779ed3d563
remove trivy-operator
2026-02-20 00:36:50 +00:00
d19ede0559
feat: enable CrowdSec Traefik bouncer on all ingresses
...
- Add Traefik plugin via HelmChartConfig (crowdsec-bouncer-traefik-plugin)
- Create bouncer Middleware in stream mode
- Apply bouncer to all public ingresses
- IPs flagged by CrowdSec will now be blocked at Traefik level
2026-02-19 23:53:00 +00:00
133312a284
feat: replace Uptime Kuma with Gatus
...
- Remove uptime-kuma (heavier, requires manual config)
- Add Gatus (lightweight, config-as-code)
- Monitor all services: Gitea, Podinfo, Vaultwarden, Authelia, Flux, K8s API
- Protected by Authelia ForwardAuth
- status.davidepiu.xyz
2026-02-19 23:43:53 +00:00
914890b339
feat: protect Uptime Kuma and Weave GitOps with Authelia ForwardAuth
...
- Add Traefik ForwardAuth middleware pointing to Authelia
- Apply to status.davidepiu.xyz and flux.davidepiu.xyz
- Users must login via auth.davidepiu.xyz before accessing these services
2026-02-19 23:18:38 +00:00
d59ac2a933
sec: disable Vaultwarden open signups, add admin token
...
- signupsAllowed: false - prevents public registration
- invitationsAllowed: false - prevents invitation abuse
- adminToken from Secret for /admin panel access
2026-02-19 22:58:29 +00:00
c2a803d28b
feat: deploy Wave 1 - Vaultwarden, Uptime Kuma, Trivy Operator, Authelia
...
GitOps manifests for security stack Wave 1:
- Vaultwarden (vault.davidepiu.xyz) - password manager
- Uptime Kuma (status.davidepiu.xyz) - uptime monitoring
- Trivy Operator - vulnerability scanning
- Authelia (auth.davidepiu.xyz) - SSO + 2FA
All with NetworkPolicies for Traefik ingress.
2026-02-19 22:44:34 +00:00
232957ac4a
Fix podinfo manifest - correct resource names
2026-02-19 22:05:11 +00:00
5f396f9b4f
Fix podinfo service name in Ingress
2026-02-19 22:02:33 +00:00
e37a076f12
Fix podinfo: create namespace before Ingress
2026-02-19 22:01:19 +00:00
06999bc9c9
Replace Online Boutique with podinfo
2026-02-19 21:56:55 +00:00
ecad6a561f
Add HTTP to HTTPS redirect for all ingresses
2026-02-19 21:51:24 +00:00
af2cd6d00d
Add Weave GitOps dashboard + Online Boutique Ingress via GitOps
2026-02-19 21:08:20 +00:00
3795c1a3f2
Fix camelCase keys for Online Boutique values
2026-02-19 20:57:36 +00:00
74d6898af7
Reduce resource requests for 2-core VPS
2026-02-19 20:52:45 +00:00
a0aa4ea137
Fix Online Boutique: use GitRepository source
2026-02-19 20:49:26 +00:00
842b63b45a
Add Online Boutique HelmRelease
2026-02-19 20:47:07 +00:00
