2026-10-15 - 2026-10-22
Overview
113 Pull requests merged by 4 users
Merged
#1418 fix(kuma): retry MCB Website 3x at 20s before DOWN
Merged
#1411 feat(traefik): move the chart to 42.x, access log on the 41+ schema
Merged
#1414 fix(secret-rotator): keep the replaced HA token until the next rotation (#1081, #1084)
Merged
#1415 feat(monitoring): alert when k8s-gateway stops answering renner.uno Ingress names
Merged
#1416 chore(ci): bump ci-claude image to 2.1.306
Merged
#1417 feat(hermes): route Gitea PR reviews back to the expert's card
Merged
#1410 feat(flux): upgrade components to v2.9.6
Merged
#1409 fix(zone-configurator,speech-to-phrase): restart on HA prometheus-token rotation (#1082)
Merged
#1408 feat(hermes): Gitea issues become kanban cards; alert issues end to end, issue-fix retired
Merged
#1406 fix(hermes): write default's platform credentials to .env (Matrix/API down since #1405)
Merged
#1405 feat(hermes): five domain experts as profiles, default hands them kanban cards
Merged
#1404 feat(hermes): add Home Assistant MCP server
Merged
#1403 feat(kuma-sync): declare the public status page in git
Merged
#1402 fix(hermes): ha-updates review follow-ups from #1400
Merged
#1401 feat(hermes): alert-monitor moves from Woodpecker to a Hermes cron job
Merged
#1400 feat(hermes): ha-updates cron job for Home Assistant updates
Merged
#1397 fix(matrix): serve turn.matrix.renner.uno from the TCP router, not HTTPS
Merged
#1396 fix(crowdsec): sign the LAPI/agent certs with a CA that outlives them
Merged
#1394 fix(crowdsec): trust the CA that signed the LAPI cert, not the current root
Merged
#1395 fix(matrix): disable service links for LiveKit and lk-jwt-service
Merged
#1393 feat(matrix): Element Call (audio and video) via LiveKit + lk-jwt-service
Merged
#1392 feat(kuma): monitor every public service and the proxies, defined with their apps
Merged
#1390 feat(hermes): bootstrap Matrix cross-signing for @hermes
Merged
#1391 feat(home-assistant): render the Matrix bot password into secrets.yaml
Merged
#1389 feat(hermes): chat with Hermes over Matrix
Merged
#1388 fix(wiki): the service reads the wiki-index BasicAuth users
Merged
#1385 test(hermes): raise dashboard WS ping interval to 60s
Merged
#1384 fix(hermes): request offline_access so the dashboard session refreshes
Merged
#1383 feat(wiki): wiki.renner.uno on plain Traefik, gate and header trust go (3/3)
Merged
#1371 fix: [alert] FluxImageAutomationNotReady (cluster) (#1363)
Merged
#1382 feat(wiki): Authentik OIDC application for the wiki's own login (1/3)
Merged
#1381 fix(hermes): target Talos nodes by name in SOUL.md
Merged
#1380 docs: konairius/homelab on main in runbooks and READMEs
Merged
#1373 docs(plan): claude-bot takes the Cut-over 1 snapshot, owner only transfers
Merged
#1377 chore(rotation): stop syncing org secrets into k.renner
Merged
#1376 docs(review-bot): every repo's default branch is main
Merged
#1374 feat(hermes): log talosctl, bao and tea in
Merged
#1375 chore: default branch main (merge inside Cut-over 2 only)
Merged
#1372 chore: follow homelab to konairius/homelab (merge inside Cut-over 1 only)
Merged
#1370 feat(rotation): sync claude_code_oauth_token and review_bot_token into konairius
Merged
#1369 fix(hermes): push the Hermes image as registry-bot
Merged
#1367 feat(hermes): run the in-house Hermes image
Merged
#1366 feat(hermes): build a Hermes image with the agent's CLI tools
Merged
#1365 feat(kuma-sync): Uptime Kuma monitors replacing UptimeRobot
Merged
#1364 feat(hermes): push and open PRs on Gitea as hermes-bot
Merged
#1361 fix(hermes): put the generated ConfigMaps in the hermes namespace
Merged
#1360 feat(hermes): give the agent the homelab house rules and the wiki
Merged
#1357 feat(monitoring): watch off-site Uptime Kuma from Prometheus
Merged
#1359 fix(uptime-kuma): mount the bootstrap script directory, not the file
Merged
#1358 feat(uptime-kuma): bootstrap settings, email notification, status page and metrics key
Merged
#1356 feat(kuma-sync): attach Kuma's default notifications to managed monitors
