infra

viktor/infra

Fork 0

Commit graph

0aea98f225 Woodpecker CI Update TLS Certificates Commit root 2026-05-03 00:02:02 +00:00
6715cdc51f monitoring(wealth): re-add milestone annotations (now that PG creds rotated) Viktor Barzin 2026-05-02 20:27:21 +00:00
0ef36aec36 Revert "monitoring(wealth): milestone annotations on every timeseries chart" Viktor Barzin 2026-05-02 20:20:18 +00:00
5a00b9c096 monitoring(wealth): milestone annotations on every timeseries chart Viktor Barzin 2026-05-02 08:42:21 +00:00
86385f5842 priority-pass: pin to DockerHub viktorbarzin/* (GHA-built, sha 50a432ad) Viktor Barzin 2026-05-01 19:27:33 +00:00
d76b5dbc4b priority-pass: backend c2b4ac50 — crop to card before transforming Viktor Barzin 2026-05-01 19:06:02 +00:00
40a6cd067b authentik: long-lived authenticated sessions, short-lived anonymous ones Viktor Barzin 2026-05-01 19:03:50 +00:00
dfbf6faf3d priority-pass: backend f4246691 (QR fit fix + persist uploads), add encrypted PVC Viktor Barzin 2026-05-01 18:50:51 +00:00
ce7a584801 priority-pass: frontend ea9176f8 (gallery upload), sync backend pin to live Viktor Barzin 2026-05-01 18:38:30 +00:00
664a85ef1e Revert "monitoring(wealth): show daily points + lighter fill on timeseries" Viktor Barzin 2026-05-01 16:24:18 +00:00
5472720c75 monitoring(wealth): show daily points + lighter fill on timeseries Viktor Barzin 2026-05-01 16:23:25 +00:00
2722260ce9 monitoring(wealth): unbreak timeseries SQL — over-escaped time alias Viktor Barzin 2026-05-01 16:19:07 +00:00
d67416d4ca monitoring(wealth): tighten default time range, bump decimals for granularity Viktor Barzin 2026-05-01 16:15:39 +00:00
628f5a0d26 monitoring(wealth): skew-resilient queries, no more partial-day dips Viktor Barzin 2026-05-01 16:08:18 +00:00
1d3ae01aac wealthfolio(daily-sync): API call CronJob, replaces rollout-restart Viktor Barzin 2026-04-29 21:21:24 +00:00
31b9e5d4a9 monitoring(wealth): add 12mo contrib + 12mo gain to top row Viktor Barzin 2026-04-27 06:32:53 +00:00
cd96fb64a8 phpipam-pfsense-import: every 5min → hourly Viktor Barzin 2026-04-26 22:48:43 +00:00
6ad5292128 immich: bump server to 8Gi + override tier-2-gpu quota to 20Gi Viktor Barzin 2026-04-26 20:02:28 +00:00
d093aed7f6 immich(server,ml): bump server to 4Gi + Recreate strategy on tight quota Viktor Barzin 2026-04-26 19:11:50 +00:00
07bc0098e3

ci(woodpecker): show full terraform error on stack apply failure Viktor Barzin 2026-04-26 18:39:46 +00:00
215717c90f monitoring(dashboards): tables at the bottom convention Viktor Barzin 2026-04-26 18:30:52 +00:00
bb28485ce0 monitoring(wealth): move 12mo return to top bar, shrink to w=4 Viktor Barzin 2026-04-26 18:19:24 +00:00
532285e48c traefik: raise websecure idleTimeout 180s -> 600s for iOS Immich -1005 Viktor Barzin 2026-04-26 12:32:05 +00:00
3489621a45 nextcloud(backup): pin backup pod to nextcloud's node via podAffinity Viktor Barzin 2026-04-26 11:03:20 +00:00
