T

unkin-agent 6d842c7d66 feat(bind-internal): publish haproxy edge sites from k8s DNS (#523 )

The VM haproxies are being decommissioned; the sites they published via puppet CNAMEs are already served by the k8s haproxy edge, so k8s DNS publishes them instead.

- add main.unkin.net A records for sonarr, radarr, lidarr, readarr, prowlarr, nzbget, jellyfin -> 198.18.199.0
- add unkin.net A records for fafflix and git (git-edge.yaml) -> 198.18.199.0, auth -> 198.18.200.4
- point the commented git.yaml cutover at replacing git-edge.yaml

Merge alongside puppet-prod halb DNS removal; A records only take effect once the puppet CNAMEs are gone.

Reviewed-on: #523
Co-authored-by: unkin-agent <unkin-agent@unkin.net>
Co-committed-by: unkin-agent <unkin-agent@unkin.net>

2026-10-05 01:31:06 +11:00

.claude/commands

chore: bump almalinux9 image tags (#188 )

2026-06-07 00:35:12 +10:00

.woodpecker

Drop obsolete vector-test CI pipeline (#505 )

2026-09-27 20:12:45 +10:00

apps

feat(bind-internal): publish haproxy edge sites from k8s DNS (#523 )

2026-10-05 01:31:06 +11:00

argocd

Give vlogs its own namespace (#507 )

2026-09-28 22:55:28 +10:00

certificates: restore the validly-signed intermediate in vault-ca-cert (#305 )

2026-07-28 23:14:14 +10:00

clusters/au-syd1

Enable PKCE for ArgoCD OIDC login (#477 )

2026-09-19 16:10:05 +10:00

docs

Enable Reloader secret watching, scope existing auto to configmap-only (#326 ) (#339 )

2026-08-08 19:35:31 +10:00

schemas

Deploy kea DHCP operator to dhcp-system (#333 )

2026-08-03 00:18:05 +10:00

.gitignore

feat: add reloader (#6 )

2026-03-01 16:34:01 +11:00

.pre-commit-config.yaml

Add JSON schema generation for kubeconform CRD validation (#212 )

2026-06-28 17:26:08 +10:00

.yamllint.yaml

feat: add pre-commit configuration (#9 )

2026-03-02 00:09:21 +11:00

AGENTS.md

chore: bump almalinux9 image tags (#188 )

2026-06-07 00:35:12 +10:00

Makefile

Add JSON schema generation for kubeconform CRD validation (#212 )

2026-06-28 17:26:08 +10:00

migration.md

chore: bump almalinux9 image tags (#188 )

2026-06-07 00:35:12 +10:00

docs/README.md

argocd-apps docs

Operational notes for the manifests in this repo.

Doc	What it covers
cnpg-backups.md	How CNPG Postgres backups (WAL archiving + nightly base backups) to Ceph RGW are configured.
cnpg-restore.md	Restoring a CNPG cluster: full recovery, point-in-time recovery, cutover, and gotchas.
authentik-rancher-sso.md	Manual runtime step to point Rancher's OIDC auth at the canonical `identity.unkin.net` issuer and trust the internal CA.
gitea-migration.md	Staged cutover of the git.unkin.net forge from the Puppet VM to the `gitea` namespace.
ca-rotation.md	Rolling the internal `unkin.net` PKI CA (`vault-ca-cert`): what Reloader restarts automatically vs. manual/CNPG restarts.