notandClaude Opus 5.5 84cea6267e docs(arch): ADR-0035 — publish the stack through the existing labs Caddy (closes #177) ...

Records the decision #177 asked for, the other way round: the hypervisor has no
inbound path and the labs Caddy already holds 80/443 and the wildcard cert, so
the portals go through it over a reverse SSH tunnel instead of an in-cluster
edge. Covers keycloakUrl, KC_PROXY_HEADERS and the optional demo OTP autofill.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-09-25 15:05:38 +02:00

..

architecture

docs(arch): ADR-0035 — publish the stack through the existing labs Caddy (closes #177)

2026-09-25 15:05:38 +02:00

runbooks

docs(arch): ADR-0035 — publish the stack through the existing labs Caddy (closes #177)

2026-09-25 15:05:38 +02:00

demo-script.md

S-24/#25 · Helm chart + Kubernetes deployment, and Caddy for the portals (#166) (#167)

2026-09-10 08:53:58 +00:00

frontend-decisions.md

S-24/#25 · Helm chart + Kubernetes deployment, and Caddy for the portals (#166) (#167)

2026-09-10 08:53:58 +00:00

gitea-workflow.md

chore: contributor workflow — templates, git-cliff, gitea-workflow doc (closes #31) (#38)

2026-06-03 12:09:24 +00:00

index.md

docs(nav): publish every ADR and runbook, gated by a nav check (closes #169) (#172)

2026-09-18 12:55:20 +00:00

PRD.md

S-19a · ACL writes the RegisterRecord to Objecten on approval (closes #149) (#151)

2026-08-14 09:34:04 +00:00

synthetic-data.md

S-15c · Enforce MFA on the medewerker (Keycloak) realm (#158)

2026-09-04 08:27:52 +00:00