viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Commit graph

  • 9cb609f21a nextcloud-todos: register only the Created webhook (drop Updated) Viktor Barzin 2026-06-04 18:01:06 +00:00
  • 3d0cba9dcb openclaw: pin 2026.2.26, resilient startup, SHA-pinned plugin init (recover from agentRuntime + configSchema crashloop) Viktor Barzin 2026-06-04 17:49:14 +00:00
  • c01a28e23c Woodpecker CI deploy [CI SKIP] root 2026-06-04 16:58:49 +00:00
  • 6cff9bac26 freshrss: migrate extensions PVC proxmox-lvm -> NFS (node6 LUN relief, code-dfjn) Viktor Barzin 2026-06-04 16:56:51 +00:00
  • 11b092a589 Woodpecker CI deploy [CI SKIP] root 2026-06-04 16:55:23 +00:00
  • e2d46ebd30 isponsorblocktv: migrate data PVC proxmox-lvm -> NFS (node6 LUN relief, code-dfjn) Viktor Barzin 2026-06-04 16:54:25 +00:00
  • 9858a1c44b docs(add-user): document dashboard auto-login home-ns scope + foreign-namespace exception [ci skip] Viktor Barzin 2026-06-04 15:03:23 +00:00
  • ace6ee59f9 Woodpecker CI deploy [CI SKIP] root 2026-06-04 14:39:12 +00:00
  • adec2c135f fix(novelapp): also bind gheorghe's dashboard SA to novelapp admin Viktor Barzin 2026-06-04 14:38:16 +00:00
  • 8f13fdeaf7 docs: dashboard SA cluster-read tightened to namespace-list + nodes only [ci skip] Viktor Barzin 2026-06-04 12:22:35 +00:00
  • 7114824c06 fix(rbac): tighten dashboard SA cluster-read to namespaces+nodes only Viktor Barzin 2026-06-04 12:21:13 +00:00
  • ae252f9116 cluster-health: ha_integrations — skip disabled + ignored config entries Viktor Barzin 2026-06-04 11:20:10 +00:00
  • dd2a8e640f monitoring: right-size loki memory request 3Gi->1Gi (quota 89%->79%) Viktor Barzin 2026-06-04 11:18:06 +00:00
  • 90d7c11c16 state(vault): update encrypted state Viktor Barzin 2026-06-04 11:14:51 +00:00
  • 2707496b37 state(dbaas): update encrypted state Viktor Barzin 2026-06-04 11:14:16 +00:00
  • 31b8104b43 cluster-health: uptime_kuma check — only count status==0 as down Viktor Barzin 2026-06-04 08:18:54 +00:00
  • bf6ede2b9e vault: deny secret/data/vault for claude-agent terraform-state policy (executor elevation safety narrowing) Viktor Barzin 2026-06-04 08:17:36 +00:00
  • 63ee655c08 monitoring: fix PrometheusBackupStale false-fire (32d->40d threshold) Viktor Barzin 2026-06-04 08:07:58 +00:00
  • c4bd64f88a docs: dashboard now auto-injects per-user SA token (no token-paste) Viktor Barzin 2026-06-04 08:05:34 +00:00
  • d649f4f287 feat(k8s-dashboard): auto-inject per-user SA token (no token-paste) Viktor Barzin 2026-06-04 08:04:23 +00:00
  • 467eb7d7ee claude-agent: grant shared pod executor powers (Forgejo PR, terragrunt apply, kubectl write, MCP) Viktor Barzin 2026-06-04 08:04:10 +00:00
  • b56a868b4e wealthfolio-sync: podAffinity to co-locate with app pod (RWO multi-attach fix) Viktor Barzin 2026-06-04 07:52:02 +00:00
  • 8e44ccaa65 docs: dashboard access is forward-auth + token-paste (OIDC SSO blocked) Viktor Barzin 2026-06-04 07:48:38 +00:00
  • e4c3fbbbbb feat(authentik): adopt admin-services-restriction policy; admit kubernetes-* groups to k8s dashboard Viktor Barzin 2026-06-04 07:46:09 +00:00
