infra

viktor/infra

Fork 0

Commit graph

01a718e17b [mailserver] Filter redundant local→local aliases to fix Dovecot 'exists more than once' Viktor Barzin 2026-04-18 21:29:02 +00:00
327ce215b9 [infra] Sweep dns_config ignore_changes across all pod-owning resources [ci skip] Viktor Barzin 2026-04-18 21:19:48 +00:00
8b43692af0 [infra] Suppress Goldilocks vpa-update-mode label drift on all namespaces [ci skip] Viktor Barzin 2026-04-18 21:15:27 +00:00
e612baac15 [dawarich] Re-enable Sidekiq worker with resource limits + probes Viktor Barzin 2026-04-18 21:13:05 +00:00
8a99be1194 [infra] Document HCL import {} block convention [ci skip] Viktor Barzin 2026-04-18 21:10:05 +00:00
2b8bb849c0 [infra] Bump claude-agent-service + beadboard image tags Viktor Barzin 2026-04-18 19:24:37 +00:00
8d94688dde [infra] Suppress Kyverno label drift on module.tls_secret Secrets [ci skip] Viktor Barzin 2026-04-18 19:23:02 +00:00
f79e3c563e [infra] Remove mysql InnoDB Cluster + Operator HCL (Phase 4 cleanup) [ci skip] Viktor Barzin 2026-04-18 19:19:48 +00:00
6cf3575ed9 state(dbaas): update encrypted state Viktor Barzin 2026-04-18 19:17:31 +00:00
30fa411bf7 state(dbaas): update encrypted state Viktor Barzin 2026-04-18 19:17:20 +00:00
61e94c21fe state(dbaas): update encrypted state Viktor Barzin 2026-04-18 19:16:41 +00:00
c75beaac6c wealthfolio: bump memory 64Mi → 1Gi (limit) / 256Mi (request) Viktor Barzin 2026-04-18 19:13:05 +00:00
43b4e1d372 [payslip-ingest] Deploy stack + Grafana dashboard + Vault DB role Viktor Barzin 2026-04-18 19:07:05 +00:00
81e7c3d6ee state(dbaas): update encrypted state Viktor Barzin 2026-04-18 18:59:51 +00:00
bde713f8a4 broker-sync: add Fidelity PlanViewer CronJob (suspended) Viktor Barzin 2026-04-18 18:51:20 +00:00
4f54c959d7 [infra] Remove iscsi-csi stack — TrueNAS decommissioned [ci skip] Viktor Barzin 2026-04-18 18:49:40 +00:00
e1d20457c4 [infra/claude-agent-service] Seed beads metadata + scratch dir at runtime Viktor Barzin 2026-04-18 14:23:19 +00:00
c9d221d578 [infra] Establish KYVERNO_LIFECYCLE_V1 drift-suppression convention [ci skip] Viktor Barzin 2026-04-18 14:15:51 +00:00
a62b43d19e [infra] Document intended ignore_changes drift-workarounds [ci skip] Viktor Barzin 2026-04-18 14:08:10 +00:00
91165e31b9 [infra/beads-server] Wire BeadBoard to claude-agent-service Viktor Barzin 2026-04-18 13:53:51 +00:00
82b7866bc9 [claude-agent-service] Remove orphaned DevVM SSH key wiring Viktor Barzin 2026-04-18 13:31:15 +00:00
9a2e920006 [rybbit] Narrow CF Worker routes to SITE_IDS hosts — fix free-tier quota breach Viktor Barzin 2026-04-18 13:23:15 +00:00
a24cf8c689 [docs] post-mortem: clarify the sizeLimit vs container memory limit gotcha Viktor Barzin 2026-04-18 13:23:14 +00:00
9ea7eec362 [actualbudget] Upgrade 26.3.0 → 26.4.0 for native Sankey report Viktor Barzin 2026-04-18 13:19:27 +00:00
cacc282f1a .gitignore: ignore terragrunt_rendered.json debug output Viktor Barzin 2026-04-18 13:18:05 +00:00
b41528e564 [docs] Add post-mortem for Authentik outpost /dev/shm incident (2026-04-18) Viktor Barzin 2026-04-18 13:12:27 +00:00
6e19dce99e [docs] automated-upgrades: document long-lived OAuth + expiry monitoring Viktor Barzin 2026-04-18 13:00:07 +00:00
e4a96591b3 .gitignore: ignore Terragrunt-generated cloudflare_provider.tf and tiers.tf Viktor Barzin 2026-04-18 12:36:45 +00:00
4eb68d6b1a [meshcentral] Remove accidentally-committed Terragrunt-generated files Viktor Barzin 2026-04-18 12:35:44 +00:00
c0ac24a54c [meshcentral] Import existing cluster state + PVC (bd-w97) Viktor Barzin 2026-04-18 12:35:26 +00:00
3e11bd1b67 [kyverno] Remove accidentally-committed Terragrunt-generated files Viktor Barzin 2026-04-18 12:34:59 +00:00
2fe3bb3307 [travel_blog] Import existing cluster state (bd-w97) Viktor Barzin 2026-04-18 12:34:36 +00:00
