tommy 0f3973023a gluetun-pia: CA-pinned regen + CA-aware region auto-pick (fix legacy-CN break) ...

Replaces the Go pia-wg-config (Go 1.23 rejects PIA legacy-CN no-SAN certs) with
PIA's official CA-pinned curl flow. Adds CA-aware region auto-pick so ExpressVPN-CA
migrated regions (e.g. us_chicago) auto-skip; region moved to us_denver. Tunnel
restored + egress verified 2026-06-30.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-30 22:01:16 -05:00

authelia

Add Authelia config

2026-03-12 21:01:04 -05:00

beast/nut

docs: Phase 5 — incident log, maintenance runbook, NUT config archive

2026-05-06 21:25:49 -05:00

compute3

Add Compute3 PVE storage config

2026-03-11 22:25:08 -05:00

frigate

Add Frigate config files

2026-03-12 21:07:53 -05:00

gluetun-pia

gluetun-pia: CA-pinned regen + CA-aware region auto-pick (fix legacy-CN break)

2026-06-30 22:01:16 -05:00

ha

ha: add universal media-partition low-space guard for Frigate

2026-06-27 21:33:28 -05:00

homepage

homepage: read HA token from env var; stop committing it in plaintext

2026-06-27 22:01:27 -05:00

monitoring

monitoring: off-host Prometheus dead-man's-switch watchdog (Pi .227)

2026-06-30 21:58:57 -05:00

observability/prometheus

observability: fix container memory alerts to use working set (C-02)

2026-06-07 15:56:07 -05:00

pbs

pbs: rewrite zfs-health-check.sh, enable textfile collector

2026-05-05 19:44:36 -05:00

runbooks

runbooks: RB-002 total Traefik 403 — CrowdSec SQLite journal lock + WAL fix

2026-05-23 22:23:16 -05:00

traefik

traefik: add cert-expiry-check.sh with Prometheus textfile output

2026-05-06 05:34:31 -05:00

.gitignore

homepage: read HA token from env var; stop committing it in plaintext

2026-06-27 22:01:27 -05:00

jobs.cfg

Initial commit - PVE storage and backup job configs

2026-03-11 22:10:04 -05:00

storage.cfg

Initial commit - PVE storage and backup job configs

2026-03-11 22:10:04 -05:00

S

Description

Proxmox and infrastructure configs

393 KiB

Languages

Shell 98.6%

Dockerfile 1.4%