  • 317989f9d5 feat(rbac): per-namespace-owner dashboard SA + long-lived token Viktor Barzin 2026-06-04 07:33:14 +00:00
  • 4aa6e7a5af chrome-service docs: clarify f1-stream is not a real caller Viktor Barzin 2026-06-04 05:33:34 +00:00
  • d479d5b4f9 Woodpecker CI deploy [CI SKIP] root 2026-06-04 05:17:59 +00:00
  • deede6dd11 chrome-service: switch to CDP + persistent profile + hourly snapshot pipeline Viktor Barzin 2026-06-04 05:15:49 +00:00
  • b64d8d6168 cluster-health: add #47 ghost-disk drift check; fix immich_search set -e crash Viktor Barzin 2026-06-04 04:06:12 +00:00
  • ea1e4f793b revert(k8s-dashboard): restore forward-auth ingress (apiserver OIDC unresolved) Viktor Barzin 2026-06-04 03:59:43 +00:00
  • c958f6a589 feat(nextcloud-todos): Phase 4 IaC — service stack, Vault role, DB bootstrap, OpenClaw plugin, monitoring Viktor Barzin 2026-06-04 03:58:07 +00:00
  • c3c3d5e010 feat(claude-agent-service): seed nextcloud-todos planner + exec agents Viktor Barzin 2026-06-04 03:45:36 +00:00
  • d0206848cb priority-pass: bump image_tag to 63e118c3 [ci skip] github-actions[bot] 2026-06-04 03:39:27 +00:00
  • 55a8b238a0 mam-farming: migrate data volume proxmox-lvm → NFS Viktor Barzin 2026-06-04 03:32:39 +00:00
  • cb96d5d590 fix(k8s-dashboard): use email_verified=true + groups scope mappings Viktor Barzin 2026-06-04 03:23:59 +00:00
  • 1042c0f082 fix(k8s-dashboard): set RS256 signing_key on Authentik OIDC provider Viktor Barzin 2026-06-04 03:12:01 +00:00
  • e436af8d8c fix(k8s-dashboard): drop group-restriction policy; RBAC is the gate Viktor Barzin 2026-06-04 03:08:44 +00:00
  • ad3432d685 docs(k8s-dashboard): dashboard SSO as-built (Option B multi-issuer apiserver) Viktor Barzin 2026-06-04 02:58:27 +00:00
  • c9b22c7dd3 feat(k8s-dashboard): cut over ingress to oauth2-proxy SSO Viktor Barzin 2026-06-04 02:53:16 +00:00
  • ed4ed6bd09 fix(k8s-dashboard): ignore Keel/tier drift on oauth2-proxy deployment Viktor Barzin 2026-06-04 02:49:10 +00:00
  • 75c2b6dc5e feat(rbac): apiserver multi-issuer OIDC via structured AuthenticationConfiguration Viktor Barzin 2026-06-04 02:48:39 +00:00
  • 5b25ce1ec5 priority-pass: bump image_tag to 061a66ad [ci skip] github-actions[bot] 2026-06-04 02:45:56 +00:00
  • 9c4335025d feat(tripit): linked-email verification (SMTP + confirm carve-out) [ci skip] Viktor Barzin 2026-06-04 02:34:29 +00:00
  • b8c55732e0 feat(k8s-dashboard): deploy oauth2-proxy (not yet wired to ingress) Viktor Barzin 2026-06-04 02:13:38 +00:00
  • 7c4375d7cd Woodpecker CI deploy [CI SKIP] root 2026-06-04 02:12:29 +00:00
  • 4ed0c5a834 uptime-kuma: codify Traefik LB internal monitor at .203 (was stale .200) Viktor Barzin 2026-06-04 02:12:22 +00:00
  • 011c63c92d feat(k8s-dashboard): add Authentik OIDC app for dashboard SSO Viktor Barzin 2026-06-04 02:11:30 +00:00
  • 549320f79c docs(k8s-dashboard): SSO via Authentik oauth2-proxy — implementation plan [ci skip] Viktor Barzin 2026-06-04 02:05:51 +00:00
  • 23d87d8885 cluster-health #20: fix false NFS FAIL on Linux (nc -G is macOS-only) Viktor Barzin 2026-06-04 02:01:49 +00:00
  • 8b72eaebb0 docs(k8s-dashboard): SSO via Authentik oauth2-proxy — design [ci skip] Viktor Barzin 2026-06-04 01:59:49 +00:00
