- Add Traefik ForwardAuth middleware pointing to Authelia - Apply to status.davidepiu.xyz and flux.davidepiu.xyz - Users must login via auth.davidepiu.xyz before accessing these services
GitOps manifests for security stack Wave 1: - Vaultwarden (vault.davidepiu.xyz) - password manager - Uptime Kuma (status.davidepiu.xyz) - uptime monitoring - Trivy Operator - vulnerability scanning - Authelia (auth.davidepiu.xyz) - SSO + 2FA All with NetworkPolicies for Traefik ingress.
