Commit Graph
5 Commits
Author SHA1 Message Date
willemjan 43fdc020f4 feat: lan-only + force-ssl for argocd/authentik/adguard labzand.com ingresses
ipAllowList middleware (192.168.0.0/16) on the websecure routers blocks
external access; separate IngressRoute on web 301-redirects http->https.

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <[email protected]>
2026-11-14 16:37:02 +01:00
willemjan 264815b2d2 feat: move argocd/authentik to *.labzand.com with Cloudflare DNS-01 wildcard certs
Internal-only hostnames (argocd.labzand.com, auth.labzand.com) via AdGuard
wildcard rewrite; certs still valid via DNS-01 so no browser warnings.

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <[email protected]>
2026-11-06 20:37:30 +01:00
willemjan 51823374ef fix missing http above paths 2026-11-04 16:12:37 +01:00
willemjan e416add06d fix: typo and other suggestions 2026-10-31 16:18:46 +01:00
willemjan 8f8569cb82 feat: added authentik manifests 2026-10-31 16:08:23 +01:00