viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Commit graph

  • 73cb0aab8b t3code: per-user isolation via Authentik + nginx username dispatcher Viktor Barzin 2026-06-01 21:38:06 +00:00
  • 9fb3e6e851 docs: correct cloudflared-502 post-mortem + fix stale .200 Traefik ref [ci skip] Viktor Barzin 2026-06-01 21:25:33 +00:00
  • f807050eb5 cloudflared: fix tunnel origin .200 -> Traefik svc DNS (full-site 502 outage) [ci skip] Viktor Barzin 2026-06-01 21:21:40 +00:00
  • 30a644d3cd docs(kms): document reboot-after-uninstall / 1603 handling + real-hardware status Viktor Barzin 2026-06-01 20:54:28 +00:00
  • a382683c0e infra: fix containerd forgejo-registry redirect .200->.203 (+skip_verify) Viktor Barzin 2026-06-01 20:48:09 +00:00
  • 82855848d1 plans: TopoLVM migration evaluation (Path 3 for LUN-cap relief) Viktor Barzin 2026-06-01 20:00:00 +00:00
  • 599d67db51 docs(kms): self-hosted ODT bootstrapper + anonymous client telemetry (kms-diag/Loki) Viktor Barzin 2026-06-01 19:51:28 +00:00
  • f364399ede wealth: add 30y net-worth projection row + align net-pay panel Viktor Barzin 2026-06-01 19:49:50 +00:00
  • 32e1042ca8 t3code: expose t3 serve (DevVM) publicly at t3.viktorbarzin.me (app-tier) Viktor Barzin 2026-06-01 19:45:03 +00:00
  • c5e4b1ea71 kms: add /diag anonymous telemetry collector behind Anubis carve-out Viktor Barzin 2026-06-01 19:38:07 +00:00
  • 3fa9e2409c runbook: K8s worker scaling for PVC capacity headroom Viktor Barzin 2026-06-01 19:25:19 +00:00
  • 5c77482a8c fire-planner: LLM_MODEL env var → qwen3vl-4b default (fits in current GPU headroom; immich-ml is holding ~10GB) Viktor Barzin 2026-06-01 19:07:55 +00:00
  • fb1e47a20a nextcloud: re-enable Keel auto-upgrades with occ-upgrade self-heal + live-tag floor Viktor Barzin 2026-06-01 18:43:51 +00:00
  • 50d0f1affa kyverno: strip orphaned keel.sh/match-tag fleet-wide (image-swap fix) Viktor Barzin 2026-06-01 16:46:23 +00:00
  • 769ae7a6d3 traefik: bot-block-proxy buffer 256k + document the real HTTP/2 limit Viktor Barzin 2026-06-01 15:15:05 +00:00
  • 1c165ce5b4 docs(kms): document the consequence-gated edition switch (changepk + ODT) Viktor Barzin 2026-06-01 14:42:30 +00:00
  • 3d28870e25 nextcloud: fix backup retention to sort by name, not mtime Viktor Barzin 2026-06-01 14:09:54 +00:00
  • 84ab4c998c Woodpecker CI deploy [CI SKIP] root 2026-06-01 14:02:57 +00:00
  • ddd582a28c backup: stop offsite-copying regenerable data; shrink nextcloud backup; pin nextcloud image Viktor Barzin 2026-06-01 14:01:21 +00:00
  • 0dd4a31eff docs(immich): cap server-side job concurrency to protect sdc + log recurrence Viktor Barzin 2026-06-01 12:33:17 +00:00
  • af4bfbe046 kms: revert files accidentally bundled into the docs commit Viktor Barzin 2026-06-01 10:33:20 +00:00
  • bdb0cef242 docs(kms): document /keys.json carve-out + script auto-key selection Viktor Barzin 2026-06-01 10:29:24 +00:00
  • 170a3bb052 traefik: bump bot-block-proxy large_client_header_buffers to 8x64k Viktor Barzin 2026-06-01 10:16:46 +00:00
