Commit Graph

Select branches

Hide Pull Requests

benvin/add-bind-operator

benvin/agent-observability-rbac

benvin/argocd-image-updater-deploy

benvin/artifactapi-auth-uploads

benvin/artifactapi-tf-signing

benvin/artifactkeeper

benvin/bind-external-mail-zones

benvin/compiler-cert-helpers

benvin/consul-dns-k8s

benvin/consul-k8s-servers

benvin/drop-acme-apex-ns

benvin/externaldns-debug-logging

benvin/externaldns-fix

benvin/fix-externaldns-crashing

benvin/grafana-operator

benvin/grafana-schemas

benvin/helm_virtual

benvin/jellyfin-sso-valkey-state

benvin/kea-operator-v0.1.6

benvin/kubeconform-crd-schemas

benvin/kubeconform-helm-kubeversion

benvin/litellm-sso

benvin/media-apps-argocd

benvin/oauth2-proxy-image-fix

benvin/opa_policies

benvin/postfix

benvin/resolver-validate-except

benvin/revert-artifactapi-oauth2

benvin/stalwart

benvin/traefik-ldaps-entrypoint

fix-kanidm-replication-config

issue-155-open-webui-litellm

main

#1

#10

#100

#101

#102

#103

#104

#105

#106

#107

#108

#109

#11

#110

#111

#112

#113

#114

#115

#116

#117

#118

#119

#12

#120

#121

#122

#123

#124

#125

#126

#127

#128

#129

#13

#130

#131

#132

#133

#134

#135

#136

#137

#138

#139

#14

#140

#141

#142

#143

#144

#145

#146

#147

#148

#149

#15

#150

#151

#152

#153

#156

#157

#158

#159

#16

#160

#161

#162

#163

#164

#165

#166

#167

#168

#169

#17

#170

#171

#172

#173

#174

#175

#176

#177

#178

#179

#18

#180

#181

#182

#183

#184

#185

#186

#187

#188

#189

#19

#190

#191

#192

#193

#194

#195

#196

#197

#198

#199

#2

#20

#200

#201

#202

#203

#204

#205

#206

#207

#208

#209

#21

#210

#211

#212

#213

#214

#215

#216

#217

#218

#219

#22

#220

#221

#222

#223

#224

#225

#226

#227

#228

#229

#23

#230

#231

#232

#233

#234

#235

#236

#237

#238

#239

#24

#240

#241

#242

#243

#244

#245

#246

#247

#248

#249

#25

#250

#251

#252

#253

#254

#255

#256

#257

#258

#259

#26

#260

#261

#262

#263

#264

#265

#266

#267

#268

#269

#27

#270

#271

#272

#273

#274

#275

#276

#277

#278

#279

#28

#280

#281

#282

#283

#284

#285

#286

#287

#288

#289

#29

#290

#291

#292

#293

#294

#295

#296

#297

#298

#299

#3

#30

#300

#301

#302

#303

#304

#305

#306

#308

#309

#31

#310

#311

#312

#313

#314

#315

#316

#317

#318

#319

#32

#320

#327

#328

#329

#33

#330

#331

#332

#333

#334

#335

#336

#337

#338

#339

#34

#340

#341

#342

#343

#344

#345

#346

#347

#348

#349

#35

#350

#351

#352

#353

#354

#355

#356

#357

#358

#359

#36

#360

#361

#362

#363

#364

#365

#366

#367

#368

#369

#37

#370

#371

#372

#373

#374

#375

#376

#377

#378

#379

#38

#380

#381

#382

#383

#384

#385

#386

#387

#388

#389

#39

#390

#391

#392

#393

#394

#395

#396

#397

#398

#399

#4

#40

#400

#401

#402

#403

#404

#405

#406

#407

#408

#409

#41

#410

#411

#412

#413

#414

#415

#416

#417

#418

#419

#42

#420

#421

#422

#423

#424

#425

#426

#427

#428

#429

#43

