4 Commits

Include renames

Author	SHA1	Message	Date
Story Crater Bot	98c4391ca8	feat: add paperless-ngx with OIDC, CNPG db, cp-3 HDD media, MinIO backup ... Fixes controlplane.tftpl's install.wipe:true (should be false, live CPs already run false) and syncs coredns Corefile back to what's actually deployed (drops an unrolled-out, stale Kong-era rewrite).	2026-08-25 11:11:37 -07:00
Story Crater Bot	7270c15169	(fix): fix sigV4 oidc issue when sign-in with authentik	2026-08-25 08:15:43 -07:00
Story Crater Bot	828e3fb287	refactor(argocd): replace SOPS CMP with ksops kustomize generator, rotate age key — CMP discover glob silently shadowed kustomize rendering of any app whose path held a .enc.yaml (MinIO Tenant/cloudflared/authentik jobs never applied); centralize 8 Secret manifests under k8s/argocd/secrets, defer 4 helm-values fragments	2026-08-18 15:08:04 -07:00
Story Crater Bot	41f5b05395	refactor(k8s): consolidate to infra/+apps/ single-source tree, dedicated per-app CNPG (authentik-db/temporal-db), wire monitoring-config, forgejo→cicd ns, drop orphan/stale (data-schemas, ollama, story-crater, sqs/argocd, key-rotation)	2026-08-18 15:08:03 -07:00