davide/fleet-infra
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
34 Commits 1 Branch 0 Tags
main
Commit Graph

16 Commits

Author SHA1 Message Date
Davide Piu
779ed3d563 remove trivy-operator 2026-02-20 00:36:50 +00:00
Davide Piu
d19ede0559 feat: enable CrowdSec Traefik bouncer on all ingresses 
- Add Traefik plugin via HelmChartConfig (crowdsec-bouncer-traefik-plugin)
- Create bouncer Middleware in stream mode
- Apply bouncer to all public ingresses
- IPs flagged by CrowdSec will now be blocked at Traefik level
 2026-02-19 23:53:00 +00:00
Davide Piu
133312a284 feat: replace Uptime Kuma with Gatus 
- Remove uptime-kuma (heavier, requires manual config)
- Add Gatus (lightweight, config-as-code)
- Monitor all services: Gitea, Podinfo, Vaultwarden, Authelia, Flux, K8s API
- Protected by Authelia ForwardAuth
- status.davidepiu.xyz
 2026-02-19 23:43:53 +00:00
Davide Piu
914890b339 feat: protect Uptime Kuma and Weave GitOps with Authelia ForwardAuth 
- Add Traefik ForwardAuth middleware pointing to Authelia
- Apply to status.davidepiu.xyz and flux.davidepiu.xyz
- Users must login via auth.davidepiu.xyz before accessing these services
 2026-02-19 23:18:38 +00:00
Davide Piu
d59ac2a933 sec: disable Vaultwarden open signups, add admin token 
- signupsAllowed: false - prevents public registration
- invitationsAllowed: false - prevents invitation abuse
- adminToken from Secret for /admin panel access
 2026-02-19 22:58:29 +00:00
Davide Piu
c2a803d28b feat: deploy Wave 1 - Vaultwarden, Uptime Kuma, Trivy Operator, Authelia 
GitOps manifests for security stack Wave 1:
- Vaultwarden (vault.davidepiu.xyz) - password manager
- Uptime Kuma (status.davidepiu.xyz) - uptime monitoring
- Trivy Operator - vulnerability scanning
- Authelia (auth.davidepiu.xyz) - SSO + 2FA

All with NetworkPolicies for Traefik ingress.
 2026-02-19 22:44:34 +00:00
davide
232957ac4a Fix podinfo manifest - correct resource names 2026-02-19 22:05:11 +00:00
davide
5f396f9b4f Fix podinfo service name in Ingress 2026-02-19 22:02:33 +00:00
davide
e37a076f12 Fix podinfo: create namespace before Ingress 2026-02-19 22:01:19 +00:00
davide
06999bc9c9 Replace Online Boutique with podinfo 2026-02-19 21:56:55 +00:00
davide
ecad6a561f Add HTTP to HTTPS redirect for all ingresses 2026-02-19 21:51:24 +00:00
davide
af2cd6d00d Add Weave GitOps dashboard + Online Boutique Ingress via GitOps 2026-02-19 21:08:20 +00:00
davide
3795c1a3f2 Fix camelCase keys for Online Boutique values 2026-02-19 20:57:36 +00:00
davide
74d6898af7 Reduce resource requests for 2-core VPS 2026-02-19 20:52:45 +00:00
davide
a0aa4ea137 Fix Online Boutique: use GitRepository source 2026-02-19 20:49:26 +00:00
davide
842b63b45a Add Online Boutique HelmRelease 2026-02-19 20:47:07 +00:00