  • f201e4573e immich: fix slow context search — prewarm clip_index + latency alert/healthcheck Viktor Barzin 2026-06-03 21:00:43 +00:00
  • 38c77048fd chore(travel-agent): decommission — merged into tripit [ci skip] Viktor Barzin 2026-06-03 20:37:03 +00:00
  • be4ee7315a feat(tripit): proactive-nudge CronJobs (transport + weather brief) [ci skip] Viktor Barzin 2026-06-03 20:37:02 +00:00
  • a2fa912b44 cluster-health: add check #45 — HA Sofia Status Dashboard Viktor Barzin 2026-06-03 11:56:41 +00:00
  • 98f29edf34 technitium: CoreDNS rewrite forgejo.viktorbarzin.me -> Traefik ClusterIP Viktor Barzin 2026-06-04 07:34:30 +00:00
  • 7302cd7908 infra: untrack generated backend.tf (stale PG creds + .200 literal) [CI SKIP] Viktor Barzin 2026-06-03 10:52:46 +00:00
  • 7d7a0ad474 infra: fix stale Traefik LB-IP refs + accurate LB-IP registry Viktor Barzin 2026-06-03 10:23:13 +00:00
  • dcb7c74531 url/shlink: fix admin UI — pin shlink-web-client 4.7.1 + port 8080 Viktor Barzin 2026-06-02 23:21:25 +00:00
  • c7cf21a986 Revert mail LAN-redirect approach; pending VIP-based redesign Viktor Barzin 2026-06-02 23:18:16 +00:00
  • 922d95af9c Reapply "tripit: Gmail ingest (12-month) + vbarzin owner + plans@ forward-to-parse" Viktor Barzin 2026-06-02 23:17:42 +00:00
  • f0843e398b Revert "tripit: Gmail ingest (12-month) + vbarzin owner + plans@ forward-to-parse" Viktor Barzin 2026-06-02 23:17:18 +00:00
  • 0c7ec3d470 tripit: Gmail ingest (12-month) + vbarzin owner + plans@ forward-to-parse Viktor Barzin 2026-06-02 23:16:12 +00:00
  • fd35c4f303 pfSense: LAN-side NAT redirect for mail ports landing on Traefik LB IP Viktor Barzin 2026-06-02 23:09:07 +00:00
  • ff26d1c957 openclaw: give recruiter-api plugin the Telegram bot token so it can announce Viktor Barzin 2026-06-02 22:03:55 +00:00
  • c85533d2d9 Woodpecker CI deploy [CI SKIP] root 2026-06-02 21:59:21 +00:00
  • 982dc9e63a openclaw: task-webhook ingress auth required->none (inbound Forgejo webhook) Viktor Barzin 2026-06-02 21:55:25 +00:00
  • 91d110acf5 Woodpecker CI deploy [CI SKIP] root 2026-06-02 21:54:46 +00:00
  • fde2d19bf7 trading-bot: ingress auth required->app (app has own WebAuthn/JWT) Viktor Barzin 2026-06-02 21:52:08 +00:00
  • e18e0d51a0 uptime-kuma: public status pages + push monitors bypass Authentik Viktor Barzin 2026-06-02 21:50:38 +00:00
  • 17f91f6167 Woodpecker CI deploy [CI SKIP] root 2026-06-02 21:17:31 +00:00
  • bc5aba34b6 meshcentral: fix agent connectivity behind Authentik + TLS-offload Traefik Viktor Barzin 2026-06-02 21:16:41 +00:00
  • 01ea7d6fa1 immich: clip-keepalive CronJob to pin smart-search model warm Viktor Barzin 2026-06-02 21:11:00 +00:00
  • f0948493b3 claude-agent-service: wire parallel execution (git-crypt mount, memory, MAX_CONCURRENCY) Viktor Barzin 2026-06-02 21:02:36 +00:00
  • 16763464cd job-hunter dashboard: role panels now respect the $location filter Viktor Barzin 2026-06-02 23:35:24 +00:00
  • 7a7abe4cbe uk-payslip dashboard: count gross comp on taxable_pay (P60) basis Viktor Barzin 2026-06-02 23:23:14 +00:00
