infra

viktor/infra

Fork 0

Commit graph

b68f778c5a state(headscale): update encrypted state Viktor Barzin 2026-03-24 16:47:26 +02:00
3ecb792a44 state(headscale): update encrypted state Viktor Barzin 2026-03-24 15:30:25 +02:00
0ee6cade38 state(headscale): update encrypted state Viktor Barzin 2026-03-24 15:12:01 +02:00
a644eb1c8e headscale: add STUN port, upgrade to 0.28.0, fix Home DERP connectivity Viktor Barzin 2026-03-24 14:51:09 +02:00
fafea4b110 state(headscale): update encrypted state Viktor Barzin 2026-03-24 14:45:31 +02:00
2cbcf00b8e state(headscale): update encrypted state Viktor Barzin 2026-03-24 14:36:30 +02:00
20b0d564f1 state(headscale): update encrypted state Viktor Barzin 2026-03-24 14:32:12 +02:00
78f302d6c0 state(headscale): update encrypted state Viktor Barzin 2026-03-24 14:30:02 +02:00
d2c50be088 state(headscale): update encrypted state Viktor Barzin 2026-03-24 12:49:23 +02:00
5161f77118 state(headscale): update encrypted state Viktor Barzin 2026-03-24 12:05:34 +02:00
4aa0e97e1d remove terraform.tfvars from terragrunt loading — complete Vault migration Viktor Barzin 2026-03-24 11:14:06 +02:00
540d7de807 add wealthfolio-sync CronJob for automated portfolio sync Viktor Barzin 2026-03-24 02:07:36 +02:00
5d12f92816 state(wealthfolio): update encrypted state Viktor Barzin 2026-03-24 02:07:17 +02:00
4ca7af8818 add audiobook-search service to servarr stack Viktor Barzin 2026-03-24 01:21:49 +02:00
dbff547741 remove docs/backup-strategy.md, absorbed into architecture/backup-dr.md [ci skip] Viktor Barzin 2026-03-24 01:08:06 +02:00
5a42643176 add architecture documentation for all infrastructure subsystems [ci skip] Viktor Barzin 2026-03-24 00:55:25 +02:00
31767ed8e7 state(headscale): update encrypted state Viktor Barzin 2026-03-24 00:03:03 +02:00
2adf68ae03 state(platform): update encrypted state Viktor Barzin 2026-03-23 23:48:38 +02:00
28f349a8f6 state(servarr): update encrypted state Viktor Barzin 2026-03-23 23:46:08 +02:00
d9eaf42f36 exclude iDRAC from HighServiceLatency alert Viktor Barzin 2026-03-23 22:51:33 +02:00
eeae58861b Woodpecker CI Update TLS Certificates Commit root 2026-03-23 20:38:38 +00:00
3bca7a97c2 fix(renew-tls): update TLS secret in ALL namespaces, not just kyverno Viktor Barzin 2026-03-23 22:36:22 +02:00
dadbec0eb4 Woodpecker CI Update TLS Certificates Commit root 2026-03-23 20:34:36 +00:00
2dcb4b7fa4 fix(renew-tls): clean stale _acme-challenge TXT records before certbot Viktor Barzin 2026-03-23 22:32:27 +02:00
b7409cea4e fix(renew-tls): use alpine+curl for kubectl step to avoid permission denied Viktor Barzin 2026-03-23 22:28:37 +02:00
b5dd43aeab Woodpecker CI Update TLS Certificates Commit root 2026-03-23 20:27:00 +00:00
304f0de43a add Metric Staleness alerts for UPS, iDRAC, ATS, and HA metrics Viktor Barzin 2026-03-23 22:24:17 +02:00
0c307f4d3d state(kyverno): update encrypted state Viktor Barzin 2026-03-23 22:20:18 +02:00
16cde1eab5 add Kyverno TLS secret sync + enhance renewal pipeline Viktor Barzin 2026-03-23 22:19:34 +02:00
6a2bee93b5 fix(monitoring): use patched idrac exporter with PSU input voltage metric Viktor Barzin 2026-03-23 22:07:36 +02:00
b6bc51b42b state(platform): update encrypted state Viktor Barzin 2026-03-23 22:04:06 +02:00
a95d434ff1 fix backup IO stats: use /proc/$$/io instead of /proc/self/io Viktor Barzin 2026-03-23 12:33:52 +02:00
0a294a30a6 add backup IO logging, Pushgateway metrics, and Grafana dashboard Viktor Barzin 2026-03-23 12:19:01 +02:00
