Commit Graph

Select branches

Hide Pull Requests

benvin/add-bind-operator

benvin/argocd-image-updater-deploy

benvin/artifactapi-tf-signing

benvin/artifactkeeper

benvin/externaldns-debug-logging

benvin/externaldns-fix

benvin/fix-externaldns-crashing

benvin/grafana-operator

benvin/grafana-schemas

benvin/helm_virtual

benvin/kubeconform-crd-schemas

benvin/litellm-sso

benvin/media-apps-argocd

benvin/oauth2-proxy-image-fix

benvin/opa_policies

benvin/postfix

benvin/resolver-validate-except

benvin/stalwart

benvin/traefik-ldaps-entrypoint

fix-kanidm-replication-config

issue-155-open-webui-litellm

main

#1

#10

#100

#101

#102

#103

#104

#105

#106

#107

#108

#109

#11

#110

#111

#112

#113

#114

#115

#116

#117

#118

#119

#12

#120

#121

#122

#123

#124

#125

#126

#127

#128

#129

#13

#130

#131

#132

#133

#134

#135

#136

#137

#138

#139

#14

#140

#141

#142

#143

#144

#145

#146

#147

#148

#149

#15

#150

#151

#152

#153

#156

#157

#158

#159

#16

#160

#161

#162

#163

#164

#165

#166

#167

#168

#169

#17

#170

#171

#172

#173

#174

#175

#176

#177

#178

#179

#18

#180

#181

#182

#183

#184

#185

#186

#187

#188

#189

#19

#190

#191

#192

#193

#194

#195

#196

#197

#198

#199

#2

#20

#200

#201

#202

#203

#204

#205

#206

#207

#208

#209

#21

#210

#211

#212

#213

#214

#215

#216

#217

#218

#219

#22

#220

#221

#222

#223

#224

#225

#226

#227

#228

#229

#23

#230

#231

#232

#233

#234

#235

#236

#237

#238

#239

#24

#240

#241

#242

#243

#244

#245

#246

#247

#248

#249

#25

#250

#251

#252

#253

#254

#255

#256

#257

#258

#259

#26

#260

#261

#262

#263

#264

#265

#266

#267

#268

#269

#27

#270

#271

#272

#273

#274

#275

#276

#277

#278

#279

#28

#280

#281

#282

#283

#284

#285

#286

#287

#288

#289

#29

#290

#291

#292

#293

#294

#295

#296

#297

#298

#299

#3

#30

#300

#301

#302

#303

#304

#305

#306

#308

#309

#31

#310

#311

#312

#313

#314

#315

#316

#317

#318

#319

#32

#320

#327

#328

#329

#33

#330

#331

#332

#333

#334

#335

#336

#337

#338

#339

#34

#340

#341

#342

#343

#344

#345

#346

#347

#348

#349

#35

#350

#351

#352

#353

#354

#355

#356

#357

#358

#359

#36

#360

#361

#362

#363

#364

#365

#366

#367

#368

#369

#37

#370

#371

#372

#373

#374

#375

#376

#377

#378

#379

#38

#380

#381

#382

#383

#384

#385

#386

#387

#388

#389

#39

#390

#391

#392

#393

#394

#395

#396

#397

#398

#399

#4

#40

#400

#401

#402

#403

#404

#405

#406

#407

#408

#409

#41

#410

#411

#412

#413

#414

#415

#416

#417

#418

#419

#42

#420

#421

#422

#423

#424

#425

#426

#427

#428

#429

#43

#430

#431

#432

#433

#434

#435

#436

#437

#438

#439

#44

#440

#441

#442

#443

#444

#445

#446

#447

#45

#46

#47

#48

#49

#5

#50

#51

