arcodange
6ede249da9
🔒 fix(ansible): gate vault auth disable behind vault_oidc_force_reset (default off) ( #5 )
...
Co-authored-by: Gabriel Radureau <[email protected] [email protected]
2026-05-06 15:03:33 +02:00
arcodange
9e821e1626
♻️ refactor(ansible): move gitea secret user-propagation list to inventory ( #4 )
...
Co-authored-by: Gabriel Radureau <[email protected] [email protected]
2026-05-06 14:48:05 +02:00
arcodange
a644436746
🔒 fix(ansible): propagate vault_oauth__sh_b64 to user-owned namespaces (arcodange) ( #3 )
...
Co-authored-by: Gabriel Radureau <[email protected] [email protected]
2026-05-06 14:18:06 +02:00
arcodange and Claude Opus 4.7
01f0f37691
chore(ansible): add per-collection ansible.cfg + drop trailing whitespace
...
ansible/arcodange/factory/ansible.cfg sets collections_path so ansible
commands run from inside the collection directory still find user-installed
collections under ~/.ansible/collections.
Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]
2026-05-06 12:55:54 +02:00
arcodange and Claude Opus 4.7
1688fe0dfd
fix(crowdsec): clean up Failed pods before Traefik middleware reload
...
Re-running the role would leave behind crowdsec pods stuck in Failed phase
(typically after a config error on a previous run), which then blocked the
Traefik middleware refresh. Delete them up front so the next reconcile
schedules fresh pods.
Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]
2026-05-06 12:55:39 +02:00
arcodange
437fd506ed
Fix Vault Gitea OIDC setup: remove trailing slash from bound_issuer and pass CA certificate
2026-04-07 19:17:47 +02:00
arcodange
451dfa5133
restart traefik when editing crowdsec middleware
2026-01-03 20:08:00 +01:00
arcodange
17e99db641
runner image and setup for gitea workflow with self signed cert
2026-01-03 12:44:27 +01:00
arcodange
5b3c896a25
use self signed cert for internal domain arcodange.lab
2025-12-31 17:38:04 +01:00
arcodange
91219c49f1
use exposed webapp.arcodange.fr instead in gitea cicd
2025-12-23 14:23:12 +01:00
arcodange
2b4aa30a64
use cache redis with crowdsec traefik bouncer
2025-12-06 15:09:36 +01:00
arcodange
f4cb04c9c9
configure crowdsec captcha with cloudflare turnstile
2025-12-03 16:45:25 +01:00
arcodange
72628f0f0e
add crowdsec plugin and middleware for traefik
2025-11-26 14:20:09 +01:00
arcodange
9b09e6bd86
fixes and set preferred_ip since new interface eth0
2025-10-09 17:27:42 +02:00
arcodange
c5a8d5ef52
fixes
2025-08-28 10:13:16 +02:00
arcodange
b4bde14809
fixes
2025-08-09 17:01:18 +02:00
arcodange
561331b825
fixes
2025-08-07 15:51:53 +02:00
arcodange
58aece92b6
disable allowIp middleware while fixing ip filtering - upgrade traefik and fix gitea admin urls by adding prefix
2025-08-04 17:35:11 +02:00
arcodange
fa0df6f175
create gitea tofu bot user
2024-11-05 23:31:13 +01:00
arcodange
1c22b946d6
role management for postgres synergy with vault dynamic credentials
2024-10-30 12:23:14 +01:00
arcodange
f9a47c8ccf
traefik CA pem is a client crt not the Authority (let's encrypt) and is not needed here
2024-10-18 19:27:00 +02:00
arcodange
50399328dc
configure vault oidc login and cicd jwt login
2024-10-07 17:39:27 +02:00
arcodange
407bf12165
setup gitea as oidc provider for tool vault
2024-09-27 18:21:52 +02:00
arcodange
aa127b53ec
reference tool repo
2024-08-29 14:42:20 +02:00
arcodange
