whyredfire
d55d711463
fix(wireguard): Allow egress to Traefik pod ports
...
Traffic to the 192.168.2.5 external IP is DNATed to the Traefik pod
before NetworkPolicy is evaluated, so the 10.0.0.0/8 exclusion blocked
VPN clients from reaching services behind the gateway.
2026-10-28 21:43:36 +05:30
whyredfire
49ee2a29f5
chore(apps): Add network policies to apps
2026-10-28 15:19:35 +05:30
whyredfire
6e1f53ed3f
chore: Set resource requests and limits on every workload
2026-10-28 14:53:44 +05:30
whyredfire
1a79ef8776
chore(apps): Bump wireguard image to 15.5.0
2026-10-25 20:26:49 +05:30
whyredfire
379f87b379
feat(sealed-secrets): Disable key rotation
2026-10-14 19:25:31 +05:30
whyredfire
7c8bcd4ef7
feat(monitoring): Scrape node and pod metrics, add logs and Pi dashboards
2026-10-10 13:07:56 +05:30
whyredfire
01ddf5937b
feat(apps): Log in to wg-easy with authentik OIDC
2026-10-10 01:46:35 +05:30
whyredfire
40df38dd8d
feat(apps): Replace wireguard config with wg-easy behind authentik
2026-10-10 01:32:31 +05:30
whyredfire
923ecd3461
feat(apps): Add wireguard
2026-09-27 04:06:10 +05:30
whyredfire