#52

#53

#54

#55

#56

#57

#58

#59

#6

#60

#61

#62

#63

#64

#65

#66

#67

#68

#69

#7

#70

#71

#72

#73

#74

#75

#76

#77

#78

#79

#8

#80

#81

#82

#83

#84

#85

#86

#87

#88

#89

#9

#90

#91

#92

#93

#94

#95

#96

#97

#98

Mono Color

• df38b6b75f Add golib-ci ServiceAccount for woodpecker (#447) main unkin-agent 2026-08-31 06:58:45 +10:00
• c5fff07643 Bump repospawner to v0.1.1 (#446) unkin-agent 2026-08-30 17:07:58 +10:00
• a9a66a07b1 Deploy repospawner v0.1.0 (#445) unkin-agent 2026-08-30 15:40:06 +10:00
• abf73bb5bf arrproxy: v0.6.0 self-migrating, drop external migrate Job (#444) unkin-agent 2026-08-30 15:30:43 +10:00
• b355d6aafb mediamark: deploy the media marking app (#441) unkin-agent 2026-08-30 15:07:41 +10:00
• 221c575a44 arrproxy: bump images to v0.5.0 (per-token method scoping) (#443) unkin-agent 2026-08-30 14:23:44 +10:00
• 1ba6180e96 woodpecker: add repospawner-ci ServiceAccount (#442) unkin-agent 2026-08-30 14:21:42 +10:00
• d1085f0ae2 logging: use canonical upstream image names (#433) unkin-agent 2026-08-29 21:55:47 +10:00
• e4d93ef4fe valkey-operator-system: use canonical ghcr.io registry (#437) unkin-agent 2026-08-29 21:52:52 +10:00
• 1169d796e7 grafana: stop pinning the internal CA for Authentik OAuth (#440) unkin-agent 2026-08-29 21:52:30 +10:00
• aedb721b3e argocd: drop internal-CA rootCA pin from Authentik oidc.config (#439) unkin-agent 2026-08-29 21:52:12 +10:00
• 74ad2c8773 woodpecker: add mediamark-ci service account (#438) unkin-agent 2026-08-29 21:21:21 +10:00
• 6b5b129ad6 clickhouse-system: use canonical upstream image names (#436) unkin-agent 2026-08-29 21:20:10 +10:00
• 38a41bd44b watchstate: use canonical upstream image name for alpine (#435) unkin-agent 2026-08-29 21:19:36 +10:00
• da1d812eec netbox: use canonical upstream image name for redis_exporter (#434) unkin-agent 2026-08-29 21:19:27 +10:00
• df89947f47 litellm: use canonical upstream image name for redis_exporter (#432) unkin-agent 2026-08-29 21:19:01 +10:00
• 7f928dddfc gitea: use canonical upstream image name for redis_exporter (#431) unkin-agent 2026-08-29 21:18:44 +10:00
• b459e9a90a authentik: use canonical upstream image name for redis_exporter (#430) unkin-agent 2026-08-29 21:18:33 +10:00
• c8355967d4 artifactapi: use canonical upstream image name for redis_exporter (#429) unkin-agent 2026-08-29 21:18:27 +10:00
• e10f0c09c9 arrstack,fafflix,cheeztv: provision shared mediastore CephFS volume (#428) unkin-agent 2026-08-29 21:18:09 +10:00
• 9616e0e2b3 arrstack: use canonical upstream image names (#427) unkin-agent 2026-08-29 21:16:59 +10:00
• c313c7cc3f fafflix,cheeztv: declarative SSO + LDAP plugin auth config (#424) unkin-agent 2026-08-29 20:47:54 +10:00
• 0322fc6989 jellyfin: bump fafflix+cheeztv to v0.2.0 (#426) unkin-agent 2026-08-29 13:22:40 +10:00
• f8716dd16a kea-operator: bump to v0.1.5 (#425) unkin-agent 2026-08-29 12:55:13 +10:00
