Viktor Barzin
3e2a2b8b28
state(traefik): update encrypted state
2026-04-05 19:58:25 +03:00
Viktor Barzin
ad7c0d7fc8
docs: add critical "Terraform Only" rule to CLAUDE.md
...
All infrastructure changes must go through Terraform/Terragrunt.
kubectl is read-only except for temporary migration steps.
If a resource isn't in Terraform, evaluate adding it before
making manual changes.
2026-04-05 19:46:07 +03:00
Viktor Barzin
9b134fe2ff
state(platform): update encrypted state
2026-04-05 19:44:44 +03:00
Viktor Barzin
3217a5f605
add bank sync monitoring with Pushgateway metrics and Prometheus alerts [ci skip]
...
CronJob now captures HTTP status, pushes bank_sync_success/duration/last_success
to Pushgateway. Alerts: BankSyncFailing (6h), BankSyncStale (48h).
2026-04-05 19:32:40 +03:00
Viktor Barzin
3f09a2d007
state(actualbudget): update encrypted state
2026-04-05 19:32:40 +03:00
Viktor Barzin
aa7a7e74b2
fix: technitium secondary to proxmox-lvm + bootstrap TF state
...
- Migrate technitium-secondary-config from NFS to proxmox-lvm PVC
- Change secondary strategy from RollingUpdate to Recreate (RWO)
- Bootstrap encrypted state for insta2spotify and ebooks stacks
- Import servarr sub-module PVCs and reconcile state
2026-04-05 19:32:40 +03:00
Viktor Barzin
8bb486339c
state(servarr): update encrypted state
2026-04-05 19:32:40 +03:00
root
22b4410cb7
Woodpecker CI Update TLS Certificates Commit
2026-04-05 00:03:00 +00:00
Viktor Barzin
cb8a808700
feat(storage): migrate 38 NFS PVCs to proxmox-lvm (Wave 2)
...
Add proxmox-lvm PVCs with pvc-autoresizer annotations for all
remaining single-pod app data services. Deployments updated to
use new block storage PVCs. Old NFS modules retained for rollback.
Services: affine, changedetection, diun, excalidraw, f1-stream,
hackmd, isponsorblocktv, matrix, n8n, send, grampsweb, health,
onlyoffice, owntracks, paperless-ngx, privatebin, resume,
speedtest, stirling-pdf, tandoor, rybbit (clickhouse), tor-proxy
(torrserver), whisper+piper, frigate (config), ollama (ui),
servarr (prowlarr/listenarr/qbittorrent), aiostreams, freshrss
(extensions), meshcentral (data+files), openclaw (data+home+
openlobster), technitium, mailserver (data+roundcube html+enigma),
dbaas (pgadmin).
Strategy set to Recreate where needed for RWO volumes.
2026-04-04 19:25:12 +03:00
Viktor Barzin
3dccbca95b
state(mailserver): update encrypted state
2026-04-04 17:55:54 +03:00
Viktor Barzin
333bc6ecc4
state(meshcentral): update encrypted state
2026-04-04 17:44:23 +03:00
Viktor Barzin
cd52422eb0
state(freshrss): update encrypted state
2026-04-04 17:43:50 +03:00
Viktor Barzin
5662962e60
state(ollama): update encrypted state
2026-04-04 17:43:06 +03:00
Viktor Barzin
1ccb625d7b
state(frigate): update encrypted state
2026-04-04 17:42:59 +03:00
Viktor Barzin
0e3df62a35
state(whisper): update encrypted state
2026-04-04 17:42:03 +03:00
Viktor Barzin
4907b9932c
state(tor-proxy): update encrypted state
2026-04-04 17:41:56 +03:00
Viktor Barzin
53305a11f8
state(rybbit): update encrypted state
2026-04-04 17:40:42 +03:00
Viktor Barzin
8016dcb9d3
state(tandoor): update encrypted state
2026-04-04 17:32:21 +03:00
Viktor Barzin
de21e035cc
state(stirling-pdf): update encrypted state
2026-04-04 17:32:05 +03:00
Viktor Barzin
57b84a110f
state(speedtest): update encrypted state
2026-04-04 17:29:26 +03:00
Viktor Barzin
396c06c2a7
state(privatebin): update encrypted state
