c311a6a3c9
All checks were successful
ci/woodpecker/push/default Pipeline was successful
macOS Safari's Add to Dock (and iOS/Android home-screen installs) fetch the app icon and web manifest without any session cookies, so the Authentik forward-auth 302 on tasks.viktorbarzin.me made Safari fall back to a letter monogram instead of the real icon. Viktor asked for an ingress carve-out so exactly these five static PWA assets are publicly fetchable: /apple-touch-icon.png, /favicon.png, /pwa-192x192.png, /pwa-512x512.png, /manifest.webmanifest. A second ingress_factory instance (auth=none, dns_type=none, same host) routes only those paths straight to the tasks service; the SPA shell and /api stay behind Authentik exactly as before. The new carve-out is also registered in the Authentik walling-off probe so a future regression (anything 302-ing these paths to Authentik again) alarms, and the service catalog entry records the exception. stacks/tasks/imports.tf adopts the live tasks resources into Terraform state first: the stack's first-ever apply (pipeline 477, 2026-07-03) died mid-apply after creating the resources but before the pg state write, leaving tasks.states empty — without the import blocks this (and every future) tasks apply would create-fail with 'already exists'. Same pattern as the monitoring alert-digest adoption. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| dashboards | ||
| server-power-cycle | ||
| alert_digest.py | ||
| alert_digest.tf | ||
| alloy.yaml | ||
| authentik_walloff_probe.tf | ||
| Dockerfile | ||
| goflow2.tf | ||
| grafana.tf | ||
| grafana_chart_values.yaml | ||
| idrac.tf | ||
| k8s-monitoring-values.yaml | ||
| loki.tf | ||
| loki.yaml | ||
| loki_ingress.tf | ||
| main.tf | ||
| prometheus.tf | ||
| prometheus_chart_values.tpl | ||
| prometheus_snmp_chart_values.yaml | ||
| pve_exporter.tf | ||
| snmp_exporter.tf | ||
| ups_snmp_values.yaml | ||