eblume/blumeops
1
1
Fork 0
Code Issues Pull requests Projects Releases 83 Packages Wiki Activity Actions
blumeops/docs/reference/services
History
Erich Blume 272ea1e767 Upgrade Caddy v2.10.2 → v2.11.2, fix forge mirrors (#294) 
## Summary
- Upgrade Caddy from v2.10.2 to v2.11.2 (7 CVE fixes across v2.11.1 and v2.11.2)
- Create `mirrors/caddy-l4` forge mirror for Layer 4 plugin
- Migrate all `~/code/3rd` clones on indri from `localhost:3001` to HTTPS `forge.ops.eblu.me/mirrors/` remotes
- Remove stale clones (`apple-silicon-detector`, `whisper.cpp`)
- Update caddy docs and service-versions tracking

## CVEs Fixed
- CVE-2026-27585 through CVE-2026-27590 (path/host bypass, TLS fail-open, FastCGI issues)
- Forward auth identity injection (privilege escalation)
- `vars_regexp` placeholder secret exposure
- Built on Go 1.26.1 (patches Go-level CVEs)

## What was done on indri (not in repo)
- `xcaddy build` with Gandi DNS + Layer 4 plugins → `~/code/3rd/caddy/bin/caddy` now v2.11.2
- Remotes updated: caddy, forgejo-runner, zot → `https://forge.ops.eblu.me/mirrors/*.git`
- Deleted: `~/code/3rd/apple-silicon-detector`, `~/code/3rd/whisper.cpp`

## Deployment and Testing
- [x] Ansible dry-run passed (`--tags caddy --check --diff`)
- [ ] Restart caddy LaunchAgent to pick up the new binary
- [ ] Verify all proxied services respond via `*.ops.eblu.me`
- [ ] Run `mise run services-check`

Reviewed-on: #294
2026-03-15 10:33:48 -07:00
..
1password.md Add how-to card for running 1Password backup 2026-03-11 18:17:45 -07:00
alloy.md Bump Grafana Alloy to v1.14.0 (#292) 2026-03-13 16:25:27 -07:00
argocd.md Add reference/tools/ category with Dagger, ArgoCD CLI, Ansible, and Pulumi cards (#178) 2026-02-12 19:18:46 -08:00
authentik.md Fix spider trap: disable SPA mode, remove index files, relax wiki-links (#290) 2026-03-09 11:59:43 -07:00
automounter.md Fix frontmatter field name for Quartz date display (#158) 2026-02-11 16:45:12 -08:00
borgmatic.md Fix frontmatter field name for Quartz date display (#158) 2026-02-11 16:45:12 -08:00
caddy.md Upgrade Caddy v2.10.2 → v2.11.2, fix forge mirrors (#294) 2026-03-15 10:33:48 -07:00
cv.md Add CV service reference card and docs updates (#171) 2026-02-12 11:45:32 -08:00
devpi.md Fix frontmatter field name for Quartz date display (#158) 2026-02-11 16:45:12 -08:00
docs.md Fix frontmatter field name for Quartz date display (#158) 2026-02-11 16:45:12 -08:00
flyio-proxy.md Add spider-trap guards to docs.eblu.me Quartz nginx config 2026-03-06 09:43:41 -08:00
forgejo.md Fix spider trap: disable SPA mode, remove index files, relax wiki-links (#290) 2026-03-09 11:59:43 -07:00
frigate.md Remove unused Mosquitto MQTT broker from ringtail 2026-03-11 18:37:31 -07:00
grafana.md Fix spider trap: disable SPA mode, remove index files, relax wiki-links (#290) 2026-03-09 11:59:43 -07:00
immich.md Fix frontmatter field name for Quartz date display (#158) 2026-02-11 16:45:12 -08:00
jellyfin.md Fix frontmatter field name for Quartz date display (#158) 2026-02-11 16:45:12 -08:00
jobsync.md Add JobSync reference card, observability docs, and RAPIDAPI_KEY plumbing (#289) 2026-03-08 15:06:52 -07:00
kiwix.md Bump kiwix-serve from 3.8.1 to 3.8.2 2026-03-05 08:12:32 -08:00
loki.md Fix frontmatter field name for Quartz date display (#158) 2026-02-11 16:45:12 -08:00
miniflux.md Fix frontmatter field name for Quartz date display (#158) 2026-02-11 16:45:12 -08:00
navidrome.md No navidrome authentikation 2026-02-21 20:33:48 -08:00
ntfy.md Remove unused Mosquitto MQTT broker from ringtail 2026-03-11 18:37:31 -07:00
ollama.md Add Ollama reference card and update indexes 2026-03-04 19:43:14 -08:00
postgresql.md Doc review: connect-to-postgres, create-release-artifact-workflow, deploy-k8s-service (#191) 2026-02-15 07:42:01 -08:00
prometheus.md Fix frontmatter field name for Quartz date display (#158) 2026-02-11 16:45:12 -08:00
tempo.md Remove unused Mosquitto MQTT broker from ringtail 2026-03-11 18:37:31 -07:00
teslamate.md Fix frontmatter field name for Quartz date display (#158) 2026-02-11 16:45:12 -08:00
transmission.md Upgrade Transmission to 4.1.1 (#282) 2026-03-04 07:44:33 -08:00
zot.md Bump zot registry to v2.1.15 (#293) 2026-03-14 10:00:40 -07:00