homelab

Files

T

rock d146f7e3af iam: add memory scope + service accounts to Authentik

- Add 'memory' scope property mapping with claims:
  - memory_projects: project-level access filter
  - memory_visibility: public/private visibility
  - memory_role: admin/user/portfolio-agent
- Add capability groups: llm-users, memory-users, memory-writers
- Add service account provisioning for portfolio-agent, memory-agent
- Service accounts use client_credentials flow
- Add homelab-rbac.md design doc (Authentik-centric model)

2026-09-03 16:27:39 -07:00

argocd-image-updater

argocd: add Image Updater for auto-deploy on image push

2026-09-02 20:31:09 -07:00

cluster-maintenance

feat(ops): add cluster-wide stale job/pod cleanup CronJob

2026-08-30 07:27:50 -07:00

databases

feat: add obsidian-vault PVC (RWX) to infra/databases

2026-08-28 20:42:13 -07:00

forgejo-runner

forgejo-runner: gc every 30min instead of daily