a24cd7ceb7 monitoring(uk-payslip): yearly receipt aligns with P60 (RSU gross) Viktor Barzin 2026-04-26 10:24:06 +00:00
d0152e1f38 crowdsec/traefik: stop captchaing legit Immich mobile bursts Viktor Barzin 2026-04-26 09:27:16 +00:00
222013806d monitoring(uk-payslip): split salary into cash + pension on yearly receipt Viktor Barzin 2026-04-26 09:18:11 +00:00
423aac0908 Woodpecker CI Update TLS Certificates Commit root 2026-04-26 00:03:26 +00:00
21ac619fac monitoring(uk-payslip): promote yearly receipt + YTD gross YoY to row 4 Viktor Barzin 2026-04-25 23:58:15 +00:00
53f555dc61 monitoring(uk-payslip): drop 3 panels referencing undeployed data Viktor Barzin 2026-04-25 23:56:03 +00:00
b2a25775aa monitoring(uk-payslip): simplify yearly receipt to earned-and-kept view Viktor Barzin 2026-04-25 23:42:20 +00:00
a17304f735 monitoring(uk-payslip): fix empty YTD gross YoY chart Viktor Barzin 2026-04-25 23:36:16 +00:00
ac18c49a7b monitoring(wealth): fix x-axis label formatting on yearly bars Viktor Barzin 2026-04-25 23:31:03 +00:00
77bed10a51 monitoring: investment-only returns + YoY YTD gross line chart Viktor Barzin 2026-04-25 23:25:42 +00:00
55d1da41f6 monitoring: more growth detail in Wealth + gross composition in UK Payslip Viktor Barzin 2026-04-25 23:21:42 +00:00
d48e222054 monitoring: lock Finance (Personal) folder to admin + fix cash classification Viktor Barzin 2026-04-25 23:11:26 +00:00
51bf38815c vault: record Phase 3 vault Released-PV cleanup Viktor Barzin 2026-04-25 23:08:45 +00:00
498400173c wealthfolio-sync: skip the synthetic TOTAL row in ETL Viktor Barzin 2026-04-25 22:59:24 +00:00
f0ce7b0363 fire-planner: add stack, Vault DB role, dashboard, DB Viktor Barzin 2026-04-25 17:27:19 +00:00
484b4c7190 vault: complete Phase 2 NFS-hostile migration; remove nfs-proxmox SC Viktor Barzin 2026-04-25 17:10:00 +00:00
df2fa0a31d state(vault): update encrypted state Viktor Barzin 2026-04-25 17:09:35 +00:00
bf4c7618d8 wealth: SQLite→PG ETL sidecar + new Grafana dashboard Viktor Barzin 2026-04-25 17:07:33 +00:00
7dd580972a state(vault): update encrypted state Viktor Barzin 2026-04-25 16:57:42 +00:00
ac8d2f548b paperless-ngx: migrate to proxmox-lvm-encrypted Viktor Barzin 2026-04-25 16:48:53 +00:00
4f5f1ff8c2 monitoring(uk-payslip): add yearly receipt stacked barchart panel Viktor Barzin 2026-04-25 16:26:57 +00:00
288efa89b3 vault: migrate vault-0 storage to proxmox-lvm-encrypted Viktor Barzin 2026-04-25 16:19:49 +00:00
08b13858dd state(vault): update encrypted state Viktor Barzin 2026-04-25 16:16:35 +00:00
b3c29eda12 monitoring(uk-payslip): model UK income-tax bands + PA-taper for RSU marginal Viktor Barzin 2026-04-25 16:14:49 +00:00
3f85cee1ef state(vault): update encrypted state Viktor Barzin 2026-04-25 16:08:38 +00:00
43e4f3f68e immich: migrate PostgreSQL off NFS to proxmox-lvm-encrypted Viktor Barzin 2026-04-25 15:47:30 +00:00
0d5f53f337 monitoring(uk-payslip): replace misleading take-home rates in Panel 3 Viktor Barzin 2026-04-25 15:45:47 +00:00
