homelab

Files

T

Story Crater Bot bebbd3a690 fix: add CoreDNS rewrite for img.riotpiao.com

Cloudflare Tunnel's origin service for img.riotpiao.com self-references
the same public hostname (same pattern as paperless/forgejo/authentik) -
without this rewrite, cloudflared's in-cluster DNS resolution has
nowhere to loop back to, and TLS to the raw ingress-nginx service name
fails cert validation (cert is only valid for *.riotpiao.com).

2026-08-25 18:53:52 -07:00

files

fix: add CoreDNS rewrite for img.riotpiao.com

2026-08-25 18:53:52 -07:00

templates

feat: add homelab-wide Authentik RBAC model and k8s OIDC auth wiring

2026-08-25 15:03:44 -07:00

.gitignore

feat(ci,iac): Consolidate Forgejo CI workflows and add Talos Terraform IaC

2026-08-18 15:08:01 -07:00

main.tf

feat(monitoring): enable Alertmanager (null receiver, longhorn PVC, az-a) + fix forgejo-rules ns forgejo->cicd — alerting delivery was disabled; forgejo PrometheusRule targeted a nonexistent namespace