Issues

• Let Claude use a dedicated bot account for gh instead of the maintainer's login

  ghsize::M

  MediumFilter by Effort: Medium
  Task

  chezmoidotsh/arcane#1507 · Filter by author xunleii opened on Nov 12, 2026

• Let Claude commit and sign commits with a dedicated bot account

  ghsize::M

  MediumFilter by Effort: Medium
  Task

  chezmoidotsh/arcane#1506 · Filter by author xunleii opened on Nov 12, 2026

• Evaluate nixos-rebuild switch over LXC template rebuilds, and LXC vs VM for NixOS appliances

  catalogghproject
  Improvement

  chezmoidotsh/arcane#1482 · Filter by author xunleii opened on Nov 10, 2026

• Set up a Nix builder VM with elastic memory and CPU (idle footprint near zero, up to 4 GB / 10 CPU)

  projectsize::M

  MediumFilter by Effort: Medium
  Feature

  chezmoidotsh/arcane#1475 · Filter by author xunleii opened on Nov 9, 2026

• Find why the Cilium Gateway returns 403 to clients outside the backend namespace on lungmen.akn

  projectsize::M

  MediumFilter by Effort: Medium
  Bug

  chezmoidotsh/arcane#1469 · Filter by author xunleii opened on Oct 27, 2026

• Application map extension broken on recent Argo CD versions (rhodes.akn)

  project
  Bug

  chezmoidotsh/arcane#1445 · Filter by author xunleii opened on Oct 24, 2026

• Build and publish the catalog Nix flake images in CI

  catalogghpriority::highsize::M

  HighFilter by Priority: High

  MediumFilter by Effort: Medium
  Task

  chezmoidotsh/arcane#1441 · Filter by author xunleii opened on Oct 24, 2026

• Update zot to 2.1.22 on chezmoi.sh (12 CVEs, worst CVSS 9.6)

  depspriority::highsize::M

  HighFilter by Priority: High

  MediumFilter by Effort: Medium
  Upgrade

  chezmoidotsh/arcane#1425 · Filter by author anicolaie-copilot opened on Oct 24, 2026

• Update jellyfin to 12.3 on lungmen.akn (6 CVEs, worst CVSS 9.1)

  depspriority::criticalsize::L

  CriticalFilter by Priority: Critical

  HighFilter by Effort: High
  Upgrade

  chezmoidotsh/arcane#1424 · Filter by author anicolaie-copilot opened on Oct 24, 2026

• Deploy the cluster-side observability agents of ADR-013 (VMAgent, VMAlert, VMRule, Vector)

  projectsize::L

  HighFilter by Effort: High
  chezmoidotsh/arcane#1380 · Filter by author xunleii opened on Oct 23, 2026

• Add the pre-push dist/ freshness check decided in ADR-011

  ghpriority::lowsize::S

  LowFilter by Priority: Low

  LowFilter by Effort: Low
  chezmoidotsh/arcane#1379 · Filter by author xunleii opened on Oct 23, 2026

• Speed up the Oripathy inventory CI job (73 to 105 s today, 34 s before the Nix coverage)

  ghpriority::lowsize::L

  LowFilter by Priority: Low

  HighFilter by Effort: High
  Improvement

  chezmoidotsh/arcane#1373 · Filter by author xunleii opened on Oct 20, 2026

• Add a guard rejecting secret outputs read through Pulumi StackReference

  ghpriority::lowsize::L

  LowFilter by Priority: Low

  HighFilter by Effort: High
  Task

  chezmoidotsh/arcane#1370 · Filter by author xunleii opened on Oct 20, 2026

• Disable sys-kernel-debug.mount in the LXC images (systemd reports degraded)

  projectsize::S

  LowFilter by Effort: Low
  Improvement

  chezmoidotsh/arcane#1359 · Filter by author xunleii opened on Oct 18, 2026

• Detect unreachable pinned SHAs in Omni cluster templates and automate the repin

  catalogghsize::M

  MediumFilter by Effort: Medium
  Task

  chezmoidotsh/arcane#1357 · Filter by author xunleii opened on Oct 17, 2026

• Require a PodDisruptionBudget on multi-instance CNPG clusters (OPA rule)

  catalogpriority::mediumsize::S

  MediumFilter by Priority: Medium

  LowFilter by Effort: Low
  Task

  chezmoidotsh/arcane#1356 · Filter by author xunleii opened on Oct 17, 2026

• Automate the update of the Tailscale DERP relay allow-list on lungmen

  ghpriority::mediumprojectsize::M

  MediumFilter by Priority: Medium
  Task

  chezmoidotsh/arcane#1342 · Filter by author xunleii opened on Oct 14, 2026

• Fix the talosnet DHCP range overlapping the Cilium internal LB pool

  priority::mediumprojectsize::S

  MediumFilter by Priority: Medium

  LowFilter by Effort: Low
  Bug

  chezmoidotsh/arcane#1334 · Filter by author xunleii opened on Oct 12, 2026

• Move the resources that need OpenBao or a cluster out of chezmoi-sh-infra

  projectsize::L

  HighFilter by Effort: High
  Task

  chezmoidotsh/arcane#1333 · Filter by author xunleii opened on Oct 12, 2026

• Document the backup location of the age key and the PBS paperkey

  ghsize::XS

  Very LowFilter by Effort: Very Low
  Docs

  chezmoidotsh/arcane#1332 · Filter by author xunleii opened on Oct 12, 2026

• Write the procedure to restart Garage by hand and pull its datasets back from B2

  projectsize::M

  MediumFilter by Effort: Medium
  Docs

  chezmoidotsh/arcane#1331 · Filter by author xunleii opened on Oct 12, 2026

• Document how to configure Proxmox Backup Server without the Pulumi state

  projectsize::S

  LowFilter by Effort: Low
  Docs

  chezmoidotsh/arcane#1330 · Filter by author xunleii opened on Oct 12, 2026

• Export the Pulumi state and the bootstrap B2 keys outside the NAS

  ghsize::M

  MediumFilter by Effort: Medium
  Task

  chezmoidotsh/arcane#1329 · Filter by author xunleii opened on Oct 12, 2026

• Remove the amiya, Envoy Gateway and Crossplane leftovers found during the documentation migration

  catalogghprojectsize::M

  MediumFilter by Effort: Medium
  Task

  chezmoidotsh/arcane#1326 · Filter by author xunleii opened on Oct 12, 2026
  2

• Share Kustomize bases for default-hardened network policy, Cilium and external-dns across clusters

  catalogpriority::lowprojectsize::L

  HighFilter by Effort: High
  Task

  chezmoidotsh/arcane#1309 · Filter by author xunleii opened on Oct 10, 2026