12:00:00 +00:00
-
5e46a24e7d
ci: Verifikations-Job nach GitLab portiert, Gitea-Workflows entfernt (CFGMON-11)

Thore CimbalandClaude Fable 5
2026-07-31 12:00:00 +00:00
-
5aca738f55
ci: comparison push for ThreadNet-Web actions-dispatch diagnosis
Thore Cimbal
2026-07-30 12:00:00 +00:00
-
932443df63
docs: fix stale status claims, move CLAUDE.md into repo, add host-config note

Thore CimbalandClaude Sonnet 5
2026-07-29 12:00:00 +00:00
-
376772078a
feat: pre-update maintenance notifications via mail + matrix (Issue #24)

Thore CimbalandClaude Sonnet 5
2026-07-29 12:00:00 +00:00
-
100b46ec91
docs: close Issue #13, moved to ThreadNet-Web#4 (client-side 2FA link)
Thore Cimbal
2026-07-29 12:00:00 +00:00
-
2803fb384c
docs: update TASKS.md with extended Issue #19 scope and new Issue #44
Thore Cimbal
2026-07-29 12:00:00 +00:00
-
11a079db57
docs: correct Electron/desktop claim, add hostile-sender test result (Issue #19)
Thore Cimbal
2026-07-29 12:00:00 +00:00
-
e094c4ab29
docs: document client-side scan patches and Electron/desktop caveat (Issue #19)
Thore Cimbal
2026-07-29 12:00:00 +00:00
-
5ca8f00d58
feat: deploy full ThreadNet-Web rebuild with client-side content scanning
Thore Cimbal
2026-07-29 12:00:00 +00:00
-
7b19586179
feat: deploy client-side ClamAV scan service for encrypted rooms
Thore Cimbal
2026-07-29 12:00:00 +00:00
-
4ca87a68c7
docs: document real ClamAV/Synapse module setup and test results (Issue #19)
Thore Cimbal
2026-07-29 12:00:00 +00:00
-
7ac584d27b
fix: use Twisted networking instead of asyncio in ClamAV module
Thore Cimbal
2026-07-29 12:00:00 +00:00
-
9db1ee6f45
feat: real media antivirus scanning via custom Synapse module (Issue #19)
Thore Cimbal
2026-07-29 12:00:00 +00:00
-
2e53387650
docs: mark Draupnir moderation bot done in TASKS.md (Issue #18)
Thore Cimbal
2026-07-29 12:00:00 +00:00
-
e659242990
docs: add moderation/content-scanning deployment guide (Issue #18)
Thore Cimbal
2026-07-29 12:00:00 +00:00
-
bb51047e1d
feat: enable experimentalRustCrypto for Draupnir management room
Thore Cimbal
2026-07-29 12:00:00 +00:00
-
f58add72ae
fix: pass explicit --draupnir-config path (v3.x dropped auto-discovery)
Thore Cimbal
2026-07-29 12:00:00 +00:00
-
5e16719bfe
fix: pin Draupnir to v3.1.0 instead of v2.9.0
Thore Cimbal
2026-07-29 12:00:00 +00:00
-
7cd177f744
feat: deploy Draupnir moderation bot (Issue #18)
Thore Cimbal
2026-07-29 12:00:00 +00:00
-
5c3a7b798a
docs: document VP9/AV1 test outcome and revert (Issue #11)
Thore Cimbal
2026-07-29 12:00:00 +00:00
-
23c66c97b8
revert: roll back VP9/AV1 codec test (Issue #11)
Thore Cimbal
2026-07-29 12:00:00 +00:00
-
9fa88bda5c
test: deploy VP9/AV1-enabled element-call widget (Issue #11)
Thore Cimbal
2026-07-29 12:00:00 +00:00
-
105194d450
feat: enable VP9/AV1 codecs at LiveKit SFU (Issue #11 test)
Thore Cimbal
2026-07-28 12:00:00 +00:00
-
2aed6e4932
docs: update ThreadNet-Web build-bug status to fixed (issue #12)

Thore CimbalandClaude Sonnet 5
2026-07-28 12:00:00 +00:00
-
174c58001b
fix(element-call): limit codec dropdown to codecs the SFU actually supports

Thore CimbalandClaude Sonnet 5
2026-07-28 12:00:00 +00:00
-
5f7fd8bc46
i18n(element-call): add German translations for camera/screen share settings

Thore CimbalandClaude Sonnet 5
2026-07-28 12:00:00 +00:00
-
13385b68f2
feat(element-call): expose camera/screen share quality settings in Video tab

Thore CimbalandClaude Sonnet 5
2026-07-28 12:00:00 +00:00
-
ccf6856f42
docs: bring top-level README up to date

Thore CimbalandClaude Sonnet 5
2026-07-28 12:00:00 +00:00
-
eabde3747e
fix(docs): make todo-tree detect markdown checkboxes, clean up stale TASKS.md backlog

