infra/stacks
Viktor Barzin c766d849f8 mitigate cluster instability during terraform applies
- Recreate strategy for heavy single-replica deployments (onlyoffice, stirling-pdf)
- Reduce maxSurge on multi-replica deployments (traefik, authentik, grafana, kyverno)
  to prevent memory request surge overwhelming scheduler
- Weekly etcd defrag CronJob (Sunday 3 AM) to prevent fragmentation buildup
- Disable Kyverno policy reports (ephemeral report cleanup)
- Cloud-init: journald persistence + 4Gi swap for worker nodes
- Kubelet: LimitedSwap behavior for memory pressure relief
2026-03-18 08:04:02 +00:00
..
actualbudget remove SOPS pipeline, deploy ESO + Vault DB/K8s engines 2026-03-18 08:04:01 +00:00
affine add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
audiobookshelf add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
blog add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
calibre fix cluster health: resolve 21/23 failures from healthcheck 2026-03-18 08:04:00 +00:00
changedetection add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
city-guesser add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
claude-memory claude-memory: pin image to :17, fixes URL-decode crash on sync endpoint 2026-03-18 08:04:01 +00:00
coturn add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
cyberchef add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
dashy add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
dawarich add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
descheduler migrate all secrets from SOPS to Vault KV 2026-03-18 08:03:59 +00:00
diun add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
ebook2audiobook migrate all secrets from SOPS to Vault KV 2026-03-18 08:03:59 +00:00
echo add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
excalidraw add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
external-secrets remove SOPS pipeline, deploy ESO + Vault DB/K8s engines 2026-03-18 08:04:01 +00:00
f1-stream add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
forgejo add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
freedify remove SOPS pipeline, deploy ESO + Vault DB/K8s engines 2026-03-18 08:04:01 +00:00
freshrss add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
frigate right-size cluster memory: reduce overprovisioned, fix under-provisioned services 2026-03-18 08:04:01 +00:00
grampsweb add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
hackmd fix: increase memory for OOMKilled services 2026-03-18 08:04:01 +00:00
health add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
homepage add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
immich fix immich TF drift from Kyverno ndots injection, right-size nvidia GPU operator 2026-03-18 08:04:01 +00:00
infra mitigate cluster instability during terraform applies 2026-03-18 08:04:02 +00:00
isponsorblocktv add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
jsoncrack migrate all secrets from SOPS to Vault KV 2026-03-18 08:03:59 +00:00
k8s-dashboard migrate all secrets from SOPS to Vault KV 2026-03-18 08:03:59 +00:00
kms add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
linkwarden remove SOPS pipeline, deploy ESO + Vault DB/K8s engines 2026-03-18 08:04:01 +00:00
matrix Migrate Matrix Synapse from SQLite to PostgreSQL 2026-03-18 08:03:58 +00:00
meshcentral add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
n8n fix: increase memory for OOMKilled services 2026-03-18 08:04:01 +00:00
navidrome add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
netbox add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
networking-toolbox add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
nextcloud remove SOPS pipeline, deploy ESO + Vault DB/K8s engines 2026-03-18 08:04:01 +00:00
novelapp add AUTH_SECRET and ALLOWED_ORIGIN env vars to novelapp deployment 2026-03-18 08:04:00 +00:00
ntfy add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
ollama add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
onlyoffice mitigate cluster instability during terraform applies 2026-03-18 08:04:02 +00:00
openclaw fix openclaw init container: escape shell vars, fix image path [ci skip] 2026-03-18 08:04:02 +00:00
osm_routing add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
owntracks add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
paperless-ngx add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
platform mitigate cluster instability during terraform applies 2026-03-18 08:04:02 +00:00
plotting-book add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
poison-fountain right-size memory: set requests=limits based on actual usage 2026-03-18 08:03:59 +00:00
privatebin add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
real-estate-crawler fix cluster health: resolve 21/23 failures from healthcheck 2026-03-18 08:04:00 +00:00
reloader [ci skip] phase 5+6: update CI pipelines for SOPS, add sensitive=true to secret vars 2026-03-07 14:30:36 +00:00
resume add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
rybbit fix: openclaw policy violation + reduce memory requests for capacity 2026-03-18 08:04:01 +00:00
send add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
servarr remove SOPS pipeline, deploy ESO + Vault DB/K8s engines 2026-03-18 08:04:01 +00:00
shadowsocks add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
speedtest remove SOPS pipeline, deploy ESO + Vault DB/K8s engines 2026-03-18 08:04:01 +00:00
stirling-pdf mitigate cluster instability during terraform applies 2026-03-18 08:04:02 +00:00
tandoor add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
terminal Add terminal stack - reverse proxy to ttyd behind authentik 2026-03-10 23:46:01 +00:00
tor-proxy add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
trading-bot right-size memory: set requests=limits based on actual usage 2026-03-18 08:03:59 +00:00
travel_blog add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
tuya-bridge add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
url right-size cluster memory: reduce overprovisioned, fix under-provisioned services 2026-03-18 08:04:01 +00:00
vault remove SOPS pipeline, deploy ESO + Vault DB/K8s engines 2026-03-18 08:04:01 +00:00
wealthfolio add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
webhook_handler add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
whisper add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00
woodpecker migrate all secrets from SOPS to Vault KV 2026-03-18 08:03:59 +00:00
ytdlp add vaultwarden daily backup CronJob to NFS 2026-03-18 08:04:00 +00:00