Funk-lab/k8s/apps
alkatrazz 9f1f7e6ce2 feat(forgejo): Git self-host en miroir de GitHub (git.funklab.online, SSO Authentik)
- k8s/apps/forgejo : deployment (image forgejo:11, config par env), service, PVC nfs,
  IngressRoute interne (git.lab.local) + publique (git.funklab.online + middlewares
  security-headers/ratelimit), Application ArgoCD (ns ai, recurse)
- base PostgreSQL `forgejo` sur storage-01 (rôle postgresql)
- vault : vault_pg_forgejo_password + vault_forgejo_oauth_client_secret
- doc admin/k8s/forgejo.md (archi, OIDC, création du miroir, pièges) + index + CLAUDE.md

GitHub reste la source de vérité (pull-mirror lecture seule) — ArgoCD inchangé.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-07 23:19:19 +02:00
..
authentik feat(security): durcissement edge funklab.online (vraie IP client + rate-limit + TLS/headers) (#95) 2026-07-07 22:58:24 +02:00
finlab ci(finlab): image → sha-99ff321 [skip ci] 2026-06-30 15:10:07 +00:00
forgejo feat(forgejo): Git self-host en miroir de GitHub (git.funklab.online, SSO Authentik) 2026-07-07 23:19:19 +02:00
ghostfolio revert(ghostfolio): retirer BASE_CURRENCY (no-op en v3.11) 2026-06-15 14:50:22 +02:00
guacamole feat(security): durcissement edge funklab.online (vraie IP client + rate-limit + TLS/headers) (#95) 2026-07-07 22:58:24 +02:00
n8n feat(security): durcissement edge funklab.online (vraie IP client + rate-limit + TLS/headers) (#95) 2026-07-07 22:58:24 +02:00
open-webui feat(security): durcissement edge funklab.online (vraie IP client + rate-limit + TLS/headers) (#95) 2026-07-07 22:58:24 +02:00
openalice chore(openalice): suspend le déploiement (replicas 0), conserve tout (#63) 2026-06-28 18:05:57 +02:00
searxng fix(searxng): crash port — enableServiceLinks:false + port/bind explicites (#50) 2026-06-22 22:50:46 +02:00
stt ci(stt): image → sha-f47bc36 [skip ci] 2026-06-23 21:48:55 +00:00