viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Commit graph

  • f39bb2b849 workstation: fix new-user .env clobber — env_set preserves CLAUDE_CODE_OAUTH_TOKEN Viktor Barzin 2026-06-09 14:15:03 +00:00
  • 1e6e5c4ee9 t3code: enable t3-autoupdate.timer from the hourly provisioner Viktor Barzin 2026-06-09 14:09:55 +00:00
  • 77f03c62af workstation: share admin Claude subscription with non-admins (CLAUDE_CODE_OAUTH_TOKEN) Viktor Barzin 2026-06-09 14:05:44 +00:00
  • f085016d52 workstation: v2 membership implementation plan [ci skip] Viktor Barzin 2026-06-09 12:09:14 +00:00
  • fd0f4a0365 fix: restore tree dropped by 6d224861; land stem95su gdrive-sync (10m) [ci skip] Viktor Barzin 2026-06-09 08:45:33 +00:00
  • 6d224861c4 stem95su: scheduled Drive->site sync CronJob (every 10m) Viktor Barzin 2026-06-09 08:42:26 +00:00
  • ed52d1646b stem95su: gdrive-sync schedule */15 -> */10 Viktor Barzin 2026-06-09 08:41:27 +00:00
  • f8e8f31306 stem95su: scheduled Drive->site sync CronJob (every 15m) Viktor Barzin 2026-06-09 08:16:08 +00:00
  • 1bc5c92622 feat(tts): Chatterbox TTS stack + off-peak T4 gate, wire tripit narration [ci skip] Viktor Barzin 2026-06-09 07:30:19 +00:00
  • 05b50d2b96 workstation: v2 membership design — Authentik-group-driven, email-identified [ci skip] Viktor Barzin 2026-06-09 07:19:25 +00:00
  • 98fe65e345 storage: migrate priority-pass uploads off proxmox-lvm-encrypted to NFS (Phase 1) Viktor Barzin 2026-06-08 18:47:07 +00:00
  • 06f5c12476 workstation: setup-devvm.sh hardens the admin's unlocked tree (o-rx, not world-readable) Viktor Barzin 2026-06-08 18:08:52 +00:00
  • 37626cb89b workstation: docs — mark RBAC + Authentik gate applied [ci skip] Viktor Barzin 2026-06-08 17:51:44 +00:00
  • 5c378dd5e3 workstation: gate t3.viktorbarzin.me to the T3 Users group (Phase 4) Viktor Barzin 2026-06-08 17:50:40 +00:00
  • 173b1fc116 workstation: per-user OIDC kubectl — power-user-readonly RBAC + kubeconfig (Phase 2.2) Viktor Barzin 2026-06-08 17:47:00 +00:00
  • c611ecf84d workstation: docs — multi-tenancy Workstation section + offboard runbook + service-catalog fix [ci skip] Viktor Barzin 2026-06-08 14:27:17 +00:00
  • 08bf1e0a3a workstation: per-user writable git-crypt-locked infra clone (Phase 3.1) Viktor Barzin 2026-06-08 14:23:57 +00:00
  • 2c1865eabb workstation: roster-driven provisioner (SSoT reconcile, additive-only) Viktor Barzin 2026-06-08 14:18:12 +00:00
  • 3feb69e379 workstation: pin verified config-inheritance mechanism in design §4 [ci skip] Viktor Barzin 2026-06-08 14:09:13 +00:00
  • 1757cb59e7 workstation: machine-wide config inheritance (managed claudeMd + setup-devvm.sh + skel) Viktor Barzin 2026-06-08 14:07:04 +00:00
  • 55d4b4cf2d workstation: correct devvm RAM (8->24GB) + record 8G swap & capacity budget [ci skip] Viktor Barzin 2026-06-08 13:48:52 +00:00
  • 3033e2c355 workstation: roster source-of-truth + host package manifest [ci skip] Viktor Barzin 2026-06-08 13:38:20 +00:00
  • 7ab4c1e1e2 workstation: tested roster derivation + offboarding-diff engine [ci skip] Viktor Barzin 2026-06-08 13:38:06 +00:00
  • 6504911a77 matrix: open (tokenless) registration + bot mitigations + #security alert Viktor Barzin 2026-06-08 13:27:02 +00:00
