il
66bcca1858
2026-SEP-16
2026-09-16 22:52:22 +09:00
il
99536c5355
2026-SEP-09
2026-09-09 23:13:28 +09:00
il
9226043696
2026-AUG-29
2026-08-29 20:31:53 +09:00
il
ea8dfc8c20
2026-AUG-27
2026-08-27 09:14:49 +09:00
il
8bf9d92f7b
2026-AUG-25
2026-08-25 23:08:55 +09:00
il
56fb5716b5
2026-AUG-23
2026-08-23 21:55:12 +09:00
il
ada7e751d8
2026-AUG-21.1
2026-08-21 14:54:09 +09:00
il
fe2357ddb2
2016-AUG-21
2026-08-21 13:07:52 +09:00
il
5525f7cf85
2026-JUL-31
2026-07-31 23:54:37 +09:00
il
3a38271969
feat(papra, romm): add feature
2026-07-09 12:22:54 +09:00
il
e0df8cfba5
feat(mastodon): release mastodon
2026-07-05 23:25:42 +09:00
il
3c8469e604
feat(smartctl): add smartctl exporter
2026-06-30 15:57:29 +09:00
il
88e85fff56
refactor(dns): set source of dns domain on fw.yaml
2026-06-29 11:46:53 +09:00
il
5ccb60bd2a
feat(snappymail): update snappymail
2026-06-26 16:07:59 +09:00
il
a49cdcb9d1
refactor(repo): update dependency and abstract variables
2026-06-25 16:56:11 +09:00
il
a2334bb236
feat(maddy): add mail stack
2026-06-25 15:17:35 +09:00
il
fb2578d28a
refactor(ldap, grafana, nextcloud): clarify dependency on service file
2026-06-25 10:58:07 +09:00
il
24e4e863fa
refactor(postgresql): improve restore sequence
2026-06-25 10:28:22 +09:00
il
b499fcb78a
refactor(ldap): fix ldap binding range
2026-06-25 09:28:34 +09:00
il
47d437375b
feat(kopia): add restore procedure
2026-06-24 18:48:00 +09:00
il
278054a65f
feat(homepage): add homepage stack
2026-06-24 18:47:24 +09:00
il
d6250d90c9
refactor(repo): update version and domain
2026-06-24 13:17:49 +09:00
il
4a20a556b0
refactor(observation): update alloy, grafana, prometheus
2026-06-24 13:17:15 +09:00
il
fe146b25c7
bk node and refactor
2026-06-23 10:57:10 +09:00
il
927b5b4934
feat(repo): IaaS baseline
2026-06-17 13:17:24 +09:00
il
a6bba986a5
fix(crowdsec): update whitelist.yaml to prevent false positive
...
false positive:
- outline session problem (LePresidente/http-generic-401-bf)
2026-05-17 00:00:46 +09:00
il
24eff8f3eb
chore(outline): fix HSTS annotation typo
2026-05-16 21:16:28 +09:00
il
9be4276676
feat(memos): release memos
...
deployment notes:
- compare to Affine, maybe outline + memos can be substituted for affine
2026-05-16 21:04:53 +09:00
il
1256122081
feat(outline): release outline
...
deployment notes:
- compare to Affine (Affine is heavy and their whtieboard and canvas is not used enough)
- don't restart this when it initiates, redis lock causes failure
2026-05-16 20:56:43 +09:00
il
f28661e664
refactor(convention): add existing 'site' tag to convention
2026-05-15 10:16:36 +09:00
il
a09712c142
refactor(script): update edit_secret.sh to optimize log print logic
2026-05-15 10:12:42 +09:00
il
a7e2320b21
chore(script): archive a extract_secret.sh script
...
archived stack: extract_secret.sh
2026-05-15 09:19:59 +09:00
il
24c83029e9
refactor(playbook): update convention and remove deprecated tag
...
