viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
infra/state/stacks
History
Viktor Barzin a0392a9617 fix(nextcloud): auto-sync DB password from Vault rotation into config.php 
Nextcloud persists dbpassword in config.php on its PVC and ignores
MYSQL_PASSWORD env var after initial install. When Vault rotates the
MySQL password, config.php goes stale causing HTTP 500 crash loops.

Adds a before-starting hook that patches config.php with the current
MYSQL_PASSWORD on every pod start. Combined with Stakater Reloader
annotation, the full rotation chain is now automated:
Vault rotates → ESO syncs Secret → Reloader restarts pod → hook
patches config.php → Nextcloud connects with new password.

Also fixes stale existingClaim (nextcloud-data-iscsi → nextcloud-data-proxmox).
2026-04-10 22:23:52 +01:00
..
actualbudget state(actualbudget): update encrypted state 2026-04-06 12:20:28 +03:00
affine state(affine): update encrypted state 2026-04-04 17:11:17 +03:00
authentik state(authentik): update encrypted state 2026-04-06 00:35:33 +03:00
blog state(blog): update encrypted state 2026-03-25 02:08:23 +02:00
changedetection state(changedetection): update encrypted state 2026-04-06 14:25:03 +03:00
city-guesser state(city-guesser): update encrypted state 2026-03-25 02:08:34 +02:00
claude-memory state: update encrypted terraform state 2026-04-06 00:37:58 +03:00
cnpg state(cnpg): update encrypted state 2026-03-21 11:22:33 +00:00
coturn state: update encrypted state for coturn, kms, tor-proxy, wireguard 2026-03-24 18:08:28 +02:00
crowdsec state(crowdsec): update encrypted state 2026-04-03 15:01:08 +03:00
cyberchef state(cyberchef): update encrypted state 2026-03-25 02:08:43 +02:00
dashy state(dashy): update encrypted state 2026-03-25 02:08:48 +02:00
dawarich state(dawarich): update encrypted state 2026-03-25 02:09:30 +02:00
descheduler state(descheduler): update encrypted state 2026-04-06 00:25:14 +03:00
diun state(diun): update encrypted state 2026-04-04 17:11:41 +03:00
ebook2audiobook state(ebook2audiobook): update encrypted state 2026-03-25 02:09:36 +02:00
echo state(echo): update encrypted state 2026-03-25 02:09:37 +02:00
excalidraw state(excalidraw): update encrypted state 2026-04-04 17:12:02 +03:00
external-secrets state(external-secrets): update encrypted state 2026-03-21 11:23:19 +00:00
f1-stream state(f1-stream): update encrypted state 2026-04-04 17:12:24 +03:00
foolery add foolery stack: agent orchestration UI on devvm [ci skip] 2026-04-10 00:21:59 +01:00
forgejo state(forgejo): update encrypted state 2026-04-04 16:15:43 +03:00
freedify state(freedify): update encrypted state 2026-03-28 16:05:11 +02:00
freshrss state(freshrss): update encrypted state 2026-04-04 17:43:50 +03:00
frigate state(frigate): update encrypted state 2026-04-04 17:42:59 +03:00
grampsweb state(grampsweb): update encrypted state 2026-04-04 17:24:48 +03:00
hackmd state(hackmd): update encrypted state 2026-04-04 17:12:44 +03:00
headscale state(headscale): update encrypted state 2026-04-08 08:18:03 +01:00
health state(health): update encrypted state 2026-04-04 17:25:24 +03:00
homepage state(homepage): update encrypted state 2026-03-25 02:07:37 +02:00
immich state(immich): update encrypted state 2026-04-06 22:11:17 +03:00
infra state: update encrypted terraform state 2026-04-06 00:37:58 +03:00
infra-maintenance state(infra-maintenance): update encrypted state 2026-03-25 03:02:12 +02:00
insta2spotify state: update encrypted terraform state 2026-04-06 00:37:58 +03:00
iscsi-csi state(iscsi-csi): update encrypted state 2026-03-21 11:30:32 +00:00
isponsorblocktv state(isponsorblocktv): update encrypted state 2026-04-04 17:13:03 +03:00
jsoncrack state(jsoncrack): update encrypted state 2026-03-25 02:10:23 +02:00
k8s-dashboard state(k8s-dashboard): update encrypted state 2026-03-25 02:10:26 +02:00
k8s-portal state(k8s-portal): update encrypted state 2026-03-25 02:10:28 +02:00
kms state(kms): update encrypted state 2026-03-25 02:10:30 +02:00
kyverno state(kyverno): update encrypted state 2026-04-05 23:28:46 +03:00
linkwarden state(linkwarden): update encrypted state 2026-03-28 14:55:55 +02:00
mailserver state(mailserver): update encrypted state 2026-04-06 13:17:27 +03:00
matrix state: update encrypted terraform state 2026-04-06 00:37:58 +03:00
meshcentral state(meshcentral): update encrypted state 2026-04-06 13:38:09 +03:00
metallb state(metallb): update encrypted state 2026-03-24 17:23:18 +02:00
