infra

viktor/infra

Fork 0

Commit graph

ab402b3421 [monitoring] UK Payslip Panel 7 — trim to 5 semantic layers Viktor Barzin 2026-04-19 16:37:12 +00:00
e55c549c9a [redis] Phase 7 step 2: remove Bitnami helm_release + orphan PVCs Viktor Barzin 2026-04-19 16:32:14 +00:00
c113be4d5e [ci] Retrigger default workflow — new infra-ci image now in registry Viktor Barzin 2026-04-19 16:31:44 +00:00
6371e75ef9 [ci] Rebuild infra-ci image — registry index referenced missing blobs Viktor Barzin 2026-04-19 16:29:20 +00:00
b6cd83f85a [redis] Phase 3-7: cutover to redis-v2, Nextcloud HAProxy-only Viktor Barzin 2026-04-19 16:13:43 +00:00
f6685a23a9 [dns] Kea: multi-IP DHCP option 6 (10.0.10, 10.0.20) + TSIG-signed DDNS (WS E) Viktor Barzin 2026-04-19 16:12:23 +00:00
a05d63eefb [ci] Fix infra pipeline image-pull — drop :5050 from infra-ci image URL Viktor Barzin 2026-04-19 16:00:58 +00:00
b7ea122355 payslip-ingest: pin image_tag=4f70681d — includes migrations 0004+0005 Viktor Barzin 2026-04-19 15:54:24 +00:00
33d934c32f [dns] pfSense: Unbound replaces dnsmasq (WS D) Viktor Barzin 2026-04-19 15:52:41 +00:00
bc866d53fa [servarr/mam-farming] Tune grabber for MAM's real catalogue Viktor Barzin 2026-04-19 15:46:46 +00:00
0f6321ce86 [dns] NodeLocal DNSCache — deploy DaemonSet to all nodes (WS C) Viktor Barzin 2026-04-19 15:46:41 +00:00
eb6ceac5f5 [dns] static-client DNS — Proxmox host, registry VM dual-resolver setup (WS F) Viktor Barzin 2026-04-19 15:43:49 +00:00
3b54983a9f [ci] build-cli: add logins entry for registry.viktorbarzin.me:5050 Viktor Barzin 2026-04-19 15:42:52 +00:00
364df9f2ea [dns] readiness gate — replace auth-required zone-count probe with DNS parity check Viktor Barzin 2026-04-19 15:24:56 +00:00
f09be1524d monitoring: split income_tax cash/RSU + add P60 & HMRC reconciliation panels Viktor Barzin 2026-04-19 15:23:36 +00:00
91aa39ef96 [dns] readiness gate — reject all-zero zone counts as probe failure Viktor Barzin 2026-04-19 15:23:07 +00:00
150f196095 [redis] Phase 1+2: parallel redis-v2 StatefulSet + Prometheus alerts Viktor Barzin 2026-04-19 15:23:05 +00:00
6ee283c2f0 [docs] Document external-monitor opt-out mechanism in monitoring.md Viktor Barzin 2026-04-19 15:19:06 +00:00
af6574a006 [dns] Fix CoreDNS serve_stale syntax — 24h TTL, no refresh-mode arg Viktor Barzin 2026-04-19 15:18:43 +00:00
752f94ab8f [monitoring] Opt-out external monitor for family/mladost3/task-webhook/torrserver; drop r730 Viktor Barzin 2026-04-19 15:18:27 +00:00
a0d770d9a7 [cluster-health] Expand to 42 checks, remove pod CronJob path Viktor Barzin 2026-04-19 15:13:03 +00:00
5ea079181f [dns] Technitium — raise memory limit to 2Gi (was 1Gi, originally 512Mi) Viktor Barzin 2026-04-19 15:08:04 +00:00
a86a97deb7 [reverse-proxy] Fix gw.viktorbarzin.me — point at 192.168.1.1 via EndpointSlice Viktor Barzin 2026-04-19 15:07:24 +00:00
4b39fbb717 [dns] readiness gate — use dig-in-pod + retries, ephemeral curl pod for zone parity Viktor Barzin 2026-04-19 14:57:29 +00:00
