k.rennerandClaude Opus 4.7 dae312ba5d fix: Cilium lbExternalClusterIP for pod→LB hairpin ...

With L2 announcements, the LoadBalancer VIP is advertised via ARP on
the LAN, so traffic from a pod to its own cluster's LB VIP times out.
Enable bpf.lbExternalClusterIP so Cilium redirects the socket straight
to the backend pod, fixing server-to-server OIDC from paperless to
auth.k.renner.uno.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-04-18 22:28:29 +02:00

.vscode

Add Unifi and Cloudflare provider configurations and examples

2026-02-02 21:54:10 +01:00

.woodpecker

ci: Split cluster bootstrap into phased pipeline steps

2026-04-18 21:33:02 +02:00

ansible

refactor: Stream paperless backups directly to S3 from VM

2026-04-18 20:22:24 +02:00

dns-server

Refactor code structure for improved readability and maintainability

2026-02-15 15:55:18 +01:00

kubernetes

fix: Cilium lbExternalClusterIP for pod→LB hairpin

2026-04-18 22:28:29 +02:00

opentofu

fix: Use stable MinIO credentials, remove broken MinIO provider

2026-04-15 21:12:38 +02:00

opentofu-bootstrap

feat: Separate RustFS to bootstrap project

2026-02-17 00:09:32 +01:00

scripts

fix: Auto-fetch latest access files in import script

2026-04-18 21:44:50 +02:00

.gitignore

fix: Stash access files in workspace between steps

2026-04-18 10:26:22 +02:00

ACTION_ITEMS.md

feat: Enhance backup infrastructure documentation and address RustFS incident recovery measures

2026-02-15 21:07:41 +01:00

ARCHITECTURE.md

docs: Add ARCHITECTURE.md and OPERATIONS.md

2026-02-18 18:29:19 +01:00

BACKUP_INFRASTRUCTURE.md

feat: Enhance backup infrastructure documentation and address RustFS incident recovery measures

2026-02-15 21:07:41 +01:00

CLAUDE.md

docs: Add K8s bootstrap documentation

2026-04-04 19:41:20 +02:00

COPILOT_INSTRUCTIONS.md

feat: add security scan workflow for Docker images and IaC configuration

2026-01-28 07:53:07 +01:00

CRIT-1-COMPLETION.md

feat: Implement secure Ansible vault password management

2026-02-15 16:21:49 +01:00

CRIT-2-COMPLETION.md

feat: Enable TLS verification for Proxmox API and update CI/CD workflow

2026-02-15 18:23:57 +01:00

CRIT-3-COMPLETION.md

feat: Enhance backup infrastructure documentation and address RustFS incident recovery measures

2026-02-15 21:07:41 +01:00

DISASTER_RECOVERY.md

docs: Add disaster recovery runbook

2026-02-18 17:58:40 +01:00

DNS_HA_SUMMARY.md

feat: Implement High Availability for Proxmox DNS Server using Keepalived

2026-02-13 21:56:26 +01:00

INFRASTRUCTURE_REVIEW_2026-02-15.md

feat: Add integration tests to CI pipeline (MAINT-3)

2026-02-18 18:34:57 +01:00

LESSONS_LEARNED_RUSTFS_INCIDENT.md

feat: Enhance backup infrastructure documentation and address RustFS incident recovery measures

2026-02-15 21:07:41 +01:00

MIGRATION_QUICKSTART.md

feat: Implement High Availability for Proxmox DNS Server using Keepalived

2026-02-13 21:56:26 +01:00

MIGRATION_STATUS.md

feat: Implement High Availability for Proxmox DNS Server using Keepalived

2026-02-13 21:56:26 +01:00

OPERATIONS.md

docs: Add ARCHITECTURE.md and OPERATIONS.md

2026-02-18 18:29:19 +01:00

PROVIDER_MIGRATION_ANALYSIS.md

feat: Migrate from Telmate to BPG Proxmox provider

2026-02-16 21:40:46 +01:00

REVIEW_SUMMARY.md

feat: Enable TLS verification for Proxmox API and update CI/CD workflow

2026-02-15 18:23:57 +01:00

RUSTFS_SAFEGUARDS.md

feat: Implement High Availability for Proxmox DNS Server using Keepalived

2026-02-13 21:56:26 +01:00

SECURITY.md

docs: Add SECURITY.md with RBAC and key rotation procedures

2026-02-18 18:21:14 +01:00

VAULT_PASSWORD_USAGE.md

feat: Implement secure Ansible vault password management

2026-02-15 16:21:49 +01:00

S

Description

No description provided

38 MiB

Releases 1

master

Latest

2026-01-31 15:05:31 +00:00

Languages

Go 35.3%

Shell 24.5%

Python 22.5%

Jinja 5.1%

HCL 4.8%

Other 7.7%