viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

Commit graph

  • b1b2cb1974 terminal: add multi-tmux-session lobby on term.viktorbarzin.me (additive) Viktor Barzin 2026-05-13 15:24:04 +00:00
  • 726fb25182 monitoring(wealth): paint declining segments red on growth chart Viktor Barzin 2026-05-12 19:22:43 +00:00
  • cc47da87b0 payslip-ingest, instagram-poster: suspend two chronic-failure cronjobs Viktor Barzin 2026-05-12 13:31:33 +00:00
  • cbd0f71a3b monitoring: PodImagePullBackOff alert + 2 inhibitors + JobFailed for:2h Viktor Barzin 2026-05-12 09:31:46 +00:00
  • 70292b9e23 monitoring: TraefikReplicaConfigStale — drop false-positive on stale series Viktor Barzin 2026-05-12 08:37:17 +00:00
  • 165bb7258e monitoring: detect stale Traefik replicas + reduce alert-storm cascading Viktor Barzin 2026-05-12 08:23:18 +00:00
  • 448bc0c0f6 k8s-version-upgrade: decompose into Job chain to fix self-preemption Viktor Barzin 2026-05-11 23:54:05 +00:00
  • 8e13f1528e Woodpecker CI deploy [CI SKIP] root 2026-05-11 20:46:02 +00:00
  • e8854f9230 wealthfolio, paperless-ngx: drop migration-leftover -proxmox PVCs Viktor Barzin 2026-05-11 20:44:17 +00:00
  • 701b0e3c57 claude-agent: replace unused 10Gi PVC with 5Gi NFS-backed /persistent Viktor Barzin 2026-05-11 20:40:21 +00:00
  • cd13b9d062 monitoring: drop PVAutoExpanding alert — info-only noise, not actionable Viktor Barzin 2026-05-11 20:13:42 +00:00
  • 396cce82cf monitoring(wealth): paint declining segments red on portfolio chart Viktor Barzin 2026-05-11 20:13:16 +00:00
  • 30eff178e9 healthcheck: probe uptime-kuma via internal Service (port-forward), not public URL Viktor Barzin 2026-05-11 20:02:57 +00:00
  • a699d5bedf vault: move audit-PVC autoresizer annotations to kubernetes_annotations Viktor Barzin 2026-05-11 19:41:35 +00:00
  • 18a17891c4 state(vault): update encrypted state Viktor Barzin 2026-05-11 19:40:05 +00:00
  • bc5c10b38d ci: retrigger image rebuild — prior pipeline aborted during PG outage Viktor Barzin 2026-05-11 19:30:34 +00:00
  • b278a8f158 docs/auth: sync to current auth enum (required/app/public/none) Viktor Barzin 2026-05-11 19:28:42 +00:00
  • 2ba36436c8 real-estate-crawler: populate SCRAPE_SCHEDULES (daily RENT + weekly BUY, London 1-2 bed) Viktor Barzin 2026-05-11 19:26:57 +00:00
  • b3c1631597 ci: add python3 to infra-ci image — unblocks scripts/tg auth-comment check Viktor Barzin 2026-05-11 19:26:55 +00:00
  • f10784ddb6 infra: document auth = "app|none" tier on every legacy ingress Viktor Barzin 2026-05-11 19:25:48 +00:00
  • 20774f794d dbaas+monitoring: bump PG max_connections to 200, add scrape + alerts Viktor Barzin 2026-05-11 19:20:54 +00:00
  • 9e5a5fb0c7 infra/scripts/tg: enforce ingress_factory auth-comment convention Viktor Barzin 2026-05-11 19:18:27 +00:00
  • e826e36658 state(dbaas): update encrypted state Viktor Barzin 2026-05-11 19:08:05 +00:00
  • eb529d60e4 infra/ingress_factory: add auth = "app" mode for self-authed backends Viktor Barzin 2026-05-11 18:59:11 +00:00
