cluster

commit 2e24f03357cfeb4511ca1cf435d0bed624801aee
parent 4bbda2c318b5346c6dbfa82081f9c019c260564a
Author: MTRNord <MTRNord@users.noreply.github.com>
Date:   Fri, 24 Oct 2025 10:31:47 +0200

update

Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>

Diffstat:
M
apps/talos_cluster/blog/docker/Dockerfile
 | 
5
+++++
M
apps/talos_cluster/blog/docker/wordpress.conf
 | 
9
+++++++++
M
apps/talos_cluster/plane/release.yaml
 | 
110
++++++++++++++++++++++++++++++++++++++++----------------------------------------

3 files changed, 69 insertions(+), 55 deletions(-)
diff --git a/apps/talos_cluster/blog/docker/Dockerfile b/apps/talos_cluster/blog/docker/Dockerfile
@@ -148,6 +148,11 @@ RUN wget -q https://downloads.wordpress.org/theme/twentytwentyfive.1.3.zip \
     && unzip -q -o twentytwentyfive.1.3.zip -d /var/www/html/wordpress/wp-content/themes/ \
     && rm twentytwentyfive.1.3.zip
 
+# Install Stop User Enumeration plugin
+RUN wget -q https://downloads.wordpress.org/plugin/stop-user-enumeration.1.7.5.zip \
+    && unzip -q stop-user-enumeration.1.7.5.zip -d /var/www/html/wordpress/wp-content/plugins/ \
+    && rm stop-user-enumeration.1.7.5.zip
+
 # Configure nginx: replace default site and enable wordpress config
 RUN rm -f /etc/nginx/sites-enabled/default
 COPY wordpress.conf /etc/nginx/sites-available/wordpress.conf
diff --git a/apps/talos_cluster/blog/docker/wordpress.conf b/apps/talos_cluster/blog/docker/wordpress.conf
@@ -22,12 +22,21 @@ server {
 
     server_name _;
 
+    add_header Strict-Transport-Security "max-age=31536000" always;
+
     # Allow access to /.well-known/matrix before dotfile deny rule
     location /.well-known/matrix {
         alias /var/www/html/well-known/;
         default_type application/json;
         types { }
         add_header Content-Type application/json;
+        # Ensure cors headers are set
+        add_header 'Access-Control-Allow-Origin' '*';
+        add_header 'Access-Control-Allow-Methods' 'GET, OPTIONS';
+
+        # Set caching headers
+        expires max;
+
         try_files $uri $uri.json =404;
     }
 
