infra

viktor/infra

Fork 0

Commit graph

59a7349564 authentik: codify proxy provider TTL + adopt embedded outpost Viktor Barzin 2026-05-10 16:18:42 +00:00
cd2884ce94 infra/compute: bump k8s-node1 RAM 32 -> 48 GiB Viktor Barzin 2026-05-10 15:24:26 +00:00
764c234b1c infra/llama-cpp: benchmark report + -fa flag fix Viktor Barzin 2026-05-10 15:03:16 +00:00
00dc756716 anubis: only challenge GET requests; allow everything else Viktor Barzin 2026-05-10 14:55:50 +00:00
4aeefd36a4 Woodpecker CI deploy [CI SKIP] root 2026-05-10 14:48:36 +00:00
dc286a67d1 privatebin: drop Anubis — broke XHR paste creation Viktor Barzin 2026-05-10 14:47:48 +00:00
34acd98785 infra/llama-cpp: add stack — llama-swap fronting Qwen3-VL + MiniCPM-V Viktor Barzin 2026-05-10 14:13:40 +00:00
ce65dc2385 kms: document native DNS auto-discovery (no client config needed) Viktor Barzin 2026-05-10 13:51:45 +00:00
d67c3027bc kms: per-connection state in notifier (vlmcsd is multi-threaded) Viktor Barzin 2026-05-10 13:21:38 +00:00
9163909fad fire-planner: imagePullPolicy=Always on alembic-migrate init container Viktor Barzin 2026-05-10 13:09:15 +00:00
9d4e2fc4a0 kms: dedicate MetalLB IP 10.0.20.202 + filter probe noise Viktor Barzin 2026-05-10 13:02:58 +00:00
295cfd776c fire-planner: expose actualbudget creds via ExternalSecret Viktor Barzin 2026-05-10 11:12:08 +00:00
a5e9fd8c71 fire-planner: expose actualbudget creds via ExternalSecret Viktor Barzin 2026-05-10 11:12:08 +00:00
753e9bb971 x402: consolidate to a single shared forwardAuth gateway Viktor Barzin 2026-05-10 10:54:38 +00:00
ce4a75d79a x402: deploy payment gateway in front of Anubis on all 9 public sites Viktor Barzin 2026-05-10 02:25:57 +00:00
a1b659de2a Woodpecker CI deploy [CI SKIP] root 2026-05-10 01:25:35 +00:00
04cb22fd3b anubis: re-protect f1 with a per-host policy that allows JSON routes Viktor Barzin 2026-05-10 01:24:50 +00:00
a89d4a7d2a anubis: pull f1 off Anubis (XHR-vs-challenge collision) + add latency alerts Viktor Barzin 2026-05-10 01:01:52 +00:00
8197842646 anubis: fix 500 on multi-replica + roll out to 6 more public sites Viktor Barzin 2026-05-10 00:50:30 +00:00
abdef1781c anubis: strict bot policy — catch-all CHALLENGE for unmatched UAs Viktor Barzin 2026-05-10 00:21:56 +00:00
2d6812f951 fire-planner: dual ingress — /api/* unprotected, / behind Authentik Viktor Barzin 2026-05-10 00:06:40 +00:00
58fd4025f8 anubis: per-site PoW reverse proxy on blog + kms + travel-blog Viktor Barzin 2026-05-10 00:04:37 +00:00
ea2cb57e69 Woodpecker CI Update TLS Certificates Commit root 2026-05-10 00:03:47 +00:00
248279605b postiz: disable signups (DISABLE_REGISTRATION=true) Viktor Barzin 2026-05-10 00:02:27 +00:00
9904561c26 fire-planner: ingress port 8080 (was defaulting to 80) Viktor Barzin 2026-05-09 23:32:24 +00:00
017e139b80 Woodpecker CI deploy [CI SKIP] root 2026-05-09 22:14:19 +00:00
08edd92b22 kms: deploy slack-notifier sidecar with Prometheus metrics + document public exposure Viktor Barzin 2026-05-09 22:12:46 +00:00
efadeb531d state(dbaas): update encrypted state Viktor Barzin 2026-05-09 18:05:09 +00:00