Thore CimbalandClaude Sonnet 5
2026-07-28 12:00:00 +00:00
-
2932ffffc3
fix(matrix-stack): shorten HelmRelease reconcile interval to 1m
v0.17.0

Thore CimbalandClaude Sonnet 5
2026-07-28 12:00:00 +00:00
-
0f7ff1a896
Merge pull request 'chore(coturn): automated TURN shared-secret rotation' (#42) from turn-secret-rotation-20260728-192656 into main
Thore Cimbal
2026-07-28 12:00:00 +00:00
-
-
802e09cd9c
chore(coturn): automated TURN shared-secret rotation
turn-secret-rotation
2026-07-28 12:00:00 +00:00
-
-
debf980d5f
fix(turn-rotation): add hostAliases for private-network Gitea access

Thore CimbalandClaude Sonnet 5
2026-07-28 12:00:00 +00:00
-
d742c99ba5
chore: set Gitea PAT for TURN secret rotation job
Thore Cimbal
2026-07-28 12:00:00 +00:00
-
ac7e65100d
feat(coturn): add automated TURN shared-secret rotation CronJob

Thore CimbalandClaude Sonnet 5
2026-07-28 12:00:00 +00:00
-
be95bd921c
feat(coturn): add scoped age recipient for automated rotation job

Thore CimbalandClaude Sonnet 5
2026-07-28 12:00:00 +00:00
-
7795f89fc9
docs(coturn): note the one-time manual rollingUpdate fix instead of an ineffective YAML null
Thore Cimbal
2026-07-28 12:00:00 +00:00
-
9fa947cc21
fix(coturn): explicitly null rollingUpdate field alongside Recreate strategy

Thore CimbalandClaude Sonnet 5
2026-07-28 12:00:00 +00:00
-
233b13f972
fix(coturn): use Recreate deployment strategy for hostNetwork pod

Thore CimbalandClaude Sonnet 5
2026-07-28 12:00:00 +00:00
-
51ea51352b
fix(coturn): remove plaintext TURN shared secret, rotate leaked value

Thore CimbalandClaude Sonnet 5
2026-07-28 12:00:00 +00:00
-
9607687e4e
docs: document node-level /etc/hosts entry for private-network registry access
v0.16.0
Thore Cimbal
2026-07-28 12:00:00 +00:00
-
49005ed325
fix(backup): retry pg_dump connection to survive NetworkPolicy sync lag

Thore CimbalandClaude Sonnet 5
2026-07-28 12:00:00 +00:00
-
ba270bce71
feat(backup): add nightly Borg backups to Hetzner Storage Box

Thore CimbalandClaude Sonnet 5
2026-07-28 12:00:00 +00:00
-
2c5f77686d
fix(authentik): scope authentik-postgresql NetworkPolicy to internal access
v0.15.0

Thore CimbalandClaude Sonnet 5
2026-07-28 12:00:00 +00:00
-
414ada956a
feat(authentik): capture MAS OIDC Provider/Application as a Blueprint

Thore CimbalandClaude Sonnet 5
2026-07-28 12:00:00 +00:00
-
4a3d7c70a6
fix: restore correct file permissions, stop tracking .DS_Store
v0.14.0

Thore CimbalandClaude Sonnet 5
2026-07-28 12:00:00 +00:00
-
6973a8dbc7
fix(devcontainer): repair broken build and add docker socket permission fix

