k.rennerandClaude Opus 4.7 cfdccf71b6 fix: Grant paperless CAP_CHOWN for s6-overlay init ...

The paperless-ngx image runs s6-overlay as root and chowns mounted
volumes to uid 1000. Dropping ALL capabilities stripped CAP_CHOWN,
causing init-folders to fail. Add back CHOWN/DAC_OVERRIDE/FOWNER/
SETGID/SETUID and allow privilege escalation so s6 can switch users.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-04-18 17:14:18 +02:00

.vscode

Add Unifi and Cloudflare provider configurations and examples

2026-02-02 21:54:10 +01:00

.woodpecker

fix: Stash access files in workspace between steps

2026-04-18 10:26:22 +02:00

ansible

feat: Add Authentik DB migration pipeline

2026-04-13 15:56:01 +02:00

dns-server

Refactor code structure for improved readability and maintainability

2026-02-15 15:55:18 +01:00

kubernetes

fix: Grant paperless CAP_CHOWN for s6-overlay init

2026-04-18 17:14:18 +02:00

opentofu

fix: Use stable MinIO credentials, remove broken MinIO provider

2026-04-15 21:12:38 +02:00

opentofu-bootstrap

feat: Separate RustFS to bootstrap project

2026-02-17 00:09:32 +01:00

scripts

feat: Add script to import cluster access files

2026-04-18 16:44:35 +02:00

.gitignore

fix: Stash access files in workspace between steps

2026-04-18 10:26:22 +02:00

ACTION_ITEMS.md

feat: Enhance backup infrastructure documentation and address RustFS incident recovery measures

2026-02-15 21:07:41 +01:00

ARCHITECTURE.md

docs: Add ARCHITECTURE.md and OPERATIONS.md

2026-02-18 18:29:19 +01:00

BACKUP_INFRASTRUCTURE.md

feat: Enhance backup infrastructure documentation and address RustFS incident recovery measures

2026-02-15 21:07:41 +01:00

CLAUDE.md

docs: Add K8s bootstrap documentation

2026-04-04 19:41:20 +02:00

COPILOT_INSTRUCTIONS.md

feat: add security scan workflow for Docker images and IaC configuration

2026-01-28 07:53:07 +01:00

CRIT-1-COMPLETION.md

feat: Implement secure Ansible vault password management

2026-02-15 16:21:49 +01:00

CRIT-2-COMPLETION.md

feat: Enable TLS verification for Proxmox API and update CI/CD workflow

2026-02-15 18:23:57 +01:00

CRIT-3-COMPLETION.md

feat: Enhance backup infrastructure documentation and address RustFS incident recovery measures

2026-02-15 21:07:41 +01:00

DISASTER_RECOVERY.md

docs: Add disaster recovery runbook

2026-02-18 17:58:40 +01:00

DNS_HA_SUMMARY.md

feat: Implement High Availability for Proxmox DNS Server using Keepalived

2026-02-13 21:56:26 +01:00

INFRASTRUCTURE_REVIEW_2026-02-15.md

feat: Add integration tests to CI pipeline (MAINT-3)

2026-02-18 18:34:57 +01:00

LESSONS_LEARNED_RUSTFS_INCIDENT.md

feat: Enhance backup infrastructure documentation and address RustFS incident recovery measures

2026-02-15 21:07:41 +01:00

MIGRATION_QUICKSTART.md

feat: Implement High Availability for Proxmox DNS Server using Keepalived

2026-02-13 21:56:26 +01:00

MIGRATION_STATUS.md

feat: Implement High Availability for Proxmox DNS Server using Keepalived

2026-02-13 21:56:26 +01:00

OPERATIONS.md

docs: Add ARCHITECTURE.md and OPERATIONS.md

2026-02-18 18:29:19 +01:00

PROVIDER_MIGRATION_ANALYSIS.md

feat: Migrate from Telmate to BPG Proxmox provider

2026-02-16 21:40:46 +01:00

REVIEW_SUMMARY.md

feat: Enable TLS verification for Proxmox API and update CI/CD workflow

2026-02-15 18:23:57 +01:00

RUSTFS_SAFEGUARDS.md

feat: Implement High Availability for Proxmox DNS Server using Keepalived

2026-02-13 21:56:26 +01:00

SECURITY.md

docs: Add SECURITY.md with RBAC and key rotation procedures

2026-02-18 18:21:14 +01:00

VAULT_PASSWORD_USAGE.md

feat: Implement secure Ansible vault password management

2026-02-15 16:21:49 +01:00

S

Description

No description provided

38 MiB

Releases 1

master

Latest

2026-01-31 15:05:31 +00:00

Languages

Go 35.3%

Shell 24.5%

Python 22.5%

Jinja 5.1%

HCL 4.8%

Other 7.7%