#430

#431

#432

#433

#434

#435

#436

#437

#438

#439

#44

#440

#441

#442

#443

#444

#445

#446

#447

#448

#449

#45

#450

#451

#452

#453

#454

#455

#456

#457

#458

#459

#46

#460

#461

#462

#463

#464

#465

#466

#467

#468

#469

#47

#470

#471

#472

#473

#474

#475

#476

#477

#478

#479

#48

#480

#481

#482

#483

#484

#485

#486

#487

#488

#489

#49

#490

#491

#492

#493

#494

#495

#496

#497

#498

#499

#5

#50

#500

#501

#502

#503

#504

#505

#506

#507

#508

#509

#51

#510

#511

#512

#513

#514

#515

#516

#517

#518

#519

#52

#520

#521

#522

#523

#524

#525

#526

#527

#528

#529

#53

#530

#531

#532

#533

#534

#535

#536

#537

#538

#539

#54

#540

#541

#542

#543

#544

#545

#546

#547

#548

#549

#55

#550

#551

#552

#553

#554

#555

#556

#557

#558

#559

#56

#560

#561

#562

#563

#564

#565

#566

#567

#568

#569

#57

#570

#571

#572

#573

#574

#58

#59

#6

#60

#61

#62

#63

#64

#65

#66

#67

#68

#69

#7

#70

#71

#72

#73

#74

#75

#76

#77

#78

#79

#8

#80

#81

#82

#83

#84

#85

#86

#87

#88

#89

#9

#90

#91

#92

#93

#94

#95

#96

#97

#98

Mono Color

• cdaab736b5 Bump jellyfin-ha to v0.4.0 (#483) unkin-agent 2026-09-22 22:57:06 +10:00
• b31517e6d9 Merge pull request #481 from benvin/jellyfin-sso-valkey-state unkin-agent 2026-09-20 14:02:48 +10:00
• f34095e772 Roll jellyfin-ha to v0.3.3 and drop Service affinity benvin/jellyfin-sso-valkey-state unkin-agent 2026-09-20 01:03:00 +10:00
• 5a74b2cec6 Roll bind-operator to v0.2.7 (journal-aware zone seeding) (#480) unkin-agent 2026-09-20 00:53:47 +10:00
• f14bcc4d2a Add woodpecker ServiceAccount for jellyfin-plugin-sso CI (#479) unkin-agent 2026-09-19 17:32:31 +10:00
• b01e4c3241 Rewrite slash-less Authentik token endpoint to the canonical path (#478) unkin-agent 2026-09-19 16:10:30 +10:00
• bbd5bdaa95 Enable PKCE for ArgoCD OIDC login (#477) unkin-agent 2026-09-19 16:10:05 +10:00
• 4762cf9e03 Add VMPodScrape for authentik-server metrics (#476) unkin-agent 2026-09-19 15:34:26 +10:00
• c83a886e74 Enable pg_stat_statements on the authentik postgres cluster (#475) unkin-agent 2026-09-19 14:48:45 +10:00
• 9a7200636c Raise authentik postgres CPU, memory and buffer sizing (#474) unkin-agent 2026-09-19 14:35:16 +10:00
• 9535bad9bc Enable hot_standby_feedback on the authentik postgres cluster (#473) unkin-agent 2026-09-19 14:34:33 +10:00
• 34dd70435e Auto-reload cheeztv and fafflix on plugin ConfigMap change (#471) unkin-agent 2026-09-19 12:25:08 +10:00
• 6cc752336e Point jellyfin SSO at public Authentik hostname (#470) unkin-agent 2026-09-19 12:09:31 +10:00
• 3fa12e4e5a Deliver the cert helpers to the puppet compiler pods benvin/compiler-cert-helpers unkin-agent 2026-09-13 23:26:34 +10:00
• 47a2ab9152 Pin jellyfin-ha image to v0.3.2 (#468) unkin-agent 2026-09-13 23:08:44 +10:00
• 4748df497a puppet: install toml into the puppetserver gem path (#467) unkin-agent 2026-09-13 23:08:31 +10:00
• ba14f85e51 Pin pdbmux to v0.4.0 (#466) unkin-agent 2026-09-13 20:36:49 +10:00
