infra

viktor/infra

Fork 0

Commit graph

8a2442f297 aiostreams: weekly backup of Stremio account addon collection Viktor Barzin 2026-05-15 23:48:41 +00:00
1e8cd542b7 recruiter-responder: public /cb ingress for Telegram URL-button callbacks Viktor Barzin 2026-05-15 23:46:49 +00:00
3d3e749f4d aiostreams: whitelist Vidhin + Tamtaro sync URLs Viktor Barzin 2026-05-15 23:37:47 +00:00
acfc779c45 aiostreams: weekly NFS backup of decrypted user config Viktor Barzin 2026-05-15 23:30:04 +00:00
d530cd53b8 Woodpecker CI deploy [CI SKIP] root 2026-05-15 23:20:04 +00:00
1ffab190fd recruiter-responder: pin image tag + run plugin installer init as root Viktor Barzin 2026-05-15 23:18:43 +00:00
d3d02342db recruiter-responder: vault DB role + switch proactive push to Telegram Viktor Barzin 2026-05-15 22:47:45 +00:00
c5ebbc07e4 state(vault): update encrypted state Viktor Barzin 2026-05-15 22:46:37 +00:00
7b26afa694 recruiter-responder: deploy stack + llama-cpp qwen3-8b + openclaw plugin mount Viktor Barzin 2026-05-15 22:38:53 +00:00
b6e334daab aiostreams: 1h stream cache + canary stream-count probe + 3 alerts Viktor Barzin 2026-05-15 21:38:50 +00:00
e037b160d0 Woodpecker CI deploy [CI SKIP] root 2026-05-15 21:29:50 +00:00
06b166202d aiostreams: pin nightly + switch to auth=app Viktor Barzin 2026-05-15 21:28:09 +00:00
2d52b583f5 monitoring(wealth): move Positions table under contrib/growth row Viktor Barzin 2026-05-14 16:58:38 +00:00
f1c56bf257 wealth: positions table panel (shares + cost basis + unrealised return) Viktor Barzin 2026-05-14 16:01:27 +00:00
db763fbc21 terminal: extract app code to viktor/terminal-lobby on Forgejo Viktor Barzin 2026-05-13 21:10:56 +00:00
e2aa2931e4 terminal: make slate the default theme Viktor Barzin 2026-05-13 20:54:54 +00:00
699acdbd0a terminal: theme picker (carbon/slate/mono/ink) replacing violet Viktor Barzin 2026-05-13 20:46:21 +00:00
29ecb67d8c terminal: rename sessions + drag-and-drop reorder Viktor Barzin 2026-05-13 20:18:15 +00:00
0396fdadb2 terminal: inline session switching via sidebar + iframe Viktor Barzin 2026-05-13 20:07:36 +00:00
b7dfc6fcaa Woodpecker CI deploy [CI SKIP] root 2026-05-13 19:56:16 +00:00
3a2d9a9bc5 actualbudget: add enabled flag to factory, disable emo Viktor Barzin 2026-05-13 19:55:21 +00:00
f63f10f7fa terminal: per-Authentik-user OS-user isolation; deny unmapped users Viktor Barzin 2026-05-13 19:25:55 +00:00
e88ce131f1 terminal: cut over to multi-session lobby on terminal.viktorbarzin.me Viktor Barzin 2026-05-13 16:34:11 +00:00
cb37db4e7e Woodpecker CI deploy [CI SKIP] root 2026-05-13 15:25:01 +00:00
a724169b0e terminal: add multi-tmux-session lobby on term.viktorbarzin.me (additive) Viktor Barzin 2026-05-13 15:24:04 +00:00
5754cfb56f monitoring(wealth): paint declining segments red on growth chart Viktor Barzin 2026-05-12 19:22:43 +00:00
0f8faca3d0 payslip-ingest, instagram-poster: suspend two chronic-failure cronjobs Viktor Barzin 2026-05-12 13:31:33 +00:00
bf2fda87a8 monitoring: PodImagePullBackOff alert + 2 inhibitors + JobFailed for:2h Viktor Barzin 2026-05-12 09:31:46 +00:00
cbb1184ee4 monitoring: TraefikReplicaConfigStale — drop false-positive on stale series Viktor Barzin 2026-05-12 08:37:17 +00:00
700f7ae49c monitoring: detect stale Traefik replicas + reduce alert-storm cascading Viktor Barzin 2026-05-12 08:23:18 +00:00
01bc16d592 k8s-version-upgrade: decompose into Job chain to fix self-preemption Viktor Barzin 2026-05-11 23:54:05 +00:00
afda1d12b8 Woodpecker CI deploy [CI SKIP] root 2026-05-11 20:46:02 +00:00
df5edd8542 wealthfolio, paperless-ngx: drop migration-leftover -proxmox PVCs Viktor Barzin 2026-05-11 20:44:17 +00:00
5ef2642eda claude-agent: replace unused 10Gi PVC with 5Gi NFS-backed /persistent Viktor Barzin 2026-05-11 20:40:21 +00:00
