davide/fleet-infra
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
32 Commits 1 Branch 0 Tags
5e55c0e277d6791866dcca14855ae36e19ffac3e
Commit Graph

8 Commits

Author SHA1 Message Date
Davide Piu
5e55c0e277 encrypt crowdsec bouncer key with SOPS + variable substitution 2026-02-20 00:17:40 +00:00
Davide Piu
75f8c6d5d8 fix: correct CrowdSec LAPI service name for bouncer 2026-02-19 23:54:16 +00:00
Davide Piu
d19ede0559 feat: enable CrowdSec Traefik bouncer on all ingresses 
- Add Traefik plugin via HelmChartConfig (crowdsec-bouncer-traefik-plugin)
- Create bouncer Middleware in stream mode
- Apply bouncer to all public ingresses
- IPs flagged by CrowdSec will now be blocked at Traefik level
 2026-02-19 23:53:00 +00:00
Davide Piu
914890b339 feat: protect Uptime Kuma and Weave GitOps with Authelia ForwardAuth 
- Add Traefik ForwardAuth middleware pointing to Authelia
- Apply to status.davidepiu.xyz and flux.davidepiu.xyz
- Users must login via auth.davidepiu.xyz before accessing these services
 2026-02-19 23:18:38 +00:00
davide
ecad6a561f Add HTTP to HTTPS redirect for all ingresses 2026-02-19 21:51:24 +00:00
Davide Piu
4d08d945a4 Add NetworkPolicy to allow Traefik ingress into flux-system namespace 
Without this policy, Flux default NetworkPolicies block traffic from kube-system
(where Traefik runs) to flux-system, causing 502 errors for both the weave-gitops
dashboard and cert-manager ACME HTTP-01 solver pods.
 2026-02-19 21:47:16 +00:00
davide
b2f825fcd6 Add password hash for Weave GitOps 2026-02-19 21:11:05 +00:00
davide
af2cd6d00d Add Weave GitOps dashboard + Online Boutique Ingress via GitOps 2026-02-19 21:08:20 +00:00