Commit Graph

  • e8c2cf37e9 Merge pull request 'docs: iac commit IDs after its history rewrite (ISO removed, content unchanged)' (#3) from iac-history-ids into main main thesabear 2026-10-16 22:47:12 +03:00
  • 10efff2298 docs: iac commit IDs after its history rewrite (ISO removed, content unchanged) iac-history-ids automation-bot 2026-10-16 22:46:46 +03:00
  • 503747ffb1 Merge pull request 'docs, stacks: Caddyfiles moved to a folder mount (conf/Caddyfile)' (#2) from caddy-folder-mount into main thesabear 2026-10-16 19:31:49 +03:00
  • ecbcbe693c docs, stacks: Caddyfiles moved to a folder mount (conf/Caddyfile) automation-bot 2026-10-16 19:30:23 +03:00
  • 41d5f12df0 Merge pull request 'docs: add Kodi <-> Music Assistant smart queue bridge writeup' (#1) from add-kodi-ma-bridge-doc into main thesabear 2026-10-16 12:35:08 +03:00
  • fa5cbc1ec5 docs: add Kodi <-> Music Assistant smart queue bridge writeup automation-bot 2026-10-16 12:33:33 +03:00
  • f85fce7202 gitleaks: ignore one checked, dead historical finding automation-bot 2026-10-11 11:06:48 +03:00
  • 0557bcc04b ci: run shared gitleaks secret scan automation-bot 2026-10-11 11:01:28 +03:00
  • a683feaa9f Add cheatsheets section (Proxmox CLI, zsh config reference) automation-bot 2026-10-04 13:45:32 +03:00
  • c8c56add40 docs: fix dashy-soc-board.md drift (Vault data-sourcing accuracy, Netbox->Proxmox channel, function size) automation-bot 2026-09-19 10:49:44 +03:00
  • 24df469a09 docs: finish iac-pipeline.md diagram fix (provisioning stage role count) automation-bot 2026-09-19 10:34:21 +03:00
  • e74e04955a docs: fix iac-pipeline.md drift (provisioning/compliance role counts, templates) automation-bot 2026-09-19 09:35:10 +03:00
  • a5254a95ac docs: fix observability.md - add missing 4th log fan-out (auditd) automation-bot 2026-09-19 09:28:11 +03:00
  • 8258339daf docs: fix notifications.md drift (netbox cleanup, switch rule count) automation-bot 2026-09-19 09:18:35 +03:00
  • 4d7ab28876 docs: re-verify orchestration.md, refresh timer example automation-bot 2026-09-19 09:12:29 +03:00
  • cb8e79ce19 docs: fix registry-and-build.md drift (host count, stack count, holdouts) automation-bot 2026-09-19 00:36:49 +03:00
  • c4b004722d docs: re-verify netbird-zero-trust.md, no content drift found automation-bot 2026-09-19 00:27:51 +03:00
  • e1c99737cf docs: secrets-and-pki.md - add missing NetBird row to consumer table automation-bot 2026-09-19 00:25:01 +03:00
  • 00f50ffdab docs: fix secret-distribution.md evidence command, bump verify automation-bot 2026-09-19 00:23:50 +03:00
  • c241ed618d docs: re-verify secrets-and-pki.md, no content drift found automation-bot 2026-09-19 00:19:40 +03:00
  • 08bdbfaa6a docs: security-monitoring.md - add second wazuh_agent_tuning incident, bump verify automation-bot 2026-09-19 00:13:42 +03:00
  • f6dbf8e25b docs: fix sso-and-identity.md drift (proxy provider count, git pull credential) automation-bot 2026-09-18 23:56:36 +03:00
  • 249ee949ed docs: re-verify dns-naming.md, no content drift found automation-bot 2026-09-18 23:36:52 +03:00
  • a1e5732d1f docs: fix disaster-recovery.md drift (Kopia stack count, stale evidence) automation-bot 2026-09-18 23:26:42 +03:00
