admin/felhom.eu
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,377 Commits 1 Branch 14 Tags
ddbcabebb4e380e4c8c679efd92a3aa10d5f2dbe
Commit Graph
6 Commits
Author SHA1 Message Date
adminandClaude Opus 5.5 c28ce7ce2f R-1228: retire DooPlex's copy of the website (operator yes); the installer pin moves to INSTALLER-TAG
gates / gates (push) Successful in 3m25s
Details 
- INSTALLER-TAG (one line) is the only installer pin; publish-site-cloudflare.sh reads it.
- hostinstall gate 6c: pin file holds one tag, no manifest pins one, publish script takes
  the site from origin/main and scripts/ from the tag. Red seen on five mutants.
- manifests: webpage.yaml keeps only FileBrowser; contact-mailer.yaml loses the old
  felhom.eu/api Ingress (an orphan: glued to the next doc by a `80---` typo).
- R-110 fence text, manifests/website rules, build skill, runbooks, poster facts updated.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
 2026-11-07 23:10:21 +01:00
admin e0e55bf852 manifests: contact-mailer-api publishes only /api/contact (Exact) and limits a client to 20 requests a minute
gates / gates (push) Successful in 1m49s
Details
2026-10-30 10:57:52 +01:00
admin bd74a613bf manifests: contact-mailer-api ingress for api.felhom.eu (D35/R-1228, operator yes 2026-10-30) — the form's endpoint once the site is on Cloudflare
gates / gates (push) Successful in 1m44s
Details
2026-10-30 10:50:28 +01:00
adminandClaude Opus 5.5 e281de37c0 CC secrets STOP 3: R-1119, R-1120, R-1131, R-1132 closed (181 -> 177); R-1130/R-1133/R-1134 facts; new keys proven; report
gates / gates (push) Successful in 7m1s
Details 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012qRErfCoiTkvDK9N5XHbzb
 2026-10-17 14:21:11 +02:00
adminandClaude Opus 4.8 feea06062a secrets: rotate + de-git Resend key; source from out-of-band Secret/resend-api 
Resend send-scoped key was committed in plaintext in manifests/hub.yaml (ConfigMap)
and manifests/felhom.secret.yaml. Rotated to a new key and removed from git.

- hub: new RESEND_API_KEY env override (cmd/hub/main.go), mirrors REGISTRY_TOKEN;
  ConfigMap resend_api_key now an empty placeholder; Deployment injects from
  Secret/resend-api. Image 0.17.0.
- contact-mailer: secretKeyRef repointed contact-mailer-config -> resend-api.
- felhom.secret.yaml: contact-mailer-config Secret removed; healthchecks
  EMAIL_HOST_PASSWORD blanked (workload not deployed).
- documentation/runbooks/secrets.md: out-of-band secret model + create/rotate steps.

Secret/resend-api is created imperatively out-of-band and is NOT committed.
No secret value appears in this repo.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-29 07:50:30 +02:00
admin 0b144a4d24 initial move to gitea 2026-02-11 08:50:08 +01:00