5 Commits

Include renames

Author	SHA1	Message	Date
admin	e0e55bf852	manifests: contact-mailer-api publishes only /api/contact (Exact) and limits a client to 20 requests a minute	2026-10-30 10:57:52 +01:00
admin	bd74a613bf	manifests: contact-mailer-api ingress for api.felhom.eu (D35/R-1228, operator yes 2026-10-30) — the form's endpoint once the site is on Cloudflare	2026-10-30 10:50:28 +01:00
adminandClaude Opus 5.5	e281de37c0	CC secrets STOP 3: R-1119, R-1120, R-1131, R-1132 closed (181 -> 177); R-1130/R-1133/R-1134 facts; new keys proven; report ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012qRErfCoiTkvDK9N5XHbzb	2026-10-17 14:21:11 +02:00
adminandClaude Opus 4.8	feea06062a	secrets: rotate + de-git Resend key; source from out-of-band Secret/resend-api ... Resend send-scoped key was committed in plaintext in manifests/hub.yaml (ConfigMap) and manifests/felhom.secret.yaml. Rotated to a new key and removed from git. - hub: new RESEND_API_KEY env override (cmd/hub/main.go), mirrors REGISTRY_TOKEN; ConfigMap resend_api_key now an empty placeholder; Deployment injects from Secret/resend-api. Image 0.17.0. - contact-mailer: secretKeyRef repointed contact-mailer-config -> resend-api. - felhom.secret.yaml: contact-mailer-config Secret removed; healthchecks EMAIL_HOST_PASSWORD blanked (workload not deployed). - documentation/runbooks/secrets.md: out-of-band secret model + create/rotate steps. Secret/resend-api is created imperatively out-of-band and is NOT committed. No secret value appears in this repo. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-29 07:50:30 +02:00
admin	0b144a4d24	initial move to gitea	2026-02-11 08:50:08 +01:00