  • 6b9f5e8027 Woodpecker CI deploy [CI SKIP] root 2026-05-11 18:56:29 +00:00
  • 665b6b2934 actualbudget+monitoring: per-account bank-sync metrics, drop noisy alert Viktor Barzin 2026-05-11 18:55:15 +00:00
  • 7b6eee49c4 infra: drop Authentik forward-auth from 7 self-authed apps (auth = "none") Viktor Barzin 2026-05-11 18:46:36 +00:00
  • f98c3f2049 infra/novelapp: drop Authentik forward-auth (auth = "none") Viktor Barzin 2026-05-11 18:31:54 +00:00
  • 77492b3131 Woodpecker CI deploy [CI SKIP] root 2026-05-10 22:49:51 +00:00
  • 9be0672aa3 claude-memory / resume: unblock terragrunt apply (var defaults + psql -d postgres) Viktor Barzin 2026-05-10 22:47:54 +00:00
  • a168277213 healthcheck: tune noise filters + nvidia-exporter auth=none Viktor Barzin 2026-05-10 22:26:22 +00:00
  • 8483ca59ba Woodpecker CI deploy [CI SKIP] root 2026-05-10 22:03:36 +00:00
  • dc7c19d88e frigate: lan ingress auth=none for HA Sofia integration Viktor Barzin 2026-05-10 22:02:21 +00:00
  • dc134011eb fix: pvc-autoresizer + TF drift safety — bulk add ignore_changes Viktor Barzin 2026-05-10 21:57:01 +00:00
  • dd2b7de291 fix: HA Sofia REST sensors + PVC drift safety Viktor Barzin 2026-05-10 21:48:29 +00:00
  • 7e69951cb9 state(dbaas): update encrypted state Viktor Barzin 2026-05-10 21:00:00 +00:00
  • ee47197f3b vault: enroll audit-vault-0 in pvc-autoresizer (10Gi limit) Viktor Barzin 2026-05-10 20:01:06 +00:00
  • 0fdadcc3dd dbaas: pg-cluster threshold 80%→10% in CNPG inheritedMetadata Viktor Barzin 2026-05-10 19:58:11 +00:00
  • 3f2b2f9d32 fix: pvc-autoresizer threshold should be 10%, not 80% Viktor Barzin 2026-05-10 19:56:16 +00:00
  • dc4ce46411 k8s-version-upgrade: detection script refresh apt before madison + DRY_RUN_OVERRIDE Viktor Barzin 2026-05-10 19:33:11 +00:00
  • ae6dde45c2 k8s-version-upgrade: trigger etcd snapshot via existing backup-etcd Job; broaden agent RBAC Viktor Barzin 2026-05-10 19:16:12 +00:00
  • e75bcaf394 k8s-version-upgrade: automated kubeadm/kubelet/kubectl upgrade pipeline Viktor Barzin 2026-05-10 19:07:42 +00:00
  • 09f83b4e83 fire-planner / k8s-portal / insta2spotify: revert auth=public to auth=none Viktor Barzin 2026-05-10 18:59:31 +00:00
  • faad99cff3 Woodpecker CI deploy [CI SKIP] root 2026-05-10 18:57:31 +00:00
  • 143413dc0b owntracks: explicit auth = "none" — Phase 5 audit completion Viktor Barzin 2026-05-10 18:55:04 +00:00
  • ff5538a667 ingress_factory: replace protected bool with auth enum + audit pass across 100 stacks Viktor Barzin 2026-05-10 18:53:49 +00:00
  • 88e57fdddb instagram-poster: disable ig-ingest-stories CronJob until /ig-ingest ships Viktor Barzin 2026-05-10 18:49:25 +00:00
  • d2be0921e8 scripts: timeout rsync + sqlite calls in daily-backup Viktor Barzin 2026-05-10 18:39:07 +00:00
  • fddf168ecb cloudflare: disable AI bot edge-block so x402 can issue payment offers Viktor 2026-05-10 18:37:29 +00:00
