No description
Find a file
Viktor Barzin 205eb2704b
[ci skip] Fix Technitium DNS client IP logging: bypass Traefik L4 proxy
DNS queries were going through Traefik's IngressRouteUDP, replacing
real client IPs with Traefik pod IPs (10.10.169.150) in Technitium logs.
Changed Technitium DNS service from NodePort to LoadBalancer with
externalTrafficPolicy: Local, removed dns-udp entrypoint and
IngressRouteUDP from Traefik, and updated CoreDNS to forward .lan
queries to Technitium's LoadBalancer IP directly.
2026-02-16 21:16:16 +00:00
.claude [ci skip] Remember to use cluster_healthcheck.sh for cluster status checks 2026-02-16 19:45:31 +00:00
.git-crypt Add 1 git-crypt collaborator [ci skip] 2025-10-24 18:00:00 +00:00
cli update @ record as well 2024-12-02 21:51:05 +00:00
diagram add link to diagramms lib [ci skip] 2024-01-07 02:38:27 +00:00
docs/plans [ci skip] Fix code review findings: correct Alertmanager URL, add atomic to Loki, remove dead minio NFS export, update design doc 2026-02-13 23:08:44 +00:00
modules [ci skip] Fix Technitium DNS client IP logging: bypass Traefik L4 proxy 2026-02-16 21:16:16 +00:00
playbooks add pve exporter playbook + pve exporter in k8s [ci skip] 2025-12-26 16:23:17 +00:00
scripts Add Uptime Kuma monitor check to cluster health script [ci skip] 2026-02-15 17:49:40 +00:00
secrets Cluster health remediation: cleanup CronJob, disable Collabora, fix GPU probe, add NFS exports [ci skip] 2026-02-15 17:20:47 +00:00
.drone.yml touch empty private key to enable tfa in drone 2025-11-29 12:06:10 +00:00
.gitattributes add git-crypt terraform 2021-02-14 18:17:40 +00:00
.gitignore add claude files to gitignore [ci skip] 2026-01-18 13:40:31 +00:00
.terraform.lock.hcl [ci skip] Deploy health dashboard service 2026-02-08 01:54:24 +00:00
corefils.yaml disable coredns logs as we dont need them in prod[ci skip] 2025-01-25 17:22:38 +00:00
LICENSE.txt Drone CI Update TLS Certificates Commit 2025-10-12 00:13:18 +00:00
main.tf [ci skip] Fix docker-registry VM: add SSH key, remove hourly restart cron 2026-02-15 22:16:41 +00:00
migrate_tfstate.txt initial 2021-02-08 20:02:17 +00:00
README.md add git-crypt setup instructions [ci skip] 2025-10-24 18:09:57 +00:00
terraform.tfstate [ci skip] Manage CoreDNS Corefile in Terraform and block junk NxDomain queries 2026-02-15 21:51:12 +00:00
terraform.tfvars update the scrape schedule for wrongmove [ci skip] 2026-02-15 14:40:05 +00:00
terraform_1.10.3_linux_amd64.zip Drone CI Update TLS Certificates Commit 2025-10-12 00:13:18 +00:00
versions.tf upgrade proxmox provider and some other tf [ci skip] 2025-12-18 11:41:33 +00:00

Build Status

This repo contains my infra-as-code sources.

My infrastructure is built using Terraform, Kubernetes and CI/CD is done using Drone CI.

Read more by visiting my website: https://viktorbarzin.me

git-crypt setup

To decrypt the secrets, you need to setup git-crypt.

  1. Install git-crypt.
  2. Setup gpg keys on the machine
  3. git-crypt unlock

This will unlock the secrets and will lock them on commit