• 8a00ddb82c Revert jellyfin-ha to v0.2.0 (#465) unkin-agent 2026-09-12 21:38:08 +10:00
• d4aed39f6a pdbmux: bump image to v0.3.0 (#464) unkin-agent 2026-09-12 20:45:14 +10:00
• d6a1279efe jellyfin: bump fafflix+cheeztv to v0.3.1 (#463) unkin-agent 2026-09-12 20:32:41 +10:00
• 55af4b2f16 allow catalog-diff to compile catalogs on the puppet compilers (#462) unkin-agent 2026-09-12 16:31:08 +10:00
• 783a3db0fd revert jellyfin-ha to v0.2.0 (#461) unkin-agent 2026-09-12 15:22:20 +10:00
• 84f09f89ff bump jellyfin-ha to v0.3.0 (#460) unkin-agent 2026-09-12 14:23:39 +10:00
• 5b07157eeb woodpecker: raise agent workspace PVC to 20Gi (#459) unkin-agent 2026-09-12 12:47:07 +10:00
• 7aec9a9021 artifactapi: restore combine-certs + PROVIDER_CA_FILES on oauth2-proxy (#458) unkin-agent 2026-09-07 23:05:39 +10:00
• 297168a398 Revert "Put the artifactapi web UI behind Authentik oauth2-proxy (#456)" benvin/revert-artifactapi-oauth2 unkin-agent 2026-09-07 22:29:17 +10:00
• c98d88c197 Put the artifactapi web UI behind Authentik oauth2-proxy (#456) unkin-agent 2026-09-07 21:01:17 +10:00
• 520da449c9 pdbmux: bump image to v0.2.0 (#455) unkin-agent 2026-09-05 17:05:45 +10:00
• 2fcb3d70d5 Bump artifactapi to v3.11.2 (#453) unkin-agent 2026-09-05 16:04:58 +10:00
• 1172aa3e96 pdbmux: order backends new-first and drop primary/prefer (#452) unkin-agent 2026-09-05 16:04:40 +10:00
• e24b19412a woodpecker: add vimpack-ci ServiceAccount (#454) unkin-agent 2026-09-05 13:42:33 +10:00
• b2b82e6a6c puppet: use OPENVOXSERVER_JAVA_ARGS for puppetserver JVM args (#451) unkin-agent 2026-09-05 11:30:22 +10:00
• 7f15488332 Bump encapi image to v0.1.2 (#450) unkin-agent 2026-09-05 11:23:45 +10:00
• 8ea2925561 Set puppetserver environment timeout to 0 (#449) unkin-agent 2026-09-05 11:23:04 +10:00
• 236563a37f Bump arrproxy images to v0.6.1 (#448) unkin-agent 2026-09-05 11:15:47 +10:00
• df38b6b75f Add golib-ci ServiceAccount for woodpecker (#447) unkin-agent 2026-08-31 06:58:45 +10:00
• c5fff07643 Bump repospawner to v0.1.1 (#446) unkin-agent 2026-08-30 17:07:58 +10:00
• a9a66a07b1 Deploy repospawner v0.1.0 (#445) unkin-agent 2026-08-30 15:40:06 +10:00
• abf73bb5bf arrproxy: v0.6.0 self-migrating, drop external migrate Job (#444) unkin-agent 2026-08-30 15:30:43 +10:00
• b355d6aafb mediamark: deploy the media marking app (#441) unkin-agent 2026-08-30 15:07:41 +10:00
• 221c575a44 arrproxy: bump images to v0.5.0 (per-token method scoping) (#443) unkin-agent 2026-08-30 14:23:44 +10:00
• 1ba6180e96 woodpecker: add repospawner-ci ServiceAccount (#442) unkin-agent 2026-08-30 14:21:42 +10:00
• d1085f0ae2 logging: use canonical upstream image names (#433) unkin-agent 2026-08-29 21:55:47 +10:00
• e4d93ef4fe valkey-operator-system: use canonical ghcr.io registry (#437) unkin-agent 2026-08-29 21:52:52 +10:00
• 1169d796e7 grafana: stop pinning the internal CA for Authentik OAuth (#440) unkin-agent 2026-08-29 21:52:30 +10:00
• aedb721b3e argocd: drop internal-CA rootCA pin from Authentik oidc.config (#439) unkin-agent 2026-08-29 21:52:12 +10:00