• 74eb09b638 kea-operator: bump to v0.1.4 (#423) unkin-agent 2026-08-26 23:19:41 +10:00
• 8eb57f9c19 authentik: deploy LDAP outpost for in-cluster app-password binds (#422) unkin-agent 2026-08-26 23:19:24 +10:00
• b9f727bc97 watchstate: expose externally at watchstate.unkin.net (#420) unkin-agent 2026-08-26 21:47:03 +10:00
• 062d217ea8 bind-internal: add cheeztv.unkin.net record (#421) unkin-agent 2026-08-26 20:09:08 +10:00
• 5da12e398d Extend LE *.unkin.net wildcard to arrstack + authentik (reflect into gitea) (#418) unkin-agent 2026-08-25 21:48:54 +10:00
• 48632eb9f9 watchstate: deploy admin-gated jellyfin watch-state sync tool (#419) unkin-agent 2026-08-25 21:39:07 +10:00
• d42d013541 cheeztv: terminate public cheeztv.unkin.net TLS with the LE *.unkin.net wildcard (#417) unkin-agent 2026-08-25 20:58:02 +10:00
• 1ecba543aa arrstack: wire arrproxy v0.4.0 tier routing (fafflix/cheeztv) (#416) unkin-agent 2026-08-25 20:49:04 +10:00
• fe689dc08e Replace legacy jellyfin app with fafflix (adult, cheeztv pattern) (#415) unkin-agent 2026-08-25 20:06:53 +10:00
• 9db52c5e26 arrstack: rebuild adult tier on the shared-Postgres pattern (#414) unkin-agent 2026-08-25 20:06:39 +10:00
• 94da740a9d Add cheeztv kids Jellyfin instance + fafflix kids mounts (#413) unkin-agent 2026-08-25 19:59:08 +10:00
• b419635fc2 arrstack: add kids backend tier (sonarr/radarr/nzbget-kids) (#412) unkin-agent 2026-08-25 08:03:21 +10:00
• a064d9a3c4 arrproxy: bump images to v0.3.1 (#411) unkin-agent 2026-08-24 21:42:28 +10:00
• aea319cec0 authentik: ClientIP session affinity on server service (#410) unkin-agent 2026-08-23 23:13:51 +10:00
• 5a23146513 logging: set clickhouse readonly profile to readonly=2 (#409) benvin/oauth2-proxy-image-fix unkin-agent 2026-08-23 22:36:52 +10:00
• 03c56c0ff0 arrstack: raise arrstack-postgres resources after OOMKills (#408) unkin-agent 2026-08-23 22:01:25 +10:00
• 61b5a7f695 Add Traefik Grafana dashboard (#407) unkin-agent 2026-08-23 21:56:45 +10:00
• 8da505ceb4 arrproxy: bump image versions to v0.3.0 (#406) unkin-agent 2026-08-23 21:38:43 +10:00
• f6c297dcb5 Add logviewer.unkin.net internal DNS record (#405) unkin-agent 2026-08-23 21:38:27 +10:00
• e608dadae7 observability: fix dropped kubelet/cadvisor metrics, add kube-state-metrics + VMAlert k8s.rules (#399) unkin-agent 2026-08-23 21:38:06 +10:00
• 13a04a6ebc Export and scrape metrics from all redis/valkey instances (#398) unkin-agent 2026-08-23 19:19:16 +10:00
• 08a3493097 logging: deploy logviewer v0.1.0 behind oauth2-proxy (#404) unkin-agent 2026-08-23 18:51:15 +10:00
• 4e3c8288e2 Bump radarr to v6.4.2-unkin7 (#403) unkin-agent 2026-08-23 17:15:54 +10:00
• c649cc7ee3 Bump prowlarr to v2.6.2-unkin6 (#402) unkin-agent 2026-08-23 17:13:54 +10:00
• cd51078d79 logging: add read-only clickhouse logreader user + Vault-synced secret (#400) unkin-agent 2026-08-23 17:00:07 +10:00
