Thore Cimbal b32920c48f feat: Default-deny ingress NetworkPolicy for authentik namespace ...

Ingress-only default-deny (egress untouched) plus explicit allows:
Traefik (kube-system) + MAS (matrix ns) -> authentik-server on 80/443,
and Traefik -> cert-manager's ACME HTTP-01 solver pods on 8089.
authentik-postgresql already has its own Bitnami-chart-managed policy,
left alone. Part of issue #10.

2026-07-28 12:00:00 +00:00

..

authentik

feat: Default-deny ingress NetworkPolicy for authentik namespace

2026-07-28 12:00:00 +00:00

base

fix: reorder kustomization resources to ensure mas-values overrides mas-secrets

2026-04-22 12:45:31 +02:00

monitoring

Fix HelmRepository API version

2026-04-24 16:18:17 +02:00

production

fix: Retry Element Call fork without forced VP9 codec preference

2026-07-27 12:00:00 +00:00

.DS_Store

fix: reorder kustomization resources to ensure mas-values overrides mas-secrets

2026-04-22 12:45:31 +02:00