9a21c0f065 [dns] DNS reliability & hardening — Technitium + CoreDNS + alerts + readiness gate Viktor Barzin 2026-04-19 14:53:41 +00:00
a5e097088a [ci] Persist VAULT_TOKEN across Woodpecker step commands Viktor Barzin 2026-04-19 14:30:39 +00:00
2eca011cc3 [ci,vault] Fix Tier-1 apply silently failing in Woodpecker Viktor Barzin 2026-04-19 14:25:52 +00:00
2431c6d5fe [reverse-proxy] ha-sofia per-service retry + ServersTransport Viktor Barzin 2026-04-19 14:07:07 +00:00
947f1bd75d [monitoring] UK Payslip v3.2 — stacked YTD panels, YTD-cumulative rate, Sankey Viktor Barzin 2026-04-19 13:42:04 +00:00
55ade1f9b3 [servarr] Fix qbittorrent container_port 8787 -> 8080 (matches WEBUI_PORT) Service Upgrade Agent 2026-04-19 13:37:44 +00:00
3b4a059243 [uptime-kuma] Fix broken Redis monitor + move to TF-managed list Viktor Barzin 2026-04-19 13:27:57 +00:00
094bc727d4 upgrade: qbittorrent 5.0.4 -> 5.1.4 Service Upgrade Agent 2026-04-19 13:26:15 +00:00
26ef97d294 [claude-agent-service] Add WOODPECKER_API_TOKEN + SLACK_WEBHOOK_URL env vars Viktor Barzin 2026-04-19 13:23:12 +00:00
83f4a72b6f [redis] Raise master+replica memory 256Mi → 512Mi Viktor Barzin 2026-04-19 13:18:30 +00:00
a5963169ec [service-upgrade] Drop vault-CLI assumptions + check default workflow only Viktor Barzin 2026-04-19 13:15:06 +00:00
13cc5d956e [monitoring] UK Payslip dashboard v3.1 — add YTD reconciliation panel Viktor Barzin 2026-04-19 13:12:57 +00:00
581aed5fcc [openclaw,tor-proxy] Opt task-webhook + torrserver out of external monitoring Viktor Barzin 2026-04-19 13:01:36 +00:00
ac95973b38 [monitoring] UK Payslip dashboard v3 — consolidate to 5 panels + data-integrity check Viktor Barzin 2026-04-19 12:47:44 +00:00
4ca793380b [multi] Sweep Kyverno wait-for redis annotations to redis-master Viktor Barzin 2026-04-19 12:44:46 +00:00
12a372bf92 [redis] Migrate live RW consumers off bare redis.redis hostname Viktor Barzin 2026-04-19 12:42:36 +00:00
e6e5fc5f17 [docs] Mailserver architecture — richer diagrams + steady-state accuracy [ci skip] Viktor Barzin 2026-04-19 12:40:53 +00:00
d5a47e35fc [redis] Restore dynamic DNS in HAProxy to fix stale-IP outage Viktor Barzin 2026-04-19 12:39:09 +00:00
43fe11fffc [mailserver] Phase 6 — decommission MetalLB LB path [ci skip] Viktor Barzin 2026-04-19 12:36:11 +00:00
9806d515dd [mailserver] Phase 4+5 — pfSense HAProxy cutover for all 4 mail ports [ci skip] Viktor Barzin 2026-04-19 12:24:50 +00:00
702db75f84 [redis] Stabilise patch_redis_service trigger + document service naming Viktor Barzin 2026-04-19 12:17:52 +00:00
ba697b02a2 [mailserver] Phase 2-3 — pfSense HAProxy bootstrap + runbook [ci skip] Viktor Barzin 2026-04-19 12:07:47 +00:00
602103ede1 [owntracks] Strip face avatar from hook payload + drop orphan PVC Viktor Barzin 2026-04-19 12:05:18 +00:00
ef75c02f0d [mailserver] Phase 1a — alt :2525 postscreen listener + NodePort [ci skip] Viktor Barzin 2026-04-19 11:52:49 +00:00
b60e34032c [authentik] Phase 1 hardening — 3 replicas, PgBouncer PDB/probes, perf env Viktor Barzin 2026-04-19 11:52:41 +00:00
