dank 882a9f6808 docs: own the un-guard procedure and the browser-only law ...

AGENTS.md states the three exposure postures and why the guard chain cannot front a
non-browser client. Infrastructure/Caddy.md gains *Unguard a vhost* — route first,
IdP rows last, audit lists after — since deleting the proxy provider while traffic
still enters :8016 hands browsers authentik's error page. The Audiobookshelf page
retires its two-doors law (the guarded vhost as a browser-only door, remote
listening via VPN) for one address every client carries, adds how a listener gets an
account, and says plainly what the exemption costs.

2026-11-03 01:54:08 -08:00

..

Alertmanager.md

docs(vault): one fact, one owner — repair the doubled pages, single-source the facts

2026-10-19 05:00:43 -07:00

Alloy.md

docs(alloy): document the root journal-read cutover

2026-10-20 19:50:15 -07:00

Anubis.md

docs(vault): destroy the dead weight — 53 pages and the change diary

2026-10-19 10:56:37 -07:00

Authentik Outpost Reference.md

chore(abs): name the Audiobookshelf door audiobooks.franksdank.cloud

2026-11-03 01:23:54 -08:00

Authentik Processes.md

docs(vault): one fact, one owner — repair the doubled pages, single-source the facts

2026-10-19 05:00:43 -07:00

Authentik.md

docs(authentik): record the 7-day login-session TTL and add a setter script

2026-10-20 16:55:44 -07:00

Caddy.md

docs: own the un-guard procedure and the browser-only law

2026-11-03 01:54:08 -08:00

FrankBook-Pro.md

docs(vault): destroy the dead weight — 53 pages and the change diary

2026-10-19 10:56:37 -07:00

Grafana.md

docs: Grafana reads claims from userinfo, not USE_ID_TOKEN

2026-10-20 20:41:57 -07:00

Homepage Design Grilling.md

docs: OKF v0.1 compliance pass + fact-check + 3 research briefs

2026-09-22 02:09:41 -07:00

Homepage Status Probes.md

docs(vault): destroy the dead weight — 53 pages and the change diary

2026-10-19 10:56:37 -07:00

Homepage.md

docs(vault): destroy the dead weight — 53 pages and the change diary

2026-10-19 10:56:37 -07:00

LAN-DNS.md

docs(vault): destroy the dead weight — 53 pages and the change diary

2026-10-19 10:56:37 -07:00

Loki.md

docs(vault): destroy the dead weight — 53 pages and the change diary

2026-10-19 10:56:37 -07:00

Node-Exporter.md

docs(vault): fleet-wide fact re-verification pass (67 pages)

2026-10-18 13:15:43 -07:00

Observability Provisioning.md

fix(blackbox): unit had no Image and no Network=host - quadlet refused to generate it

2026-10-21 15:41:37 -07:00

Observability.md

fix(deploy): relay firewall DROP must be appended, not -I-inserted above its ACCEPTs

2026-10-21 16:52:40 -07:00

Pi-hole.md

feat(fleet): give the media servers an I/O share that actually exists

2026-10-31 18:42:27 -07:00

Prometheus.md

fix(blackbox): Exec carries flags only (image has ENTRYPOINT) and the exporter binds loopback+LAN

2026-10-21 16:04:53 -07:00