  • bb7bcf803b multi-user-workstation: design + phased implementation plan Viktor Barzin 2026-06-08 12:58:29 +00:00
  • 3d6c5b8bc7 matrix/authentik: remove orphaned Matrix OAuth2 app + provider (post-tuwunel) Viktor Barzin 2026-06-08 12:32:49 +00:00
  • 23602f393e matrix: migrate Synapse -> tuwunel (Rust homeserver, fresh start, federated) Viktor Barzin 2026-06-08 11:58:17 +00:00
  • 09514a234b state(vault): update encrypted state Viktor Barzin 2026-06-08 11:51:06 +00:00
  • 7501ea286b tripit: wire planner subsystem (merged trip-planner) secrets + Slack webhook ingress Viktor Barzin 2026-06-08 09:26:21 +00:00
  • 838343184b stem95su: document on-demand Drive→NFS deploy (no scheduled job) Viktor Barzin 2026-06-07 21:06:12 +00:00
  • d4ec5768b2 vault-token-renew: version the devvm renewer + user units in the repo Viktor Barzin 2026-06-07 16:26:01 +00:00
  • f9d5cd6243 feat(tripit): wire real flight (AeroDataBox) + rail (RealtimeTrains) status Viktor Barzin 2026-06-07 15:23:02 +00:00
  • b1ccbd12e8 Woodpecker CI Update TLS Certificates Commit root 2026-06-07 00:02:54 +00:00
  • 0d445d948c stem95su: host STEM platform for 95. СУ (public NFS-backed static site) Viktor Barzin 2026-06-07 15:21:21 +00:00
  • c7ffbaa204 aiostreams: harden stream-probe + repair sources (RD-451 "few films" fix) Viktor Barzin 2026-06-07 07:21:42 +00:00
  • 4cdb9e1886 novelapp: switch Keel to semver (policy=major) now upstream tags are valid Viktor Barzin 2026-06-06 22:56:46 +00:00
  • 551412488b apiserver: enable audit logging (low-write Metadata) + ship to Loki Viktor Barzin 2026-06-06 16:50:34 +00:00
  • 3696ff5922 novelapp: track :latest by digest (Keel force+match-tag), adopt into TF state Viktor Barzin 2026-06-06 16:50:33 +00:00
  • 4d8b782df1 feat(trip-planner): app stack (Tier-1, CNPG, Slack-signed webhook ingress) Viktor Barzin 2026-06-06 07:28:11 +00:00
  • 7c12fbba95 monitoring/alloy: drop cosmetic calico-typha 'Endpoints deprecated' warning Viktor Barzin 2026-06-06 06:32:23 +00:00
  • 4b13be6d48 dawarich: upgrade 1.6.1 -> 1.7.11 (removes RailsPulse, drops orphan tables) Viktor Barzin 2026-06-06 05:41:06 +00:00
  • 8a3bbde38c mailserver: silence mixed-TLS-directive warning + drop SMTP scanner noise from Loki Viktor Barzin 2026-06-06 05:11:33 +00:00
  • de181a9afc Woodpecker CI deploy [CI SKIP] root 2026-06-06 04:38:06 +00:00
  • 27211acda1 rybbit: recreate missing Postgres database via idempotent init Job Viktor Barzin 2026-06-06 04:36:00 +00:00
  • 9529eedfe0 docs(security): bot-block-proxy is a no-op while poison-fountain is at 0 [ci skip] Viktor Barzin 2026-06-05 22:07:02 +00:00
  • 9ad7756a94 traefik: make bot-block-proxy a clean no-op while poison-fountain is at 0 Viktor Barzin 2026-06-05 22:02:10 +00:00
  • d70a99dc48 Woodpecker CI deploy [CI SKIP] root 2026-06-05 21:51:15 +00:00
  • d661d074ef matrix: auto-reload Synapse on DB credential rotation (Reloader) Viktor Barzin 2026-06-05 21:48:48 +00:00
  • e7ece3eaf9 Woodpecker CI deploy [CI SKIP] root 2026-06-05 19:56:08 +00:00
  • 02366103ef Woodpecker CI deploy [CI SKIP] root 2026-06-05 19:36:02 +00:00