789cb61310 [servarr] Rewrite MAM ratio farming — break Mouse death spiral, adopt in TF Viktor Barzin 2026-04-19 11:45:38 +00:00
5ea0aa70e3 [claude-agent-service] Bump image_tag to 2fd7670d (45m /execute timeout) Viktor Barzin 2026-04-19 11:29:08 +00:00
a5df175a67 [mailserver] Retire Dovecot exporter + scrape + alerts [ci skip] Viktor Barzin 2026-04-19 11:01:07 +00:00
137404a6a2 [mailserver] Document Dovecot exporter incompatibility [ci skip] Viktor Barzin 2026-04-19 10:55:48 +00:00
973f549810 [payslip-ingest] Update extractor agent + dashboard for v2 regex parser Viktor Barzin 2026-04-19 10:54:33 +00:00
c6784f87b5 [docs] Add NFS prerequisite runbook for nfs_volume module [ci skip] Viktor Barzin 2026-04-19 10:40:55 +00:00
28009a0e85 [redis] Bump master/replica memory 64Mi→256Mi (OOMKilled on PSYNC) Viktor Barzin 2026-04-19 10:40:51 +00:00
468a7a266b [mailserver] Drop unneeded NET_ADMIN capability [ci skip] Viktor Barzin 2026-04-19 10:39:43 +00:00
c941199f8d [mailserver] Split Dovecot metrics port onto ClusterIP service [ci skip] Viktor Barzin 2026-04-19 10:37:30 +00:00
7502e0db21 [mailserver] Document postfix-accounts.cf hash-drift invariant [ci skip] Viktor Barzin 2026-04-19 10:33:57 +00:00
23173131f4 [mailserver] Add Dovecot auth_failure_delay 5s [ci skip] Viktor Barzin 2026-04-19 10:33:05 +00:00
a32bfbf07e [mailserver] Require STARTTLS before AUTH on submission [ci skip] Viktor Barzin 2026-04-19 10:31:15 +00:00
e12c7b43e4 [mailserver] Pin dovecot_exporter to SHA + add Diun [ci skip] Viktor Barzin 2026-04-19 10:26:31 +00:00
c36b41eabc [monitoring] Scrape mailserver Dovecot exporter + near-limit alerts Viktor Barzin 2026-04-19 00:24:12 +00:00
6a75ed4809 [mailserver] Add targeted retention for spam@ mailbox Viktor Barzin 2026-04-19 00:20:54 +00:00
6cfc4b7836 [mailserver] Add backup CronJob for Roundcube html + enigma PVCs Viktor Barzin 2026-04-19 00:10:35 +00:00
f707968091 [mailserver] Retry probe Pushgateway + Uptime Kuma pushes with backoff Viktor Barzin 2026-04-19 00:03:54 +00:00
f568e7d2bf [mailserver] Delete unused postfix_cf_reference_DO_NOT_USE variable [ci skip] Viktor Barzin 2026-04-19 00:07:43 +00:00
09c1105648 [mailserver] Delete postfix_cf_reference_DO_NOT_USE dead code [ci skip] Viktor Barzin 2026-04-19 00:03:42 +00:00
1990ee7f8d Woodpecker CI Update TLS Certificates Commit root 2026-04-19 00:02:53 +00:00
8ea2dea84c [mailserver] Authentik-gate Roundcube webmail ingress [ci skip] Viktor Barzin 2026-04-18 23:56:25 +00:00
8f5e131572 [mailserver] Route DMARC rua/ruf to dmarc@viktorbarzin.me [ci skip] Viktor Barzin 2026-04-18 23:49:14 +00:00
b2d2a5bb1c [docs] Document Fail2ban-disabled rationale (CrowdSec is policy) [ci skip] Viktor Barzin 2026-04-18 23:47:59 +00:00
17a3e03e07 [owntracks] Bridge Recorder → Dawarich via Lua hook script Viktor Barzin 2026-04-18 23:47:22 +00:00
cfd0f5bcc9 [mailserver] Add liveness/readiness TCP probes [ci skip] Viktor Barzin 2026-04-18 23:45:17 +00:00