0d8e0ca6fc backup: fix daily-backup silent failures, postiz pg_dump CronJob, doc reconcile Viktor Barzin 2026-05-09 17:41:04 +00:00
8c619278d3 grafana: env-var datasources + reloader so Vault rotations stop breaking dashboards Viktor Barzin 2026-05-09 17:38:38 +00:00
57250cfda2 mysql: bump to 4Gi limit / 3Gi request; grow /srv/nfs LV to 3 TiB Viktor Barzin 2026-05-09 17:01:57 +00:00
b254c536f9 ig-poster: bump to da5b4191 (auto-curate from recent favorites) Viktor Barzin 2026-05-09 13:56:56 +00:00
a5a54aebe3 Woodpecker CI deploy [CI SKIP] root 2026-05-09 13:39:14 +00:00
72013a0890 n8n: real-time training loop + decoupled posting Viktor Barzin 2026-05-09 13:37:53 +00:00
ff2f32a33e ig-poster b17a9737 + n8n discover rewritten to use /candidates with CLIP scoring Viktor Barzin 2026-05-09 13:31:28 +00:00
94e2f34e2a ig-poster: bump to 3b862fe4 (EXIF orientation + auto-pending /candidates) Viktor Barzin 2026-05-09 13:23:24 +00:00
29bb434e1e ig-poster: 69e395f2 + sync IMMICH_PG_* via ESO for CLIP scoring; postiz publish-notify n8n workflow Viktor Barzin 2026-05-09 13:16:24 +00:00
cb83972b79 ig-poster: bump to cac6fa97 + sync POSTIZ_INTEGRATION_ID via ESO Viktor Barzin 2026-05-09 12:40:35 +00:00
40ca011bd6 postiz: expose /uploads publicly so Meta IG fetcher can pull JPEGs Viktor Barzin 2026-05-09 12:29:39 +00:00
b3ae2c5476 docs: PVC templates need lifecycle.ignore_changes for autoresizer Viktor Barzin 2026-05-09 12:02:18 +00:00
ce9bf5b676 postiz: wire INSTAGRAM_APP_ID/SECRET via ESO for IG-standalone provider Viktor Barzin 2026-05-09 11:43:01 +00:00
e883c9d63f ci(drift-detection): generate kubeconfig from projected SA token Viktor Barzin 2026-05-09 11:31:53 +00:00
ce45e69e38 ci(woodpecker): generate kubeconfig from projected SA token Viktor Barzin 2026-05-09 11:26:47 +00:00
9c1df3ad96 chore: remove decommissioned registry.viktorbarzin.me ingress Viktor Barzin 2026-05-09 11:03:51 +00:00
8c09543391 fix: restore pvc-autoresizer by allow-listing kubelet_volume_stats_available_bytes Viktor Barzin 2026-05-09 10:49:17 +00:00
c44d855960 ig-poster: pivot to Telegram-only delivery (manual IG upload) Viktor Barzin 2026-05-09 10:45:02 +00:00
bd8dbbc76f postiz: wire FACEBOOK_APP_ID/SECRET via ESO for IG-Business integration Viktor Barzin 2026-05-09 09:19:43 +00:00
02e28294e9 postiz: idempotent Job to drop default Text search attributes (Temporal SQL visibility caps at 3 Text attrs; auto-setup ships with 2, Postiz adds 2 more — gitroomhq/postiz-app#1504) Viktor Barzin 2026-05-09 09:16:07 +00:00
16e408ee59 postiz: bump memory limit to 4Gi (was OOMing during NestJS startup) Viktor Barzin 2026-05-09 09:12:39 +00:00
888df84fb5 postiz: add Temporal sidecar; lock both stacks behind Authentik Viktor Barzin 2026-05-09 09:08:21 +00:00
c6939c3d53 postiz + n8n: real DB URL + webhook-trigger approval Viktor Barzin 2026-05-09 00:55:19 +00:00
5057341d09 postiz + instagram-poster: deploy fixes after first apply Viktor Barzin 2026-05-09 00:47:14 +00:00
2d1dfa49f6 instagram-poster: pin image tag to 23f8b4ed (initial push) Viktor Barzin 2026-05-09 00:09:58 +00:00
