b52e584598
fix: handle HEAD requests to /identity for iOS app compatibility
2026-04-02 15:37:35 +08:00
d2ec622f5a
fix: ensure correct Content-Type for well-known endpoint
2026-04-02 15:28:55 +08:00
11af6bf3f2
fix: correct nginx proxy port to Vaultwarden's port 80
2026-04-02 15:25:56 +08:00
4b7a1f2bcf
fix: add nginx sidecar for Bitwarden well-known endpoint
...
This fixes iOS app connection issues by properly responding to
/.well-known/bitwarden/ endpoint which iOS clients use to identify
the server.
2026-04-02 15:24:27 +08:00
be3f2ffe5c
fix: use TCP probe for CodiMD health check (/healthz not available)
2026-04-01 17:57:07 +08:00
aaa7acb4ec
fix: use correct codimd image version 2.6.1 (alpine tag not available)
2026-04-01 17:54:34 +08:00
3bf3ddd306
feat: improve security and stability for Vaultwarden and CodiMD
...
Security:
- Move Vaultwarden ADMIN_TOKEN to Secret (was plaintext)
- Remove root user execution from CodiMD (runAsUser: 0)
- Use fixed image versions instead of latest tag
Stability:
- Add liveness/readiness probes to Vaultwarden, CodiMD, CodiMD DB
- Add resource requests/limits to all services
- Set appropriate memory/CPU constraints
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-04-01 17:52:30 +08:00
d8861031f6
fix: correct status.sh ingress command syntax
2026-04-01 16:49:19 +08:00
b86255e81f
feat: add adminer and vaultwarden apps, integrated from k8s-manifests
2026-04-01 16:46:33 +08:00
19342c6821
feat: add .gitignore and apps/template for new apps
2026-04-01 16:32:59 +08:00
2f04fa4473
Initial commit: k8s cluster manifests and scripts
2026-04-01 15:34:02 +08:00
