68 Commits

Author	SHA1	Message	Date
unkin-agent	2aa0e3a3bb	Add local npm kind and npm virtual	2026-10-17 17:01:41 +11:00
benvin	ea574515e5	Merge pull request 'Add local helm repository kind' (#65) from benvin/local-helm-kind into main ... Reviewed-on: #65	2026-10-17 16:35:08 +11:00
unkin-agent	527a8f2fe3	Restrict orca pattern to real rpm/deb assets; sort orca member	2026-10-17 15:27:02 +11:00
unkin-agent	e004eb5845	Add orca and cloudnative-pg GitHub-release rpm and deb remotes	2026-10-17 15:25:00 +11:00
unkin-agent	3446a861c8	Add local_helm kind with helm-internal as first helm virtual member	2026-10-17 15:12:09 +11:00
unkin-agent	29fc4b6655	Add rspamd RPM remote	2026-10-12 22:46:01 +11:00
unkin-agent	3c97135e77	Allow mail stack images through dockerhub and k8s-registry remotes	2026-10-12 22:20:10 +11:00
unkin-agent	8fe5f74afd	Allow the ClamAV image through the dockerhub remote ... The mail namespace runs clamd + freshclam from clamav/clamav on Docker Hub via the artifactapi mirror. Add it to the dockerhub allowlist. - add "^clamav/clamav" to config/remote_docker/dockerhub.yaml patterns	2026-10-12 21:49:42 +11:00
benvin	8345a0e23e	Merge pull request 'Add rpm-custom virtuals per distro' (#60) from benvin/rpm-custom-virtuals into main ... Reviewed-on: #60	2026-10-09 23:38:37 +11:00
unkin-agent	66177b5017	Add rpm-custom virtuals per distro	2026-10-09 22:17:36 +11:00
unkin-agent	c2acde9f66	Add crates-io cargo remote	2026-10-09 22:17:08 +11:00
unkin-agent	09870e9040	Add remote_cargo config kind	2026-10-09 22:16:28 +11:00
unkin-agent	ae8be9f569	Add npmjs npm remote	2026-10-09 19:31:34 +11:00
unkin-agent	35c7d1d224	Add remote_npm config kind	2026-10-09 19:30:17 +11:00
benvin	cf2d16268b	Merge pull request 'allow envoy release assets on github remote' (#53) from benvin/github-envoy into main ... Reviewed-on: #53	2026-10-09 19:27:10 +11:00
unkin-agent	c3a96e5fa2	Drop storytold-artcraft remotes and fix apt description grammar	2026-10-09 19:18:58 +11:00
unkin-agent	6396c80eaa	Add storytold GitHub-release rpm and deb remotes	2026-10-09 19:09:17 +11:00
unkin-agent	c1c1c9d553	Add remote_github_rpm and remote_github_deb config kinds	2026-10-09 19:08:28 +11:00
unkin-agent	9759f059ea	allow envoy release binary and checksums on github remote	2026-10-07 11:47:31 +11:00
unkin-agent	37688d237a	allow kubectl plugin release assets in github remote	2026-10-02 23:43:54 +10:00
unkin-agent	69c9938c64	feat: allow kubectl-cnpg release assets through the github remote	2026-10-02 23:18:19 +10:00
unkin-agent	0e1add0d43	Allow victoria-metrics-k8s-stack dashboard sources on github_user	2026-10-02 22:48:08 +10:00
unkin-agent	e8c09807ae	feat: add jellyfin-plugins local generic repo	2026-09-19 17:42:00 +10:00
unkin-agent	f0e63a091e	feat: allow argocd CLI release assets through the github remote	2026-09-19 16:22:41 +10:00
unkin-agent	d7542d8fe2	Narrow GitHub branch archives to named repos ... The wildcard heads entries admitted a branch archive from any repository on GitHub. patterns is the admission allowlist, so only the repos that need a branch install belong in it. - Replace the wildcard heads entries with one anchored entry per repo - Cover the 14 Neovim plugins that publish no tags, zip and tar.gz - List each repo in both patterns and mutable_patterns	2026-09-11 23:34:12 +10:00
unkin-agent	b76fddecb9	Allow GitHub branch archives through the github remote ... patterns is a strict allowlist evaluated before mutable_patterns, so /archive/refs/heads/ downloads are denied despite the mutable entry. - Add heads .zip and .tar.gz to patterns - Add heads .zip to mutable_patterns and escape the tar.gz dots	2026-09-11 23:26:29 +10:00
unkin-agent	20838caa8f	Add gitea generic remote for internal tag archives ... Proxy unkin tag source zips from git.unkin.net through artifactapi.	2026-09-09 23:32:31 +10:00
benvin	00a931ed35	Merge pull request 'Allow stylua linux release assets through the github remote' (#42) from benvin/stylua-release-asset into main ... Reviewed-on: #42	2026-09-09 22:36:12 +10:00
unkin-agent	901aaf1f1f	Add nvim-plugins local generic repo ... Receives Neovim plugin release archives for arti-pack installs.	2026-09-09 21:12:00 +10:00
unkin-agent	e7c4c76002	Allow stylua linux release assets through the github remote	2026-09-09 21:05:06 +10:00
unkin-agent	888e3e84ce	Allow GitHub tag zip archives through the github remote	2026-09-07 23:49:10 +10:00