Merged
#1355 fix(hermes): keep image automation off the retired date-versioned tags
Merged
#1354 fix(kuma-sync): create when the previous monitor ID belongs to another owner
Merged
#1352 feat(hermes): run Hermes Agent in the cluster
Merged
#1353 test(kuma-sync): remove smoke-test KumaMonitor
Merged
#1351 test(kuma-sync): live smoke-test KumaMonitor
Merged
#1350 feat(kuma-sync): deploy controller (Task 7)
Merged
#1349 chore(ci): bump ci-claude image to 2.1.303
Merged
#1348 chore(deps): update helm release openbao to >=0.30.4 <0.31.0
Merged
#1343 chore(deps): pin dependencies
Merged
#1346 chore(deps): update home-assistant non-major
Merged
#1345 chore(deps): update ci non-major
Merged
#1342 feat(kuma-sync): in-house Uptime Kuma controller (Tasks 1-6)
Merged
#1341 docs(plans): kuma-sync controller design and plan
Merged
#1340 chore(autokuma): remove AutoKuma after failed pilot
Merged
#1339 fix(uptime-kuma): dual-stack egress network for Kuma checks
Merged
#1338 test(autokuma): pilot step 3 — update interval and expiry_notification
Merged
#1337 fix(flux-notifications): stop alerting on successful image-automation commits
Merged
#1336 feat(autokuma): pilot KumaEntities (Task 3)
Merged
#1330 docs(plans): replace UptimeRobot with Uptime Kuma
Merged
#1328 docs(plan): move homelab to konairius/homelab and rename master to main
Merged
#1333 feat(autokuma): KumaEntity controller for Uptime Kuma
Merged
#1335 fix(uptime-kuma): guard the setup fail check against an undefined rc
Merged
#1334 fix(uptime-kuma): start setup after Kuma's info event; surface setup errors
Merged
#1332 feat(uptime-kuma): Uptime Kuma on the NetBird VPS
Merged
#1331 ci(ansible-image): add hvac for community.hashi_vault lookups
Merged
#1329 fix(monitoring): resolve KubeJobFailed when a later run succeeds
Merged
#1327 chore(home-assistant): follow homeassistant to konairius/homeassistant (merge right after the transfer)
Merged
#1326 feat(home-assistant): config-sync authenticates as ha-config-sync, remote from the manifest
Merged
#1325 fix(review-bot): review konairius/authentik-samba-bridge
Merged
#1324 chore(authentik): run the samba-bridge images from konairius/* (window)
Merged
#1323 chore: point the wiki and Renovate at konairius/notes and konairius/renovate-config
Merged
#1322 chore(paperless): pull vsftpd from konairius/vsftpd
Merged
#1321 fix(openbao): give the registry-bot token read:repository for its pull check
Merged
#1320 feat(openbao): rotate a registry-bot token for konairius image publishing
Merged
#1318 chore(ci): bump ci-claude image to 2.1.302
Merged
#1319 fix(review-bot): approve with Gitea's APPROVED event
Merged
#1317 fix(flux): prune again in the Kustomizations that handed objects over (restore-test stack 10/10)
Merged
#1316 feat(restore-test): hcloudtest boots production's config on Hetzner, contained (restore-test stack 9/10)
Merged
#1315 feat(cnpg): every cluster incarnation archives to a new prefix; recovery reads the newest (restore-test stack 8/10)
Merged
#1314 feat(velero): the cluster restores its app volumes itself, Gitea first (restore-test stack 7/10)
Merged
#1313 feat: iGPU and IoT-VLAN workloads run only where a node declares the hardware (restore-test stack 6/10)
Merged
#1312 fix(flux): services that need OpenBao secrets apply after the secret store (restore-test stack 5/10)
Merged
#1311 fix(flux): in-house-image infrastructure waits for Gitea; bird only where table 47 exists (restore-test stack 4/10)
Merged
#1310 fix(flux): each Kustomization depends on what its workloads need, and waits for them (restore-test stack 3/10)
Merged
#1309 feat(talos): per-site facts in the site patches; bootstrap reads them (restore-test stack 2/10)
Merged
#1308 fix: ceph-csi-drivers chart, Gitea claim without volumeName, optional HA MQTT cert (restore-test stack 1/10)
Merged
#1307 fix(flux): no pruning in the Kustomizations that hand objects to new owners (restore-test stack 0/10)
Merged
#1306 feat(review-bot): stream Mistral, add an Anthropic backend and a TypeSafe model selector
Merged