  • 6f0bdf2993 kms: carve /keys.json out of Anubis for script auto-key-selection Viktor Barzin 2026-06-01 10:10:43 +00:00
  • 7a297deb24 Woodpecker CI deploy [CI SKIP] root 2026-06-01 08:29:51 +00:00
  • e63a812062 kms: dedicated vlmcs.viktorbarzin.me endpoint + Anubis /scripts carve-out Viktor Barzin 2026-06-01 08:24:08 +00:00
  • de04ed099e Woodpecker CI Update TLS Certificates Commit root 2026-05-31 00:02:54 +00:00
  • e5d9160a88 monitoring: KEEL/tier ignore_changes on 5 exporters [ci skip] Viktor Barzin 2026-05-31 15:33:30 +00:00
  • 935fb07df7 hermes-agent: gate PVC on parked flag (clears PVCStuckPending) Viktor Barzin 2026-05-31 15:19:28 +00:00
  • 7b6a0e70af hermes-agent: opt out of external monitor while parked Viktor Barzin 2026-05-31 15:12:33 +00:00
  • 51313ee088 kured: fix sentinel-gate OOM — 256Mi limit + self-restart leak guard Viktor Barzin 2026-05-31 14:49:04 +00:00
  • 0c64fc2948 travel-agent: switch from Slack webhook to bot token (chat.postMessage) Viktor Barzin 2026-05-30 22:44:11 +00:00
  • 46f63bb70e infra: travel-agent stack (namespace + ExternalSecret + 2 CronJobs) Viktor Barzin 2026-05-30 18:24:13 +00:00
  • e1ab23193d redis: revert 3-node Sentinel HA to single standalone instance [ci skip] Viktor Barzin 2026-05-30 17:49:43 +00:00
  • 5bcb4525a4 traefik: uncap download duration (writeTimeout 60s->0), upload window 3600s [ci skip] Viktor Barzin 2026-05-30 17:46:59 +00:00
  • 89561c7779 technitium: complete Traefik .200->.203 migration for the .lan zone [ci skip] Viktor Barzin 2026-05-30 16:54:09 +00:00
  • a222c024fd docs: correct tripit DNS classification to proxied [ci skip] Viktor Barzin 2026-05-30 15:00:49 +00:00
  • b78378eda9 docs: catalog tripit service (service-catalog + databases) [ci skip] Viktor Barzin 2026-05-30 14:59:01 +00:00
  • c2b820dc55 postiz: adopt drifted resources into TF state; exclude stuck Helm release Viktor Barzin 2026-05-30 14:36:07 +00:00
  • 01351e4ce2 tripit: deploy stack + DB provisioning + ongoing mail-ingest [ci skip] Viktor Barzin 2026-05-30 10:23:11 +00:00
  • e9046e5a26 traefik+pfsense: real IPv6 client IPs via HAProxy PROXY-v2 bridge Viktor Barzin 2026-05-30 09:51:23 +00:00
  • 16c9aafafa docs: Traefik dedicated-IP + ETP=Local cutover SUCCEEDED (attempt 2) Viktor Barzin 2026-05-30 08:12:57 +00:00
  • 0c01adac95 traefik: dedicate LB IP 10.0.20.203 + externalTrafficPolicy=Local Viktor Barzin 2026-05-30 08:09:37 +00:00
  • d6a61f00ad state(vault): update encrypted state Viktor Barzin 2026-05-30 07:59:28 +00:00
  • aceee34889 state(dbaas): update encrypted state Viktor Barzin 2026-05-30 07:55:42 +00:00
  • 1473a94f29 docs/plans: Traefik dedicated-IP cutover attempt 1 post-mortem (rolled back) Viktor Barzin 2026-05-30 01:27:29 +00:00
  • 09a0c1fad4 docs/plans: Traefik dedicated IP + ETP=Local migration (design + plan) Viktor Barzin 2026-05-30 00:27:04 +00:00
  • 0f26bf030b kyverno: exclude postiz namespace from Keel auto-update injection Viktor Barzin 2026-05-29 19:15:21 +00:00
