Erich Blume
651fed8f1a
## Summary - **adopt-oidc-provider:** Dex-based OIDC identity provider for SSO across services (status: Planning — service dependency/recovery design needed) - **harden-zot-registry:** OIDC + API key auth and tag immutability for zot (depends on OIDC provider + Dagger CI) - **forgejo-actions-dashboard:** Custom textfile Prometheus exporter + Grafana dashboard for Forgejo Actions CI metrics - **operationalize-reolink-camera:** Cloud-free Frigate NVR with ONNX detection, NFS ring buffer recording to sifaka (depends on network segmentation) - **add-unifi-pulumi-stack:** Expanded with NFS security motivation, BlumeOps Services subnet, IoT/appliance segregation, firewall rules ## Test plan - [x] Pre-commit hooks pass (all 3 commits) - [x] `docs-check-links` passes - [x] `docs-check-index` passes - [x] `docs-check-filenames` passes 🤖 Generated with [Claude Code](https://claude.com/claude-code) Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/151 |
||
|---|---|---|
| .. | ||
| add-unifi-pulumi-stack.md | ||
| adopt-dagger-ci.md | ||
| adopt-oidc-provider.md | ||
| forgejo-actions-dashboard.md | ||
| harden-zot-registry.md | ||
| migrate-forgejo-from-brew.md | ||
| operationalize-reolink-camera.md | ||
| plans.md | ||
| upstream-fork-strategy.md | ||