  • 4103ea2ba0 monitoring(prometheus): keep all 4 kubelet_volume_stats_inodes metrics Viktor Barzin 2026-05-10 18:36:16 +00:00
  • 6d3308c848 authentik: add public guest auto-login flow + dedicated outpost + traefik public middleware Viktor Barzin 2026-05-10 18:26:16 +00:00
  • ff5416ff40 proxmox-csi: opt SCs into pvc-autoresizer (resize.topolvm.io/enabled=true) Viktor Barzin 2026-05-10 18:22:25 +00:00
  • ea9b5542d1 x402: flip gateway live with Viktor's wallet + Slack payment notifications Viktor 2026-05-10 18:21:37 +00:00
  • 58789cde8b kured(sentinel-gate): fix auth + write-perm so safety checks actually run Viktor Barzin 2026-05-10 18:16:54 +00:00
  • a2377a38df scripts: cluster_healthcheck defaults to ~/.kube/config Viktor Barzin 2026-05-10 18:12:40 +00:00
  • f5b1fb179a docs: add k8s node auto-upgrade runbook + architecture section Viktor Barzin 2026-05-10 17:26:15 +00:00
  • 278ef5f19b monitoring(grafana): swap python3 for jq in folder-ACL local-exec Viktor Barzin 2026-05-10 17:09:33 +00:00
  • b99e30e798 docs/plans: 2026-04-20 infra audit design (post-research, post-challenge) Viktor Barzin 2026-05-10 17:07:49 +00:00
  • 5c0ea96a91 infra: re-enable unattended-upgrades with kured prometheus-gating Viktor Barzin 2026-05-10 17:07:32 +00:00
  • fe75fad467 monitoring: protect grafana ingress with authentik + disable anonymous Viktor Barzin 2026-05-10 17:01:50 +00:00
  • 6c294d4bb0 authentik: zero-endpoints alert + upgrade-validation checklist Viktor Barzin 2026-05-10 16:54:48 +00:00
  • dc87a9bffe infra/instagram-poster: shared CNPG-backed benchmark DB, no PVC for scores Viktor Barzin 2026-05-10 16:37:33 +00:00
  • 93ee45bd25 docs/authentik: document postgres session backend + close out 2026-04-18 post-mortem items Viktor Barzin 2026-05-10 16:28:11 +00:00
  • 94dfbb9a9c state(vault): update encrypted state Viktor Barzin 2026-05-10 16:28:09 +00:00
  • fbf97dfc5c state(dbaas): update encrypted state Viktor Barzin 2026-05-10 16:27:51 +00:00
  • 1fcf911269 authentik/pgbouncer: image_pull_policy IfNotPresent -> Always (match live) Viktor Barzin 2026-05-10 16:22:24 +00:00
  • 24795ec203 authentik: codify proxy provider TTL + adopt embedded outpost Viktor Barzin 2026-05-10 16:18:42 +00:00
  • 63fc1e00de infra/compute: bump k8s-node1 RAM 32 -> 48 GiB Viktor Barzin 2026-05-10 15:24:26 +00:00
  • 6e7fe96a40 infra/llama-cpp: benchmark report + -fa flag fix Viktor Barzin 2026-05-10 15:03:16 +00:00
  • 3da01e6e1e anubis: only challenge GET requests; allow everything else Viktor Barzin 2026-05-10 14:55:50 +00:00
  • ff3d64159a Woodpecker CI deploy [CI SKIP] root 2026-05-10 14:48:36 +00:00
  • 1f0bd11d3f privatebin: drop Anubis — broke XHR paste creation Viktor Barzin 2026-05-10 14:47:48 +00:00
  • 9c617e6d38 infra/llama-cpp: add stack — llama-swap fronting Qwen3-VL + MiniCPM-V Viktor Barzin 2026-05-10 14:13:40 +00:00
  • 0752bd49c8 kms: document native DNS auto-discovery (no client config needed) Viktor Barzin 2026-05-10 13:51:45 +00:00
