Commit Graph

7 Commits

Author SHA1 Message Date
b52e584598 fix: handle HEAD requests to /identity for iOS app compatibility 2026-04-02 15:37:35 +08:00
d2ec622f5a fix: ensure correct Content-Type for well-known endpoint 2026-04-02 15:28:55 +08:00
11af6bf3f2 fix: correct nginx proxy port to Vaultwarden's port 80 2026-04-02 15:25:56 +08:00
4b7a1f2bcf fix: add nginx sidecar for Bitwarden well-known endpoint
This fixes iOS app connection issues by properly responding to
/.well-known/bitwarden/ endpoint which iOS clients use to identify
the server.
2026-04-02 15:24:27 +08:00
3bf3ddd306 feat: improve security and stability for Vaultwarden and CodiMD
Security:
- Move Vaultwarden ADMIN_TOKEN to Secret (was plaintext)
- Remove root user execution from CodiMD (runAsUser: 0)
- Use fixed image versions instead of latest tag

Stability:
- Add liveness/readiness probes to Vaultwarden, CodiMD, CodiMD DB
- Add resource requests/limits to all services
- Set appropriate memory/CPU constraints

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-01 17:52:30 +08:00
d8861031f6 fix: correct status.sh ingress command syntax 2026-04-01 16:49:19 +08:00
b86255e81f feat: add adminer and vaultwarden apps, integrated from k8s-manifests 2026-04-01 16:46:33 +08:00