8f0d13282c monitoring(uk-payslip): drop cash PAYE/NI from "Tax & pension — monthly" Viktor Barzin 2026-04-25 15:43:32 +00:00
2230cb6cf4 monitoring(uk-payslip): drop tax/NI from "Monthly cash flow (RSU stripped)" panel Viktor Barzin 2026-04-25 15:30:46 +00:00
cb3ffa6d8d monitoring(uk-payslip): smooth quarterly RSU tax bumps via flat 47% marginal Viktor Barzin 2026-04-25 15:13:29 +00:00
4315ed5c2a [backup] Fix lvm-pvc-snapshot Pushgateway push (stdout pollution in cmd_prune_count) Viktor Barzin 2026-04-25 14:30:58 +00:00
d231615ebb [monitoring] Fix fuse voltage alerts — divide raw deciVolt reading by 10 Viktor Barzin 2026-04-24 11:12:56 +00:00
a5e4db9af8 [monitoring] Tuya Cloud root-cause alert + cascade suppression Viktor Barzin 2026-04-23 09:59:48 +00:00
5ebd3a81c3 tuya-bridge: liveness probe hits /health so k8s restarts silently-hung bridge Viktor Barzin 2026-04-23 07:47:41 +00:00
8e55c4357a [poison-fountain] opt ingress out of Uptime Kuma external monitor Viktor Barzin 2026-04-22 21:24:22 +00:00
344fce3692 [monitoring][poison-fountain] pushgateway persistence + cronjob uid-0 Viktor Barzin 2026-04-22 18:32:29 +00:00
f1f723be83 [technitium] zone-sync now reconciles primaryNameServerAddresses Viktor Barzin 2026-04-22 17:47:18 +00:00
7dfe89a6e0 [redis] stabilise against node-crash flap cascade — RC1-RC5 fixes Viktor Barzin 2026-04-22 15:59:00 +00:00
fdced7577b [monitoring] HomeAssistantCriticalSensorUnavailable alert Viktor Barzin 2026-04-22 14:52:23 +00:00
dc05c440bc [hermes-agent] disable deployment — PVC permission mismatch Viktor Barzin 2026-04-22 14:31:50 +00:00
a4eafafe49 [monitoring] Add GPUNodeUnschedulable alert — fires when GPU node is cordoned Viktor Barzin 2026-04-22 14:05:12 +00:00
e2146e6916 gpu: schedule off NFD label, not k8s-node1 hostname Viktor Barzin 2026-04-22 13:43:07 +00:00
134d6b9a82 vault runbook + raft/HA stuck-leader alerts Viktor Barzin 2026-04-22 12:44:46 +00:00
4cb2c157da post-mortem 2026-04-22: full timeline — second regression + node4 reboot Viktor Barzin 2026-04-22 11:44:56 +00:00
2f1f9107f8 vault: add fsGroupChangePolicy=OnRootMismatch + 2026-04-22 post-mortem Viktor Barzin 2026-04-22 11:12:19 +00:00
6a4a477336 [infra] Update RPi Sofia DNS: 192.168.1.16 → 192.168.1.10 Viktor Barzin 2026-04-22 10:55:34 +00:00
d39770b30d monitoring: tighten LVMSnapshotStale to 30h for daily-cadence detection Viktor Barzin 2026-04-22 08:54:37 +00:00
3eb8b9a4ea ci: add vault CLI to infra-ci image + surface real errors in scripts/tg Viktor Barzin 2026-04-22 08:46:50 +00:00
4a343c33f0 monitoring: bring EmailRoundtripStale threshold docs in sync with for:20m Viktor Barzin 2026-04-21 22:39:46 +00:00
9b4970da61 monitoring: alert hygiene — disambiguate, rename, tune, fix inhibits Viktor Barzin 2026-04-21 22:29:15 +00:00
ac695dea38 [registry] bulk-clean 34 orphan manifests + beads-server image bump Viktor Barzin 2026-04-19 23:16:34 +00:00
9041f52b05 monitoring: TechnitiumZoneCountMismatch — compare replicas only, exclude primary Viktor Barzin 2026-04-19 22:15:55 +00:00
