viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
infra/stacks
History
Viktor Barzin d0f0e10da5 keel: pin chart 1.0.6 → 1.2.0 (1.0.6 doesn't exist) 
The Helm repo at https://charts.keel.sh has versions 1.0.0–1.0.5,
1.1.0, 1.2.0. 1.0.6 is not published, so the Phase 0 apply failed
silently. Bump to 1.2.0 (app version 0.21.1, latest stable).
2026-05-16 12:30:19 +00:00
..
_template ingress_factory: replace protected bool with auth enum + audit pass across 100 stacks 2026-05-10 18:53:49 +00:00
actualbudget Woodpecker CI deploy [CI SKIP] 2026-05-13 19:56:16 +00:00
affine infra/ingress_factory: add auth = "app" mode for self-authed backends 2026-05-11 18:59:20 +00:00
authentik infra: document auth = "app|none" tier on every legacy ingress 2026-05-11 19:25:48 +00:00
beads-server infra: document auth = "app|none" tier on every legacy ingress 2026-05-11 19:25:48 +00:00
blog anubis: HA with shared valkey/redis store + replicas=2 2026-05-16 11:54:54 +00:00
broker-sync fix: pvc-autoresizer + TF drift safety — bulk add ignore_changes 2026-05-10 21:57:01 +00:00
calico [infra] Partial Calico adoption: namespaces only (Wave 5b) 2026-04-18 22:52:56 +00:00
changedetection fix: pvc-autoresizer + TF drift safety — bulk add ignore_changes 2026-05-10 21:57:01 +00:00
chrome-service fix: pvc-autoresizer + TF drift safety — bulk add ignore_changes 2026-05-10 21:57:01 +00:00
city-guesser ingress_factory: replace protected bool with auth enum + audit pass across 100 stacks 2026-05-10 18:53:49 +00:00
claude-agent-service recruiter-triage v3: Perks & Office Life section + cache-first deep_research 2026-05-16 12:21:23 +00:00
claude-memory infra: document auth = "app|none" tier on every legacy ingress 2026-05-11 19:25:48 +00:00
cloudflared cloudflare: disable AI bot edge-block so x402 can issue payment offers 2026-05-10 18:37:29 +00:00
cnpg [infra] Suppress Goldilocks vpa-update-mode label drift on all namespaces [ci skip] 2026-04-18 21:15:27 +00:00
coturn [infra] Sweep dns_config ignore_changes across all pod-owning resources [ci skip] 2026-04-18 21:19:48 +00:00
crowdsec ingress_factory: replace protected bool with auth enum + audit pass across 100 stacks 2026-05-10 18:53:49 +00:00
cyberchef anubis: HA with shared valkey/redis store + replicas=2 2026-05-16 11:54:54 +00:00
dashy ingress_factory: replace protected bool with auth enum + audit pass across 100 stacks 2026-05-10 18:53:49 +00:00
dawarich infra: document auth = "app|none" tier on every legacy ingress 2026-05-11 19:25:48 +00:00
dbaas kured + cnpg: drain-safe defaults ahead of Monday reboot wave 2026-05-16 12:06:30 +00:00
descheduler [infra] Suppress Goldilocks vpa-update-mode label drift on all namespaces [ci skip] 2026-04-18 21:15:27 +00:00
diun fix: pvc-autoresizer + TF drift safety — bulk add ignore_changes 2026-05-10 21:57:01 +00:00
ebook2audiobook ingress_factory: replace protected bool with auth enum + audit pass across 100 stacks 2026-05-10 18:53:49 +00:00
ebooks infra: document auth = "app|none" tier on every legacy ingress 2026-05-11 19:25:48 +00:00
echo state(dbaas): update encrypted state 2026-05-10 21:00:00 +00:00
excalidraw fix: pvc-autoresizer + TF drift safety — bulk add ignore_changes 2026-05-10 21:57:01 +00:00
external-secrets [infra] Suppress Goldilocks vpa-update-mode label drift on all namespaces [ci skip] 2026-04-18 21:15:27 +00:00
f1-stream anubis: HA with shared valkey/redis store + replicas=2 2026-05-16 11:54:54 +00:00
