notandClaude Opus 5 399d110663 docs(arch): ADR-0035 and the runbook section for publishing the stack (refs #177) ...

The ADR records why the edge is in the cluster rather than on the Fedora host —
routing and certificates should be state a `helm upgrade` can see — and the
three costs that buys: the host forward nobody in the cluster can repair, the
Let's Encrypt rate limit that makes `persistence.storageClass` non-optional, and
publishing behandel and beheer to the internet behind synthetic accounts.

Runbook §10 is the operational half: the five DNS records, the two firewalld
rules (including the masquerade that makes the return path work), and the
symptoms each missing piece produces.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-09-18 16:30:38 +02:00

..

architecture

docs(arch): ADR-0035 and the runbook section for publishing the stack (refs #177)

2026-09-18 16:30:38 +02:00

runbooks

docs(arch): ADR-0035 and the runbook section for publishing the stack (refs #177)

2026-09-18 16:30:38 +02:00

demo-script.md

S-24/#25 · Helm chart + Kubernetes deployment, and Caddy for the portals (#166) (#167)

2026-09-10 08:53:58 +00:00

frontend-decisions.md

S-24/#25 · Helm chart + Kubernetes deployment, and Caddy for the portals (#166) (#167)

2026-09-10 08:53:58 +00:00

gitea-workflow.md

chore: contributor workflow — templates, git-cliff, gitea-workflow doc (closes #31) (#38)

2026-06-03 12:09:24 +00:00

index.md

docs(nav): publish every ADR and runbook, gated by a nav check (closes #169) (#172)

2026-09-18 12:55:20 +00:00

PRD.md

S-19a · ACL writes the RegisterRecord to Objecten on approval (closes #149) (#151)

2026-08-14 09:34:04 +00:00

synthetic-data.md

S-15c · Enforce MFA on the medewerker (Keycloak) realm (#158)

2026-09-04 08:27:52 +00:00