3 commits

Author	SHA1	Message	Date
Brian Pooe	1815beadf4	refactor: restructure docs, sync stacks with Caddyfile, harden compose templates ... - Add compose stacks for apps already proxied by Caddy: bento-pdf, it-tools, paperless-ngx, and beszel-hub (with Makefile targets) - Remove the unused Vault stack and the drawio Caddyfile block - Fix Caddyfile gramps upstream to port 80 to match the compose file - Bring immich and gramps-web up to the shared template pattern (no-new-privileges, log rotation, memory limits, healthchecks) - Single-quote vaultwarden SSO_AUDIENCE_TRUSTED so regex values like ^\d{18}$ render as valid YAML - Move root docs into kebab-case topic folders, rebuild the docs index to cover every doc, and fix all broken links	2026-07-03 17:45:16 +02:00
Brian Pooe	da5652aa10	feat(vaultwarden): add SSO/OIDC support with Zitadel documentation ... - Add SSO environment variables to template.yaml (SSO_ENABLED, SSO_ONLY, SSO_AUTHORITY, SSO_CLIENT_ID, SSO_CLIENT_SECRET, SSO_SCOPES, SSO_PKCE, SSO_AUDIENCE_TRUSTED) - Add SSO variables to .env.sample with Zitadel audience quirk explained - Document full Zitadel setup in README: app creation, redirect URI, OIDC settings, and the audience fix (SSO_AUDIENCE_TRUSTED=^\d{18}$) - Update .gitignore to track .env.sample files in docker-compose-files	2026-07-02 22:25:15 +02:00
Brian Pooe	2f2b3a6c6f	feat(caddy,vaultwarden): add vaultwarden stack and reorganise Caddyfile by VLAN ... - Add docker-compose-files/vaultwarden/ with template.yaml, .env.sample, and README (LXC assigned 10.0.10.16, port 8800) - Reorganise Caddyfile site blocks into VLAN 1 / VLAN 10 / VLAN 30 sections matching the TRUSTED / IoT zone layout from docs/network/firewall-rules.md - Sort VLAN 10 entries by IP; split into physical devices vs LXC Apps sub-sections - Move zigbee from LAN section to VLAN 30 where it actually lives (10.0.30.5)	2026-07-02 18:53:25 +02:00