73eb01f994 add postiz + instagram-poster stacks for IG Stories pipeline Viktor Barzin 2026-05-09 00:07:44 +00:00
badc341669 openclaw: regenerate kubeconfig at pod start using projected SA tokenFile Viktor Barzin 2026-05-08 08:07:38 +00:00
8b0b4e5148 [ci] build-cli: drop registry.viktorbarzin.me:5050 push (decommissioned) Viktor Barzin 2026-05-08 07:45:32 +00:00
a39893bb60 [woodpecker] Re-fix null_resource trigger after lint reverted it Viktor Barzin 2026-05-08 07:42:56 +00:00
564c64f4c7 f1-stream: register HmembedsExtractor in registry Viktor Barzin 2026-05-07 23:47:50 +00:00
18604d808e f1-stream: hmembeds offline decoder — reverse-engineered the JW Player trap Viktor Barzin 2026-05-07 23:47:25 +00:00
ffa1d6d5dc [woodpecker] Programmatic Forgejo repo registration Viktor Barzin 2026-05-07 23:33:06 +00:00
203a71768d x402: consolidate to a single shared forwardAuth gateway Viktor Barzin 2026-05-10 10:54:38 +00:00
786f0434cb x402: deploy payment gateway in front of Anubis on all 9 public sites Viktor Barzin 2026-05-10 02:25:57 +00:00
c7b996a558 Woodpecker CI deploy [CI SKIP] root 2026-05-10 01:25:35 +00:00
3c340c1796 anubis: re-protect f1 with a per-host policy that allows JSON routes Viktor Barzin 2026-05-10 01:24:50 +00:00
b5f48e7b99 anubis: pull f1 off Anubis (XHR-vs-challenge collision) + add latency alerts Viktor Barzin 2026-05-10 01:01:52 +00:00
efd28ccce5 anubis: fix 500 on multi-replica + roll out to 6 more public sites Viktor Barzin 2026-05-10 00:50:30 +00:00
12fbc404ec anubis: strict bot policy — catch-all CHALLENGE for unmatched UAs Viktor Barzin 2026-05-10 00:21:56 +00:00
c73cd26a73 fire-planner: dual ingress — /api/* unprotected, / behind Authentik Viktor Barzin 2026-05-10 00:06:40 +00:00
f48da84770 anubis: per-site PoW reverse proxy on blog + kms + travel-blog Viktor Barzin 2026-05-10 00:04:37 +00:00
27675cb8f1 Woodpecker CI Update TLS Certificates Commit root 2026-05-10 00:03:47 +00:00
5ea89ebcd7 postiz: disable signups (DISABLE_REGISTRATION=true) Viktor Barzin 2026-05-10 00:02:27 +00:00
ee8dd2f36c fire-planner: ingress port 8080 (was defaulting to 80) Viktor Barzin 2026-05-09 23:32:24 +00:00
bb54b176ac Woodpecker CI deploy [CI SKIP] root 2026-05-09 22:14:19 +00:00
572d6cd8e0 kms: deploy slack-notifier sidecar with Prometheus metrics + document public exposure Viktor Barzin 2026-05-09 22:12:46 +00:00
82dc0f9687 state(dbaas): update encrypted state Viktor Barzin 2026-05-09 18:05:09 +00:00
cfe969fe43 backup: fix daily-backup silent failures, postiz pg_dump CronJob, doc reconcile Viktor Barzin 2026-05-09 17:41:04 +00:00
8f0502230b grafana: env-var datasources + reloader so Vault rotations stop breaking dashboards Viktor Barzin 2026-05-09 17:38:38 +00:00
f9f19e4c54 mysql: bump to 4Gi limit / 3Gi request; grow /srv/nfs LV to 3 TiB Viktor Barzin 2026-05-09 17:01:57 +00:00
dd69dff3a9 ig-poster: bump to da5b4191 (auto-curate from recent favorites) Viktor Barzin 2026-05-09 13:56:56 +00:00
f89205a979 Woodpecker CI deploy [CI SKIP] root 2026-05-09 13:39:14 +00:00
47bb175a4f