diff --git a/apps/talos_cluster/plane/release.yaml b/apps/talos_cluster/plane/release.yaml
@@ -8,7 +8,7 @@ spec:
     chart:
         spec:
             chart: plane-enterprise
-            version: 1.3.3
+            version: 1.6.1
             sourceRef:
                 kind: HelmRepository
                 name: plane
@@ -57,13 +57,13 @@ sops:
     age:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPT3EzK25XVTl0eStwZnQy
-            Qkw3azRoVW5qTTd2aXNiVG9pRWU2V3Q5dlY4CkhxbkZpclU2NFlIQmZvUVhRSG1X
-            a1FINjI0Mnk1d1I0Q08yRzFUZHp1WncKLS0tIEE4a2grUDluNGZTSnNGM1hPT1JE
-            aGxMQ01lbURJSzI1cjBKNTc2UGN0VWcK7uwheJrQtha2XLy45pu8x8OFzxQ+/CgA
-            /p1aJfIJvNTwPL6umfE+uhXPLl0IdkG6q4d50xlUjC9QYFDv4pNEFA==
-            -----END AGE ENCRYPTED FILE-----
+              -----BEGIN AGE ENCRYPTED FILE-----
+              YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPT3EzK25XVTl0eStwZnQy
+              Qkw3azRoVW5qTTd2aXNiVG9pRWU2V3Q5dlY4CkhxbkZpclU2NFlIQmZvUVhRSG1X
+              a1FINjI0Mnk1d1I0Q08yRzFUZHp1WncKLS0tIEE4a2grUDluNGZTSnNGM1hPT1JE
+              aGxMQ01lbURJSzI1cjBKNTc2UGN0VWcK7uwheJrQtha2XLy45pu8x8OFzxQ+/CgA
+              /p1aJfIJvNTwPL6umfE+uhXPLl0IdkG6q4d50xlUjC9QYFDv4pNEFA==
+              -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-05-05T20:14:38Z"
     mac: ENC[AES256_GCM,data:+Zbxrfu8/EWwCDhcT3YI+py99xK0hNHlZxVAOBE/Kvuk64iyR8py0ofbW2B8BAdDYsM9BT5P467I5kc0hNb69HNpE2DKxEGzpc0NMgueD4WGpODuSQApUYS5eVcEoBejLwNKNnsfon6mIq/eSBq/NSTwlklePsZ7Dyg10el+pNU=,iv:0k+aWNajUIiqGklyrQhkYN63RnwiQlNrpOBFI724kig=,tag:FnqlBqy7aC/EDbujI3IsQw==,type:str]
     pgp: []
@@ -83,61 +83,61 @@ spec:
         - plane.midnightthoughts.space
     rules:
         - backendRefs:
-            - name: plane-web
-              port: 3000
+              - name: plane-web
+                port: 3000
           matches:
-            - path:
-                type: PathPrefix
-                value: /
+              - path:
+                    type: PathPrefix
+                    value: /
         - backendRefs:
-            - name: plane-api
-              port: 8000
+              - name: plane-api
+                port: 8000
           matches:
-            - path:
-                type: PathPrefix
-                value: /api
+              - path:
+                    type: PathPrefix
+                    value: /api
         - backendRefs:
-            - name: plane-api
-              port: 8000
+              - name: plane-api
+                port: 8000
           matches:
-            - path:
-                type: PathPrefix
-                value: /auth
+              - path:
+                    type: PathPrefix
+                    value: /auth
         - backendRefs:
-            - name: plane-live
-              port: 3000
+              - name: plane-live
+                port: 3000
           matches:
-            - path:
-                type: PathPrefix
-                value: /live
+              - path:
+                    type: PathPrefix
+                    value: /live
         - backendRefs:
-            - name: plane-space
-              port: 3000
+              - name: plane-space
+                port: 3000
           matches:
-            - path:
-                type: PathPrefix
-                value: /spaces
+              - path:
+                    type: PathPrefix
+                    value: /spaces
         - backendRefs:
-            - name: plane-admin
-              port: 3000
+              - name: plane-admin
+                port: 3000
           matches:
-            - path:
-                type: PathPrefix
-                value: /god-mode
+              - path:
+                    type: PathPrefix
+                    value: /god-mode
         - backendRefs:
-            - name: plane-minio
-              port: 9000
+              - name: plane-minio
+                port: 9000
           matches:
-            - path:
-                type: PathPrefix
-                value: /uploads
+              - path:
+                    type: PathPrefix
+                    value: /uploads
         - backendRefs:
-            - name: plane-silo
-              port: 3000
+              - name: plane-silo
+                port: 3000
           matches:
-            - path:
-                type: PathPrefix
-                value: /silo
+              - path:
+                    type: PathPrefix
+                    value: /silo
 sops:
     kms: []
     gcp_kms: []
@@ -146,13 +146,13 @@ sops:
     age:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPT3EzK25XVTl0eStwZnQy
-            Qkw3azRoVW5qTTd2aXNiVG9pRWU2V3Q5dlY4CkhxbkZpclU2NFlIQmZvUVhRSG1X
-            a1FINjI0Mnk1d1I0Q08yRzFUZHp1WncKLS0tIEE4a2grUDluNGZTSnNGM1hPT1JE
-            aGxMQ01lbURJSzI1cjBKNTc2UGN0VWcK7uwheJrQtha2XLy45pu8x8OFzxQ+/CgA
-            /p1aJfIJvNTwPL6umfE+uhXPLl0IdkG6q4d50xlUjC9QYFDv4pNEFA==
-            -----END AGE ENCRYPTED FILE-----
+              -----BEGIN AGE ENCRYPTED FILE-----
+              YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPT3EzK25XVTl0eStwZnQy
+              Qkw3azRoVW5qTTd2aXNiVG9pRWU2V3Q5dlY4CkhxbkZpclU2NFlIQmZvUVhRSG1X
+              a1FINjI0Mnk1d1I0Q08yRzFUZHp1WncKLS0tIEE4a2grUDluNGZTSnNGM1hPT1JE
+              aGxMQ01lbURJSzI1cjBKNTc2UGN0VWcK7uwheJrQtha2XLy45pu8x8OFzxQ+/CgA
+              /p1aJfIJvNTwPL6umfE+uhXPLl0IdkG6q4d50xlUjC9QYFDv4pNEFA==
+              -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-05-05T20:14:38Z"
     mac: ENC[AES256_GCM,data:+Zbxrfu8/EWwCDhcT3YI+py99xK0hNHlZxVAOBE/Kvuk64iyR8py0ofbW2B8BAdDYsM9BT5P467I5kc0hNb69HNpE2DKxEGzpc0NMgueD4WGpODuSQApUYS5eVcEoBejLwNKNnsfon6mIq/eSBq/NSTwlklePsZ7Dyg10el+pNU=,iv:0k+aWNajUIiqGklyrQhkYN63RnwiQlNrpOBFI724kig=,tag:FnqlBqy7aC/EDbujI3IsQw==,type:str]
     pgp: []