update notes:
- remove tags 'update', 'upgrade' from convention.yaml
- remove tags 'update' from playbooks/app/site.yaml
2026-05-15 09:04:51 +09:00
il
ac64b3c04e
docs(readme): add RPO on readme
2026-05-13 17:12:59 +09:00
il
26d696f813
refactor(all): update hardcoded internal domain to ansible variable
2026-05-12 08:08:04 +09:00
il
1096981ef2
feat(paperless): change paperless OCR engine model from tesseract_fast to tesseract_best
2026-05-12 08:00:37 +09:00
il
e1936b494d
fix(crowdsec): update whitelist.yaml to prevent false positive
...
false positive:
- nextcloud chunk problem (crowdsecurity/http-crawl-non_statics)
- change expression 'chunks.mjs' to 'chunk.mjs'
2026-05-11 19:40:50 +09:00
il
0afc841b69
chore(chromium): archive a removed stack from console
...
archived stack: chromium
2026-05-11 19:37:25 +09:00
il
a39122eb4b
fix(crowdsec): update whitelist.yaml to prevent false positive
...
false positive:
- nextcloud chunk problem (crowdsecurity/http-crawl-non_statics)
2026-05-11 19:34:22 +09:00
il
0f4da0bb53
feat(backup): add archiving of runtime binary packages
2026-05-11 01:37:15 +09:00
il
1dd1c53e2a
feat(backup): add archiving of deployed container images
2026-05-11 00:52:28 +09:00
il
530407c162
refactor(all): update hardcoded timezone 'Asia/Seoul' to ansible variable 'timezone'
2026-05-10 18:44:28 +09:00
il
11ab2f5205
fix(sure): correct task name and subuid variable reference
2026-05-10 14:39:54 +09:00
il
4527e39d0f
chore(app): archive removed stacks from app
...
archived stacks:
- actual-budget
- ezbookkeeping
- opencloud
- trilium
- vikunja
- wikijs
2026-05-10 00:07:51 +09:00
il
02fa912cb1
feat(trilium): release trilium
...
deployment notes:
- oidc error (users cannot access at once, it needs login twice when using oidc
2026-05-09 22:38:57 +09:00
il
aceef4bdaa
refactor(authelia): update authelia.yaml.j2 to fix redirect_uris from hardcoded uris to ansible variables
2026-05-09 21:44:11 +09:00
il
64aad4fcf0
docs(all): fix markdown syntax and snippets
2026-05-09 20:54:32 +09:00
il
81244d55a7
feat(wiki.js): release wiki.js
...
deployment notes:
- use this as personal/family wiki system
- compare to affine / memos and triliumNext
2026-05-09 17:50:05 +09:00
il
1cfd024285
refactor(x509-exporter): update notification to restart x509-exporter when its config.yaml is changed
2026-05-09 17:42:35 +09:00
il
26115c5660
feat(redis): update redis from 8.6.1 to 8.6.3
...
update notes:
- run 'ansible-playbook playbooks/app/site.yaml --tags "site"' so that update all redis at onece
2026-05-09 13:55:28 +09:00
il
acef35ca8b
feat(postgresql): update postgresql and vectorchord extension
...
update notes:
- update postgresql version from 18.2 to 18.3
- update vectorchord version from 0.5.3 to 1.1.1
- add update flow and notice to postgresql.md
2026-05-09 13:54:10 +09:00
il
b531170bd7
feat(vaultwardne): update vaultwarden from 1.35.8 to 1.36.0
2026-05-09 12:56:22 +09:00
il
ad586c3cd3
feat(grafana): update grafana from 12.3.3 to 13.0.1
2026-05-09 12:50:36 +09:00
il
6dfef08f7b
feat(prometheus): update prometheus from v3.9.1 to v3.11.3
2026-05-09 12:44:44 +09:00
il
934dd314a8
feat(x509-exporter): update x509-exporter from 3.21.0 to 4.1.0
...
