Commit Graph

  • d4f03cdfd9 Give gluetun a writable /tmp/gluetun jklein 2026-08-23 11:16:24 +02:00
  • adc87c2cc1 Bind the qBittorrent session to the VPN interface jklein 2026-08-23 11:15:43 +02:00
  • 5e2d8e4083 Allow writable root filesystem for the linuxserver.io containers jklein 2026-08-23 01:07:52 +02:00
  • 265190d175 Calibrate gluetun liveness more tolerant than readiness jklein 2026-08-23 00:49:13 +02:00
  • 0a5035ae83 Clean stale VPN state synchronously before gluetun starts jklein 2026-08-23 00:38:41 +02:00
  • 818a71f7b6 Clean up stale ip rules on gluetun container start jklein 2026-08-23 00:30:26 +02:00
  • 2211226c8e Allow writable root filesystem for flaresolverr jklein 2026-08-23 00:24:24 +02:00
  • bce2b147a8 Set HOME=/tmp for flaresolverr jklein 2026-08-23 00:16:27 +02:00
  • 1ed70e31dd Pin flaresolverr runAsUser/runAsGroup to 1000 jklein 2026-08-23 00:01:15 +02:00
  • d1933e0b53 Fix gluetun image tag: Docker Hub tags carry a v prefix jklein 2026-08-22 23:54:46 +02:00
  • 914c2d0205 Add freesailarr chart: gluetun-tunneled media automation stack jklein 2026-08-22 23:44:32 +02:00
  • 178d4e9a6a Merge pull request #148 from jk-cluster/feat/seccomp-runtime-default-batch1 jklein 2026-08-24 11:31:33 +00:00
  • 6c73ef874b Eight charts: seccompProfile RuntimeDefault and qualified images jklein 2026-08-24 13:17:14 +02:00
  • d85ff72dad Merge pull request #147 from jk-cluster/feat/renovate-nginx-84-wording jklein 2026-08-24 10:52:35 +00:00
  • 640c6e5726 Merge pull request #138 from jk-cluster/renovate/alpine-3.x jklein 2026-08-24 10:52:12 +00:00
  • 0d62c0d6ce renovate: name the nginx alpine check in #84 accurately jklein 2026-08-24 12:18:01 +02:00
  • 5a35ea49b0 Update alpine Docker tag to v3.24 jlab-renovate[bot] 2026-08-24 10:16:01 +00:00
  • 077030e61f Merge pull request #146 from jk-cluster/feat/renovate-nginx-stable-only jklein 2026-08-24 10:15:19 +00:00
  • 2d03ba8a7c renovate: let the nginx constraint survive a variant tag jklein 2026-08-24 12:15:01 +02:00
  • 0908785b10 renovate: keep the delegation nginx on stable branches jklein 2026-08-24 12:09:26 +02:00
  • 372b5f691c Merge pull request #145 from jk-cluster/feat/renovate-automerge-minor jklein 2026-08-24 10:03:47 +00:00
  • 2e0e37d838 renovate: automerge minor updates, make the install-test blocking jklein 2026-08-24 12:01:08 +02:00
  • 35db2affea Merge pull request #143 from jk-cluster/feat/renovate-config jklein 2026-08-24 09:47:54 +00:00
  • 6b25d082a7 renovate: chart-aware config with an automatic version bump jklein 2026-08-24 11:42:43 +02:00
  • e730a81b17 Merge pull request #140 from jk-cluster/renovate/1password-load-secrets-action-5.x jklein 2026-08-24 09:20:12 +00:00
  • a176c7576c Merge pull request #142 from jk-cluster/renovate/azure-setup-helm-5.x jklein 2026-08-24 09:20:01 +00:00
  • d010380701 Merge pull request #141 from jk-cluster/renovate/actions-checkout-7.x jklein 2026-08-24 09:19:52 +00:00
  • 5026622763 Update azure/setup-helm action to v5 jlab-renovate[bot] 2026-08-24 00:01:19 +00:00
  • 35d381432c Update actions/checkout action to v7 jlab-renovate[bot] 2026-08-23 23:01:23 +00:00
  • f65f31bed8 Update 1password/load-secrets-action action to v5 jlab-renovate[bot] 2026-08-23 23:01:15 +00:00
  • 283c044fad Merge pull request #136 from jk-cluster/renovate/configure jklein 2026-08-23 22:04:55 +00:00
  • 942a1ce0b1 Merge pull request #137 from jk-cluster/feat/rss-bridge-2025-08-05 jklein 2026-08-23 22:03:54 +00:00
  • e7a75291ae Add renovate.json jlab-renovate[bot] 2026-08-23 21:59:53 +00:00
  • bcbcc2c62f rss-bridge: app update 2025-06-03 -> 2025-08-05 jklein 2026-08-23 23:59:47 +02:00
  • ed3bc2a48a Merge pull request #132 from jk-cluster/feat/rss-bridge-chart jklein 2026-08-23 21:42:31 +00:00