  • aa0d6511b2 job-hunter runbook: document two self baselines + taxable_pay gotcha Viktor Barzin 2026-06-02 23:13:33 +00:00
  • 50a4ad70f0 job-hunter runbook: self-comp re-seed stores full TC breakdown Viktor Barzin 2026-06-02 22:23:40 +00:00
  • deb0dd4778 monitoring: "Your comp vs the market" panel on Job Hunter dashboard Viktor Barzin 2026-06-02 21:23:01 +00:00
  • 74313149dd job-hunter: weekly above-target Slack alert CronJob Viktor Barzin 2026-06-02 20:49:42 +00:00
  • 5dc5cd53c0 url/shlink: ingress url.viktorbarzin.me auth required -> none Viktor Barzin 2026-06-02 20:37:33 +00:00
  • fe8db19aaf job-hunter: build-triggers-deploy model; CronJob :latest + docs Viktor Barzin 2026-06-02 20:24:50 +00:00
  • 052c776eba immich: set MACHINE_LEARNING_MODEL_TTL 0->600 to stop GPU VRAM hog Viktor Barzin 2026-06-02 20:16:11 +00:00
  • cda858d560 job-hunter: weekly refresh CronJob + ops/analyst runbook Viktor Barzin 2026-06-02 19:37:57 +00:00
  • 87f1dcb72d wealth: consolidation chunk 2 — net-pay $grain merge, Trend projection, row reorg Viktor Barzin 2026-06-02 19:24:27 +00:00
  • 848cc7211f t3code: track t3 nightly via health-checked auto-updater Viktor Barzin 2026-06-02 08:57:59 +00:00
  • de09e8f294 immich runbook: note force=false re-kick gotcha after row deletion [ci skip] Viktor Barzin 2026-06-02 08:54:11 +00:00
  • d27df1f321 t3code: dispatch — strip @domain from X-authentik-username (Authentik injects email) Viktor Barzin 2026-06-02 08:15:24 +00:00
  • b651f137b9 docs(kms): SXSMSI/1603 is client-machine-specific (VM 300 pilot) + deep-repair/escalation Viktor Barzin 2026-06-02 00:13:25 +00:00
  • 481585f6e6 immich: cap streaming transcode bitrate to fix 4K video stutter [ci skip] Viktor Barzin 2026-06-01 22:51:47 +00:00
  • deec540fad t3code: docs — auto-provisioning service-catalog entry + design status implemented Viktor Barzin 2026-06-01 22:46:07 +00:00
  • a587f0ee55 t3code: ingress -> devvm dispatch+autopair (retire in-cluster nginx) Viktor Barzin 2026-06-01 22:44:27 +00:00
  • 9f551e3c13 t3code: harden dispatch — dedicated user + validated t3-mint + scoped sudoers Viktor Barzin 2026-06-01 22:40:53 +00:00
  • 0472f67d49 t3code: devvm dispatch + auto-pair service (Go) Viktor Barzin 2026-06-01 22:37:33 +00:00
  • 72aba7da32 t3code: reconcile per-user t3 instances from /etc/ttyd-user-map Viktor Barzin 2026-06-01 22:34:50 +00:00
  • f8a63fdacd t3code: per-user t3-serve@ systemd template (User=%i file isolation) Viktor Barzin 2026-06-01 22:33:46 +00:00
  • 2152430b70 docs(t3code): record discovered t3 web-auth contract Viktor Barzin 2026-06-01 22:28:45 +00:00
  • 5e4f83d4e7 wealth: consolidation chunk 1 — merge NW/contribution/growth, returns table, yearly combo Viktor Barzin 2026-06-01 22:27:09 +00:00
  • a09b0b3612 docs(t3code): implementation plan for per-user auto-provisioning Viktor Barzin 2026-06-01 22:19:22 +00:00
  • 1a0647c7ed docs(t3code): design for per-user auto-provisioning (Authentik login → instance + session) Viktor Barzin 2026-06-01 22:10:05 +00:00
  • 55ed50b932 docs(plans): wealth dashboard consolidation design Viktor Barzin 2026-06-01 21:52:59 +00:00