group-services #24

Merged
max merged 7 commits from group-services into master 2026-08-10 05:53:06 +00:00
Owner
No description provided.
Add return types and parameter types to the deployment helper functions.
Connect Caddy to each service network. Proxy containers by name and remove the redundant HTTP host ports. Keep protected host services behind Pomerium.
Allow the Cockpit session WebSocket and preserve the public host header. Keep Pocket ID authentication before the Cockpit user login.
refactor(config): simplify generated service files
All checks were successful
Gitleaks Security Audit / Gitleaks Scan (push) Successful in 9s
Pyinfra Lint / lint (pull_request) Successful in 7s
2db89247bc
Use Jinja templates for configuration that has conditions or loops. Use multiline literals for small files. Define Forgejo runner labels directly in its configuration.
refactor(inventory): merge group services into hosts
All checks were successful
Gitleaks Security Audit / Gitleaks Scan (push) Successful in 5s
Pyinfra Lint / lint (pull_request) Successful in 7s
a10e38e8d2
Define all services in host_services. Remove the separate group service aggregation.
Publish ASF and Backrest on their native loopback ports. Use Forgejo rootless SSH port 2222 behind host port 23. Remove the redundant inventory values.
refactor(pomerium): isolate protected service routes
All checks were successful
Pyinfra Lint / lint (pull_request) Successful in 8s
Gitleaks Security Audit / Gitleaks Scan (push) Successful in 6s
Pyinfra Lint / lint (push) Successful in 9s
bca2664a52
Connect Pomerium to each protected container network. Bind host services to the private Pomerium gateway. Reject an invalid service order before deployment. Use the default Caddy forwarding headers.
max merged commit bca2664a52 into master 2026-08-10 05:53:06 +00:00
max deleted branch group-services 2026-08-10 05:53:06 +00:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
max/ansible!24
No description provided.