0b595751c5 move Frigate cache to tmpfs to eliminate disk writes on node1 Viktor Barzin 2026-03-23 11:52:49 +02:00
2855da2a3c state(frigate): update encrypted state Viktor Barzin 2026-03-23 11:49:40 +02:00
3f0ecda737 harden pull-through cache: intercept errors, reduce lock timeout, add healthz Viktor Barzin 2026-03-23 11:33:06 +02:00
1639910043 ingress latency: add histogram buckets, fix restarts, right-size memory Viktor Barzin 2026-03-23 10:52:43 +02:00
5652972c53 fix dashboard: add refIds, explicit panel IDs, fix CrowdSec bouncer metric Viktor Barzin 2026-03-23 10:31:44 +02:00
45d48e7ce7 state(headscale): update encrypted state Viktor Barzin 2026-03-23 10:27:04 +02:00
9527f62c2e fix network traffic dashboard: use only available GoFlow2 metrics Viktor Barzin 2026-03-23 10:16:46 +02:00
9db2714393 state(crowdsec): update encrypted state Viktor Barzin 2026-03-23 03:41:33 +02:00
d401568317 fix CrowdSec collection names and increase Helm timeout Viktor Barzin 2026-03-23 03:41:13 +02:00
850f73ab4d state(crowdsec): update encrypted state Viktor Barzin 2026-03-23 03:40:22 +02:00
aa8695278b state(crowdsec): update encrypted state Viktor Barzin 2026-03-23 03:38:00 +02:00
44a9d19085 state(actualbudget): update encrypted state Viktor Barzin 2026-03-23 03:12:20 +02:00
449884c537 state(forgejo): update encrypted state Viktor Barzin 2026-03-23 03:12:08 +02:00
dd8b4b3775 state(novelapp): update encrypted state Viktor Barzin 2026-03-23 03:11:35 +02:00
fbd0cc675b state(calibre): update encrypted state Viktor Barzin 2026-03-23 03:11:03 +02:00
55246c8b5d add network traffic monitoring and adversary detection Viktor Barzin 2026-03-23 03:06:56 +02:00
877cd15b45 fix: increase tier-2-gpu quota to 12Gi, add NvidiaExporterDown alert Viktor Barzin 2026-03-23 03:04:33 +02:00
20d0404a42 state(headscale): update encrypted state Viktor Barzin 2026-03-23 03:02:50 +02:00
2639456978 state(platform): update encrypted state Viktor Barzin 2026-03-23 02:56:29 +02:00
65fcd68181 state(headscale): update encrypted state Viktor Barzin 2026-03-23 02:48:28 +02:00
2e8fbb51bf state(headscale): update encrypted state Viktor Barzin 2026-03-23 02:37:22 +02:00
6bfb5e3285 state(headscale): update encrypted state Viktor Barzin 2026-03-23 02:29:03 +02:00
a1b4a2106d add NFS/CSI cascade failure post-mortem [ci skip] Viktor Barzin 2026-03-23 02:25:11 +02:00
e9311915cb add agent route to k8s-portal Viktor Barzin 2026-03-23 02:25:08 +02:00
6bfade3013 update infra stack terraform lock file (helm/kubernetes/vault providers) Viktor Barzin 2026-03-23 02:24:47 +02:00
2dcdc65db5 add weekly SQLite backup for plotting-book to NFS Viktor Barzin 2026-03-23 02:24:43 +02:00
e4cf0dee83 add TrueNAS Cloud Sync monitor CronJob and bump Prometheus Helm timeout Viktor Barzin 2026-03-23 02:24:39 +02:00
e463281205 optimize backup schedules: compress dumps, stagger to weekly, extend retention Viktor Barzin 2026-03-23 02:24:34 +02:00
6e661fdfc5 add backup & DR strategy documentation with ASCII diagrams Viktor Barzin 2026-03-23 02:24:02 +02:00
644562454c add IPv6 connectivity via Hurricane Electric 6in4 tunnel Viktor Barzin 2026-03-23 02:22:00 +02:00
813f523170 docs: add private registry usage to infra CLAUDE.md [ci skip] Viktor Barzin 2026-03-23 01:08:57 +02:00
1f4e8cb278 use registry.viktorbarzin.me hostname for private images + protect ingress Viktor Barzin 2026-03-23 01:02:27 +02:00
e9919d8fc9 fix priority-pass: bump backend memory to 512Mi (OOM with OpenCV) Viktor Barzin 2026-03-23 00:58:39 +02:00
