5 Commits

Include renames

Author	SHA1	Message	Date
jklein	b5eba4cbf1	Harden pod and container security contexts across all workloads ... Add securityContext hardening (runAsNonRoot, readOnlyRootFilesystem, capabilities drop ALL, allowPrivilegeEscalation false) to the 10 workloads that lacked it: apache-tika, cyberchef, gotenberg, homeassistant, matrix-delegation-nginx, paperless-server, paperless-consume cronjob (plus automountServiceAccountToken false), patchmon-frontend, urlaubsverwaltung and zipline. All contexts are configurable via securityContext.pod / securityContext.container in values.yaml; writable paths are provided as emptyDirs. Image-forced deviations (Home Assistant root start for s6-overlay + NET_RAW for discovery, paperless root init container for /run ownership) are documented in the charts' values.yaml. Major version bump for every changed published chart.	2026-08-21 21:49:05 +02:00
jklein	6670f3bfc4	feat(matrix-synapse): added liveness and readiness probes, resource requests and limits	2026-03-29 18:31:50 +02:00
jklein	1aae181175	feat(matrix-synapse): added delegation	2026-03-29 18:13:35 +02:00
jklein	95a250dc65	feat(matrix-synapse): added config Secret	2026-03-17 22:17:55 +01:00
jklein	9aa049b0dc	feat(matrix-synapse): added initial chart	2026-03-17 22:07:42 +01:00