k.rennerandClaude Opus 4.6 1a6f537a46 feat: Proper CrowdSec bouncer integration with ingress-nginx ...

Move CrowdSec to infrastructure stage with a Job that:
1. Waits for CrowdSec LAPI to be ready
2. Generates a bouncer API key via cscli
3. Creates a K8s Secret in the ingress namespace

ingress-nginx HelmRelease depends on CrowdSec, uses the CrowdSec
controller image, and reads the bouncer key from the provisioned
secret. No SealedSecrets or hardcoded keys needed.

Flow: CrowdSec deploys → Job creates bouncer key → ingress-nginx
starts with bouncer plugin authenticated to LAPI.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-05 10:44:43 +02:00

.vscode

Add Unifi and Cloudflare provider configurations and examples

2026-02-02 21:54:10 +01:00

.woodpecker

fix: Use file_id for Talos disk import via provider, remove SSH hacks

2026-04-04 15:58:33 +02:00

ansible

fix: Monitor PBS instances at correct hostnames

2026-03-30 22:28:01 +02:00

dns-server

Refactor code structure for improved readability and maintainability

2026-02-15 15:55:18 +01:00

kubernetes

feat: Proper CrowdSec bouncer integration with ingress-nginx

2026-04-05 10:44:43 +02:00

opentofu

fix: Set 32G boot disk size alongside Talos file_id

2026-04-04 17:28:24 +02:00

opentofu-bootstrap

feat: Separate RustFS to bootstrap project

2026-02-17 00:09:32 +01:00

.gitignore

feat: Update FluxCD manifests with validated infrastructure configs

2026-04-04 11:11:25 +02:00

ACTION_ITEMS.md

feat: Enhance backup infrastructure documentation and address RustFS incident recovery measures

2026-02-15 21:07:41 +01:00

ARCHITECTURE.md

docs: Add ARCHITECTURE.md and OPERATIONS.md

2026-02-18 18:29:19 +01:00

BACKUP_INFRASTRUCTURE.md

feat: Enhance backup infrastructure documentation and address RustFS incident recovery measures

2026-02-15 21:07:41 +01:00

CLAUDE.md

docs: Add K8s bootstrap documentation

2026-04-04 19:41:20 +02:00

COPILOT_INSTRUCTIONS.md

feat: add security scan workflow for Docker images and IaC configuration

2026-01-28 07:53:07 +01:00

CRIT-1-COMPLETION.md

feat: Implement secure Ansible vault password management

2026-02-15 16:21:49 +01:00

CRIT-2-COMPLETION.md

feat: Enable TLS verification for Proxmox API and update CI/CD workflow

2026-02-15 18:23:57 +01:00

CRIT-3-COMPLETION.md

feat: Enhance backup infrastructure documentation and address RustFS incident recovery measures

2026-02-15 21:07:41 +01:00

DISASTER_RECOVERY.md

docs: Add disaster recovery runbook

2026-02-18 17:58:40 +01:00

DNS_HA_SUMMARY.md

feat: Implement High Availability for Proxmox DNS Server using Keepalived

2026-02-13 21:56:26 +01:00

INFRASTRUCTURE_REVIEW_2026-02-15.md

feat: Add integration tests to CI pipeline (MAINT-3)

2026-02-18 18:34:57 +01:00

LESSONS_LEARNED_RUSTFS_INCIDENT.md

feat: Enhance backup infrastructure documentation and address RustFS incident recovery measures

2026-02-15 21:07:41 +01:00

MIGRATION_QUICKSTART.md

feat: Implement High Availability for Proxmox DNS Server using Keepalived

2026-02-13 21:56:26 +01:00

MIGRATION_STATUS.md

feat: Implement High Availability for Proxmox DNS Server using Keepalived

2026-02-13 21:56:26 +01:00

OPERATIONS.md

docs: Add ARCHITECTURE.md and OPERATIONS.md

2026-02-18 18:29:19 +01:00

PROVIDER_MIGRATION_ANALYSIS.md

feat: Migrate from Telmate to BPG Proxmox provider

2026-02-16 21:40:46 +01:00

REVIEW_SUMMARY.md

feat: Enable TLS verification for Proxmox API and update CI/CD workflow

2026-02-15 18:23:57 +01:00

RUSTFS_SAFEGUARDS.md

feat: Implement High Availability for Proxmox DNS Server using Keepalived

2026-02-13 21:56:26 +01:00

SECURITY.md

docs: Add SECURITY.md with RBAC and key rotation procedures

2026-02-18 18:21:14 +01:00

VAULT_PASSWORD_USAGE.md

feat: Implement secure Ansible vault password management

2026-02-15 16:21:49 +01:00

S

Description

No description provided

38 MiB

Releases 1

master

Latest

2026-01-31 15:05:31 +00:00

Languages

Go 35.3%

Shell 24.5%

Python 22.5%

Jinja 5.1%

HCL 4.8%

Other 7.7%