#1295 fix(woodpecker): recover wp-pg from the prefix it archives to
Merged
#1291 chore(paperclip): remove Paperclip and everything that only served it
Merged
#1293 feat(review-bot): report queued/running/failed per PR (commit status + /status API)
Merged
#1292 fix(talos): host DNS asks k8s-gateway first
Merged
#1289 fix(k8s-gateway): port values to the chart 4.x servers schema
Merged
#1287 chore(authentik): remove the passkey-only flows (stage 3)
Merged
#1286 fix(authentik-gate-sync): PATCH proxy providers with the full body
Merged
#1285 feat(authentik): move every app onto the SSO login (stage 2)
Merged
#1284 feat(authentik): add SSO login and paperless two-factor flows (stage 1)
Merged
#1283 feat(cnpg): bootstrap all backed-up CNPG clusters from their barman backups
Merged
#1282 fix(review-bot): let an unverified section no longer block approval
Merged
#1281 feat(authentik): bootstrap ak-pg from its barman backup
Merged
#1280 chore(ci): remove workstation-era wiki maintenance pipeline
Merged
#1278 fix(ci): run build-ci-images steps in sequence
2 Pull requests proposed by 2 users
Proposed
#1347 chore(deps): update helm release authentik to v2026.8.4
Proposed
#1413 fix(hermes): gitea-webhook-sync covers every konairius repo via team membership
31 Issues closed from 2 users
Closed
#1081 [alert] HomeAssistantDown (home-assistant)
Closed
#1084 [alert] TargetDown (home-assistant)
Closed
#1290 monitoring: k8s-gateway answering for renner.uno is not checked
Closed
#1082 [alert] KubePodCrashLooping (home-assistant)
Closed
#1378 [alert] NetbirdRelayMemberDown (monitoring)
Closed
#1379 [alert] NetbirdPublicEdgeWanDown (cluster)
Closed
#1279 [wiki-job-failure] notes-push.service is failing
Closed
#1288 [alert] CNPGWalArchiveBacklog (authentik)
Closed
#1064 [alert] KubePodNotReady (ha-restore-test)
Closed
#1212 [alert] KubeDeploymentRolloutStuck (openproject)
Closed
#1215 [alert] BlackboxProbeFailing (monitoring)
Closed
#1216 [alert] KubePodNotReady (openproject)
Closed
#1398 [alert] KubePodCrashLooping (crowdsec)
Closed
#1399 [alert] TargetDown (crowdsec)
Closed
#968 [alert] CephPoolLostRedundancy (rook-ceph)
Closed
#1085 [alert] NvmeDriveWearProjectedExhaustion (monitoring)
Closed
#1095 [alert] KubeJobFailed (velero)
Closed
#1186 [alert] KubePersistentVolumeFillingUp (paperclip)
Closed
#1187 [alert] KubeDeploymentReplicasMismatch (home-assistant)
Closed
#1089 [alert] CephOSDNearfullApproaching (cluster)
Closed
#1091 [alert] CephReplicapoolHeadroomLow (cluster)
Closed
#1114 [alert] KubePersistentVolumeFillingUp (gitea)
Closed
#1193 [alert] GiteaDataVolumeLow (gitea)
Closed
#1213 [alert] TargetDown (gitea)
Closed
#1241 [alert] FluxKustomizationHealthcheckfailed (flux-system)
Closed
#1244 [alert] FluxResourceNotReady (cluster)
Closed
#1267 [alert] KubeJobFailed (renovate)
Closed
#1256 [alert] FluxImageRepositoryReadoperationfailed (flux-system)
Closed
#1362 [alert] FluxKustomizationReconciliationfailed (flux-system)
Closed
#1363 [alert] FluxImageAutomationNotReady (cluster)
Closed
#963 [wiki-job-failure] notes-push.service is failing
11 Issues created by 2 users
Opened
#1279 [wiki-job-failure] notes-push.service is failing
Opened
#1288 [alert] CNPGWalArchiveBacklog (authentik)
Opened
#1290 monitoring: k8s-gateway answering for renner.uno is not checked
Opened
#1294 [alert] NetbirdPublicEdgeMemberDown (monitoring)
Opened
#1362 [alert] FluxKustomizationReconciliationfailed (flux-system)
Opened
#1363 [alert] FluxImageAutomationNotReady (cluster)
Opened
#1378 [alert] NetbirdRelayMemberDown (monitoring)
Opened
#1379 [alert] NetbirdPublicEdgeWanDown (cluster)
Opened
#1398 [alert] KubePodCrashLooping (crowdsec)
Opened
#1399 [alert] TargetDown (crowdsec)
Opened
#1407 [alert] UptimeKumaSlowResponse (cluster)
6 Unresolved Conversations
Open
#1056
Dependency Dashboard
Open
#426
Infrastructure update audit
Open
#1220
[alert] Zigbee2MQTTDownOrCoordinatorOffline (home-assistant)
Open
#326
Alert monitor: noise log
Open
#937
[alert] KubeletTooManyPods (cluster)
Open
#1214
[alert] KubeJobFailed (gitea)