feat(wlan-setup): run wlan.renner.uno on the Go service #1571

2026-11-05T13:56:17Z

claude-bot commented

2026-11-05 13:56:17 +00:00

Switches wlan.renner.uno from nginx + njs to the Go service from #1570.

Deployment wlan-setup: image gitea.renner.uno/gitea_admin/wlan-setup:2026-11-05-1352 with the Flux image policy marker wlan-setup; uid 65534, read-only root, probes on /healthz. The nginx container and the ConfigMap wlan-setup-config.yaml (nginx.conf, njs, Windows .cmd) are removed.
Certificate wlan-setup-signing for wlan.renner.uno (PKCS#8), mounted at /etc/wlan-signing (fsGroup 65534, mode 0440); read per request, so renewals need no restart.
Ingress wlan-setup-provisioning: /windows/profile/ without the authentik gate, for Windows Settings fetching the signed provisioning XML (single-use token in the path).
OAuth provider wlan-setup: redirect URI https://wlan.renner.uno/windows/callback.
docs/radius/dot1x.md: Go service and the Windows Passpoint flow.

🤖 Generated with Claude Code

Switches wlan.renner.uno from nginx + njs to the Go service from #1570. - Deployment `wlan-setup`: image `gitea.renner.uno/gitea_admin/wlan-setup:2026-11-05-1352` with the Flux image policy marker `wlan-setup`; uid 65534, read-only root, probes on `/healthz`. The nginx container and the ConfigMap `wlan-setup-config.yaml` (nginx.conf, njs, Windows `.cmd`) are removed. - Certificate `wlan-setup-signing` for `wlan.renner.uno` (PKCS#8), mounted at `/etc/wlan-signing` (fsGroup 65534, mode 0440); read per request, so renewals need no restart. - Ingress `wlan-setup-provisioning`: `/windows/profile/` without the authentik gate, for Windows Settings fetching the signed provisioning XML (single-use token in the path). - OAuth provider `wlan-setup`: redirect URI `https://wlan.renner.uno/windows/callback`. - `docs/radius/dot1x.md`: Go service and the Windows Passpoint flow. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

claude-bot added 1 commit 2026-11-05 13:56:18 +00:00

feat(wlan-setup): run wlan.renner.uno on the Go service

ci/woodpecker/pr/ci-scripts-test Pipeline was successful

Details

ci/woodpecker/pr/ci-manifests-test Pipeline was successful

Details

4e61d543a8

The wlan-setup Deployment runs gitea.renner.uno/gitea_admin/wlan-setup
(Flux image policy wlan-setup) instead of nginx + njs; the ConfigMap
wlan-setup-config.yaml with nginx.conf, njs and the Windows .cmd is removed.

- Certificate wlan-setup-signing for wlan.renner.uno (PKCS#8), mounted at
  /etc/wlan-signing (fsGroup 65534, mode 0440); the service reads it per
  request, so renewals need no restart.
- Ingress wlan-setup-provisioning: /windows/profile/ without the authentik
  gate, for Windows Settings fetching the signed provisioning XML.
- OAuth provider wlan-setup: redirect URI
  https://wlan.renner.uno/windows/callback.
- docs/radius/dot1x.md: Go service and the Windows Passpoint flow.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

k.renner merged commit fdaf20aa3f into main

2026-11-05 13:59:55 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: konairius/homelab#1571