Commit Graph
6 Commits
Author SHA1 Message Date
willemjan 43fdc020f4 feat: lan-only + force-ssl for argocd/authentik/adguard labzand.com ingresses
ipAllowList middleware (192.168.0.0/16) on the websecure routers blocks
external access; separate IngressRoute on web 301-redirects http->https.

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <[email protected]>
2026-11-14 16:37:02 +01:00
willemjan 264815b2d2 feat: move argocd/authentik to *.labzand.com with Cloudflare DNS-01 wildcard certs
Internal-only hostnames (argocd.labzand.com, auth.labzand.com) via AdGuard
wildcard rewrite; certs still valid via DNS-01 so no browser warnings.

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <[email protected]>
2026-11-06 20:37:30 +01:00
willemjan b137a7d10e Update services/argocd/ingress.yaml
Test
2026-10-12 18:19:16 +00:00
willemjan 75001481dc Test 2026-10-12 18:03:14 +00:00
willemjan 9deac83d1e Update services/argocd/ingress.yaml
Test
2026-10-12 15:15:52 +00:00
willemjan cc111b5ff4 argocd ingress 2026-10-12 14:35:05 +02:00