  • 9be8e25c3b docs: fix cron-scheduler.md job-count drift (50->49, phantom PBS prune entry) automation-bot 2026-09-18 23:20:34 +03:00
  • 6b3bea7f6f docs: fix architecture-overview.md drift (WAN rule count, LAN enforcement mechanism) automation-bot 2026-09-18 11:48:37 +03:00
  • 6fb00e1444 orchestration: refresh for the public-docs-drift flow (14→15) automation-bot 2026-09-07 09:02:14 +03:00
  • e5b6e8a77d docs: add homelab-inventory — the machine-derived fleet inventory layer automation-bot 2026-09-07 08:22:29 +03:00
  • bcfcb0d1d5 docs: dashy-soc-board — add the flat-searchable-list widget shape (card [77]) automation-bot 2026-09-06 15:09:14 +03:00
  • f9737456a8 docs: orchestration — add homelab-inventory-sync flow (card [77]) automation-bot 2026-09-06 15:08:27 +03:00
  • 75e8b3f694 docs: add source-provenance comment to sso-and-identity (card [91] backfill 16/16) automation-bot 2026-09-06 11:50:26 +03:00
  • 99e7e1504f docs: add source-provenance comment to security-monitoring (card [91] backfill 15/16) automation-bot 2026-09-06 11:49:04 +03:00
  • 5c4d641b2e docs: add source-provenance comment to registry-and-build (card [91] backfill 14/16) automation-bot 2026-09-06 11:46:17 +03:00
  • 334dc9e027 docs: add source-provenance comment to orchestration (card [91] backfill 13/16) automation-bot 2026-09-06 11:44:35 +03:00
  • fecaef10e3 docs: add source-provenance comment to observability (card [91] backfill 12/16) automation-bot 2026-09-06 11:42:14 +03:00
  • 6d6b55077e docs: add source-provenance comment to notifications (card [91] backfill 11/16) automation-bot 2026-09-06 11:40:40 +03:00
  • efaf2455dd docs: add source-provenance comment to netbird-zero-trust (card [91] backfill 10/16) automation-bot 2026-09-06 11:37:00 +03:00
  • f49f65bbbd docs: add source-provenance comment to iac-pipeline (card [91] backfill 9/16) automation-bot 2026-09-06 11:35:10 +03:00
  • 3f4c45ccbe docs: add source-provenance comment to firewall-and-network (card [91] backfill 8/16) automation-bot 2026-09-06 11:32:23 +03:00
  • 33f1eeb942 docs: add source-provenance comment to dns-naming (card [91] backfill 7/16) automation-bot 2026-09-06 11:28:22 +03:00
  • 65f2bdb75e docs: add source-provenance comment to disaster-recovery (card [91] backfill 6/16) automation-bot 2026-09-06 11:27:18 +03:00
  • feeb4a540b docs: add source-provenance comment to dashy-soc-board (card [91] backfill 5/16) automation-bot 2026-09-06 11:24:25 +03:00
  • 397f11816d docs: add source-provenance comment to cron-scheduler (card [91] backfill 4/16) automation-bot 2026-09-06 11:18:38 +03:00
  • 014b2c4cb4 docs: add source-provenance comment to architecture-overview (card [91] backfill 3/16) automation-bot 2026-09-06 11:16:58 +03:00
  • e7f74e496e docs: add source-provenance comment to secret-distribution (card [91] backfill 2/16) automation-bot 2026-09-06 11:11:56 +03:00
  • 0801ce8566 docs: add source-provenance comment to secrets-and-pki (card [91] backfill 1/16) automation-bot 2026-09-06 10:57:31 +03:00
  • 942c59449f docs: refresh Dashy Vault panel screenshot post-root-token-retirement automation-bot 2026-09-05 13:27:31 +03:00