• b5acb19ac0 Bump arrstack image pins: radarr v6.4.2-unkin6, sonarr v5.0.0-unkin6 (#401) unkin-agent 2026-08-23 16:57:27 +10:00
• ba71bd1a35 Scrape traefik gateway metrics into VictoriaMetrics (#397) unkin-agent 2026-08-23 12:41:58 +10:00
• 8fd1d83b1b Add Redis/Valkey Grafana dashboard (#396) unkin-agent 2026-08-23 12:38:55 +10:00
• 19f7afac92 Add shared arrstack Valkey and wire arr apps' Redis features (#394) unkin-agent 2026-08-23 12:37:42 +10:00
• b3d202b8fa arrstack: add exportarr metrics sidecars to sonarr and radarr (#395) unkin-agent 2026-08-23 12:35:56 +10:00
• 32611bfd16 Deploy mediamover v0.1.0 into arrstack (#393) unkin-agent 2026-08-23 00:09:40 +10:00
• 7c49a9f3ad Deploy arrstack S3 TLS-trust fix (arrstack images -unkin4 -> -unkin5) (#392) unkin-agent 2026-08-22 23:15:11 +10:00
• 671c075a08 Mount mediafs CephFS into arrstack (#391) unkin-agent 2026-08-22 23:05:43 +10:00
• 06fe261661 arrstack: deploy -unkin4 (Redis SignalR backplane + S3 storage) (#390) unkin-agent 2026-08-22 20:46:48 +10:00
• bdf6114794 arrstack: S3 buckets + wiring for app backups and sonarr MediaCover (#389) unkin-agent 2026-08-22 18:39:40 +10:00
• eb37beb7e4 Deploy arrstack -unkin3 (active-active code) (#388) unkin-agent 2026-08-22 18:28:14 +10:00
• 9cdcdf62bc arrstack: provision shared Ceph RGW bucket for media assets (#387) unkin-agent 2026-08-22 16:17:23 +10:00
• 5155cee5e7 arrstack: use waitfordb initContainer instead of inline psql loop (#386) unkin-agent 2026-08-22 16:15:45 +10:00
• 8446c31414 arrstack: fix sync-wave deadlock + config multi-attach (#385) unkin-agent 2026-08-22 12:47:38 +10:00
• e0d47295f2 Deploy arrproxy v0.2.0 machine-mint admin route (#384) unkin-agent 2026-08-18 22:37:06 +10:00
• 187fabb72b arrstack: run sonarr/radarr/prowlarr active-active on shared Postgres (#383) unkin-agent 2026-08-18 21:29:59 +10:00
• 108d1cb213 arrstack: set *arr AuthenticationMethod=External (proxy-trusted) (#382) unkin-agent 2026-08-18 20:03:18 +10:00
• c22fbe435a arrproxy: allow unverified email in oauth2-proxy (Authentik sets email_verified=false) (#381) unkin-agent 2026-08-17 22:25:09 +10:00
• 5466562bc1 arrproxy: use real quay.io oauth2-proxy address (rke2 mirror) (#380) unkin-agent 2026-08-17 21:31:29 +10:00
• 76da30d2f7 arrstack: set *arr UrlBase=/<app> for path-based proxy hosting (#378) unkin-agent 2026-08-17 07:59:48 +10:00
• cd8e2c262f deploy arrproxy (oauth2-gated *arr proxy + per-user API keys) (#377) unkin-agent 2026-08-16 22:26:20 +10:00
• d703e67090 woodpecker: add arrproxy-ci service account (#376) unkin-agent 2026-08-16 16:09:58 +10:00
• 9450a70652 jellyfin: make Valkey HA (#375) unkin-agent 2026-08-16 07:34:15 +10:00
• 9e1ccdb0a0 jellyfin: bump image to v0.1.3 (.NET 9 runtime fix) (#374) unkin-agent 2026-08-15 19:01:47 +10:00
• bbfa4db652 jellyfin: bump image to v0.1.2 (#373) unkin-agent 2026-08-15 18:36:25 +10:00
