5 Commits

Include renames

Author	SHA1	Message	Date
Story Crater Bot	98c4391ca8	feat: add paperless-ngx with OIDC, CNPG db, cp-3 HDD media, MinIO backup ... Fixes controlplane.tftpl's install.wipe:true (should be false, live CPs already run false) and syncs coredns Corefile back to what's actually deployed (drops an unrolled-out, stale Kong-era rewrite).	2026-08-25 11:11:37 -07:00
Story Crater Bot	edd739198d	fix(cilium): restrict L2 announcement to control-plane nodes — GPU worker lacks eno1 (Mellanox enp28s0f*), so when it won the .160 lease it couldn't ARP the VIP, black-holing all ingress (flapped on reboots)	2026-08-18 15:08:04 -07:00
Story Crater Bot	4c0d30ce30	fix(homarr): add AUTH_OIDC_URI + email account linking — homarr hides the Authentik sign-in button unless AUTH_OIDC_URI (authorize endpoint) is set alongside AUTH_OIDC_ISSUER (per authentik/homarr SSO docs); was the missing var	2026-08-18 15:08:04 -07:00
Story Crater Bot	20d0517f79	feat(monitoring): enable Alertmanager (null receiver, longhorn PVC, az-a) + fix forgejo-rules ns forgejo->cicd — alerting delivery was disabled; forgejo PrometheusRule targeted a nonexistent namespace	2026-08-18 15:08:04 -07:00
Story Crater Bot	06c35fb338	fix(coredns): own Corefile+hostname rewrites via Talos inlineManifest (single-source terraform/files/coredns/Corefile), drop ArgoCD coredns-config app — in-cluster *.riotpiao.com now resolves to nginx ingress so MinIO/OIDC discovery works; update cp-2 IP .213->.214	2026-08-18 15:08:04 -07:00