  • d85b54d89d kms: per-connection state in notifier (vlmcsd is multi-threaded) Viktor Barzin 2026-05-10 13:21:38 +00:00
  • 4a3ca572e8 fire-planner: imagePullPolicy=Always on alembic-migrate init container Viktor Barzin 2026-05-10 13:09:15 +00:00
  • 67b11a964a kms: dedicate MetalLB IP 10.0.20.202 + filter probe noise Viktor Barzin 2026-05-10 13:02:58 +00:00
  • 28db8fc9d4 fire-planner: COL refresh CronJob + Grafana Cost-of-Living dashboard Viktor Barzin 2026-05-22 14:15:38 +00:00
  • c1cb22896a openclaw: revert model swap + document codex re-auth path Viktor Barzin 2026-05-22 14:12:30 +00:00
  • 247afdb220 cluster-health skill: document tightened #43 thermal threshold (65 C) Viktor Barzin 2026-05-22 14:09:12 +00:00
  • 4830230984 cluster-health #43: tighten PVE thermal threshold to 65 C Viktor Barzin 2026-05-22 14:09:08 +00:00
  • 282d7f6182 openclaw: engrain the learning loop at the identity level Viktor Barzin 2026-05-22 13:18:52 +00:00
  • 66ca8b9e9c trading-bot: revive K8s stack + add meet-kevin-watcher Viktor Barzin 2026-05-22 11:23:30 +00:00
  • 60d8d54d6e openclaw: v3 flow — know → ask devvm → (rarely) try yourself Viktor Barzin 2026-05-22 11:20:54 +00:00
  • 8e5d682707 openclaw: explicit "use devvm + learn" default behaviour Viktor Barzin 2026-05-22 11:12:33 +00:00
  • ccf1ccdd1d openclaw: also write devvm section to /workspace/TOOLS.md Viktor Barzin 2026-05-22 10:50:42 +00:00
  • 9ad52dfd61 openclaw: SSH + tmux task fallback to devvm Viktor Barzin 2026-05-22 10:20:00 +00:00
  • c7b0ebf6a5 state(vault): update encrypted state Viktor Barzin 2026-05-22 10:04:55 +00:00
  • 8228171104 cluster-health: add checks 43 + 44 (PVE host thermals + load) Viktor Barzin 2026-05-22 09:55:11 +00:00
  • 1b21d4819e postiz: disable unused providers + pin temporal vs Keel force-policy Viktor Barzin 2026-05-21 10:04:22 +00:00
  • 533a89a010 docs: HA control plane design (3 masters) Viktor Barzin 2026-05-21 09:41:20 +00:00
  • 2dc7e001bd k8s-version-upgrade: retry kubeadm apply on static-pod-hash timeout Viktor Barzin 2026-05-21 09:32:29 +00:00
  • fc0510aa67 k8s-version-upgrade: kill-switch + ignore RecentNodeReboot + shorter quiet window Viktor Barzin 2026-05-21 09:23:41 +00:00
  • 944cf51f6b authentik: worker replicas 3 -> 2 Viktor Barzin 2026-05-21 09:14:35 +00:00
  • 8c87b77f1b forgejo: disable source archive ZIP/TAR downloads Viktor Barzin 2026-05-21 09:12:20 +00:00
  • af6aa18b25 monitoring: prometheus global scrape 1m -> 2m + UPS pinned 30s Viktor Barzin 2026-05-21 08:32:57 +00:00
  • aba061cf2e alloy: switch pod log shipping from apiserver to file-tail Viktor Barzin 2026-05-21 08:27:34 +00:00
  • b6724a5d48 vault: add pg-matrix + pg-technitium static roles to allowed_roles Viktor Barzin 2026-05-21 08:11:11 +00:00
  • 9247a68514 state(vault): update encrypted state Viktor Barzin 2026-05-21 08:09:11 +00:00
  • 926d507313 k8s-version-upgrade: grant get/list on apps resources for drain Viktor Barzin 2026-05-21 08:07:29 +00:00