38d33c98b6 monitoring: drop PVAutoExpanding alert — info-only noise, not actionable Viktor Barzin 2026-05-11 20:13:42 +00:00
858350fa93 monitoring(wealth): paint declining segments red on portfolio chart Viktor Barzin 2026-05-11 20:13:16 +00:00
545cd2b854 healthcheck: probe uptime-kuma via internal Service (port-forward), not public URL Viktor Barzin 2026-05-11 20:02:57 +00:00
cca7c07050 vault: move audit-PVC autoresizer annotations to kubernetes_annotations Viktor Barzin 2026-05-11 19:41:35 +00:00
407a17d8cd state(vault): update encrypted state Viktor Barzin 2026-05-11 19:40:05 +00:00
e692a0a0c5 ci: retrigger image rebuild — prior pipeline aborted during PG outage Viktor Barzin 2026-05-11 19:30:34 +00:00
205c902de5 docs/auth: sync to current auth enum (required/app/public/none) Viktor Barzin 2026-05-11 19:28:42 +00:00
85f1e92ad7 real-estate-crawler: populate SCRAPE_SCHEDULES (daily RENT + weekly BUY, London 1-2 bed) Viktor Barzin 2026-05-11 19:26:57 +00:00
aee434469c ci: add python3 to infra-ci image — unblocks scripts/tg auth-comment check Viktor Barzin 2026-05-11 19:26:55 +00:00
53657d9952 infra: document auth = "app|none" tier on every legacy ingress Viktor Barzin 2026-05-11 19:25:48 +00:00
6fb2c1c7ba dbaas+monitoring: bump PG max_connections to 200, add scrape + alerts Viktor Barzin 2026-05-11 19:20:54 +00:00
0712a1b659 infra/scripts/tg: enforce ingress_factory auth-comment convention Viktor Barzin 2026-05-11 19:18:27 +00:00
b91268fef4 state(dbaas): update encrypted state Viktor Barzin 2026-05-11 19:08:05 +00:00
459b00fa74 infra/ingress_factory: add auth = "app" mode for self-authed backends Viktor Barzin 2026-05-11 18:59:11 +00:00
dafd7a18bc Woodpecker CI deploy [CI SKIP] root 2026-05-11 18:56:29 +00:00
a980f78b58 actualbudget+monitoring: per-account bank-sync metrics, drop noisy alert Viktor Barzin 2026-05-11 18:55:15 +00:00
5a271e70ab infra: drop Authentik forward-auth from 7 self-authed apps (auth = "none") Viktor Barzin 2026-05-11 18:46:36 +00:00
533e7b2a50 infra/novelapp: drop Authentik forward-auth (auth = "none") Viktor Barzin 2026-05-11 18:31:54 +00:00
e1185721ca Woodpecker CI deploy [CI SKIP] root 2026-05-10 22:49:51 +00:00
8516dfbbe4 claude-memory / resume: unblock terragrunt apply (var defaults + psql -d postgres) Viktor Barzin 2026-05-10 22:47:54 +00:00
2f0e8c88a9 healthcheck: tune noise filters + nvidia-exporter auth=none Viktor Barzin 2026-05-10 22:26:22 +00:00
7d7c7e4b7f Woodpecker CI deploy [CI SKIP] root 2026-05-10 22:03:36 +00:00
71e8476e06 frigate: lan ingress auth=none for HA Sofia integration Viktor Barzin 2026-05-10 22:02:21 +00:00
bf752dffa5 fix: pvc-autoresizer + TF drift safety — bulk add ignore_changes Viktor Barzin 2026-05-10 21:57:01 +00:00
5c59429182 fix: HA Sofia REST sensors + PVC drift safety Viktor Barzin 2026-05-10 21:48:29 +00:00
2db8bdac0d state(dbaas): update encrypted state Viktor Barzin 2026-05-10 21:00:00 +00:00
5582977e1a vault: enroll audit-vault-0 in pvc-autoresizer (10Gi limit) Viktor Barzin 2026-05-10 20:01:06 +00:00
9806c33359 dbaas: pg-cluster threshold 80%→10% in CNPG inheritedMetadata Viktor Barzin 2026-05-10 19:58:11 +00:00
fecfa211fd fix: pvc-autoresizer threshold should be 10%, not 80% Viktor Barzin 2026-05-10 19:56:16 +00:00
5d0e17b5ba k8s-version-upgrade: detection script refresh apt before madison + DRY_RUN_OVERRIDE Viktor Barzin 2026-05-10 19:33:11 +00:00
988bfde45c k8s-version-upgrade: trigger etcd snapshot via existing backup-etcd Job; broaden agent RBAC Viktor Barzin 2026-05-10 19:16:12 +00:00
a58d777059 k8s-version-upgrade: automated kubeadm/kubelet/kubectl upgrade pipeline Viktor Barzin 2026-05-10 19:07:42 +00:00
f0ae61358b fire-planner / k8s-portal / insta2spotify: revert auth=public to auth=none Viktor Barzin 2026-05-10 18:59:31 +00:00
