claude-botandClaude Opus 5.5 bbeaf622ed fix(wordpress): move to PHP 8.5.12 for PHP2Shell ...

CVE-2026-109618 and CVE-2026-109619 (BSI BITS-H 2026-297981-1132) allow
unauthenticated RCE on every PHP before 8.5.12/8.4.27/8.3.36/8.2.35;
mod_php is the highest-risk variant. The running pod reports PHP 8.3.35
and www.renner.uno serves / to the internet without the Authentik gate.

Switch to the php8.5-apache variant of the same WordPress release,
pinned to the index digest rebuilt on 2026-10-22 after the PHP fix.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-22 11:57:02 +02:00

..

apps

fix(wordpress): move to PHP 8.5.12 for PHP2Shell

2026-10-22 11:57:02 +02:00

clusters/homelab

chore: follow homelab to konairius/homelab

2026-10-19 10:43:23 +02:00

cnpg-object-stores

feat(cnpg): every cluster incarnation archives to a new prefix; recovery reads the newest

2026-10-17 22:18:14 +02:00

infrastructure

Merge pull request 'chore: follow homelab to konairius/homelab (merge inside Cut-over 1 only)' (#1372) from claude/homelab-konairius into master

2026-10-19 08:52:21 +00:00

infrastructure-inhouse

fix(flux): in-house-image infrastructure waits for Gitea; bird runs only where table 47 exists

2026-10-17 22:13:48 +02:00

restore

feat(velero): the cluster restores its app volumes itself, Gitea first

2026-10-17 22:15:55 +02:00

restore-test

chore(deps): pin dependencies

2026-10-19 02:01:50 +00:00

talos

feat(restore-test): hcloudtest boots production's config on Hetzner, contained, and Flux restores into it

2026-10-17 22:19:40 +02:00

.sops.yaml

feat: Switch to SOPS + age for secret management

2026-04-05 20:28:22 +02:00

bootstrap.sh

feat(restore-test): hcloudtest boots production's config on Hetzner, contained, and Flux restores into it

2026-10-17 22:19:40 +02:00

e2e-test.sh

fix(flux): in-house-image infrastructure waits for Gitea; bird runs only where table 47 exists

2026-10-17 22:13:48 +02:00

MIGRATION-sops-openbao.md

feat(bootstrap): OpenBao restore and bring-up under the static seal

2026-09-08 08:23:08 +02:00

NETWORK-traffic-classes.md

docs(network): traffic classes as built, node-to-node on VLAN 46 (#576)

2026-09-23 14:48:12 +02:00

PROPOSAL-cilium-single-owner.md

fix(talos): move cni: none and proxy: disabled into cluster.yaml

2026-08-28 16:21:18 +02:00

PROPOSAL-wiki-web-api.md

chore(wiki): build.1790250017; proposal: the store creates documents, no fact-sink port

2026-09-24 13:42:53 +02:00

RECOVERY.md

feat(cnpg): every cluster incarnation archives to a new prefix; recovery reads the newest

2026-10-17 22:18:14 +02:00

RUNBOOK-baremetal-conversion.md

feat(talos): role-named links, and the pod and ingress VLANs

2026-09-08 11:43:33 +02:00

RUNBOOK-cold-rebuild.md

feat(velero): the cluster restores its app volumes itself, Gitea first

2026-10-17 22:15:55 +02:00

RUNBOOK-home-assistant-image-rollback.md

docs: HA change window, HA-impact review, HA image rollback runbook (REN-243)

2026-09-27 16:41:07 +00:00

vmtest-job.yaml

feat(bootstrap): OpenBao restore and bring-up under the static seal

2026-09-08 08:23:08 +02:00