fire-planner Phase 1a: enroll 4 self-hosted services in Keel auto-update 2026-05-16 12:28:54 +00:00
foolery ingress_factory: replace protected bool with auth enum + audit pass across 100 stacks 2026-05-10 18:53:49 +00:00
forgejo infra: document auth = "app|none" tier on every legacy ingress 2026-05-11 19:25:48 +00:00
freedify ingress_factory: replace protected bool with auth enum + audit pass across 100 stacks 2026-05-10 18:53:49 +00:00
freshrss infra/ingress_factory: add auth = "app" mode for self-authed backends 2026-05-11 18:59:20 +00:00
frigate infra: document auth = "app|none" tier on every legacy ingress 2026-05-11 19:25:48 +00:00
grampsweb fix: pvc-autoresizer + TF drift safety — bulk add ignore_changes 2026-05-10 21:57:01 +00:00
hackmd fix: pvc-autoresizer + TF drift safety — bulk add ignore_changes 2026-05-10 21:57:01 +00:00
headscale infra: document auth = "app|none" tier on every legacy ingress 2026-05-11 19:25:48 +00:00
health fix: pvc-autoresizer + TF drift safety — bulk add ignore_changes 2026-05-10 21:57:01 +00:00
hermes-agent fix: pvc-autoresizer + TF drift safety — bulk add ignore_changes 2026-05-10 21:57:01 +00:00
homepage anubis: HA with shared valkey/redis store + replicas=2 2026-05-16 11:54:54 +00:00
immich infra: document auth = "app|none" tier on every legacy ingress 2026-05-11 19:25:48 +00:00
infra [forgejo] Phases 3+4+5: cutover, decommission, docs sweep 2026-05-07 18:30:02 +00:00
infra-maintenance [infra] Sweep dns_config ignore_changes across all pod-owning resources [ci skip] 2026-04-18 21:19:48 +00:00
insta2spotify infra: document auth = "app|none" tier on every legacy ingress 2026-05-11 19:25:48 +00:00
instagram-poster payslip-ingest, instagram-poster: suspend two chronic-failure cronjobs 2026-05-12 13:31:33 +00:00
isponsorblocktv fix: pvc-autoresizer + TF drift safety — bulk add ignore_changes 2026-05-10 21:57:01 +00:00
job-hunter Phase 1a: enroll 4 self-hosted services in Keel auto-update 2026-05-16 12:28:54 +00:00
jsoncrack anubis: HA with shared valkey/redis store + replicas=2 2026-05-16 11:54:54 +00:00
k8s-dashboard ingress_factory: replace protected bool with auth enum + audit pass across 100 stacks 2026-05-10 18:53:49 +00:00
k8s-portal infra: document auth = "app|none" tier on every legacy ingress 2026-05-11 19:25:48 +00:00
k8s-version-upgrade k8s-version-upgrade: decompose into Job chain to fix self-preemption 2026-05-11 23:54:22 +00:00
keel keel: pin chart 1.0.6 → 1.2.0 (1.0.6 doesn't exist) 2026-05-16 12:30:19 +00:00
kms anubis: HA with shared valkey/redis store + replicas=2 2026-05-16 11:54:54 +00:00
kured kured: drop Mon-Fri restriction, reboot any day 2026-05-16 12:29:01 +00:00
kyverno Phase 0: install Keel + Kyverno auto-update annotation injector 2026-05-16 12:19:34 +00:00
linkwarden infra/ingress_factory: add auth = "app" mode for self-authed backends 2026-05-11 18:59:20 +00:00
llama-cpp recruiter-responder: deploy stack + llama-cpp qwen3-8b + openclaw plugin mount 2026-05-15 22:38:53 +00:00
local-path [infra] Adopt local-path-provisioner into Terraform (Wave 5c) 2026-04-18 22:39:55 +00:00
mailserver fix: pvc-autoresizer + TF drift safety — bulk add ignore_changes 2026-05-10 21:57:01 +00:00
matrix infra: document auth = "app|none" tier on every legacy ingress 2026-05-11 19:25:48 +00:00
meshcentral fix: pvc-autoresizer + TF drift safety — bulk add ignore_changes 2026-05-10 21:57:01 +00:00
metallb [infra] Suppress Goldilocks vpa-update-mode label drift on all namespaces [ci skip] 2026-04-18 21:15:27 +00:00