  • 63c16c3375 docs: refresh ACL policies screenshot with the vault-provisioner policy automation-bot 2026-09-05 12:49:48 +03:00
  • 19269e4d0f docs: update auth flows for the root-token retirement (card 59) automation-bot 2026-09-05 12:44:31 +03:00
  • bd0897a7c7 node-red: remove dead VAULT_TOKEN reference from secrets template automation-bot 2026-09-05 10:44:33 +03:00
  • 2c865f90f0 fix: redact live identity/CA specifics from today's SSH-CA command output automation-bot 2026-09-05 09:46:39 +03:00
  • ff3ca1d8f1 docs: correct the Secrets law's failure-behavior claim for the SSH exception automation-bot 2026-09-05 09:38:25 +03:00
  • 1ae3aee4d6 docs: add the SSH Certificate Flow as its own contract, not folded into #1 automation-bot 2026-09-05 09:36:19 +03:00
  • 91a7ec1e9e docs: document the Vault SSH certificate authority in secrets-and-pki automation-bot 2026-09-05 09:19:54 +03:00
  • 9fd60f3f3b orchestration.md: fix the Kestra identity claim, add live evidence automation-bot 2026-09-05 08:31:54 +03:00
  • d4f538f5e0 capitalize headings thesabear 2026-09-01 18:00:18 +03:00
  • f20ed10632 capitalize headings thesabear 2026-09-01 17:59:02 +03:00
  • 4c1b23a69c disaster-recovery.md: Layer 1 explicitly covers LXCs too now thesabear 2026-09-01 08:41:13 +03:00
  • ab60ddce67 security-monitoring.md: agent count and roster refreshed to 12 thesabear 2026-09-01 08:39:09 +03:00
  • fa0236016b firewall-and-network.md: fresh real evidence for the Docker-bypass gap thesabear 2026-09-01 08:35:28 +03:00
  • f69dc87460 architecture-overview.md: host count to 12, law 8 gets the mesh admin path thesabear 2026-09-01 08:32:45 +03:00
  • aad38e086c README.md: use a dedicated zero-trust diagram, stop reusing the doc's thesabear 2026-09-01 00:57:20 +03:00
  • 1d5b8ed65e README.md, netbird-zero-trust.md: bigger zero-trust section, expanded doc, drop over-specific personal-device detail thesabear 2026-09-01 00:51:07 +03:00
  • 685c82a6f9 netbird-zero-trust.md: remove the rollout-status section thesabear 2026-09-01 00:31:40 +03:00
  • 8ceadab38a netbird-zero-trust.md: new doc for the zero-trust mesh overlay thesabear 2026-09-01 00:21:06 +03:00
  • 2d6be37271 iac-pipeline.md: update for new Terraform LXC support thesabear 2026-08-31 23:59:36 +03:00
  • 6519a90db4 orchestration-flow-patterns.svg: pick up latest drawio edit, re-apply strip fix thesabear 2026-08-30 07:52:54 +03:00
  • 5e409d5510 assets: fix edge-label white-line rendering artifact in remaining 7 diagrams thesabear 2026-08-29 19:08:50 +03:00
  • 0d7c97ab37 orchestration-flow-patterns.svg: fix edge-label white-line rendering artifact thesabear 2026-08-29 09:27:13 +03:00
  • 6aa9117ad2 iac-pipeline.md: full 7-step audit thesabear 2026-08-29 08:21:38 +03:00
  • 57c494e354 notifications.md: full 7-step audit thesabear 2026-08-29 07:49:33 +03:00
  • d9e8b9edf9 observability.md: full 7-step audit, first pass this session thesabear 2026-08-28 23:44:06 +03:00
  • 8e0a840105 orchestration: add real evidence for hyper2 special case, self-update timer, and 2 real screenshots thesabear 2026-08-28 22:08:23 +03:00
  • c1c1d093af sso-and-identity: add real evidence for the 10-app native-OIDC table thesabear 2026-08-28 21:58:38 +03:00
