forust/homelab
0
0 Fork 0
Code Issues 1 Pull Requests 3 Actions Packages Wiki Activity
705 Commits 19 Branches 20 Tags
39df442e601c8604895a75433c258bc2eb540b81
Commit Graph
3 Commits
Author SHA1 Message Date
forust 78e6363fe2 chore(gitea): add git.forust.xyz route
ci / lint-compose (push) Successful in 9s
Details
ci / lint-actionlint (push) Successful in 5s
Details
ci / lint-shellcheck (push) Successful in 7s
Details
ci / lint-prettier (push) Successful in 12s
Details
ci / lint-ruff (push) Successful in 6s
Details
ci / lint-yaml (push) Successful in 9s
Details
ci / lint-dockerfiles (push) Successful in 4s
Details
ci / validate (push) Successful in 5s
Details
renovate-ci / validate-renovate (push) Successful in 8s
Details
ci / build (push) Successful in 17s
Details
2026-10-03 11:07:48 +02:00
forust bc1e69ebe0 feat(tls): internal CA wildcard for *.internal routes
ci / lint-prettier (push) Successful in 2s
Details
ci / lint-ruff (push) Successful in 0s
Details
ci / lint-yaml (push) Successful in 2s
Details
ci / lint-dockerfiles (push) Successful in 1s
Details
ci / validate (push) Successful in 1s
Details
ci / build (push) Skipped
Details
ci / deploy-userbot-panel (push) Skipped
Details 
Selfsigned root (10y) + internal-ca issuer; per-namespace
internal-wildcard-tls certs referenced by all -local routers.
Root public cert committed for client trust stores.
 2026-09-23 14:45:05 +02:00
forust ef325cd3b1 feat(tls): migrate public ingress TLS from Traefik ACME to cert-manager
ci / lint-ruff (push) Successful in 1s
Details
ci / lint-prettier (push) Successful in 3s
Details
ci / lint-yaml (push) Successful in 2s
Details
ci / lint-dockerfiles (push) Successful in 1s
Details
ci / validate (push) Successful in 2s
Details
ci / build (push) Skipped
Details
ci / deploy-userbot-panel (push) Skipped
Details 
All prod IngressRoutes switch tls.certResolver to tls.secretName
backed by per-router Certificates (HTTP-01, letsencrypt-prod).
adguard-prod reuses the shared adguard-certs secret (also feeds
DoT :853); sync CronJob removed as redundant.

Traefik certificatesResolvers removed: its internal
acme-http@internal router hijacks HTTP-01 for every host while
enabled, blocking external solvers. Dormant files (kener,
downtify) converted for consistency but not applied; n8n
untouched per live-only rule.
 2026-09-23 14:12:36 +02:00