k.rennerandClaude Opus 4.6 419ba5a225 feat: Deploy CrowdSec with ingress-nginx bouncer ...

- Add CrowdSec Helm chart (LAPI + agent) in apps/crowdsec/
- Agent monitors ingress-nginx and app pod logs
- Collections: nginx, http-cve, appsec-virtual-patching, appsec-generic-rules
- Switch ingress-nginx to CrowdSec controller image (v1.13.2) with
  Lua bouncer plugin for request-level threat blocking
- LAPI data persisted on ceph-block

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-04 21:19:25 +02:00

.vscode

Add Unifi and Cloudflare provider configurations and examples

2026-02-02 21:54:10 +01:00

.woodpecker

fix: Use file_id for Talos disk import via provider, remove SSH hacks

2026-04-04 15:58:33 +02:00

ansible

fix: Monitor PBS instances at correct hostnames

2026-03-30 22:28:01 +02:00

dns-server

Refactor code structure for improved readability and maintainability

2026-02-15 15:55:18 +01:00

kubernetes

feat: Deploy CrowdSec with ingress-nginx bouncer

2026-04-04 21:19:25 +02:00

opentofu

fix: Set 32G boot disk size alongside Talos file_id

2026-04-04 17:28:24 +02:00

opentofu-bootstrap

feat: Separate RustFS to bootstrap project

2026-02-17 00:09:32 +01:00

.gitignore

feat: Update FluxCD manifests with validated infrastructure configs

2026-04-04 11:11:25 +02:00

ACTION_ITEMS.md

feat: Enhance backup infrastructure documentation and address RustFS incident recovery measures

2026-02-15 21:07:41 +01:00

ARCHITECTURE.md

docs: Add ARCHITECTURE.md and OPERATIONS.md

2026-02-18 18:29:19 +01:00

BACKUP_INFRASTRUCTURE.md

feat: Enhance backup infrastructure documentation and address RustFS incident recovery measures

2026-02-15 21:07:41 +01:00

CLAUDE.md

docs: Add K8s bootstrap documentation

2026-04-04 19:41:20 +02:00

COPILOT_INSTRUCTIONS.md

feat: add security scan workflow for Docker images and IaC configuration

2026-01-28 07:53:07 +01:00

CRIT-1-COMPLETION.md

feat: Implement secure Ansible vault password management

2026-02-15 16:21:49 +01:00

CRIT-2-COMPLETION.md

feat: Enable TLS verification for Proxmox API and update CI/CD workflow

2026-02-15 18:23:57 +01:00

CRIT-3-COMPLETION.md

feat: Enhance backup infrastructure documentation and address RustFS incident recovery measures

2026-02-15 21:07:41 +01:00

DISASTER_RECOVERY.md

docs: Add disaster recovery runbook

2026-02-18 17:58:40 +01:00

DNS_HA_SUMMARY.md

feat: Implement High Availability for Proxmox DNS Server using Keepalived

2026-02-13 21:56:26 +01:00

INFRASTRUCTURE_REVIEW_2026-02-15.md

feat: Add integration tests to CI pipeline (MAINT-3)

2026-02-18 18:34:57 +01:00

LESSONS_LEARNED_RUSTFS_INCIDENT.md

feat: Enhance backup infrastructure documentation and address RustFS incident recovery measures

2026-02-15 21:07:41 +01:00

MIGRATION_QUICKSTART.md

feat: Implement High Availability for Proxmox DNS Server using Keepalived

2026-02-13 21:56:26 +01:00

MIGRATION_STATUS.md

feat: Implement High Availability for Proxmox DNS Server using Keepalived

2026-02-13 21:56:26 +01:00

OPERATIONS.md

docs: Add ARCHITECTURE.md and OPERATIONS.md

2026-02-18 18:29:19 +01:00

PROVIDER_MIGRATION_ANALYSIS.md

feat: Migrate from Telmate to BPG Proxmox provider

2026-02-16 21:40:46 +01:00

REVIEW_SUMMARY.md

feat: Enable TLS verification for Proxmox API and update CI/CD workflow

2026-02-15 18:23:57 +01:00

RUSTFS_SAFEGUARDS.md

feat: Implement High Availability for Proxmox DNS Server using Keepalived

2026-02-13 21:56:26 +01:00

SECURITY.md

docs: Add SECURITY.md with RBAC and key rotation procedures

2026-02-18 18:21:14 +01:00

VAULT_PASSWORD_USAGE.md

feat: Implement secure Ansible vault password management

2026-02-15 16:21:49 +01:00

S

Description

No description provided

38 MiB

Releases 1

master

Latest

2026-01-31 15:05:31 +00:00

Languages

Go 35.7%

Shell 24.3%

Python 22.4%

Jinja 5.1%

HCL 4.8%

Other 7.6%