|
|
914666d71d
|
chore(forgejo): archive le mot de passe admin break-glass au vault + doc
- vault_forgejo_admin_password (compte local forgejo-admin, accès de secours)
- doc : note DISABLE_REGISTRATION, section break-glass, su-exec git obligatoire
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-07-07 23:48:39 +02:00 |
|
|
|
224c06041e
|
feat(forgejo): Git self-host en miroir de GitHub (git.funklab.online, SSO Authentik) (#96)
- k8s/apps/forgejo : deployment (image forgejo:11, config par env), service, PVC nfs,
IngressRoute interne (git.lab.local) + publique (git.funklab.online + middlewares
security-headers/ratelimit), Application ArgoCD (ns ai, recurse)
- base PostgreSQL `forgejo` sur storage-01 (rôle postgresql)
- vault : vault_pg_forgejo_password + vault_forgejo_oauth_client_secret
- doc admin/k8s/forgejo.md (archi, OIDC, création du miroir, pièges) + index + CLAUDE.md
GitHub reste la source de vérité (pull-mirror lecture seule) — ArgoCD inchangé.
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-07-07 23:20:33 +02:00 |
|