  • ae72ad51bb Woodpecker CI deploy [CI SKIP] root 2026-05-29 18:07:00 +00:00
  • bc41fe572a immich: GPU-accelerate video transcoding (NVENC + NVDEC) Viktor Barzin 2026-05-29 18:05:34 +00:00
  • b10233975b llama-cpp: restore replicas to 1; fire-planner: fix llama-swap URL Viktor Barzin 2026-05-29 06:20:03 +00:00
  • 478629c1ee keel+anubis: extend sweep to non-V2 raw deployments; fix anubis replicas validation Viktor Barzin 2026-05-29 06:01:24 +00:00
  • fe1a16a5f5 Woodpecker CI deploy [CI SKIP] root 2026-05-29 05:48:10 +00:00
  • 5bc7a76630 tuya-bridge: switch to Forgejo image + CI-driven deploy Viktor Barzin 2026-05-29 05:45:16 +00:00
  • 7870e62a07 uptime-kuma: declare Proxmox UI monitor in TF Viktor Barzin 2026-05-29 05:40:18 +00:00
  • 7c73c69f9b keel: add KEEL_LIFECYCLE_V1 + image-ignore to fire-planner Viktor Barzin 2026-05-28 23:12:49 +00:00
  • cdb7d9a81a keel: sweep KEEL_LIFECYCLE_V1 + per-container KEEL_IGNORE_IMAGE across enrolled workloads Viktor Barzin 2026-05-28 23:09:30 +00:00
  • 4f71ce6bc5 wealth: fix Fidelity Feb-2026 zero-gap + month-boundary contribution smear Viktor Barzin 2026-05-28 22:58:59 +00:00
  • 0044c3a8ea fire-planner: add examples ingest Job (toggled) + weekly CronJob Viktor Barzin 2026-05-28 22:51:14 +00:00
  • 4dff834c8a reduce ingress-dns-sync frequency to hourly [ci skip] Viktor Barzin 2026-05-28 22:30:08 +00:00
  • 5ac8d625b9 add ingress-dns-sync CronJob to auto-create Technitium CNAME records Viktor Barzin 2026-05-28 22:22:42 +00:00
  • 58cced5dab monitoring: render market-vs-salary periodic panels as lines, not bars Viktor Barzin 2026-05-28 22:18:59 +00:00
  • 2a7124d266 docs(plans): wealth net-worth projections design Viktor Barzin 2026-05-28 22:15:03 +00:00
  • 388a7f60c7 monitoring: add net-pay-vs-market-gains panels to wealth dashboard Viktor Barzin 2026-05-28 22:13:44 +00:00
  • 1af412b461 trading-bot: bump TRADING_MEET_KEVIN_PROMPT_VERSION v1 -> v2 (forward-looking prompt) Viktor Barzin 2026-05-28 21:40:17 +00:00
  • 188bdd50a0 infra: decommission foolery agent UI Viktor Barzin 2026-05-28 16:08:41 +00:00
  • 8b4bcc0ca2 blog: Anubis carve-out for /net-diag.sh Viktor Barzin 2026-05-28 13:22:57 +00:00
  • fc5a4b66ad monitoring: exclude catchall-error-pages from HighService4xxRate Viktor Barzin 2026-05-27 19:46:18 +00:00
  • f677794379 cluster_healthcheck.sh: run checks in parallel (~3x speedup) Viktor Barzin 2026-05-27 19:46:11 +00:00
  • b8cd1219a6 priority-pass: bump image_tag to 4ce9e8e8 [ci skip] github-actions[bot] 2026-05-27 18:46:19 +00:00
  • d0ede3773b Woodpecker CI deploy [CI SKIP] root 2026-05-27 18:38:09 +00:00
  • ee159b02ba nextcloud: disable Keel auto-upgrades Viktor Barzin 2026-05-27 18:37:05 +00:00
  • d72c7169c0 monitoring: route proxmox-exporter to scrape_slow job (fix flapping alerts) Viktor Barzin 2026-05-27 18:36:11 +00:00
  • f121bee121 fire-planner: update recompute CronJob comment to reflect lazy refresh Viktor Barzin 2026-05-27 18:23:21 +00:00