update notes:
- '--listen-address' and '--watch-dir' cli flags are deprecated
- add '--config' cli flag and config.yaml
2026-05-09 12:44:05 +09:00
il
2529a918df
feat(loki): update loki version from 3.6.5 to 3.7.1
2026-05-09 12:17:16 +09:00
il
7dfa20d3dd
feat(ldap): update lldap version from 0.6.2 to 0.6.3
2026-05-09 11:56:19 +09:00
il
329620c7d7
feat(alloy): update alloy version from 1.13.0 to 1.16.1
2026-05-09 11:52:25 +09:00
il
f820e89cf6
refactor(roles): update binary application installation flow
...
update notes:
- keep set_cli_tools responsible only for console CLI tools
- download and install kopia from the kopia role
- download and install blocky from the blocky role
- download and install alloy from the alloy role
- reduce console artifact staging for service binaries
2026-05-09 10:46:29 +09:00
il
a05951f883
fix(crowdsec): optimize whitelist expressions
...
update notes:
- add http_status and http_verb for each expressions (actual budget, immich, opencloud)
- fix crowdsec and issues documents
2026-05-07 10:32:11 +09:00
il
b404a9e459
fix(crowdsec): update whitelist.yaml to prevent false positive
...
false positive:
- nextcloud thumbnail/preview 404 problem (crowdsecurity/http-probing)
2026-05-07 10:27:34 +09:00
il
3b4b56f53f
fix(nftables): update fw nftables to allow vpn connection regardless of crowdsec ban
2026-05-07 09:22:49 +09:00
il
f697715065
feat(sure): release sure (we-promise/sure)
...
deployment notes:
- let's try three of budget apps, actual budget, ezbookkeeping, and sure
2026-05-06 18:52:31 +09:00
il
be7f215380
feat(ezbookkeeping): release ezbookkeeping
...
deployment notes:
- use ezbookkeeping for budget
- compare to actual budget
- it has no RBAC and sharing budget, try to sure (we-promise/sure)
2026-05-06 15:56:19 +09:00
il
26e0fe4f8b
docs(ADR): update ADR 007 - backup to add checking rule and flows
2026-05-06 14:30:25 +09:00
il
2bb1f015e0
fix(kopia): update the bound home path from %h to ansible variable
...
update note:
- hotfix
- backups haven't run since commit '9f236b6fa5'
- the root service unit's %h always indicates root's home path
- backup service is verified
2026-05-06 14:06:22 +09:00
il
0f546e13b3
fix(btrfs): update btrfs scrub path
...
update notes:
- from '{{ node['home_path'] }}/data' to '{{ storage['btrfs']['mount_point'] }}'
2026-05-06 10:33:57 +09:00
il
ba8b312bf2
feat(btrfs): update btrfs scrub service and timer on app vm
2026-05-06 08:15:53 +09:00
il
6fcedd9162
feat(collabora): release collabora
...
deployment note:
- link to nextcloud
- document opening is verified (including korean fonts)
2026-05-05 21:20:31 +09:00
il
6ca4f61d50
docs(nextcloud): update security warning decisions and background job annotation
...
update notes:
- trusted_proxies warning
- HSTS option warning
- background job mode annotation
2026-05-05 20:09:00 +09:00
il
15c09cb899
docs(nextcloud): update how to disable auto generated contacts from nextcloud account
2026-05-03 12:05:11 +09:00
il
880857a70a
fix(crowdsec): update parser 'crowdsecurity/nextcloud-whitelist'
...
update note:
- deprecate custom whitelist expression
- apply 'crowdsecurity/nextcloud-whitelist' parser
2026-05-03 07:19:59 +09:00
il
70bf539546
docs(issues): fix crowdsec whitelist regex to whitelist expressions
2026-05-02 20:40:10 +09:00
il
5dd38b7e49
fix(crowdsec): update whitelist.yaml to prevent false positive
...
false positive:
- chunk problems (crowdsecurity/http-crawl-non_statics)
- directory upload 404 problem (crowdsecurity/http-probing)
2026-05-02 20:38:48 +09:00
il
33d94211d1
docs(issues): fix crowdsec command 'cscli decision list' to 'cscli decision delete'
2026-05-02 19:46:51 +09:00
il
278dd3cebe
feat(nextcloud): release nextcloud
...
