k3s-homelab

T

Alex fb110d1c5b chore(sealed-secrets): commit controller manifest with key renewal disabled

Pins a single sealing key (--key-renew-period=0). Upstream rotates every 30d and
kubeseal seals with the newest key, which would silently invalidate the off-cluster
key backup for secrets sealed after a rotation. Includes DR runbook.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-16 10:09:08 -07:00

apps

chore(sealed-secrets): commit controller manifest with key renewal disabled

2026-07-16 10:09:08 -07:00

argocd

feat(notesnook): manage secret via SealedSecret

2026-07-16 09:21:35 -07:00

docs/superpowers

feat(notesnook): migrate self-hosted Notesnook to k3s

2026-07-15 22:33:56 -07:00

.gitignore

feat(obsidian-livesync): initial CouchDB LiveSync deployment

2026-05-18 12:38:32 -07:00