justin c8a0824143 firewall: allow ezstorehost (207.174.124.51) to reach Forgejo SSH ... Add ezstorehost to trusted_admin in both layers — the nft input set and the DOCKER-USER iptables chain (Forgejo is containerised; DNAT means the post-DNAT dport 22 rule applies). Required for static-tenant deploys from ezStorehost-infra to clone repos over ssh://. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>		2026-06-10 22:45:43 -05:00
..
ansible	healthcare: daily batched paper-filing fulfillment	2026-06-07 00:30:01 -05:00
cron	warmup: IP rehab for .91-.93 so they can be reallocated	2026-06-09 20:27:47 -05:00
fail2ban	Initial commit — Performance West telecom compliance platform	2026-04-27 06:54:22 -05:00
firewall	firewall: allow ezstorehost (207.174.124.51) to reach Forgejo SSH	2026-06-10 22:45:43 -05:00
k8s	infra/k8s: shkeeper liveness+readiness probes (fix recurring crypto.performancewest.net downtime)	2026-06-09 04:57:50 -05:00
monitoring	monitoring: add .91-.93 IP rehab to daily Telegram warmup alert	2026-06-09 20:34:41 -05:00
mta-sts	infra: MTA-STS HTTPS vhost (cert issued, policy live)	2026-06-06 21:03:30 -05:00
nginx	infra: nginx vhost for listmonk-hc admin portal (lists-hc.performancewest.net -> 127.0.0.1:9101, LE cert)	2026-06-06 07:02:50 -05:00
postfix	feat(email): wire listmonk-hc into deploy + dev override + hc ramp-cap	2026-06-05 19:19:45 -05:00
systemd	hc email: reframe value-add to 'No 2FA. No government portals.' (we have a portal; the pain is CMS 2FA/identity-proofing); cron creates fresh dated campaign when prior is finished; add hc bounce watcher (Postfix->listmonk-hc webhook, hard/complaint->blocklist)	2026-06-06 16:47:12 -05:00