4bedabb9e8 healthcheck: fix three false-positive WARNs (HA token, cert-manager, LVM snap grep) Viktor Barzin 2026-04-19 22:13:32 +00:00
e092f159b3 monitoring: drop MAM Mouse-class + qBittorrent-unsatisfied alerts Viktor Barzin 2026-04-19 21:24:46 +00:00
68a10905e0 [monitoring] uk-payslip Panel 13: stacked bars + sum-in-legend Viktor Barzin 2026-04-19 20:31:53 +00:00
2224a6b2cc [job-hunter] Bump image to 92afc38d — Frankfurter FX + comp_table COALESCE Viktor Barzin 2026-04-19 19:09:54 +00:00
e813170960 [job-hunter] Bump image to 99ab188f — levels.fyi per-level + comp_points Viktor Barzin 2026-04-19 18:56:20 +00:00
3f6dfb10aa [monitoring] job-hunter: panels 6-9 for comp_points tables + trends Viktor Barzin 2026-04-19 18:50:48 +00:00
a8280e77b6 [broker-sync] unsuspend IMAP + Panel 15 RSU vest reconciliation (Phase D) Viktor Barzin 2026-04-19 18:29:01 +00:00
1c0e1bcdde [payslip-ingest] ActualBudget payroll sync CronJob + Panel 14 (Phase C) Viktor Barzin 2026-04-19 18:21:20 +00:00
ef53053ae6 [job-hunter] Bump image to 48f8615d — London filter + AI CLI Viktor Barzin 2026-04-19 18:13:26 +00:00
fca3dd4976 [monitoring] uk-payslip: Panel 2 uses COALESCE cash_income_tax; Panel 4 flags NULL Viktor Barzin 2026-04-19 18:04:05 +00:00
7e34b67f24 [docs] Architecture docs: registry integrity probe, pin, new CI pipelines Viktor Barzin 2026-04-19 17:51:26 +00:00
fec0bbb7dd [job-hunter] Pin to first built image tag 9c42eac9 Viktor Barzin 2026-04-19 17:48:16 +00:00
42961a5f58 [registry] fix-broken-blobs.sh — check revision-link, not blob data Viktor Barzin 2026-04-19 17:43:35 +00:00
f4d3fdb2e3 [monitoring] uk-payslip: drop RSU-vest annotations Viktor Barzin 2026-04-19 17:32:49 +00:00
34ee282d88 [ci] Auto-sync modules/docker-registry/* to registry VM + runbook docs Viktor Barzin 2026-04-19 17:32:12 +00:00
a641dc744f [monitoring] uk-payslip: RSU vest annotations + cash-only tax panel Viktor Barzin 2026-04-19 17:24:35 +00:00
6e96b436b1 [docs] Capture nginx stale-DNS trap in registry-vm runbook Viktor Barzin 2026-04-19 17:24:09 +00:00
c9d6343a9b [job-hunter] Switch ExternalSecret to explicit UPPERCASE data mappings Viktor Barzin 2026-04-19 17:23:28 +00:00
9f9d7d10ff [registry] Scope OCI-index scan to private registry only Viktor Barzin 2026-04-19 17:23:04 +00:00
e7ce545da2 [job-hunter] Add infra stack + Grafana dashboard + n8n digest workflow Viktor Barzin 2026-04-19 17:09:29 +00:00
7cb44d7264 [registry] Stop recurring orphan OCI-index incidents — detection + prevention + recovery Viktor Barzin 2026-04-19 17:08:28 +00:00
df2c53db8d [infra] TrueNAS decommission — remove active references from Terraform + configs Viktor Barzin 2026-04-19 16:57:05 +00:00
5a0b24f54e [docs] TrueNAS decommission cleanup — remove references from active docs Viktor Barzin 2026-04-19 16:55:43 +00:00
5f832e37d0 [monitoring] UK Payslip — add tax & pension breakdown panels Viktor Barzin 2026-04-19 16:53:32 +00:00