  • cde2f8b9c5 security-monitoring: add real evidence for the queue-overflow fix and SCA score thesabear 2026-08-28 21:56:10 +03:00
  • f4ef56d229 secrets-and-pki: add real evidence for the asymmetric-trust and cert-renewal claims thesabear 2026-08-28 21:48:09 +03:00
  • 0186966476 secret-distribution: add real evidence for the shared-secret and admin-exception claims thesabear 2026-08-28 21:39:28 +03:00
  • c8413c1108 registry-and-build: add real evidence for the 36/41 count and mariadb-mirror mechanism thesabear 2026-08-28 21:36:04 +03:00
  • 4c63712e6a dns-naming: fix fabricated command syntax, add real reverse-zone screenshot thesabear 2026-08-28 21:29:23 +03:00
  • 169a294a00 dashy-soc-board: add the expanded Vault panel screenshot thesabear 2026-08-28 21:09:59 +03:00
  • 055dd3995f dashy-soc-board: fix fabricated grep pattern in the 14-sources evidence thesabear 2026-08-28 20:50:11 +03:00
  • a2313358d2 cron-scheduler: add the raw NocoDB table screenshot thesabear 2026-08-28 20:47:50 +03:00
  • 4938aef930 cron-scheduler: fix fabricated command syntax in evidence blocks thesabear 2026-08-28 20:44:56 +03:00
  • c245fc8a36 dashy-soc-board: add real evidence for the 'fourteen data sources' claim thesabear 2026-08-28 19:41:14 +03:00
  • 9936996116 cron-scheduler: add real evidence for two 'what we found' claims thesabear 2026-08-28 19:39:11 +03:00
  • dd05ecf0e8 orchestration: fix major mischaracterization - only 1 of 13 flows has a human gate thesabear 2026-08-28 13:11:37 +03:00
  • 5530e35720 sso-and-identity: remove Firefly III from native-OIDC table, verified wrong live thesabear 2026-08-28 12:49:35 +03:00
  • a93a75e9a4 registry-and-build: fix mischaracterized holdouts, add the real mirror-stack pattern thesabear 2026-08-28 12:34:06 +03:00
  • 0ecd2e6ba6 dns-naming: genericize the zone domains I missed in the evidence block thesabear 2026-08-28 12:20:07 +03:00
  • 6c8be5ea7b dns-naming: reverse zone was actually broken, not just stale docs - fixed live thesabear 2026-08-28 12:13:36 +03:00
  • 7db2abdaed dashy-soc-board: drop inaccurate cross-reference to architecture-overview.md thesabear 2026-08-28 11:42:52 +03:00
  • 566f5d9f92 cron-scheduler: drop PVE backup-disabled disclosure from public doc thesabear 2026-08-28 11:36:33 +03:00
  • 3562322d50 docs: rewrite disaster-recovery.md following the full standing process in order thesabear 2026-08-28 11:06:40 +03:00
  • ab1a2ece1a docs: reframe copy-prompt feature away from AI-debugging framing thesabear 2026-08-28 10:23:05 +03:00
  • 57e960908d update soc md thesabear 2026-08-28 10:19:16 +03:00
  • 001903ce32 docs: add real SOC Board screenshot and Copy Debug Prompt finding thesabear 2026-08-28 10:13:39 +03:00
  • 9368f26856 docs: rewrite dashy-soc-board.md with real verified evidence thesabear 2026-08-28 09:58:49 +03:00
  • 8781ce7c11 docs: rewrite dns-naming.md with real evidence and diagram thesabear 2026-08-28 09:08:06 +03:00
  • 3accb97ff9 docs: rewrite registry-and-build.md with real evidence and diagram thesabear 2026-08-28 08:33:37 +03:00
  • 8187e9c1b7 docs: update security-monitoring alert-flow diagram thesabear 2026-08-28 08:05:07 +03:00