2 commits

Author	SHA1	Message	Date
ALI YESILKAYA	46298871fb	chore(forgejo): archive le mot de passe admin break-glass au vault + doc (#98) ... - vault_forgejo_admin_password (compte local forgejo-admin, accès de secours) - doc : note DISABLE_REGISTRATION, section break-glass, su-exec git obligatoire Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-07 23:51:35 +02:00
ALI YESILKAYA	224c06041e	feat(forgejo): Git self-host en miroir de GitHub (git.funklab.online, SSO Authentik) (#96) ... - k8s/apps/forgejo : deployment (image forgejo:11, config par env), service, PVC nfs, IngressRoute interne (git.lab.local) + publique (git.funklab.online + middlewares security-headers/ratelimit), Application ArgoCD (ns ai, recurse) - base PostgreSQL `forgejo` sur storage-01 (rôle postgresql) - vault : vault_pg_forgejo_password + vault_forgejo_oauth_client_secret - doc admin/k8s/forgejo.md (archi, OIDC, création du miroir, pièges) + index + CLAUDE.md GitHub reste la source de vérité (pull-mirror lecture seule) — ArgoCD inchangé. Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-07 23:20:33 +02:00