ac604d4d1f [monitoring] uk-payslip: cash-basis queries + RSU vest panel Viktor Barzin 2026-04-18 23:39:46 +00:00
0a2d8b2138 [mailserver] Move probe secrets to ExternalSecret via ESO [ci skip] Viktor Barzin 2026-04-18 23:39:06 +00:00
238a3f14c9 [payslip-extractor] Add RSU handling section Viktor Barzin 2026-04-18 23:37:33 +00:00
73ed2d9001 [monitoring] Add detailed-payslips table + full-deductions panels Viktor Barzin 2026-04-18 23:32:21 +00:00
4cd8d96b01 [monitoring] Widen uk-payslip default time range to 10y Viktor Barzin 2026-04-18 23:26:49 +00:00
1698cd1ce1 [mailserver] Add daily backup CronJob for mailserver PVC Viktor Barzin 2026-04-18 23:26:08 +00:00
a21d4a4424 [owntracks] Fix Service port scheme (https→http), unbreak phone POSTs Viktor Barzin 2026-04-18 23:24:25 +00:00
cc56ba2939 [payslip-ingest] Move Payslips datasource 'database' into jsonData Viktor Barzin 2026-04-18 23:23:07 +00:00
f6cff262f0 broker-sync: chown fidelity_storage_state to broker uid in init container Viktor Barzin 2026-04-18 23:22:43 +00:00
43254ccd3f [infra] Add Woodpecker pipeline to deploy PVE /etc/exports (Wave 6b) Viktor Barzin 2026-04-18 23:21:36 +00:00
b9e9c3f084 [mailserver] Update SPF + docs for Brevo migration [ci skip] Viktor Barzin 2026-04-18 23:13:47 +00:00
06e3425a39 [monitoring] Set rawQuery+editorMode on uk-payslip panel targets Viktor Barzin 2026-04-18 23:12:45 +00:00
ed820e9b58 [monitoring] Fix uk-payslip datasource type to grafana-postgresql-datasource Viktor Barzin 2026-04-18 23:10:13 +00:00
471e946133 [monitoring] Put uk-payslip dashboard in Finance folder Viktor Barzin 2026-04-18 23:03:22 +00:00
11082f7e83 [infra] Partial Calico adoption: namespaces only (Wave 5b) Viktor Barzin 2026-04-18 22:52:56 +00:00
16d9fd8bde [infra] Adopt Authentik catch-all Proxy Provider + Application into TF (Wave 6a) Viktor Barzin 2026-04-18 22:48:26 +00:00
eee694c915 [payslip-extractor] Add PAYSLIP_TEXT fast path Viktor Barzin 2026-04-18 22:48:07 +00:00
b28c76e371 [infra] Wire drift detection to Pushgateway + alert on stale/unaddressed drift Viktor Barzin 2026-04-18 22:42:51 +00:00
124a756351 [infra] Adopt local-path-provisioner into Terraform (Wave 5c) Viktor Barzin 2026-04-18 22:39:55 +00:00
1a7f68fe5b [beads-server] Auto-dispatch agent beads via CronJobs Viktor Barzin 2026-04-18 22:35:46 +00:00
01955916b2 [infra] Adopt kured + sentinel-gate into Terraform (Wave 5a) Viktor Barzin 2026-04-18 22:33:29 +00:00
10fd88aec5 wealthfolio: add nightly backup sidecar — SQLite → NFS Viktor Barzin 2026-04-18 22:25:19 +00:00
9e5d7cd825 state(vault): update encrypted state Viktor Barzin 2026-04-18 22:12:55 +00:00
402fd1fbac state(dbaas): update encrypted state Viktor Barzin 2026-04-18 22:12:09 +00:00
345ba2182f [mailserver] Widen email-roundtrip probe IMAP window 180s → 300s + per-attempt timeout Viktor Barzin 2026-04-18 21:33:56 +00:00
e2516b07a3 [mailserver] Disable postscreen btree cache to stop SMTP lock-contention stalls Viktor Barzin 2026-04-18 21:32:48 +00:00