bsc-brooks-security.com

chore(edge): drop the import blocks now that both resources are in state

#183

by LittleSeneca was merged 2026-10-21 13:49:14 -07:00

main

chore/edge-drop-import-blocks

1

fix(edge): adopt the two out-of-band resources the apply collided with

#182

by LittleSeneca was merged 2026-10-21 13:33:39 -07:00

main

fix/edge-adopt-out-of-band-resources

1

feat(edge): carry more than one tunnel, and serve Gitea over the second

#181

by LittleSeneca was merged 2026-10-21 13:21:01 -07:00

main

feat/edge-add-gitea-vhost

2

docs(dex): offline_access is load-bearing; drop the groups scope

#180

by LittleSeneca was merged 2026-10-21 13:52:37 -07:00

main

docs/dex-offline-access

fix(edge): quote SERVICE_HOSTNAMES so systemd keeps every hostname

#179

by LittleSeneca was merged 2026-10-21 13:56:38 -07:00

main

fix/edge-renew-env-quoting

1

fix(openbao): a real policy for the OIDC role, a KV mount, and a bound role

#178

by LittleSeneca was merged 2026-10-21 11:26:19 -07:00

main

fix/openbao-oidc-rbac

ops(edge): script to add a vhost for a service the running edge does not know

#177

by LittleSeneca was closed 2026-10-21 13:50:27 -07:00

main

ops/edge-add-service-vhost

2

docs(spec): Headlamp login via Dex as the cluster's OIDC provider

#176

by LittleSeneca was merged 2026-10-21 11:14:17 -07:00

main

spec/headlamp-dex-oidc

2

docs(openbao): the OAuth client needs two redirect URIs, not one

#175

by LittleSeneca was merged 2026-10-21 13:57:33 -07:00

main

docs/openbao-oauth-redirects

fix(openbao): declare the audit device in the server config, not via the API

#174

by LittleSeneca was merged 2026-10-21 10:49:39 -07:00

main

fix/openbao-declarative-audit

1

feat(openbao): open-source secrets manager on k3s — Stage 1 (origin)

#173

by LittleSeneca was merged 2026-10-21 10:30:54 -07:00

main

feat/openbao-secrets-manager

4

fix(edge): make the bootstrap complete — credential scoping, lego URL, and three silent failures

#172

by LittleSeneca was closed 2026-10-21 10:33:06 -07:00

main

fix/edge-bootstrap-lego-url

6 conflicting files

4

fix(edge): derive the AZ from instance-type offerings instead of sort order

#171

by LittleSeneca was merged 2026-10-21 07:34:24 -07:00

main

fix/edge-az-selection

1

fix(edge): the security group description used a character EC2 rejects

#170

by LittleSeneca was merged 2026-10-21 07:19:26 -07:00

main

fix/edge-sg-description

1

feat(edge): public edge for home-hosted services (AWS VPS + WireGuard, first vhost = Invicti console)

#169

by LittleSeneca was merged 2026-10-21 07:10:52 -07:00

main

feat/edge-vps

2

feat(invicti): AWS public edge for the Invicti console (VPS + WireGuard to devbox)

#168

by LittleSeneca was closed 2026-10-21 07:04:59 -07:00

main

feat/invicti-edge-vps

4 conflicting files

3

feat(dns): add invicti.brooks-security.com A record (devbox tailnet IP)

#167

by LittleSeneca was merged 2026-10-19 19:26:52 -07:00

main

feat/dns-invicti

1

fix(site): presales is current, and the site stops offering relocation

#166

by LittleSeneca was merged 2026-09-28 08:02:46 -07:00

main

site/fix-bio-and-relocation

fix(home): the row that takes focus back draws no focus ring

#165

by LittleSeneca was merged 2026-09-27 18:59:47 -07:00

main

fix/home-index-return-focus-ring

feat(portfolio): Inspector Triage joins the Security writeup

#164

by LittleSeneca was merged 2026-09-27 18:50:57 -07:00

main

site/inspector-triage