6 Commits

Include renames

Author	SHA1	Message	Date
Bot	5edebd977d	fix(traefik): remove tracked traefik.env — never commit secret-bearing env files ... The committed version contained a literal "***REDACTED***" placeholder as KEEPALIVED_PASSWORD, which was restored onto disk every time the real file was deleted or the local checkout re-synced from git. This caused VRRP auth to mismatch between keepalived-master and keepalived-backup (master picked up the broken committed value, backup retained a stale-but-correct value), producing a continuous "(VI_1) received an invalid passwd!" flood and VIP instability. traefik.env is now rendered fresh from traefik.env.template by deploy/provision-stack.py on every provisioning run and never committed.	2026-09-11 22:38:39 -07:00
Bot	ffec3ea5b7	feat(traefik): add authoritative env template for manifest-driven provisioning	2026-09-11 22:38:38 -07:00
admin	44babb6a22	Fix YAML alias-scanner crash: quote KEEPALIVED_PASSWORD/KEEPALIVED_VIRTUAL_IPS env values ... mount-guard.py failed with "expected alphabetic or numeric character, but found '*'" during rendering. Root cause: KEEPALIVED_PASSWORD and KEEPALIVED_VIRTUAL_IPS were interpolated unquoted; when the live secret value happens to start with '*', YAML's scanner parses it as an alias reference (*anchor) instead of literal text. KEEPALIVED_UNICAST_PEERS on the adjacent line was already quoted for the same reason (starts with '#') - this brings the other two env values in line with that existing convention. Also noted (not fixed here): live traefik-certs-dumper service is running v2.10.0 while this file already pins v2.11.4 - redeploy needed separately to pick that up.	2026-08-29 14:03:36 -07:00
AVB	10c35138db	Bump traefik-certs-dumper:v2.10.0 to 2.11.4	2026-08-29 13:56:35 -07:00
admin	c2069e3e0d	feat(traefik): migrate to folder-based stack layout	2026-07-25 22:19:26 -07:00
admin	6caa7f0a33	feat(traefik): migrate to folder-based stack layout	2026-07-25 22:19:25 -07:00