chrisfu e014fd5b71 feat(k3s): add pg.prole.org as CNPG postgres endpoint with split-horizon DNS ... - knoe-db.yaml: switch to CNPG-managed TLS cert with serverAltDNSNames (pg.prole.org + knoe-db-rw cluster service) — removes static serverTLSSecret/serverCASecret - dns.yml: add pg.prole.org A record to prole_k3s_dns_records (10.0.0.3, 10.0.0.6) for Ansible-managed split-horizon DNS via Samba AD DC - k3s.cfg: align KNOE_HOME paths to ~/dev/prole, add PROLE_KDC_* vars, remove hardcoded KUBECTL_CONTEXT (kubeconfig current-context is authoritative) - prod.cfg: add PROLE_KDC_STORAGE_CLASS = prole-iscsi - onepassword.py: skip vault check gracefully when no 1Password session active (non-TTY) - CLAUDE.md: document production postgres connection string and DNS/CA cert ops Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>		2026-05-14 22:46:46 -07:00
..
group_vars	feat(k3s): add pg.prole.org as CNPG postgres endpoint with split-horizon DNS	2026-05-14 22:46:46 -07:00
host_vars	feat(certs): add acme.sh DNS-01 role and cert-manager playbook for LE	2026-05-06 14:09:28 -04:00
hosts.ini	fix(inventory): specify ssh key for zinfandel — non-default key name	2026-05-09 22:42:26 -07:00