  • 9259482b87 Merge pull request #134 from jk-cluster/feat/rallly-seccomp-runtimedefault jklein 2026-08-23 21:40:11 +00:00
  • 7e6b3beed5 rss-bridge: pin the unprivileged-port sysctl, quote env values jklein 2026-08-23 23:39:49 +02:00
  • fe6839265c rallly: seccompProfile RuntimeDefault in the pod context jklein 2026-08-23 23:37:42 +02:00
  • e016650f91 rss-bridge: qualify the image registry, except the port-80 finding jklein 2026-08-23 23:33:16 +02:00
  • 3fa67d55ef rss-bridge: new chart jklein 2026-08-23 23:27:06 +02:00
  • 06a5a7d517 Merge pull request #133 from jk-cluster/feat/template-chart-hardening-fixes jklein 2026-08-23 21:31:53 +00:00
  • 00ea301e33 template-chart: seccomp profile, unprivileged port, and two placeholder fixes jklein 2026-08-23 23:29:51 +02:00
  • dd9d91442a Merge pull request #129 from jk-cluster/feat/trivy-config-ci jklein 2026-08-23 21:17:52 +00:00
  • e74c25b011 Merge pull request #131 from jk-cluster/feat/apache-tika-seccomp-runtimedefault jklein 2026-08-23 21:17:18 +00:00
  • fa8c4fea45 apache-tika: seccompProfile RuntimeDefault in the pod context jklein 2026-08-23 23:14:54 +02:00
  • 705ee066a4 CI: record the paperless-ngx root init container as a documented exception jklein 2026-08-23 23:14:05 +02:00
  • 1ae5e1a7c3 CI: report Trivy misconfiguration findings for changed charts jklein 2026-08-23 23:07:16 +02:00
  • 1d73beff4c Merge pull request #130 from jk-cluster/feat/gotenberg-seccomp-runtimedefault jklein 2026-08-23 21:11:07 +00:00
  • 37b76e353c gotenberg: seccompProfile RuntimeDefault in the pod context jklein 2026-08-23 23:08:37 +02:00
  • a039b873c9 Merge pull request #127 from jk-cluster/feat/cyberchef-seccomp-runtimedefault jklein 2026-08-23 21:06:07 +00:00
  • 4a61f763e8 cyberchef: seccompProfile RuntimeDefault in the pod context jklein 2026-08-23 23:00:02 +02:00
  • 69202d5e13 Merge pull request #126 from jk-cluster/feat/gotenberg-decoupled-limits jklein 2026-08-23 20:47:51 +00:00
  • 61bdc9de90 Merge pull request #125 from jk-cluster/feat/template-chart-schema-guidelines jklein 2026-08-23 20:37:01 +00:00
  • 0c403b6100 gotenberg: small requests, explicit higher limits jklein 2026-08-23 22:35:18 +02:00
  • b218f64eac template-chart + README: values.schema.json, gate and null-safe helpers jklein 2026-08-23 22:32:21 +02:00
  • c2f12bec70 Merge pull request #124 from jk-cluster/fix/rallly-smtp-reject-unauthorized jklein 2026-08-23 20:31:41 +00:00
  • edb0837246 rallly: default smtp.rejectUnauthorized to true jklein 2026-08-23 22:28:24 +02:00
  • d6de6de263 Merge pull request #123 from jk-cluster/feat/patchmon-notes-txt jklein 2026-08-23 20:15:45 +00:00
  • 5186d711a5 Merge pull request #122 from jk-cluster/feat/values-schema-matrix jklein 2026-08-23 20:15:43 +00:00
  • 579433c4bf Add NOTES.txt to the patchmon chart jklein 2026-08-23 22:07:34 +02:00
  • 1ddb5f457e matrix-synapse: strict schema, ingress gate and null-safe hardening jklein 2026-08-23 22:05:56 +02:00
  • 09fddb15f5 Merge pull request #120 from jk-cluster/fix/samba-remove-globalconfig jklein 2026-08-23 20:05:04 +00:00
  • b33f5cd8b3 Merge pull request #121 from jk-cluster/feat/values-schema-paperless jklein 2026-08-23 20:05:02 +00:00
  • 232ecdfa05 samba: remove the unimplemented globalConfig value jklein 2026-08-23 21:59:20 +02:00
  • ac53555e44 paperless-ngx: strict values.schema.json and null-safe hardening jklein 2026-08-23 21:59:06 +02:00
  • 1ef8c7d42e Merge pull request #119 from jk-cluster/feat/values-schema-mcrouter jklein 2026-08-23 19:51:27 +00:00
  • a76accf7ad minecraft-router: strict values.schema.json and null-safe hardening jklein 2026-08-23 21:49:18 +02:00
