pi 354814a531 security: stop tracking Talos secret backup; rotate edge WireGuard key ...

- remove terraform/terraform.tfvars.local.bak from the index (it carries the
  live cluster PKI: CA keys, service-account key, secretbox secret)
- ignore terraform/*.bak and terraform/edge/.secrets/
- generate a fresh WireGuard relay keypair into the git-ignored local tfvars;
  the committed example now documents rotation instead of holding key material

2026-10-25 18:15:48 -07:00

..

edge

security: stop tracking Talos secret backup; rotate edge WireGuard key

2026-10-25 18:15:48 -07:00

files

feat(iam): wire Zitadel into namespace iam under ArgoCD

2026-10-24 03:38:21 -07:00

templates

feat: add homelab-wide Authentik RBAC model and k8s OIDC auth wiring

2026-08-25 15:03:44 -07:00

zitadel

feat(iam): declare Zitadel identity objects in Terraform

2026-10-24 03:38:21 -07:00

.gitignore

feat(ci,iac): Consolidate Forgejo CI workflows and add Talos Terraform IaC

2026-08-18 15:08:01 -07:00

main.tf

feat(monitoring): enable Alertmanager (null receiver, longhorn PVC, az-a) + fix forgejo-rules ns forgejo->cicd — alerting delivery was disabled; forgejo PrometheusRule targeted a nonexistent namespace

2026-08-18 15:08:04 -07:00

provider.tf

feat(ci,iac): Consolidate Forgejo CI workflows and add Talos Terraform IaC

2026-08-18 15:08:01 -07:00

talos_schematic.tf

feat(terraform): GPU worker node support (schematic, interface/diskSelector/swap tuning, gpu-node label, NVIDIA LTS extensions)

2026-08-18 15:08:04 -07:00

tfplan

refactor(argocd): remove orphaned infrastructure Applications - bootstrap is source of truth

2026-08-18 15:08:03 -07:00

tfplan-gpu

feat(terraform): GPU worker node support (schematic, interface/diskSelector/swap tuning, gpu-node label, NVIDIA LTS extensions)

2026-08-18 15:08:04 -07:00

tfplan-rename

feat(terraform): GPU worker node support (schematic, interface/diskSelector/swap tuning, gpu-node label, NVIDIA LTS extensions)

2026-08-18 15:08:04 -07:00

tfplan-worker

feat(terraform): GPU worker node support (schematic, interface/diskSelector/swap tuning, gpu-node label, NVIDIA LTS extensions)

2026-08-18 15:08:04 -07:00

variables.tf

fix: resolve forgejo.riotpiao.com to the ingress LB on nodes

2026-08-19 23:25:41 -07:00