metrics-server state(metrics-server): update encrypted state 2026-03-21 11:31:15 +00:00
n8n state(n8n): update encrypted state 2026-04-04 17:24:06 +03:00
navidrome state: update encrypted terraform state 2026-04-06 00:37:58 +03:00
netbox state(netbox): update encrypted state 2026-03-25 02:12:37 +02:00
networking-toolbox state(networking-toolbox): update encrypted state 2026-03-25 02:12:40 +02:00
nextcloud fix(nextcloud): auto-sync DB password from Vault rotation into config.php 2026-04-10 22:23:52 +01:00
nfs-csi state(nfs-csi): update encrypted state 2026-04-06 10:40:50 +03:00
novelapp state: update encrypted terraform state 2026-04-06 00:37:58 +03:00
ntfy state(ntfy): update encrypted state 2026-04-04 15:59:53 +03:00
nvidia state(nvidia): update encrypted state 2026-03-25 02:12:54 +02:00
ollama state(ollama): update encrypted state 2026-04-04 17:43:06 +03:00
onlyoffice state(onlyoffice): update encrypted state 2026-04-04 17:26:28 +03:00
openclaw state: update encrypted terraform state 2026-04-06 00:37:58 +03:00
osm_routing state(osm_routing): update encrypted state 2026-03-22 00:29:42 +02:00
owntracks state(owntracks): update encrypted state 2026-04-04 17:27:04 +03:00
paperless-ngx state(paperless-ngx): update encrypted state 2026-04-04 17:27:42 +03:00
phpipam state(phpipam): update encrypted state 2026-04-10 20:38:53 +00:00
platform state(platform): update encrypted state 2026-04-10 13:41:55 +00:00
plotting-book state: update encrypted terraform state 2026-04-06 00:37:58 +03:00
poison-fountain state(poison-fountain): update encrypted state 2026-03-25 02:13:15 +02:00
privatebin state(privatebin): update encrypted state 2026-04-04 17:28:31 +03:00
proxmox-csi state: update encrypted terraform state 2026-04-06 00:37:58 +03:00
pvc-autoresizer state: update encrypted terraform state 2026-04-06 00:37:58 +03:00
rbac state(rbac): add vabbit81 RBAC resources 2026-03-26 17:33:16 +02:00
real-estate-crawler state(real-estate-crawler): update encrypted state 2026-03-25 02:13:51 +02:00
redis state: update encrypted terraform state 2026-04-06 11:26:45 +03:00
reloader state(reloader): update encrypted state 2026-03-22 00:45:21 +02:00
resume state: update encrypted terraform state 2026-04-06 00:37:58 +03:00
reverse-proxy state(reverse-proxy): update encrypted state 2026-04-05 20:46:06 +03:00
rybbit state(rybbit): update encrypted state 2026-04-04 17:40:42 +03:00
sealed-secrets state(sealed-secrets): update encrypted state 2026-03-22 00:46:26 +02:00
send state(send): update encrypted state 2026-04-04 17:24:41 +03:00
servarr state(servarr): update encrypted state 2026-04-05 19:32:40 +03:00
shadowsocks state(shadowsocks): update encrypted state 2026-03-24 18:08:04 +02:00
speedtest state(speedtest): update encrypted state 2026-04-04 17:29:26 +03:00
status-page state(status-page): update encrypted state 2026-04-06 12:20:54 +03:00
stirling-pdf state(stirling-pdf): update encrypted state 2026-04-04 17:32:05 +03:00
tandoor state: update encrypted terraform state 2026-04-06 00:37:58 +03:00
terminal state(terminal): update encrypted state 2026-04-06 16:50:52 +03:00
tor-proxy state(tor-proxy): update encrypted state 2026-04-04 17:41:56 +03:00
trading-bot state(trading-bot): update encrypted state 2026-04-06 10:29:54 +03:00
traefik state(traefik): update encrypted state 2026-04-06 21:22:52 +03:00
travel_blog state(travel_blog): update encrypted state 2026-03-25 02:20:38 +02:00
tuya-bridge state(tuya-bridge): update encrypted state 2026-03-25 02:20:42 +02:00
uptime-kuma state(uptime-kuma): update encrypted state 2026-04-04 16:17:03 +03:00
url state(url): update encrypted state 2026-03-25 02:24:40 +02:00
vault state(vault): update encrypted state 2026-04-10 13:33:33 +00:00
vaultwarden state: update encrypted terraform state 2026-04-06 00:37:58 +03:00
vpa state(vpa): update encrypted state 2026-03-25 02:24:55 +02:00
wealthfolio state(wealthfolio): update encrypted state 2026-04-04 16:08:57 +03:00
webhook_handler state(webhook_handler): update encrypted state 2026-03-25 02:25:01 +02:00
whisper state(whisper): update encrypted state 2026-04-04 17:42:03 +03:00
wireguard state(shadowsocks): update encrypted state 2026-03-24 18:08:04 +02:00
woodpecker state(woodpecker): update encrypted state 2026-04-03 14:59:49 +03:00
xray state(xray): update encrypted state 2026-03-25 02:25:42 +02:00
ytdlp state(ytdlp): update encrypted state 2026-03-25 02:26:10 +02:00