  • dbabd00676 Merge pull request #118 from jk-cluster/feat/values-schema-homeassistant jklein 2026-08-23 19:47:48 +00:00
  • 2cb1a05d6f homeassistant: strict values.schema.json and null-safe hardening jklein 2026-08-23 21:44:49 +02:00
  • f0faf8c222 Merge pull request #116 from jk-cluster/feat/values-schema-samba jklein 2026-08-23 19:42:30 +00:00
  • 24d3366e8b samba: strict values.schema.json and null-safe hardening jklein 2026-08-23 21:39:49 +02:00
  • 1b8087d77c Merge pull request #115 from jk-cluster/feat/values-schema-calibre jklein 2026-08-23 19:37:24 +00:00
  • 6c04a68763 calibre-web-automated: strict schema, ingress gate and null-safe hardening jklein 2026-08-23 21:34:32 +02:00
  • 4e63e8c164 Merge pull request #114 from jk-cluster/feat/values-schema-satisfactory jklein 2026-08-23 19:31:07 +00:00
  • 290c69cc7d satisfactory: strict values.schema.json and null-safe hardening jklein 2026-08-23 21:28:52 +02:00
  • 5b3524a354 Merge pull request #113 from jk-cluster/feat/values-schema-teamspeak jklein 2026-08-23 19:26:03 +00:00
  • e54776e6c1 teamspeak-server: strict values.schema.json and null-safe hardening jklein 2026-08-23 21:23:30 +02:00
  • 24fb0d2d2b Merge pull request #112 from jk-cluster/feat/values-schema-outline jklein 2026-08-23 19:21:58 +00:00
  • 24ca3513fc outline: strict values.schema.json and null-safe hardening jklein 2026-08-23 21:18:58 +02:00
  • 81549d6aab Merge pull request #111 from jk-cluster/feat/values-schema-voucher-vault jklein 2026-08-23 19:17:14 +00:00
  • f2fc18c6ae voucher-vault: strict values.schema.json and null-safe hardening jklein 2026-08-23 21:13:48 +02:00
  • e22e1235e6 Merge pull request #110 from jk-cluster/feat/values-schema-zipline jklein 2026-08-23 19:10:12 +00:00
  • 40289a2e67 zipline: strict values.schema.json, ingress gate and null-safe hardening jklein 2026-08-23 21:07:11 +02:00
  • 4f5870db20 Merge pull request #108 from jk-cluster/feat/values-schema-rallly jklein 2026-08-23 19:02:37 +00:00
  • 37eda69fdd rallly: strict values.schema.json, ingress gate and null-safe hardening jklein 2026-08-23 20:58:52 +02:00
  • a9992d356d Merge pull request #107 from jk-cluster/feat/apache-tika-notes-txt jklein 2026-08-23 18:52:48 +00:00
  • f74870b246 apache-tika: note why the notes use effectiveResources jklein 2026-08-23 20:46:50 +02:00
  • 6295f4b9c1 Add NOTES.txt to the apache-tika chart jklein 2026-08-23 20:44:02 +02:00
  • 4b10870d59 Merge pull request #103 from jk-cluster/feat/gotenberg-null-safety jklein 2026-08-23 18:40:08 +00:00
  • 392fc6c36a Merge pull request #105 from jk-cluster/feat/apache-tika-null-safety jklein 2026-08-23 18:38:48 +00:00
  • 8bc673d80d gotenberg: null-safe hardening, probes and resources jklein 2026-08-23 20:30:31 +02:00
  • 1698b6dab8 Merge pull request #104 from jk-cluster/feat/gotenberg-notes-txt jklein 2026-08-23 18:34:40 +00:00
  • 07ce0bb816 apache-tika: null-safe hardening, probes and resources jklein 2026-08-23 20:33:00 +02:00
  • 09d8a94bfc Add NOTES.txt to the gotenberg chart jklein 2026-08-23 20:30:12 +02:00
  • 5e5fb631c3 Merge pull request #102 from jk-cluster/feat/cyberchef-ingress-gate jklein 2026-08-23 18:29:28 +00:00
  • 4e97097a64 cyberchef: honour ingress.enabled, add null-safe hardening jklein 2026-08-23 20:25:09 +02:00
  • 60136840f6 Merge pull request #101 from jk-cluster/feat/cyberchef-notes-txt jklein 2026-08-23 18:23:17 +00:00
  • 907cb16d6a Merge pull request #98 from jk-cluster/feat/values-schema-patchmon jklein 2026-08-23 18:21:46 +00:00
  • db319b916d Merge pull request #100 from jk-cluster/feat/values-schema-urlaubsverwaltung jklein 2026-08-23 18:21:38 +00:00
  • e6e3ad961e Add NOTES.txt to the cyberchef chart jklein 2026-08-23 20:19:41 +02:00