  • d808694af4 docs(storage): record harden-half shipped (orphan cleanup + ghost-reconcile) Viktor Barzin 2026-06-05 21:39:36 +00:00
  • 1b9d4f1233 storage: migrate insta2spotify off proxmox-lvm to NFS (LUN relief, Phase 1) Viktor Barzin 2026-06-05 21:38:01 +00:00
  • 355ca3ee91 proxmox-csi: auto-reconcile CronJob to detach ghost disks (code-dfjn prevention) Viktor Barzin 2026-06-05 21:25:36 +00:00
  • e311cbe103 chore(modules): remove vestigial audiblez-web copy + fix glossary note [ci skip] Viktor Barzin 2026-06-05 20:38:13 +00:00
  • a42f4f7b26 trek: trial-deploy TREK group-trip planner behind Authentik (solo eval) Viktor Barzin 2026-06-05 20:30:07 +00:00
  • 63182730f9 docs(storage): record Wave-2 NFS migration + harden-proxmox-csi decision (option 1) Viktor Barzin 2026-06-05 20:15:21 +00:00
  • a0b34750ee storage: migrate hackmd uploads off proxmox-lvm-encrypted to NFS (LUN-cap relief) Viktor Barzin 2026-06-05 20:11:31 +00:00
  • e35d693972 storage: migrate send off proxmox-lvm to NFS (LUN-cap relief) Viktor Barzin 2026-06-05 20:04:37 +00:00
  • c24b4a21d8 docs(architecture): fix stale 5-node claim -> 7 nodes (k8s-node1..6) [ci skip] Viktor Barzin 2026-06-05 20:03:58 +00:00
  • bf3608052b tripit: GEOCODER_PROVIDER=openmeteo for per-city itinerary weather Viktor Barzin 2026-06-05 20:01:31 +00:00
  • 6eb683b6e0 storage: migrate speedtest off proxmox-lvm to NFS (LUN-cap relief) Viktor Barzin 2026-06-05 19:59:56 +00:00
  • 060aefbd0b storage: migrate changedetection off proxmox-lvm to NFS (LUN-cap relief) Viktor Barzin 2026-06-05 19:55:03 +00:00
  • 52f5de905d docs(context): freshen infra glossary (modules, tiers, new concepts) [ci skip] Viktor Barzin 2026-06-05 19:34:49 +00:00
  • aa948be581 storage: migrate tandoor off proxmox-lvm to NFS (LUN-cap relief) Viktor Barzin 2026-06-05 19:34:47 +00:00
  • febf12bddd mail(tripit): send From: plans@viktorbarzin.me instead of spam@ Viktor Barzin 2026-06-05 18:41:08 +00:00
  • bc33cd5ac4 monitoring: NodeFilesystemFull 90%->95% + Synology storage runbook Viktor Barzin 2026-06-05 18:18:31 +00:00
  • f526af694d monitoring: snmp-idrac scrape 1m->30s — faster HA dashboard iDRAC refresh Viktor Barzin 2026-06-05 17:52:07 +00:00
  • 5b5b855528 monitoring(alloy): drop goflow2 + vpa logs from Loki to cut sdc write wear Viktor Barzin 2026-06-05 17:44:47 +00:00
  • dbe115910f monitoring: add local-only prometheus-query.lan ingress for ha-sofia SNMP sensors Viktor Barzin 2026-06-05 17:25:06 +00:00
  • b7cb74f1b5 docs(monitoring): cluster log aggregation (Alloy fix) + Cluster Logs dashboard + HA sensors [ci skip] Viktor Barzin 2026-06-05 17:15:57 +00:00
  • 7501c2be5d monitoring(grafana): add professional "Cluster Logs" dashboard (Logs folder) Viktor Barzin 2026-06-05 17:03:45 +00:00
  • bb0099b747 monitoring(alloy): fix broken pod-log shipping (missing local.file_match) + parse CRI Viktor Barzin 2026-06-05 16:57:44 +00:00
  • 6b1d23abbd monitoring: migrate R730 iDRAC scraping to SNMP (fast primary) + thin Redfish remnant Viktor Barzin 2026-06-05 16:33:20 +00:00
  • 6442978f07 fan-control: merge Fan %/RPM dashboard cards + RPM estimate fallback [ci skip] Viktor Barzin 2026-06-05 14:31:32 +00:00