deployment note:
- use nextcloud for groupware
- consider replacing vikunja and opencloud
2026-05-02 19:22:05 +09:00
il
d1dcb1984a
feat(vaultwarden): update vaultwarden version from 1.35.4 to 1.35.8
2026-04-30 10:03:33 +09:00
il
37c986177b
feat(blocky): update blocky version from 0.28.2 to 0.29.0
2026-04-30 10:01:18 +09:00
il
17326b1b15
feat(step-ca): update step-ca version from 0.29.0 to 0.30.2
...
update note:
- step-ca container doesn't support $PWDPATH anymore
- add --password-file argument to exec
2026-04-30 09:56:22 +09:00
il
88e1383202
feat(x509-exporter): update x509-exporter version from 3.19.1 to 3.21.0
2026-04-30 09:19:42 +09:00
il
c9b4707cb2
refactor(x509-exporter): change handler from enable to restart
2026-04-30 09:18:44 +09:00
il
da9c610426
feat(caddy): update caddy version from 2.10.2 to 2.11.2
...
update note:
- https upstream Host rewrite is automated
- Caddyfile already defines Host rewrite explicitly
2026-04-30 09:09:40 +09:00
il
c1a6da2aa8
feat(authelia): update authelia version from 4.39.15 to 4.39.19
2026-04-30 09:07:16 +09:00
il
f1cd8c9a60
feat(gitea): update gitea version from 1.25.5 to 1.26.1
...
deployment note:
- stop gitea container
- create manual database backup
- update gitea
2026-04-30 08:28:51 +09:00
il
6010230a14
feat(paperless): update paperless version from 2.20.13 to 2.20.15
2026-04-30 08:10:50 +09:00
il
c3d8b62504
feat(opencloud): update opencloud version from 4.0.4 to 4.0.6
2026-04-30 08:03:33 +09:00
il
4a409e37e9
docs(issues): fix service name in timeline
2026-04-28 11:19:50 +09:00
il
cb4d17f99e
docs(issues): add the past issues which existed before tracking issues
...
add crowdsec false positive issues
fix the file name of affine android oidc issues
2026-04-27 19:50:04 +09:00
il
9569492e42
docs(issues): add affine android OIDC sign-up failure issue
...
start tracking service issues on the docs/issues directory
2026-04-20 17:55:26 +09:00
il
2a7b234f4e
docs(affine): update flags on affine doc to check blocking guest user
2026-04-20 15:53:27 +09:00
il
621d5310a3
feat(immich): update immich version from 2.7.4 to 2.7.5
2026-04-17 14:16:44 +09:00
il
6377a56d95
refactor(ldap): Add annotation in ldap roles file
...
the reason why task doesn't use init logic which uses .init file
2026-04-17 14:10:36 +09:00
il
dbd72f43a4
refactor(postgresql): update postgresql roles and handler to optimize init check logic
2026-04-17 13:58:22 +09:00
il
9f236b6fa5
refactor(kopia): fix the homepath from hardcoded path to %h the systemd specifier
2026-04-14 07:44:39 +09:00
il
b4a0874deb
refactor(authelia): fix publish port from hardcoded number to variable
2026-04-14 07:43:12 +09:00
il
c51216ff9b
refactor(gitea): fix publish port from hardcoded number to varible
2026-04-14 07:42:32 +09:00
il
7debdfcb93
fix(alloy): fix log level parser
...
- remove parser for JSON and logfmt, and add regex expression to extract the level of log
2026-04-13 10:42:10 +09:00
il
da016343c0
feat(alloy): add json parser to categorize log level
2026-04-12 14:09:44 +09:00
il
bf749ebbde
chore(chromium): delete the roles from the console playbook
2026-04-12 10:58:07 +09:00
il
41d509a49d
feat(immich): update immich version from 2.6.3 to 2.7.4
...
- IMMICH_HELMET_FILE environment can set CSP from v2.7.0
2026-04-12 10:45:59 +09:00
il