• 74ad2c8773 woodpecker: add mediamark-ci service account (#438) unkin-agent 2026-08-29 21:21:21 +10:00
• 6b5b129ad6 clickhouse-system: use canonical upstream image names (#436) unkin-agent 2026-08-29 21:20:10 +10:00
• 38a41bd44b watchstate: use canonical upstream image name for alpine (#435) unkin-agent 2026-08-29 21:19:36 +10:00
• da1d812eec netbox: use canonical upstream image name for redis_exporter (#434) unkin-agent 2026-08-29 21:19:27 +10:00
• df89947f47 litellm: use canonical upstream image name for redis_exporter (#432) unkin-agent 2026-08-29 21:19:01 +10:00
• 7f928dddfc gitea: use canonical upstream image name for redis_exporter (#431) unkin-agent 2026-08-29 21:18:44 +10:00
• b459e9a90a authentik: use canonical upstream image name for redis_exporter (#430) unkin-agent 2026-08-29 21:18:33 +10:00
• c8355967d4 artifactapi: use canonical upstream image name for redis_exporter (#429) unkin-agent 2026-08-29 21:18:27 +10:00
• e10f0c09c9 arrstack,fafflix,cheeztv: provision shared mediastore CephFS volume (#428) unkin-agent 2026-08-29 21:18:09 +10:00
• 9616e0e2b3 arrstack: use canonical upstream image names (#427) unkin-agent 2026-08-29 21:16:59 +10:00
• c313c7cc3f fafflix,cheeztv: declarative SSO + LDAP plugin auth config (#424) unkin-agent 2026-08-29 20:47:54 +10:00
• 0322fc6989 jellyfin: bump fafflix+cheeztv to v0.2.0 (#426) unkin-agent 2026-08-29 13:22:40 +10:00
• f8716dd16a kea-operator: bump to v0.1.5 (#425) unkin-agent 2026-08-29 12:55:13 +10:00
• 74eb09b638 kea-operator: bump to v0.1.4 (#423) unkin-agent 2026-08-26 23:19:41 +10:00
• 8eb57f9c19 authentik: deploy LDAP outpost for in-cluster app-password binds (#422) unkin-agent 2026-08-26 23:19:24 +10:00
• b9f727bc97 watchstate: expose externally at watchstate.unkin.net (#420) unkin-agent 2026-08-26 21:47:03 +10:00
• 062d217ea8 bind-internal: add cheeztv.unkin.net record (#421) unkin-agent 2026-08-26 20:09:08 +10:00
• 5da12e398d Extend LE *.unkin.net wildcard to arrstack + authentik (reflect into gitea) (#418) unkin-agent 2026-08-25 21:48:54 +10:00
• 48632eb9f9 watchstate: deploy admin-gated jellyfin watch-state sync tool (#419) unkin-agent 2026-08-25 21:39:07 +10:00
• d42d013541 cheeztv: terminate public cheeztv.unkin.net TLS with the LE *.unkin.net wildcard (#417) unkin-agent 2026-08-25 20:58:02 +10:00
• 1ecba543aa arrstack: wire arrproxy v0.4.0 tier routing (fafflix/cheeztv) (#416) unkin-agent 2026-08-25 20:49:04 +10:00
• fe689dc08e Replace legacy jellyfin app with fafflix (adult, cheeztv pattern) (#415) unkin-agent 2026-08-25 20:06:53 +10:00
• 9db52c5e26 arrstack: rebuild adult tier on the shared-Postgres pattern (#414) unkin-agent 2026-08-25 20:06:39 +10:00
• 94da740a9d Add cheeztv kids Jellyfin instance + fafflix kids mounts (#413) unkin-agent 2026-08-25 19:59:08 +10:00
• b419635fc2 arrstack: add kids backend tier (sonarr/radarr/nzbget-kids) (#412) unkin-agent 2026-08-25 08:03:21 +10:00
• a064d9a3c4 arrproxy: bump images to v0.3.1 (#411) unkin-agent 2026-08-24 21:42:28 +10:00
• aea319cec0 authentik: ClientIP session affinity on server service (#410) unkin-agent 2026-08-23 23:13:51 +10:00
