Phase 2: Add Reference section with 24 technical reference cards (#88)
## Summary
- Create `docs/reference/` section with 24 technical reference cards
- Services (16): alloy, argocd, borgmatic, 1password, forgejo, grafana, jellyfin, kiwix, loki, miniflux, navidrome, postgresql, prometheus, teslamate, transmission, zot
- Infrastructure (3): hosts, tailscale, routing
- Kubernetes (2): cluster, apps
- Storage (2): sifaka, backups
- Update README to mark Phase 2 as complete
- Add towncrier changelog fragment
## Deployment and Testing
- [ ] Build docs locally to verify wiki-links resolve
- [ ] Deploy via ArgoCD and verify at docs.ops.eblu.me/reference/
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/88
2026-02-03 14:27:37 -08:00
|
|
|
---
|
2026-02-03 16:06:35 -08:00
|
|
|
title: 1password
|
Phase 2: Add Reference section with 24 technical reference cards (#88)
## Summary
- Create `docs/reference/` section with 24 technical reference cards
- Services (16): alloy, argocd, borgmatic, 1password, forgejo, grafana, jellyfin, kiwix, loki, miniflux, navidrome, postgresql, prometheus, teslamate, transmission, zot
- Infrastructure (3): hosts, tailscale, routing
- Kubernetes (2): cluster, apps
- Storage (2): sifaka, backups
- Update README to mark Phase 2 as complete
- Add towncrier changelog fragment
## Deployment and Testing
- [ ] Build docs locally to verify wiki-links resolve
- [ ] Deploy via ArgoCD and verify at docs.ops.eblu.me/reference/
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/88
2026-02-03 14:27:37 -08:00
|
|
|
tags:
|
|
|
|
|
- service
|
|
|
|
|
- secrets
|
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
# 1Password
|
|
|
|
|
|
|
|
|
|
Root credential store for all BlumeOps secrets, synced to Kubernetes via External Secrets Operator.
|
|
|
|
|
|
|
|
|
|
## Architecture
|
|
|
|
|
|
|
|
|
|
```
|
|
|
|
|
1Password Cloud
|
|
|
|
|
|
|
|
|
|
|
v
|
|
|
|
|
1Password Connect (namespace: 1password)
|
|
|
|
|
|
|
|
|
|
|
v
|
|
|
|
|
External Secrets Operator (namespace: external-secrets)
|
|
|
|
|
|
|
|
|
|
|
v
|
|
|
|
|
Native Kubernetes Secrets
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
## Vault
|
|
|
|
|
|
|
|
|
|
The `blumeops` vault contains all infrastructure credentials.
|
|
|
|
|
|
|
|
|
|
## Kubernetes Integration
|
|
|
|
|
|
|
|
|
|
**ClusterSecretStore:** `onepassword-blumeops`
|
|
|
|
|
|
|
|
|
|
Services reference 1Password items via `ExternalSecret` manifests.
|
|
|
|
|
|
|
|
|
|
## Related
|
|
|
|
|
|
2026-02-03 16:06:35 -08:00
|
|
|
- [[argocd]] - Uses secrets for git access
|
|
|
|
|
- [[postgresql]] - Database credentials
|
