Commit Graph

14 Commits

Author SHA1 Message Date
67d41fa688 feat: add CodiMD database port-forward helper scripts
Add three scripts to simplify CodiMD database access via port-forward:
- db-port-forward.sh: Start SSH tunnel and kubectl port-forward
- db-port-forward-stop.sh: Stop port-forward processes
- db-status.sh: Check port-forward status

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-07 12:06:47 +08:00
a0e20877a2 fix: correct ingress YAML indentation 2026-04-07 07:36:27 +08:00
0de5e96f93 revert: restore Vaultwarden to original working configuration
- Remove nginx sidecar (was causing compatibility issues)
- Restore service targetPort to 80
- Use latest tag instead of fixed version
- Remove health probes
- Restore simple configuration

User will reset data by deleting PVC.
2026-04-07 07:35:57 +08:00
b52e584598 fix: handle HEAD requests to /identity for iOS app compatibility 2026-04-02 15:37:35 +08:00
d2ec622f5a fix: ensure correct Content-Type for well-known endpoint 2026-04-02 15:28:55 +08:00
11af6bf3f2 fix: correct nginx proxy port to Vaultwarden's port 80 2026-04-02 15:25:56 +08:00
4b7a1f2bcf fix: add nginx sidecar for Bitwarden well-known endpoint
This fixes iOS app connection issues by properly responding to
/.well-known/bitwarden/ endpoint which iOS clients use to identify
the server.
2026-04-02 15:24:27 +08:00
be3f2ffe5c fix: use TCP probe for CodiMD health check (/healthz not available) 2026-04-01 17:57:07 +08:00
aaa7acb4ec fix: use correct codimd image version 2.6.1 (alpine tag not available) 2026-04-01 17:54:34 +08:00
3bf3ddd306 feat: improve security and stability for Vaultwarden and CodiMD
Security:
- Move Vaultwarden ADMIN_TOKEN to Secret (was plaintext)
- Remove root user execution from CodiMD (runAsUser: 0)
- Use fixed image versions instead of latest tag

Stability:
- Add liveness/readiness probes to Vaultwarden, CodiMD, CodiMD DB
- Add resource requests/limits to all services
- Set appropriate memory/CPU constraints

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-01 17:52:30 +08:00
d8861031f6 fix: correct status.sh ingress command syntax 2026-04-01 16:49:19 +08:00
b86255e81f feat: add adminer and vaultwarden apps, integrated from k8s-manifests 2026-04-01 16:46:33 +08:00
19342c6821 feat: add .gitignore and apps/template for new apps 2026-04-01 16:32:59 +08:00
2f04fa4473 Initial commit: k8s cluster manifests and scripts 2026-04-01 15:34:02 +08:00