dacf3d9e11 [kyverno] Import existing cluster state (bd-w97) Viktor Barzin 2026-04-18 12:34:32 +00:00
9ea4ccf17e [pvc-autoresizer] Import existing cluster state (bd-w97) Viktor Barzin 2026-04-18 12:33:37 +00:00
7b88479278 [tor-proxy] Import existing cluster state (bd-w97) Viktor Barzin 2026-04-18 12:33:26 +00:00
8a42a1708d [isponsorblocktv] Import existing cluster state (bd-w97) Viktor Barzin 2026-04-18 12:31:46 +00:00
50dea8f0a7 [monitoring] Add Claude OAuth token expiry monitoring + alerts Viktor Barzin 2026-04-18 12:27:11 +00:00
8a05475218 [claude-agent-service] Add CLAUDE_CODE_OAUTH_TOKEN env var — 1-year long-lived auth Viktor Barzin 2026-04-18 12:12:30 +00:00
50e8184d99 [uptime-kuma] Codify MySQL monitor (id=663) via idempotent sync CronJob Viktor Barzin 2026-04-18 12:04:17 +00:00
d3bdf87676 [docs] Clarify external-monitor auto-annotation in CLAUDE.md Viktor Barzin 2026-04-18 11:45:56 +00:00
dad62647cd [grampsweb] Align PVC resource to encrypted storage; imported state Viktor Barzin 2026-04-18 11:37:45 +00:00
1de2ee307f kyverno: strip resources.limits.cpu cluster-wide via ClusterPolicy Viktor Barzin 2026-04-18 11:34:39 +00:00
903fc8377f [cleanup] Remove ollama from dashy + docs + nfs_directories Viktor Barzin 2026-04-18 11:17:59 +00:00
0386f03f1a [ollama] Destroy stack — decommissioned Viktor Barzin 2026-04-18 11:16:21 +00:00
a12b06c608 [config] Remove ollama_host root variable Viktor Barzin 2026-04-18 11:14:53 +00:00
57fdea4b99 [rybbit] Remove ollama favicon cache entry (deploy on next manual wrangler) Viktor Barzin 2026-04-18 11:14:38 +00:00
7091ef2dd6 [trading-bot] Remove ollama refs from commented-out source Viktor Barzin 2026-04-18 11:14:22 +00:00
7b248897d3 [grampsweb] Remove ollama_host source refs (apply blocked by bd-w97) Viktor Barzin 2026-04-18 11:14:01 +00:00
c175cfd69b [ytdlp] Remove ollama_host variable and fallback env vars Viktor Barzin 2026-04-18 11:13:42 +00:00
cc44bccfaa [traefik] Remove ollama-tcp entrypoint Viktor Barzin 2026-04-18 11:12:59 +00:00
dbf7732a66 [uptime-kuma] Bump CPU + memory requests to reduce TTFB jitter Viktor Barzin 2026-04-18 11:11:39 +00:00
80b6591e8b [whisper] Remove ollama_tcp IngressRouteTCP (ollama decom) Viktor Barzin 2026-04-18 11:11:21 +00:00
69fbd0ffd6 [docs] Update auto-upgrade docs — new HTTP auth path + n8n expression gotcha Viktor Barzin 2026-04-18 10:42:11 +00:00
99180bec42 [n8n] Fix broken DIUN auto-upgrade pipeline — missing auth token to claude-agent-service Viktor Barzin 2026-04-18 10:41:09 +00:00
42f1c3cf4f [claude-agent-service] Migrate all pipelines from DevVM SSH to K8s HTTP Viktor Barzin 2026-04-18 10:12:02 +00:00
947f8ace54 [monitoring] Remove stale MySQL InnoDB Cluster alerts Viktor Barzin 2026-04-18 10:03:58 +00:00
99688bbb02 [uptime-kuma] Omit trailing slash when path annotation not set Viktor Barzin 2026-04-17 22:41:02 +00:00
b30bfd4690 [dbaas] Fix mysql_static_user heredoc quoting Viktor Barzin 2026-04-17 22:34:12 +00:00
9780c04ca0 state(dbaas): update encrypted state Viktor Barzin 2026-04-17 22:33:13 +00:00
18338a883f [ci skip] cleanup: remove e2e test file Viktor Barzin 2026-04-17 22:06:24 +00:00
2033e76798 [dbaas] Declare forgejo + roundcubemail MySQL users in Terraform Viktor Barzin 2026-04-17 22:05:21 +00:00
b326c572a6 [forgejo] Probe /api/healthz for external monitor Viktor Barzin 2026-04-17 22:02:41 +00:00
f6812fe69f [uptime-kuma] Support per-ingress probe path annotation Viktor Barzin 2026-04-17 22:02:35 +00:00
842646ea4f [ci skip] e2e: test commit from claude-agent-service Claude Agent 2026-04-17 22:03:50 +00:00
65b0f30d5e [docs] Update anti-AI and rybbit docs after rewrite-body removal Viktor Barzin 2026-04-17 21:43:13 +00:00
4117809a54 [rybbit] Deploy Cloudflare Worker for analytics injection Viktor Barzin 2026-04-17 21:26:16 +00:00
498e7f3305 [uptime-kuma] Fix duplicate monitor creation + clean up down monitors Viktor Barzin 2026-04-17 21:12:31 +00:00
