blumeops/argocd
Erich Blume e152b1b071 Restrict flyio-proxy ACLs to dedicated tag:flyio-target endpoints
Replace broad tag:k8s and tag:homelab grants with a new tag:flyio-target
tag that services must explicitly opt into. Alloy now pushes logs/metrics
directly to Loki and Prometheus via Tailscale Ingress, bypassing Caddy.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-08 11:34:34 -08:00
..
apps Phase 1b: Deploy docs hosting with Quartz (#85) 2026-02-03 10:52:20 -08:00
manifests Restrict flyio-proxy ACLs to dedicated tag:flyio-target endpoints 2026-02-08 11:34:34 -08:00