Mount /data/filebrowser as /config and point FB_DATABASE at
/config/filebrowser.db so the user/share database survives
container recreations.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
konnektor-web is deployed and listening on 10.202.82.49:8082.
Replace the 503 placeholder with a real reverse_proxy.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Repoint konnektor.home.lindenfelser.de to a 503 placeholder
until konnektor-web is built. Add api.* and auth.* subdomains
pointing at konnektor-api (8080) and Zitadel (8081); auth
forwards Host header so Zitadel routes correctly. Add
mailpit.* restricted to LAN 10.202.82.0/24.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
The rclone, SMB password and Troubleshooting sections were
present twice in the file. Drop the second copy.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Drop k8s-server from flake, Makefile targets, modules
(kubernetes.nix, docker-registry.nix), install script and
hardware config. Remove related registry vhost, port 6443
and NAT rules from gateway.nix. Drop K8s-Server section
and dangling markdown wrapper from README.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Use podman ps instead of podman images to avoid pulling dangling
<none> entries and stale unused images.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Replace initialPassword with hashedPassword for danlin user, move
FileBrowser admin password to external environmentFile with restricted
secrets directory, update SSH authorized key, and bump nixpkgs to 25.11.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>