n8n: real-time training loop + decoupled posting Viktor Barzin 2026-05-09 13:37:53 +00:00
77a84ae5e0

ig-poster b17a9737 + n8n discover rewritten to use /candidates with CLIP scoring Viktor Barzin 2026-05-09 13:31:28 +00:00
b57b29f9f6

ig-poster: bump to 3b862fe4 (EXIF orientation + auto-pending /candidates) Viktor Barzin 2026-05-09 13:23:24 +00:00
a9ee9cee60

ig-poster: 69e395f2 + sync IMMICH_PG_* via ESO for CLIP scoring; postiz publish-notify n8n workflow Viktor Barzin 2026-05-09 13:16:24 +00:00
f61e7c9bfc

ig-poster: bump to cac6fa97 + sync POSTIZ_INTEGRATION_ID via ESO Viktor Barzin 2026-05-09 12:40:35 +00:00
36d5cebb5c

postiz: expose /uploads publicly so Meta IG fetcher can pull JPEGs Viktor Barzin 2026-05-09 12:29:39 +00:00
d62a9dcda1 docs: PVC templates need lifecycle.ignore_changes for autoresizer Viktor Barzin 2026-05-09 12:02:18 +00:00
e22c023c8c

postiz: wire INSTAGRAM_APP_ID/SECRET via ESO for IG-standalone provider Viktor Barzin 2026-05-09 11:43:01 +00:00
aa64500bc5 ci(drift-detection): generate kubeconfig from projected SA token Viktor Barzin 2026-05-09 11:31:53 +00:00
20738efe4e ci(woodpecker): generate kubeconfig from projected SA token Viktor Barzin 2026-05-09 11:26:47 +00:00
ff4cca73b9 chore: remove decommissioned registry.viktorbarzin.me ingress Viktor Barzin 2026-05-09 11:03:51 +00:00
9d5da4d8e0 fix: restore pvc-autoresizer by allow-listing kubelet_volume_stats_available_bytes Viktor Barzin 2026-05-09 10:49:17 +00:00
352586f711

ig-poster: pivot to Telegram-only delivery (manual IG upload) Viktor Barzin 2026-05-09 10:45:02 +00:00
c2e61cdf31

postiz: wire FACEBOOK_APP_ID/SECRET via ESO for IG-Business integration Viktor Barzin 2026-05-09 09:19:43 +00:00
60dd6c61b5

postiz: idempotent Job to drop default Text search attributes (Temporal SQL visibility caps at 3 Text attrs; auto-setup ships with 2, Postiz adds 2 more — gitroomhq/postiz-app#1504) Viktor Barzin 2026-05-09 09:16:07 +00:00
d3db617b1b

postiz: bump memory limit to 4Gi (was OOMing during NestJS startup) Viktor Barzin 2026-05-09 09:12:39 +00:00
8c4a370a34

postiz: add Temporal sidecar; lock both stacks behind Authentik Viktor Barzin 2026-05-09 09:08:21 +00:00
7f7698991e

postiz + n8n: real DB URL + webhook-trigger approval Viktor Barzin 2026-05-09 00:55:19 +00:00
71e3439650

postiz + instagram-poster: deploy fixes after first apply Viktor Barzin 2026-05-09 00:47:14 +00:00
d5a01b6ad2

instagram-poster: pin image tag to 23f8b4ed (initial push) Viktor Barzin 2026-05-09 00:09:58 +00:00