homelab

T

claude-botandClaude Opus 4.8 2aa0989a8a fix(bootstrap): wire GitHub break-glass source to break Flux<->Gitea loop

Flux pulls manifests from the in-cluster Gitea, which is itself Flux-managed
(Ceph data, in-cluster DNS+Traefik), so a cold rebuild has no entry point.
Give it one:

- bootstrap.sh: FLUX_SOURCE=github selects 'flux bootstrap github' against the
  mirror (github.com/konairius/Homelab, branch master) instead of
  'flux bootstrap gitea'; defaults to gitea so steady-state is unchanged.
- kubernetes/RUNBOOK-cold-rebuild.md: single tofu->talos->flux->openbao->apps
  runbook, with the break-glass github bootstrap and the manual OpenBao
  snapshot-restore+unseal step wired in.

The GitHub mirror is already kept current by Gitea's own native push-mirror
(server-side, sync_on_commit=true) — no setup and no new credential required;
the runbook just references it. OpenBao restore stays manual (unseal key out
of CI, in pass).

Refs #187

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-14 19:53:28 +02:00

.vscode

Add Unifi and Cloudflare provider configurations and examples

2026-02-02 21:54:10 +01:00

.woodpecker

Merge pull request 'fix(ci): sandbox update-audit agent against prompt-injection exfil' (#238 ) from fix/issue-197 into master

2026-07-14 15:27:21 +00:00

ansible

Merge pull request 'fix(certificates): remove unverified authentik cert fetch into system CA trust' (#230 ) from fix/issue-185 into master

2026-07-14 10:53:26 +00:00

Merge pull request 'fix(ci): sandbox update-audit agent against prompt-injection exfil' (#238 ) from fix/issue-197 into master

2026-07-14 15:27:21 +00:00