65c4fc6c0b Woodpecker CI deploy [CI SKIP] root 2026-05-10 18:57:31 +00:00
77d111f5fc owntracks: explicit auth = "none" — Phase 5 audit completion Viktor Barzin 2026-05-10 18:55:04 +00:00
e4f806abe3 ingress_factory: replace protected bool with auth enum + audit pass across 100 stacks Viktor Barzin 2026-05-10 18:53:49 +00:00
317d6aa99f instagram-poster: disable ig-ingest-stories CronJob until /ig-ingest ships Viktor Barzin 2026-05-10 18:49:25 +00:00
c647791774 scripts: timeout rsync + sqlite calls in daily-backup Viktor Barzin 2026-05-10 18:39:07 +00:00
8ff74bb422 cloudflare: disable AI bot edge-block so x402 can issue payment offers Viktor 2026-05-10 18:37:29 +00:00
02a12f1ae4 monitoring(prometheus): keep all 4 kubelet_volume_stats_inodes metrics Viktor Barzin 2026-05-10 18:36:16 +00:00
0e837b57b8 authentik: add public guest auto-login flow + dedicated outpost + traefik public middleware Viktor Barzin 2026-05-10 18:26:16 +00:00
1e4eac5386 proxmox-csi: opt SCs into pvc-autoresizer (resize.topolvm.io/enabled=true) Viktor Barzin 2026-05-10 18:22:25 +00:00
c36858eddd x402: flip gateway live with Viktor's wallet + Slack payment notifications Viktor 2026-05-10 18:21:37 +00:00
d1777d6119 kured(sentinel-gate): fix auth + write-perm so safety checks actually run Viktor Barzin 2026-05-10 18:16:54 +00:00
64c71615e8 scripts: cluster_healthcheck defaults to ~/.kube/config Viktor Barzin 2026-05-10 18:12:40 +00:00
a245e6e569 docs: add k8s node auto-upgrade runbook + architecture section Viktor Barzin 2026-05-10 17:26:15 +00:00
acd9438e4f monitoring(grafana): swap python3 for jq in folder-ACL local-exec Viktor Barzin 2026-05-10 17:09:33 +00:00
016584651e docs/plans: 2026-04-20 infra audit design (post-research, post-challenge) Viktor Barzin 2026-05-10 17:07:49 +00:00
c0991f7f8f infra: re-enable unattended-upgrades with kured prometheus-gating Viktor Barzin 2026-05-10 17:07:32 +00:00
df435f3daa monitoring: protect grafana ingress with authentik + disable anonymous Viktor Barzin 2026-05-10 17:01:50 +00:00
6c4e096688 authentik: zero-endpoints alert + upgrade-validation checklist Viktor Barzin 2026-05-10 16:54:48 +00:00
af9556ca96 infra/instagram-poster: shared CNPG-backed benchmark DB, no PVC for scores Viktor Barzin 2026-05-10 16:37:33 +00:00
117b99e28f docs/authentik: document postgres session backend + close out 2026-04-18 post-mortem items Viktor Barzin 2026-05-10 16:28:11 +00:00
30cdd05bd8 state(vault): update encrypted state Viktor Barzin 2026-05-10 16:28:09 +00:00
d4e1b4c71a state(dbaas): update encrypted state Viktor Barzin 2026-05-10 16:27:51 +00:00
07b943c31c authentik/pgbouncer: image_pull_policy IfNotPresent -> Always (match live) Viktor Barzin 2026-05-10 16:22:24 +00:00
59a7349564 authentik: codify proxy provider TTL + adopt embedded outpost Viktor Barzin 2026-05-10 16:18:42 +00:00
cd2884ce94 infra/compute: bump k8s-node1 RAM 32 -> 48 GiB Viktor Barzin 2026-05-10 15:24:26 +00:00
764c234b1c infra/llama-cpp: benchmark report + -fa flag fix Viktor Barzin 2026-05-10 15:03:16 +00:00
00dc756716 anubis: only challenge GET requests; allow everything else Viktor Barzin 2026-05-10 14:55:50 +00:00
4aeefd36a4 Woodpecker CI deploy [CI SKIP] root 2026-05-10 14:48:36 +00:00
dc286a67d1 privatebin: drop Anubis — broke XHR paste creation Viktor Barzin 2026-05-10 14:47:48 +00:00
34acd98785 infra/llama-cpp: add stack — llama-swap fronting Qwen3-VL + MiniCPM-V Viktor Barzin 2026-05-10 14:13:40 +00:00
ce65dc2385 kms: document native DNS auto-discovery (no client config needed) Viktor Barzin 2026-05-10 13:51:45 +00:00
d67c3027bc kms: per-connection state in notifier (vlmcsd is multi-threaded) Viktor Barzin 2026-05-10 13:21:38 +00:00
9163909fad fire-planner: imagePullPolicy=Always on alembic-migrate init container Viktor Barzin 2026-05-10 13:09:15 +00:00