2026-04-04 17:28:31 +03:00
Viktor Barzin
411f4ed585
state(paperless-ngx): update encrypted state
2026-04-04 17:27:42 +03:00
Viktor Barzin
42ab019ddb
state(owntracks): update encrypted state
2026-04-04 17:27:04 +03:00
Viktor Barzin
b22087effe
state(onlyoffice): update encrypted state
2026-04-04 17:26:28 +03:00
Viktor Barzin
4a475aff28
state(health): update encrypted state
2026-04-04 17:25:24 +03:00
Viktor Barzin
89a13f9f9e
state(grampsweb): update encrypted state
2026-04-04 17:24:48 +03:00
Viktor Barzin
db8ce37964
state(send): update encrypted state
2026-04-04 17:24:41 +03:00
Viktor Barzin
db3bcdb6c1
state(n8n): update encrypted state
2026-04-04 17:24:06 +03:00
Viktor Barzin
d57c6fc5a5
state(isponsorblocktv): update encrypted state
2026-04-04 17:13:03 +03:00
Viktor Barzin
80bd7292e0
state(hackmd): update encrypted state
2026-04-04 17:12:44 +03:00
Viktor Barzin
a1c43936ea
state(f1-stream): update encrypted state
2026-04-04 17:12:24 +03:00
Viktor Barzin
1fcef591bb
state(excalidraw): update encrypted state
2026-04-04 17:12:02 +03:00
Viktor Barzin
c131a50a32
state(diun): update encrypted state
2026-04-04 17:11:41 +03:00
Viktor Barzin
7bab4ead12
state(changedetection): update encrypted state
2026-04-04 17:11:22 +03:00
Viktor Barzin
c2584f4cdc
state(affine): update encrypted state
2026-04-04 17:11:17 +03:00
Viktor Barzin
b98dcaef36
state(nextcloud): update encrypted state
2026-04-04 17:06:04 +03:00
Viktor Barzin
2667a19999
state(nextcloud): update encrypted state
2026-04-04 17:02:26 +03:00
Viktor Barzin
bc4fb5da8f
state(nextcloud): update encrypted state
2026-04-04 16:38:09 +03:00
Viktor Barzin
2d5c55f7b1
docs: add storage class decision rule to CLAUDE.md
...
Default to proxmox-lvm for all new services. NFS only for RWX,
backup destinations, or shared media libraries. Updated iSCSI
backup section to reflect proxmox-lvm migration.
2026-04-04 16:35:12 +03:00
Viktor Barzin
ee39dd2fc9
feat(storage): migrate 12 SQLite NFS PVCs to proxmox-lvm (Wave 1)
...
Add proxmox-lvm PVCs with pvc-autoresizer annotations for all
SQLite-backed services. Deployments updated to use new block storage
PVCs. Old NFS modules retained for 1-week rollback.
Services: ntfy, freshrss, insta2spotify, actualbudget (x3),
wealthfolio, navidrome (DB only), audiobookshelf config,
headscale, forgejo, uptime-kuma.
Also: set Recreate strategy on ntfy, forgejo, insta2spotify,
wealthfolio (required for RWO volumes).
2026-04-04 16:26:59 +03:00
Viktor Barzin
792da5c066
state(platform): update encrypted state
2026-04-04 16:17:16 +03:00
Viktor Barzin
9ea29160d7
state(uptime-kuma): update encrypted state
2026-04-04 16:17:03 +03:00
Viktor Barzin
e0ca0edd51
state(forgejo): update encrypted state
2026-04-04 16:15:43 +03:00
Viktor Barzin
1f2ab8b547
state(headscale): update encrypted state
2026-04-04 16:15:25 +03:00
Viktor Barzin
afd22150f6
state(proxmox-csi): update encrypted state
2026-04-04 16:13:31 +03:00
Viktor Barzin
f48e400087
state(vault): update encrypted state
2026-04-04 16:10:25 +03:00
Viktor Barzin
d07314c0df
state(navidrome): update encrypted state
2026-04-04 16:09:35 +03:00
Viktor Barzin
8b9ae390eb
state(wealthfolio): update encrypted state
2026-04-04 16:08:57 +03:00
Viktor Barzin
afd4c78cd7
state(actualbudget): update encrypted state
2026-04-04 16:08:18 +03:00
Viktor Barzin
6ec3774aa9
state(freshrss): update encrypted state
2026-04-04 16:02:50 +03:00