Thore CimbalandClaude Sonnet 5
2026-07-28 12:00:00 +00:00
-
09aaf1b2b5
docs: Document age key recovery from an already-running cluster
v0.13.2
Thore Cimbal
2026-07-28 12:00:00 +00:00
-
337dbe85ac
docs: Migrate backlog to Gitea issues, remove stale completed items
Thore Cimbal
2026-07-28 12:00:00 +00:00
-
e462980dac
docs: Document simulcast middle layer and H.264 codec switch for calls
v0.13.1
Thore Cimbal
2026-07-28 12:00:00 +00:00
-
79db6a8e49
feat: Try H.264 codec for calls instead of VP8
Thore Cimbal
2026-07-28 12:00:00 +00:00
-
25d1742d61
fix: Add 720p simulcast middle layer for smoother video quality
Thore Cimbal
2026-07-28 12:00:00 +00:00
-
736c39a413
docs: Document NetworkPolicies rollout (issue #10), incidents, OOM fix, and identity cleanup
v0.13.0
Thore Cimbal
2026-07-28 12:00:00 +00:00
-
22a0823b7e
fix: Raise matrixRTC authorisation service memory limit (20Mi -> 128Mi)
Thore Cimbal
2026-07-28 12:00:00 +00:00
-
3054037480
fix: Allow synapse-main to reach MAS's port 8080 for token introspection
Thore Cimbal
2026-07-28 12:00:00 +00:00
-
8f1d39b7a8
feat: Default-deny ingress NetworkPolicy for matrix namespace
Thore Cimbal
2026-07-28 12:00:00 +00:00
-
edf224e450
fix: Correct authentik-server NetworkPolicy ports (container port, not Service port)
Thore Cimbal
2026-07-28 12:00:00 +00:00
-
b32920c48f
feat: Default-deny ingress NetworkPolicy for authentik namespace
Thore Cimbal
2026-07-28 12:00:00 +00:00
-
cb2ffa6a08
docs: Update status summary, add session log, sync element-customization guide with wiki
v0.12.0
Thore Cimbal
2026-07-27 12:00:00 +00:00
-
7d352fbf20
docs: Document VP9 incident and v0.2.1 fix for Element Call fork
Thore Cimbal
2026-07-27 12:00:00 +00:00
-
1bb1bc9610
fix: Retry Element Call fork without forced VP9 codec preference
Thore Cimbal
2026-07-27 12:00:00 +00:00
-
37aea0254b
revert: Roll back Element Call fork image - calls broken (no audio/video)
Thore Cimbal
2026-07-27 12:00:00 +00:00
-
fad91b6a05
docs: Document Element Call fork completion and threadnet-web build bug
Thore Cimbal
2026-07-27 12:00:00 +00:00
-
af73cf770b
feat: Element Call fork with 1440p/60fps + VP9 defaults
Thore Cimbal
2026-07-27 12:00:00 +00:00
-
09e4225de5
fix: Replace broken netstat liveness probe on coturn with tcpSocket check
v0.11.1
Thore Cimbal
2026-07-27 12:00:00 +00:00
-
c0cb864ca2
docs: Add security.html with Passkey/TOTP self-service setup links
v0.11.0
Thore Cimbal
2026-07-27 12:00:00 +00:00
-
235306a840
fix: Set Brand.default_application so "/" doesn't dead-end at /if/user/
Thore Cimbal
2026-07-27 12:00:00 +00:00
-
e9b24a6d1f
fix: Append redirect stage to TOTP/WebAuthn self-service setup flows
Thore Cimbal
2026-07-27 12:00:00 +00:00
-
0274f9316c
fix: Build matrix-recovery flow and link it as the login page's recovery flow
Thore Cimbal
2026-07-27 12:00:00 +00:00
-
027f567c8b
fix: Add redirect stage so matrix-invitation ends up at Element, not authentik dashboard
Thore Cimbal
2026-07-27 12:00:00 +00:00
-
d2bcd90291
fix: Clear erroneous validation_policies on matrix-invitation-prompt
Thore Cimbal
2026-07-27 12:00:00 +00:00
-
80714fe901
fix: Repair matrix-invitation enrollment flow via Authentik Blueprint
Thore Cimbal
2026-07-27 12:00:00 +00:00
-
5bbb03bc52
refactor: Organize troubleshooting docs into docs/troubleshooting/
v0.10.1

Scrublord MacBadandClaude Haiku 4.5
2026-05-18 13:03:33 +02:00
-
af13688993
docs: Add step-by-step guide to create Authentik Invitation Flow

Scrublord MacBadandClaude Haiku 4.5
2026-05-18 12:52:35 +02:00
-
f70e77127e
docs: Add Authentik Invitation Flow repair guide

Scrublord MacBadandClaude Haiku 4.5
2026-05-18 12:36:56 +02:00
-
f658ce2980
docs: Add Authentik enrollment flow diagnostics and repair guides

Scrublord MacBadandClaude Haiku 4.5
2026-05-18 12:24:49 +02:00
-
b29c7516d4
Update: Authentik 2026.2.3
v0.10.0
Scrublord MacBad
2026-05-15 15:05:06 +02:00
-
c32f951716
Update TASKS.md: Mark 3 CRITICAL tasks complete

Scrublord MacBadandClaude Haiku 4.5
2026-05-15 13:48:00 +02:00
-
cdfbf7de98
Enable Authentik OIDC integration in MAS

Scrublord MacBadandClaude Haiku 4.5
2026-05-15 11:05:52 +02:00
-
0ff598e8e0
Add documentation to wiki branch
wiki

Scrublord MacBadandClaude Haiku 4.5
2026-05-14 23:38:28 +02:00
-
b1247b4720
backup old wiki
Scrublord MacBad
2026-05-14 23:34:59 +02:00
-
6bcbe9cc9e
Add Gitea Actions workflows for CI/CD automation
v0.9.0

Scrublord MacBadandClaude Haiku 4.5
2026-05-14 23:29:50 +02:00
-
20e041ca94
Initialize wiki
Scrublord MacBad
2026-05-14 23:21:05 +02:00
-
b8da70b14b
Add status summary and prioritized next steps to TASKS.md

Scrublord MacBadandClaude Haiku 4.5
2026-05-14 23:08:00 +02:00
-
4cf6702f85
Add comprehensive task list and VSCode todo-tree integration

Scrublord MacBadandClaude Haiku 4.5
2026-05-14 23:05:33 +02:00