5319f03ebc [storage] Fix owntracks + wealthfolio: switch to encrypted PVCs origin/master Viktor Barzin 2026-04-17 20:29:57 +00:00
e51bdb2af8 Add broker-sync Terraform stack (#7) Viktor Barzin 2026-04-17 21:17:45 +01:00
731de63150 fix(beads-server): disable Authentik + CrowdSec on Workbench origin/broker-sync-stack broker-sync-stack Viktor Barzin 2026-04-17 20:00:21 +00:00
9ce9a9a7f7 Add broker-sync Terraform stack (pending apply) Viktor Barzin 2026-04-17 19:52:36 +00:00
277babc696 [tls] Move 3 outlier stacks from per-stack PEMs to root-wildcard symlink Viktor Barzin 2026-04-17 19:49:09 +00:00
d91fbd4a60 [monitoring] Delete orphan server-power-cycle/main.sh with iDRAC default creds Viktor Barzin 2026-04-17 19:42:55 +00:00
e81e836d3a [setup-tls-secret] Delete deprecated renew.sh with hardcoded Technitium token Viktor Barzin 2026-04-17 19:41:08 +00:00
d3be9b50af [frigate] Remove orphan config.yaml with leaked RTSP passwords Viktor Barzin 2026-04-17 19:39:35 +00:00
7a884a0b97 [monitoring] Fix alerts for intentionally scaled-down services Viktor Barzin 2026-04-17 19:17:41 +00:00
a19581e32b fix(beads-server): fix Workbench timeout — use internal GraphQL URL Viktor Barzin 2026-04-17 19:05:47 +00:00
da6b82ed5c fix(beads-server): persist GRAPHQLAPI_URL in Terraform Viktor Barzin 2026-04-17 18:58:59 +00:00
afb8a16623 [infra] Scale down unused services + remove DoH ingress Viktor Barzin 2026-04-17 18:55:52 +00:00
cdc851fc63 [alerts] Fix status-page-pusher crash + Prometheus backup push Viktor Barzin 2026-04-17 18:29:43 +00:00
eef4242408 fix(beads-server): auto-connect Workbench to Dolt on startup Viktor Barzin 2026-04-17 18:12:31 +00:00
5e9e487661 feat(setup-project): auto-PR working Dockerfiles back to upstream Viktor Barzin 2026-04-17 18:12:13 +00:00
1860cd1dfb state(vault): update encrypted state Viktor Barzin 2026-04-17 14:14:05 +00:00
f0ddfb8cae state(dbaas): update encrypted state Viktor Barzin 2026-04-17 14:08:49 +00:00
b034c868db [traefik] Remove broken rewrite-body plugin and all rybbit/anti-AI injection Viktor Barzin 2026-04-17 12:41:17 +00:00
b24545ffdb fix(beads-server): fix BeadBoard project ID + install bd binary Viktor Barzin 2026-04-17 11:57:45 +00:00
f2037545b3 fix(beads-server): make BeadBoard .beads dir writable Viktor Barzin 2026-04-17 11:37:26 +00:00
00e2f15a5d feat(beads-server): deploy BeadBoard task visualization dashboard Viktor Barzin 2026-04-17 11:30:43 +00:00
26abd8fe94 [skill] Add /disk-wear skill for periodic disk write analysis Viktor Barzin 2026-04-17 11:15:26 +00:00
366e2ab083 [uptime-kuma] Opt-out external monitoring for every public ingress [ci skip] Viktor Barzin 2026-04-17 11:12:00 +00:00
66d2d9916b [infra] Per-ingress external-monitor annotation + actualbudget plan-time fix [ci skip] Viktor Barzin 2026-04-17 10:34:32 +00:00
0c4fe98d75 state(dbaas): update encrypted state Viktor Barzin 2026-04-17 10:08:04 +00:00
996bdfc9b6 [technitium] Uninstall MySQL+SQLite query log plugins instead of just disabling Viktor Barzin 2026-04-17 08:20:55 +00:00
f0a73815d8 [freedify] Remove stale sed patches from container startup Viktor Barzin 2026-04-17 06:17:13 +00:00
f8facf44dd [infra] Fix rewrite-body plugin + cleanup TrueNAS + version bumps Viktor Barzin 2026-04-17 05:51:52 +00:00
8b206a63ad state(dbaas): update encrypted state Viktor Barzin 2026-04-16 22:55:52 +00:00
4c8e5bea0b [traefik] Add global compress middleware to fix response compression Viktor Barzin 2026-04-16 22:18:51 +00:00
e80b2f026f [infra] Migrate Terraform state from local SOPS to PostgreSQL backend Viktor Barzin 2026-04-16 19:33:12 +00:00
f538115c43 [dbaas] Migrate MySQL from InnoDB Cluster to standalone StatefulSet Viktor Barzin 2026-04-16 19:01:06 +00:00
ef30f27ac9 state(dbaas): update encrypted state Viktor Barzin 2026-04-16 18:56:59 +00:00