Establish clean homelab infrastructure baseline

Reorganize the brownfield repository, remove retired and generated artifacts, harden ignore rules, and record the GitOps/IaC redesign.
2026-09-09 16:47:20 +00:00
commit 88a02ababa
418 changed files with 50579 additions and 0 deletions
@@ -0,0 +1,16 @@
+# Template for netbox/secret.yaml (which is gitignored). Copy, fill in, apply.
+#
+# Only the database password lives here. NetBox holds no OIDC client secret: it
+# authenticates via Authelia forward-auth at the gateway (securitypolicy.yaml), so
+# there is no client credential for this app to keep.
+apiVersion: v1
+kind: Secret
+metadata:
+  name: netbox-secrets
+  namespace: netbox
+type: Opaque
+stringData:
+  # Password for the dedicated `netbox` role on the shared CNPG cluster.
+  # Must match what was granted in shared-db (see README "Prerequisites").
+  # Consumed via externalDatabase.existingSecretName/Key in values.yaml.
+  postgresql-password: "REPLACE_WITH_DB_PASSWORD"