07654cd135
feat(notesnook): manage secret via SealedSecret
...
Secrets are now committed encrypted (sealed-secrets v0.38.4) instead of
hand-applied out-of-band, closing the config-DR gap the backups intentionally
don't cover. Existing Secret adopted via the managed annotation (values verified
unchanged). Controller private key backed up GPG-encrypted off-cluster.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-16 09:21:35 -07:00
4b801e3444
feat(notesnook): migrate self-hosted Notesnook to k3s
...
Adds apps/notesnook (namespace, config, mongo rs0 StatefulSet, minio,
identity/sync/sse/monograph deployments + Traefik/cert-manager ingresses)
and argocd/notesnook.yaml. Secret applied out-of-band (only .example committed).
Includes design spec + implementation plan under docs/superpowers.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-15 22:33:56 -07:00
08cb555ce9
fix(nightscout): use TCP probe to avoid 401 from auth-gated status endpoint
2026-05-18 15:45:23 -07:00
e4473578dc
feat(nightscout): migrate from bare-metal LXC to k3s
2026-05-18 13:47:52 -07:00
70ab699c04
fix(obsidian-livesync): allow /_up probe without auth via require_valid_user_except_for_up
2026-05-18 13:05:47 -07:00
dc6e8384d5
fix(obsidian-livesync): copy configmap via init container to avoid unchownable subPath bind-mount
2026-05-18 12:58:55 -07:00
51ccb1f61e
feat(obsidian-livesync): initial CouchDB LiveSync deployment
2026-05-18 12:38:32 -07:00
Alex