homelab

Files

T

rock 39036e6ff3 fix(paperless-ai): move LLM auth client secret from plaintext to SOPS

- Remove hardcoded client secret from init container
- Reference secret from paperless-ai-config (SOPS-encrypted)
- Init container reads LLM_AUTH_CLIENT_SECRET env var
- Secret key must be added to k8s/argocd/secrets/paperless-ai-secrets.enc.yaml
  by someone with SOPS/age key access

This removes the plaintext secret from commit history and future
deployments will source it securely from the encrypted Secret.

2026-09-14 23:07:52 +09:00

adapter-configmap.yaml

feat: add homelab-wide Authentik RBAC model and k8s OIDC auth wiring

2026-08-25 15:03:44 -07:00

backup-cronjob.yaml

fix(databases): Scale authentik-db and gotify-db to 1 replica (Longhorn corruption recovery)

2026-09-12 17:27:45 +09:00

configmap.yaml

fix: use 2.20.15 instead of 3.0.5, direct 2.13->3.0 migration is blocked

2026-08-25 17:40:42 -07:00

deployment.yaml

fix: use 2.20.15 instead of 3.0.5, direct 2.13->3.0 migration is blocked