5 Commits

Author	SHA1	Message	Date
tegwick	6ddf4e56b4	Add KeyCape login overlay gateway for OpenBao browser UI ... Streamline bao.coulomb.social login as "Sign in with KeyCape" via a versioned nginx gateway that injects overlay assets and proxies to OpenBao. Disable chart ingress in favor of the overlay ingress, wire make openbao-deploy, and add openbao-verify-login-overlay with upstream drift detection.	2026-06-19 20:28:16 +02:00
tegwick	423eccc8e9	feat(openbao): enable bao.coulomb.social ingress and Traefik middlewares ... Expose OpenBao UI via TLS ingress with rate-limit and HSTS middlewares. Track netkingdom OIDC mount in authenticated verify checks.	2026-06-18 01:23:02 +02:00
tegwick	f1336d5bcc	Record OpenBao audit rollout evidence	2026-06-01 22:30:35 +02:00
tegwick	087bb91b86	Configure OpenBao file audit declaratively	2026-06-01 22:12:23 +02:00
tegwick	980947894e	Added openbao secrets management and phaseout of bitnami for CloudNative PG	2026-05-18 11:53:59 +02:00