- secret-oauth2.yaml: Cookie-Secret auf exakt 32 Bytes korrigiert
(openssl rand -base64 32 ergibt 44 Zeichen, nicht 32 raw bytes)
- web.yaml: PORT=3000 + HOSTNAME=0.0.0.0 explizit gesetzt, damit
envFrom gongme-env's PORT=3001 (fuer API) nicht uebernommen wird
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Pods im Cluster losen gongme.expertfab.de auf die interne
Traefik-LB-IP (10.42.71.60) auf, statt extern ueber die
OPNsense zu gehen. Analog zu den bestehenden Eintraegen
(docs, note, signing, auth, etc.).
Cloudflare A-Record (oeffentlich): gongme.expertfab.de → 109.230.227.34
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
- New k8s/joplin/ deployment for note.expertfab.de (Postgres + Server +
Traefik ingress with cert-manager), replicas=2 to match cluster size
- coredns-custom.yaml: route note.expertfab.de internally to Traefik LB
- Commit previously-built k8s manifests (documenso, erpnext oauth2-proxy,
paperless oauth2-proxy) that were running but not in git
- docs/access.md: add Joplin section and Documenso/Cloudflare entries
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Used by the bingx-trading deployment at trade.expertfab.de.
Full manifests in git.expertfab.de/expertfab/bingx-trading k8s/.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
