Nick SzaunigandClaude Opus 5.5 04f9363e4b fix(k8s): persist documents and app backups, pin images, run hardened ...

Documents, avatars and the encrypted app backups lived in ./uploads and
./backups inside the container and were lost on every restart. The
backend now mounts the apicore-data volume at /data (configmap paths
/data/documents and /data/backups).

Both deployments pin the image to a CI build (sha-<commit>) with
imagePullPolicy IfNotPresent instead of :latest, run as uid 1000 with
seccomp RuntimeDefault, no privilege escalation and all capabilities
dropped. The frontend gets a liveness probe.

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>

2026-10-12 05:25:45 +02:00

..

configmap.example.yaml

Env Update

2026-08-27 08:32:47 +02:00

deployment.yaml

fix(k8s): persist documents and app backups, pin images, run hardened

2026-10-12 05:25:45 +02:00

ingress.yaml

fix: harden auth against brute force, add auth audit logging, fix cookie/TLS gaps

2026-08-25 10:49:25 +02:00

service.yaml

feat: Grundgeruest fertigstellen (Backend/Frontend/K8s)

2026-08-21 05:17:26 +02:00