Story Crater Bot 7e648d2251 feat: add vault-service-api group for non-human Vault access ...

Separate from homelab-admins' blanket grant - target for a future
Vault Identity Group alias scoping service/API tokens narrower than
full admin.

2026-08-26 19:42:12 -07:00

..

databases

feat: deploy Immich with Authentik OIDC, rock as admin

2026-08-25 18:21:28 -07:00

forgejo-runner

feat(forgejo-runner): split into golang/node/rust runners, retire generic docker runner

2026-08-21 16:49:26 -07:00

iam

feat: add vault-service-api group for non-human Vault access

2026-08-26 19:42:12 -07:00

logging

fix(grafana): add email/login/name_attribute_path for Authentik OIDC — Grafana was falling back to GitHub-style <api_url>/emails (404 'Error getting email address'), breaking OAuth login; read identity from userinfo claims instead

2026-08-18 15:08:04 -07:00

longhorn

fix: add Replace=true sync-option to paperless-media StorageClass

2026-08-25 11:47:33 -07:00

minio

feat: add paperless-ngx with OIDC, CNPG db, cp-3 HDD media, MinIO backup

2026-08-25 11:11:37 -07:00

monitoring

feat: cut api.riotpiao.com over to the Go gateway and retire Kong

2026-08-19 22:51:53 -07:00

rbac

feat: add poimen-memory-admins group/permissions and k8s RBAC role

2026-08-25 21:50:05 -07:00