0674d6e538 deploy priority-pass app to cluster via private registry Viktor Barzin 2026-03-23 00:55:41 +02:00
d78be951b3 state(vaultwarden): update encrypted state Viktor Barzin 2026-03-23 00:51:56 +02:00
311ff5dd9e add hourly SQLite integrity check for vaultwarden with Prometheus alerting Viktor Barzin 2026-03-23 00:50:15 +02:00
3b89a7d7e4 add VaultwardenDown alert and tighten backup staleness threshold Viktor Barzin 2026-03-23 00:47:00 +02:00
a44f35bcf8 harden vaultwarden iSCSI storage and increase backup frequency Viktor Barzin 2026-03-23 00:36:11 +02:00
469fcb12b5 remove duplicate deploy-app skill, now global agent [ci skip] Viktor Barzin 2026-03-23 00:17:53 +02:00
ab7e18c07c fix registry auth: add Kyverno RBAC for Secrets + containerd TLS skip-verify Viktor Barzin 2026-03-22 23:47:29 +02:00
c111799831 remove duplicated agents, update CLAUDE.md references [ci skip] Viktor Barzin 2026-03-22 23:44:27 +02:00
36171bcda4 add htpasswd auth to private docker registry + expose at registry.viktorbarzin.me Viktor Barzin 2026-03-22 22:10:10 +02:00
e4f478b490 switch claude-memory server to multi-user API_KEYS auth Viktor Barzin 2026-03-22 20:08:07 +02:00
a53b9438eb state(claude-memory): update encrypted state Viktor Barzin 2026-03-22 20:01:00 +02:00
29aa6c95f0 state(redis): update encrypted state Viktor Barzin 2026-03-22 15:23:58 +02:00
c103a1ee05 fix OOMKilled containers: bump immich/actualbudget memory, disable changedetection, cap clickhouse Viktor Barzin 2026-03-22 15:22:29 +02:00
3130a5f9e0 state(immich): update encrypted state Viktor Barzin 2026-03-22 15:18:25 +02:00
894b8a2be8 state(vaultwarden): update encrypted state Viktor Barzin 2026-03-22 15:18:14 +02:00
5e6c2de849 state(vaultwarden): update encrypted state Viktor Barzin 2026-03-22 15:18:10 +02:00
7434b58ba6 state(infra-maintenance): update encrypted state Viktor Barzin 2026-03-22 15:18:05 +02:00
ab95e0ab2f state(vault): update encrypted state Viktor Barzin 2026-03-22 15:18:03 +02:00
432b3d0a60 state(rybbit): update encrypted state Viktor Barzin 2026-03-22 15:08:44 +02:00
332fe30a19 state(actualbudget): update encrypted state Viktor Barzin 2026-03-22 15:08:08 +02:00
250f8c4469 state(changedetection): update encrypted state Viktor Barzin 2026-03-22 15:07:58 +02:00
ad689076d8 scale down non-critical services to free cluster memory Viktor Barzin 2026-03-22 03:10:12 +02:00
4cf147974e state(nextcloud): update encrypted state Viktor Barzin 2026-03-22 03:08:00 +02:00
53857a9a87 state(authentik): update encrypted state Viktor Barzin 2026-03-22 03:07:51 +02:00
6f37fb45bd state(real-estate-crawler): update encrypted state Viktor Barzin 2026-03-22 03:07:07 +02:00
e2d9b97b00 state(claude-memory): update encrypted state Viktor Barzin 2026-03-22 03:06:50 +02:00
2ac14bbf87 state(tuya-bridge): update encrypted state Viktor Barzin 2026-03-22 03:05:46 +02:00
bd98b84ded scale grafana and alertmanager to 1 replica to free cluster memory Viktor Barzin 2026-03-22 03:02:17 +02:00
1c13af142d sync regenerated providers.tf + upstream changes Viktor Barzin 2026-03-22 02:56:04 +02:00
1bf8676a6d state(platform): update encrypted state Viktor Barzin 2026-03-22 02:52:48 +02:00
2e016d7df2 fix nextcloud db-username + k8s-dashboard chart repo Viktor Barzin 2026-03-22 02:50:32 +02:00
e7433c17fb state(trading-bot): update encrypted state Viktor Barzin 2026-03-22 01:42:53 +02:00
d215446455 state(k8s-dashboard): update encrypted state Viktor Barzin 2026-03-22 01:42:03 +02:00
e30a819592 Woodpecker CI Update TLS Certificates Commit root 2026-03-22 00:33:29 +00:00