Commit Graph
974 Commits
Author SHA1 Message Date
Junv (via Hermes) 7edfe2cfa4 fix(demo-service): always render site name as clickable link
- Published sites: link to public URL
- Draft sites: link with dashed underline → opens preview modal
2026-06-14 11:11:36 +10:00
Junv (via Hermes) 4dce2be3d4 feat(demo-service): add publish/unpublish draft system with preview
- Sites now start as drafts (published: false) — hidden from public
- Publish endpoint makes site live at demo.junv.cc/<name>
- Unpublish hides it back to draft
- Preview endpoint serves draft HTML to authenticated users
- Caddy blocks .draft/.bak files (defense-in-depth)
- Backward compatible: existing sites default to published
- sync_visibility() handles all state transitions
2026-06-14 11:10:25 +10:00
Junv (via Hermes) 3e36501eba fix: Caddy routing for /admin without trailing slash 2026-06-14 10:59:14 +10:00
Junv (via Hermes) d4484e6750 feat: add Demo Service — Caddy + FastAPI for hosting demo sites at demo.junv.cc
- Caddy as static file server + reverse proxy
- FastAPI management API with Pocket ID SSO
- Web UI at demo.junv.cc/admin
- Agent API with Bearer token auth
- Demo sites accessible at demo.junv.cc/<folder-name>
- NFS PVC for persistent storage
- Enable/disable per-site
2026-06-14 10:57:36 +10:00
Junv (via Hermes) 3a860bb486 remove: K8s security-audit cronjob (path not available on node, switching to Hermes cron) 2026-06-13 15:26:14 +10:00
Junv (via Hermes) e99ec79ae5 add: cronjob for weekly security audit (Sat 7:50 AM) 2026-06-13 15:20:38 +10:00
junv e6f3892b02 Add security script 2026-06-13 15:16:10 +10:00
junv fccba836df Whitelist VPN IPs in CrowdSec sync 2026-06-13 09:40:46 +10:00
junv b579775729 Update token refresh 2026-06-13 09:34:27 +10:00
junv c23b15946e Update n8n 2026-06-13 07:59:06 +10:00
junvandGitHub 7b9f5e5c18 Merge pull request #3 from wahyd4/upgrade-docker-images-2026-06
 chore: upgrade Docker images batch — June 2026
2026-06-01 16:57:31 +10:00
Junv (via Hermes) a8b6890a99 chore: upgrade Docker images batch — June 2026
Updates 7 Docker images across the infrastructure manifests (PG14 kept as-is):

  media/jackett.yaml
    linuxserver/jackett: 0.24.1124 → 0.24.1985 (patch)

  media/media.yaml
    linuxserver/qbittorrent: version-5.1.2-r4 → version-5.2.1_v2.0.12 (major 5.1→5.2)

  home-apps/n8n.yaml
    n8nio/n8n: 2.15.0 → 2.23.1 (minor)

  db/qdrant.yaml
    qdrant/qdrant: v1.16-unprivileged → v1.18.1-unprivileged (minor)

  kube-vip/daemonset.yaml
    kube-vip/kube-vip: v0.4.4 → v0.9.2 (conservative, stayed within v0.x)

  on-demand/once-etcd-job.yaml
    etcd: 3.5.1-0 → 3.5.30-0 (patch)

  adhoc-config/oauth2-proxy.yaml
    oauth2-proxy/oauth2-proxy: v7.6.0 → v7.15.2 (minor)

Note: postgres:14 kept unchanged per PR review feedback.
kube-vip kept at v0.9.2 (latest v0.x) instead of v1.2.0 to avoid
v0→v1 breaking changes.
2026-06-01 16:52:51 +10:00
junv b6d13bed5a Enhance security level of postgres and redis 2026-05-24 10:18:43 +10:00
junv fe85c6ab8f Update argo 2026-05-16 08:58:10 +10:00
junv 2346303132 Update terraform modules 2026-05-16 08:48:04 +10:00
junvandCopilot e41ff70182 Update k3s
Co-authored-by: Copilot <copilot@github.com>
2026-05-03 15:28:58 +10:00
junv 4a5168c332 Update 2026-04-14 11:50:27 +10:00
junv 5b50b27752 Correct hermes dashboard! 2026-04-14 11:41:58 +10:00
小黑 (AI Bot) b0c19a6a2e Grant ai-bot full admin ownership of home-apps namespace 2026-04-14 11:27:47 +10:00
小黑 (AI Bot) 37052f3971 Add RBAC for ai-bot to manage EndpointSlices in home-apps namespace 2026-04-14 11:21:53 +10:00
小黑 (AI Bot) bf1bf4d9b9 Add hermes-dashboard service + ingress with OAuth2 SSO for bot.junv.cc 2026-04-14 11:08:56 +10:00
junv 9115ee61cc update home apps 2026-04-08 11:55:03 +10:00
junv 0f22882fe2 Update media 2026-04-08 09:20:19 +10:00
junv 42d5a3be83 Add logseq 2026-04-07 11:25:21 +10:00
junv 5ba95185fc Update n8n 2026-04-07 09:31:42 +10:00
junv a27a8362dc Update 2026-04-01 20:01:53 +11:00
junv 5c6786231f Update auto ban 2026-04-01 19:54:01 +11:00
junv 7ae2616308 Add crowdsec auto ban 2026-04-01 19:51:16 +11:00
junv f540312aa9 Apply links role binding 2026-04-01 19:36:04 +11:00
junv ffad3b8c3c Expose redis to k8s 2026-03-29 10:09:27 +11:00
junv 9e49328e7e Update n8n 2026-03-21 14:10:48 +11:00
junv a892c26ca6 Add k3s Skills.md 2026-03-17 10:27:32 +11:00
junv e271d82abe Update 2026-03-14 08:22:43 +11:00
junv 1bc86938da Update n8n 2026-02-24 10:38:28 +11:00
junv cc29275c68 Update image 2026-02-23 19:14:15 +11:00
junv 6ec3c6cf48 Update hey-search 2026-02-23 18:31:06 +11:00
junv e4d7615c16 Update hey-search 2026-02-23 18:29:22 +11:00
junv 0d8457e3f4 Update 2026-02-23 18:28:57 +11:00
junv c8b7140fa8 Use home made hey search 2026-02-23 18:26:24 +11:00
junv 3aacee0d86 Update syncthing 2026-02-19 15:20:25 +11:00
junv 375006c601 Add external syncthing 2026-02-19 15:13:11 +11:00
junv ec338025ce Update searxng 2026-02-19 10:48:29 +11:00
junv 3d87e49b49 Update jackett 2026-02-17 22:07:40 +11:00
junv 85d397ac30 archive ollama 2026-02-16 11:07:51 +11:00
junv 0bc0f54b3f Update jackett 2026-02-16 10:10:26 +11:00
junvandGitHub de48518c26 update nun 2026-02-14 08:56:24 +11:00
小黑 (AI Bot) 47b60b24f3 fix: use ExternalName services to reference cross-namespace services (as suggested by copilot) 2026-02-13 22:35:13 +11:00
小黑 (AI Bot) c4afb2822b fix: switch to nginx ingress controller with source-range whitelist 2026-02-13 22:28:53 +11:00
小黑 (AI Bot) 80e5a759c8 feat: add internal ingress for searxng and jackett in ai namespace 2026-02-13 22:27:28 +11:00
小黑 (AI Bot) 0b5276863d chore: professional ollama k8s manifest optimized by github copilot 2026-02-13 21:14:59 +11:00