• a4808f5528 ghp: deploy service-token fork image + wire GHP_AUTH_SERVICE_TOKENS (#372) unkin-agent 2026-08-15 18:18:22 +10:00
• 7556d08d06 woodpecker: allow CA-baked docker-buildx plugin as privileged (#371) unkin-agent 2026-08-15 17:04:40 +10:00
• 31c5ca10e2 arrstack/nzbget: fix nonexistent image tag v26.2 -> version-v26.2 (#370) unkin-agent 2026-08-15 16:55:33 +10:00
• d387301d6b arrstack: manage sonarr/radarr/prowlarr API keys via Vault (#369) unkin-agent 2026-08-15 16:43:02 +10:00
• 164938f127 woodpecker: add plugin-docker-buildx CI ServiceAccount (#368) unkin-agent 2026-08-15 16:26:51 +10:00
• fc08f1fecc arrstack: sonarr/radarr/prowlarr/nzbget on shared CephFS media (#366) unkin-agent 2026-08-15 16:22:06 +10:00
• 40ba1730de jellyfin: replace redis Deployment with valkey-operator instance (#367) unkin-agent 2026-08-15 14:54:05 +10:00
• 6c8c0dd9e4 Deploy jellyfin-ha as a true-HA StatefulSet under a new media project (#237) unkinben 2026-08-15 13:38:59 +10:00
• b759f4beea Install valkey-operator (#365) unkin-agent 2026-08-15 12:32:57 +10:00
• 8503a4b7a4 woodpecker: add ghp CI ServiceAccount (#364) unkin-agent 2026-08-14 00:29:34 +10:00
• dc02b3eebd Deploy k8up backup operator (platform, k8up-system) (#363) unkin-agent 2026-08-14 00:29:15 +10:00
• 20438520ab woodpecker: add autobackup-operator CI ServiceAccount (#362) unkin-agent 2026-08-13 23:40:53 +10:00
• 7a1e8351a7 ghp: serve plain HTTP behind the gateway (fix redirect loop) (#361) unkin-agent 2026-08-13 23:19:54 +10:00
• 5e2eecda6b ghp: serve at ghp.unkin.net (gateway + cert + httproute + DNS) (#360) unkin-agent 2026-08-13 22:48:23 +10:00
• 0130d538f5 ghp: use direct ghcr.io image + set GHP_ADMINS (#359) unkin-agent 2026-08-13 22:08:05 +10:00
• fa1f3e7756 add ghp (GitHub proxy) deployment (#357) unkin-agent 2026-08-13 20:08:30 +10:00
• 4c8a773cd8 artifactapi: bump image to v3.11.1 (#358) unkin-agent 2026-08-13 20:04:22 +10:00
• d37e87f35b artifactapi: bump image to v3.11.0 (#356) unkin-agent 2026-08-13 17:40:41 +10:00
• 496b99f222 artifactapi: bump image to v3.10.1 (#355) unkin-agent 2026-08-12 23:54:34 +10:00
• 51143c56b7 artifactapi: bump images to v3.10.0 (apk repo support + UI) (#354) unkin-agent 2026-08-12 20:59:15 +10:00
• 99350c4bd6 artifactapi: bump images to v3.9.1 (deb repo support + UI) (#353) unkin-agent 2026-08-12 00:39:44 +10:00
• 50a8588dc1 woodpecker: add jellyfin-ha-src CI ServiceAccount (#352) unkinben 2026-08-11 20:46:47 +10:00
• 5a4bc1611e Bump artifactapi to v3.8.0 (#351) unkinben 2026-08-10 23:33:06 +10:00
• 54c25be828 Reduce media PR to jellyfin-only in its own namespace benvin/media-apps-argocd Ben Vincent 2026-08-09 21:08:12 +10:00
• c0c3eb4f66 Force Replace sync for the Recreate puppet master to clear stale rollingUpdate (#349) unkinben 2026-08-09 20:55:00 +10:00
• a8d52311cd Ignore defaulted StatefulSet volumeClaimTemplates TypeMeta (#350) unkinben 2026-08-09 20:53:49 +10:00