• 5a23146513 logging: set clickhouse readonly profile to readonly=2 (#409) benvin/oauth2-proxy-image-fix unkin-agent 2026-08-23 22:36:52 +10:00
• 03c56c0ff0 arrstack: raise arrstack-postgres resources after OOMKills (#408) unkin-agent 2026-08-23 22:01:25 +10:00
• 61b5a7f695 Add Traefik Grafana dashboard (#407) unkin-agent 2026-08-23 21:56:45 +10:00
• 8da505ceb4 arrproxy: bump image versions to v0.3.0 (#406) unkin-agent 2026-08-23 21:38:43 +10:00
• f6c297dcb5 Add logviewer.unkin.net internal DNS record (#405) unkin-agent 2026-08-23 21:38:27 +10:00
• e608dadae7 observability: fix dropped kubelet/cadvisor metrics, add kube-state-metrics + VMAlert k8s.rules (#399) unkin-agent 2026-08-23 21:38:06 +10:00
• 13a04a6ebc Export and scrape metrics from all redis/valkey instances (#398) unkin-agent 2026-08-23 19:19:16 +10:00
• 08a3493097 logging: deploy logviewer v0.1.0 behind oauth2-proxy (#404) unkin-agent 2026-08-23 18:51:15 +10:00
• 4e3c8288e2 Bump radarr to v6.4.2-unkin7 (#403) unkin-agent 2026-08-23 17:15:54 +10:00
• c649cc7ee3 Bump prowlarr to v2.6.2-unkin6 (#402) unkin-agent 2026-08-23 17:13:54 +10:00
• cd51078d79 logging: add read-only clickhouse logreader user + Vault-synced secret (#400) unkin-agent 2026-08-23 17:00:07 +10:00
• b5acb19ac0 Bump arrstack image pins: radarr v6.4.2-unkin6, sonarr v5.0.0-unkin6 (#401) unkin-agent 2026-08-23 16:57:27 +10:00
• ba71bd1a35 Scrape traefik gateway metrics into VictoriaMetrics (#397) unkin-agent 2026-08-23 12:41:58 +10:00
• 8fd1d83b1b Add Redis/Valkey Grafana dashboard (#396) unkin-agent 2026-08-23 12:38:55 +10:00
• 19f7afac92 Add shared arrstack Valkey and wire arr apps' Redis features (#394) unkin-agent 2026-08-23 12:37:42 +10:00
• b3d202b8fa arrstack: add exportarr metrics sidecars to sonarr and radarr (#395) unkin-agent 2026-08-23 12:35:56 +10:00
• 32611bfd16 Deploy mediamover v0.1.0 into arrstack (#393) unkin-agent 2026-08-23 00:09:40 +10:00
• 7c49a9f3ad Deploy arrstack S3 TLS-trust fix (arrstack images -unkin4 -> -unkin5) (#392) unkin-agent 2026-08-22 23:15:11 +10:00
• 671c075a08 Mount mediafs CephFS into arrstack (#391) unkin-agent 2026-08-22 23:05:43 +10:00
• 06fe261661 arrstack: deploy -unkin4 (Redis SignalR backplane + S3 storage) (#390) unkin-agent 2026-08-22 20:46:48 +10:00
• bdf6114794 arrstack: S3 buckets + wiring for app backups and sonarr MediaCover (#389) unkin-agent 2026-08-22 18:39:40 +10:00
• eb37beb7e4 Deploy arrstack -unkin3 (active-active code) (#388) unkin-agent 2026-08-22 18:28:14 +10:00
• 9cdcdf62bc arrstack: provision shared Ceph RGW bucket for media assets (#387) unkin-agent 2026-08-22 16:17:23 +10:00
• 5155cee5e7 arrstack: use waitfordb initContainer instead of inline psql loop (#386) unkin-agent 2026-08-22 16:15:45 +10:00
• 8446c31414 arrstack: fix sync-wave deadlock + config multi-attach (#385) unkin-agent 2026-08-22 12:47:38 +10:00
• e0d47295f2 Deploy arrproxy v0.2.0 machine-mint admin route (#384) unkin-agent 2026-08-18 22:37:06 +10:00
• 187fabb72b arrstack: run sonarr/radarr/prowlarr active-active on shared Postgres (#383) unkin-agent 2026-08-18 21:29:59 +10:00