  • 4b77aa65a1 broker-sync: unsuspend broker-sync-imap (IE structurally skipped at code level now) Viktor Barzin 2026-05-27 17:57:26 +00:00
  • 06fb1f9ea9 broker-sync: update imap-cron comment to reflect default-skip IE (post-incident) Viktor Barzin 2026-05-27 17:25:42 +00:00
  • 501f2c6b37 broker-sync: re-suspend broker-sync-imap CronJob Viktor Barzin 2026-05-27 17:09:09 +00:00
  • 54919e3abc trading-bot: TRADING_SLACK_BOT_TOKEN + TRADING_SLACK_CHANNEL env Viktor Barzin 2026-05-27 10:06:51 +00:00
  • 17c59a280b broker-sync: drop IBKR_ACCOUNT_ID env (now derived via ensure_account) Viktor Barzin 2026-05-27 09:25:02 +00:00
  • 6d13ba12da broker-sync: add fsGroup=10001 to trading212 cron pod spec Viktor Barzin 2026-05-27 09:19:46 +00:00
  • 9e8314183f Woodpecker CI deploy [CI SKIP] root 2026-05-26 22:53:29 +00:00
  • 9b68dbc788 wealthfolio: dav_corrected — also exclude Schwab synthetic cash flows Viktor Barzin 2026-05-26 22:52:17 +00:00
  • 30ba6860b9 broker-sync: add IBKR Flex daily CronJob (02:00 UK) Viktor Barzin 2026-05-26 22:34:54 +00:00
  • 2df9700d70 trading-bot: add slack_webhook_url ESO secret + env var Viktor Barzin 2026-05-26 21:55:59 +00:00
  • 15c88bc683 keel: belt-and-suspenders opt-out for mysql/redis/nvidia-exporter Viktor Barzin 2026-05-26 21:53:10 +00:00
  • 1abe6465e0 state(dbaas): update encrypted state Viktor Barzin 2026-05-26 21:40:56 +00:00
  • 498b01396c status-page: disable pusher CronJob to stop sdc write storm Viktor Barzin 2026-05-26 21:40:14 +00:00
  • 84404fd0d6 broker-sync: skip InvestEngine in IMAP CronJob Viktor Barzin 2026-05-26 21:19:06 +00:00
  • 2becd0ff6f Woodpecker CI deploy [CI SKIP] root 2026-05-26 21:09:48 +00:00
  • 8605181c53 trading-bot: Phase 2 — add trade-executor + flip kevin kill-switch Viktor Barzin 2026-05-26 21:07:37 +00:00
  • 047a1189c9 backup-dr docs: refresh diagrams for daily/immich-only architecture Viktor Barzin 2026-05-26 20:00:31 +00:00
  • 3f0c429d46 offsite-sync: add || true to Step 2 HDD grep|while pipeline Viktor Barzin 2026-05-26 19:55:33 +00:00
  • 3526089457 docs: Talos migration design v7 — staged plan after 6 rounds of critique [ci skip] Viktor Barzin 2026-05-26 19:45:48 +00:00
  • f325b949be keel: re-enable with policy=patch (semver-bounded) + fix CI deny-privileged Viktor Barzin 2026-05-26 19:06:51 +00:00
  • 37d88ce50e nfs-mirror: weekly Mon 04:00 → daily 02:00 Viktor Barzin 2026-05-26 19:00:10 +00:00
  • 1eee56d0ba redis: tolerate up to 1KB of AOF tail corruption on load Viktor Barzin 2026-05-26 18:48:58 +00:00
  • 60b2b1cdfc cluster-health: emergency-stop Keel + roll back image downgrades + quota raises Viktor Barzin 2026-05-26 18:48:50 +00:00
  • 41fb7c4a76 backup pipeline: prune sda-bypass list to immich-only Viktor Barzin 2026-05-26 18:22:01 +00:00
  • b3dcccfc41 vaultwarden: track :latest tag for Keel auto-upgrade (was 1.35.7) Viktor Barzin 2026-05-26 13:26:36 +00:00
  • 8ed427a7e4 cloud-init: hands-off k8s worker provisioning + 5 bug fixes Viktor Barzin 2026-05-26 11:52:00 +00:00