  • 722a1c9b42 docs(monitoring): document rpi-sofia off-box monitoring + log shipping [ci skip] Viktor Barzin 2026-06-05 14:25:20 +00:00
  • 405ca79531 fan-control: Override slider now tracks live fan speed while unlocked [ci skip] Viktor Barzin 2026-06-05 14:20:38 +00:00
  • ddc8bfa8cf tripit: remove Gmail-scrape ingest-mail CronJob; plans@ becomes sole channel Viktor Barzin 2026-06-05 13:50:53 +00:00
  • 5381beb3b7 monitoring: fix ingress auth-comment guard for loki-write-ingress Viktor Barzin 2026-06-05 13:36:43 +00:00
  • c059405632 fan-control: simplify HA dashboard + Lock = freeze-current/algo-off [ci skip] Viktor Barzin 2026-06-05 13:27:46 +00:00
  • f9376a36ff monitoring: wire rpi-sofia (Sofia Pi) into Prometheus/Loki/alerts Viktor Barzin 2026-06-05 13:11:40 +00:00
  • 5b96b841fc f1-stream: right-size memory 1Gi -> 256Mi (CDP-only, no bundled Chromium) Viktor Barzin 2026-06-05 12:57:22 +00:00
  • d17b25cdcc fan-control: document the HA Fan Lock (opt out of 60-min auto-revert) [ci skip] Viktor Barzin 2026-06-05 12:22:00 +00:00
  • 51456a96f6 fan-control: estimate + expose fan power (fan_watts_est) Viktor Barzin 2026-06-05 11:10:27 +00:00
  • 324f2dc3bf fan-control: continuous linear curve (replaces discrete step-bands) Viktor Barzin 2026-06-05 10:29:35 +00:00
  • 945c1936e3 fan-control docs: HA control (mode/manual-% + auto-revert + dashboard) Viktor Barzin 2026-06-05 09:29:35 +00:00
  • 8beca1dfc7 fan-control: read HA mode/manual-% setpoint (HA fan control) Viktor Barzin 2026-06-05 09:26:22 +00:00
  • b958935ee0 woodpecker: reload server on Vault PG password rotation [ci skip] Viktor Barzin 2026-06-05 09:17:47 +00:00
  • 3796a84e04 docs: f1-stream is Woodpecker-native (Forgejo viktor/f1-stream), not GHA/repo-10 Viktor Barzin 2026-06-05 09:13:13 +00:00
  • aa25dd488c Woodpecker CI deploy [CI SKIP] root 2026-06-05 06:52:31 +00:00
  • e8bfb4d06b f1-stream: consume Forgejo-registry image; drop in-monorepo source Viktor Barzin 2026-06-05 06:51:22 +00:00
  • 99f9bf8d89 fan-control: power-tune COOL curve to the 60% efficiency knee Viktor Barzin 2026-06-05 06:43:21 +00:00
  • 17da37cea3 fire-planner: reset bulk ingest toggle after successful run Viktor Barzin 2026-06-05 06:42:48 +00:00
  • deb031cc2c feat(tripit): encrypted personal-document vault PVC + DOCUMENT_ENCRYPTION_KEY Viktor Barzin 2026-06-04 22:41:41 +00:00
  • 27989cd9f1 fire-planner: bulk Reddit FIRE examples ingest + qwen3-8b model upgrade Viktor Barzin 2026-06-04 21:52:58 +00:00
  • 147a8cff40 Restore f1-stream stack — undo accidental bundling into 63fe7d2b Viktor Barzin 2026-06-04 21:47:20 +00:00
  • 90ad6b9125 fan-control: presence-aware IPMI fan curve for the R730 PVE host Viktor Barzin 2026-06-04 21:38:34 +00:00
  • c6f27fa172 wealth dashboard: enlarge returns numbers (drop stat name labels) [ci skip] Viktor Barzin 2026-06-04 21:10:49 +00:00
  • dbe10a708c wealth dashboard: shrink returns stat panels to h=4 [ci skip] Viktor Barzin 2026-06-04 21:06:25 +00:00
  • fc1486c3dd wealth dashboard: replace returns table with per-window stat panels [ci skip] Viktor Barzin 2026-06-04 19:54:33 +00:00
  • 6cec27f8dc novelapp: bump Keel policy patch -> all (track any upstream version) Viktor Barzin 2026-06-04 18:51:44 +00:00