unkin-agent	11c3059b05	Add artifactapi remotes for jellyfin-ha auth plugins ... jellyfin-ha bakes the LDAP and SSO auth plugins into its image, and all outside artifacts must be fetched via artifactapi rather than direct. - Add remote_generic/jellyfin.yaml proxying repo.jellyfin.org, scoped to the ldap-authentication plugin zip. - Add a github.yaml pattern for 9p4/jellyfin-plugin-sso release zips (GitHub redirects release downloads to objects.githubusercontent.com, which the existing github remote already follows).	2026-08-26 23:23:27 +10:00
unkin-agent	b776d16a9c	Narrow arabcoders allow-pattern to watchstate per review	2026-08-24 21:37:30 +10:00
unkin-agent	5596088c57	Allow ghcr.io/arabcoders/watchstate via artifactapi ... Add arabcoders pattern to ghcr remote to enable pulling watchstate image through artifactapi for media watch-state sync deployment.	2026-08-24 21:22:58 +10:00
unkin-agent	35b44f3956	Allow kube-state-metrics through the k8s-registry docker remote	2026-08-23 21:32:05 +10:00
unkin-agent	62c8307c08	quay remote: allowlist oauth2-proxy images ... Adds the ^oauth2-proxy/ pattern to the quay.io remote so the artifactapi caching proxy will serve quay.io/oauth2-proxy/oauth2-proxy. Needed so the arrproxy oauth2-proxy sidecar can pull the real upstream quay.io address via the rke2 registries.yaml mirror.	2026-08-17 20:43:43 +10:00
unkin-agent	f68de9283b	ghcr: allowlist oauth2-proxy for the arrproxy sidecar	2026-08-16 16:25:43 +10:00
unkin-agent	8e88642bfa	fix(fedora): repoint remote to gsl-syd (rackspace dropped F44) ... Rackspace (syd.mirror.rackspace.com) never synced Fedora 44: it serves releases/43 but 404s on releases/44/.../repomd.xml, breaking dnf makecache for F44 through the caching proxy. Repoint to gsl-syd.mm.fcix.net, a Sydney-local FCIX tier-1 mirror that is fully synced for F44 (releases + updates + Packages, verified 200, ~25ms), using the standard /fedora/linux layout root.	2026-08-15 15:25:13 +10:00
unkin-agent	b4670ea796	dockerhub: allowlist linuxserver images for arrstack	2026-08-15 13:12:48 +10:00
benvin	baba4ba26e	Merge pull request 'ghcr: allow k8up-io images through the docker remote' (#30) from benvin/k8up-images into main ... Reviewed-on: #30	2026-08-15 12:30:25 +10:00
unkin-agent	01a09a229a	ghcr: allow k8up-io images through the docker remote ... The k8up operator (deployed via the k8up-system app) and its restic backup/prune/check jobs both run ghcr.io/k8up-io/k8up, which the containerd mirror only serves when the image path is allowlisted. - Add ^k8up-io/ to the ghcr remote patterns	2026-08-15 12:09:28 +10:00
unkin-agent	5b6af846b8	Add valkey-operator artifactapi remotes ... Adds a valkey helm remote and allowlists the operator/exporter images so the valkey-operator install in argocd-apps resolves everything through artifactapi. - Add config/remote_helm/valkey.yaml proxying https://valkey.io/valkey-helm - Add valkey to the virtual/helm member list - Allow ^valkey-io/ on the ghcr remote (operator image ghcr.io/valkey-io/valkey-operator) - Allow ^oliver006/redis_exporter on dockerhub (Valkey metrics exporter)	2026-08-15 12:06:00 +10:00
unkin-agent	c5ce67a5d1	Add k8up Helm remote to virtual helm proxy ... The k8up backup operator will be installed via ArgoCD, which pulls charts through the artifactapi virtual helm proxy. That proxy resolves only the remotes listed as members, so the upstream k8up repo must be registered. - Add config/remote_helm/k8up.yaml pointing at https://k8up-io.github.io/k8up - Register k8up as a member of the virtual helm repository	2026-08-13 23:31:59 +10:00
unkin-agent	62d5e2fb14	ghcr remote: allow goodtune/ghp for pull-through	2026-08-13 19:31:01 +10:00
unkin-agent	1f12b513ea	fedora remote: switch base_url to syd.mirror.rackspace.com	2026-08-13 06:42:27 +10:00
unkin-agent	e0236b0584	fedora remote: switch base_url to ftp.uni-stuttgart.de ... dl.fedoraproject.org is the throttled master, causing F44 cold-fetch timeouts. uni-stuttgart is a fast tier-1 mirror carrying the full releases+updates tree.	2026-08-13 00:47:19 +10:00
unkin-agent	983cff4876	fedora remote: point base_url at dl.fedoraproject.org ... The fcix micromirror (gsl-syd.mm.fcix.net) does not carry F44, so dnf gets HTTP 404 for releases/44/Everything/x86_64/os/repodata/repomd.xml. dl.fedoraproject.org is the canonical always-current Fedora source.	2026-08-12 22:42:45 +10:00
unkinben	83e4dbd00d	fix: quote base_url (trailing colon broke yaml parse) ... Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv	2026-07-30 21:16:01 +10:00
unkinben	df74a5d02a	Add kubernetes rpm remote (pkgs.k8s.io, any stable minor) ... Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv	2026-07-30 21:10:59 +10:00
benvin	1da1a1ae40	Merge pull request 'Add local_generic rootfs-images repo (bootapi images)' (#18) from benvin/local-generic-rootfs into main ... Reviewed-on: #18	2026-07-30 00:14:06 +10:00