metrics-server [infra] Suppress Goldilocks vpa-update-mode label drift on all namespaces [ci skip] 2026-04-18 21:15:27 +00:00
monitoring aiostreams: 1h stream cache + canary stream-count probe + 3 alerts 2026-05-15 21:39:33 +00:00
n8n infra: document auth = "app|none" tier on every legacy ingress 2026-05-11 19:25:48 +00:00
navidrome infra: document auth = "app|none" tier on every legacy ingress 2026-05-11 19:25:48 +00:00
netbox ingress_factory: replace protected bool with auth enum + audit pass across 100 stacks 2026-05-10 18:53:49 +00:00
networking-toolbox ingress_factory: replace protected bool with auth enum + audit pass across 100 stacks 2026-05-10 18:53:49 +00:00
nextcloud infra: document auth = "app|none" tier on every legacy ingress 2026-05-11 19:25:48 +00:00
nfs-csi [infra] TrueNAS decommission — remove active references from Terraform + configs 2026-04-19 16:57:05 +00:00
nodelocal-dns [dns] NodeLocal DNSCache — deploy DaemonSet to all nodes (WS C) 2026-04-19 15:46:41 +00:00
novelapp infra/ingress_factory: add auth = "app" mode for self-authed backends 2026-05-11 18:59:20 +00:00
ntfy infra: document auth = "app|none" tier on every legacy ingress 2026-05-11 19:25:48 +00:00
nvidia infra: document auth = "app|none" tier on every legacy ingress 2026-05-11 19:25:48 +00:00
onlyoffice infra: document auth = "app|none" tier on every legacy ingress 2026-05-11 19:25:48 +00:00
openclaw Woodpecker CI deploy [CI SKIP] 2026-05-15 23:20:04 +00:00
osm_routing [infra] Sweep dns_config ignore_changes across all pod-owning resources [ci skip] 2026-04-18 21:19:48 +00:00
owntracks infra: document auth = "app|none" tier on every legacy ingress 2026-05-11 19:25:48 +00:00
paperless-ngx Woodpecker CI deploy [CI SKIP] 2026-05-11 20:46:02 +00:00
payslip-ingest Phase 1a: enroll 4 self-hosted services in Keel auto-update 2026-05-16 12:28:54 +00:00
phpipam ingress_factory: replace protected bool with auth enum + audit pass across 100 stacks 2026-05-10 18:53:49 +00:00
platform [infra] Add Cloudflare provider to all stack lock files and generated providers 2026-04-16 16:31:36 +00:00
plotting-book fix: pvc-autoresizer + TF drift safety — bulk add ignore_changes 2026-05-10 21:57:01 +00:00
poison-fountain ingress_factory: replace protected bool with auth enum + audit pass across 100 stacks 2026-05-10 18:53:49 +00:00
postiz infra: document auth = "app|none" tier on every legacy ingress 2026-05-11 19:25:48 +00:00
priority-pass fix: pvc-autoresizer + TF drift safety — bulk add ignore_changes 2026-05-10 21:57:01 +00:00
privatebin infra: document auth = "app|none" tier on every legacy ingress 2026-05-11 19:25:48 +00:00
proxmox-csi proxmox-csi: opt SCs into pvc-autoresizer (resize.topolvm.io/enabled=true) 2026-05-10 18:22:25 +00:00
pvc-autoresizer [infra] Suppress Goldilocks vpa-update-mode label drift on all namespaces [ci skip] 2026-04-18 21:15:27 +00:00
rbac [infra] Migrate Terraform state from local SOPS to PostgreSQL backend 2026-04-16 19:33:12 +00:00
real-estate-crawler anubis: HA with shared valkey/redis store + replicas=2 2026-05-16 11:54:54 +00:00
recruiter-responder Phase 1a: enroll 4 self-hosted services in Keel auto-update 2026-05-16 12:28:54 +00:00
redis fix: pvc-autoresizer threshold should be 10%, not 80% 2026-05-10 19:56:16 +00:00
reloader [infra] Suppress Goldilocks vpa-update-mode label drift on all namespaces [ci skip] 2026-04-18 21:15:27 +00:00
resume Woodpecker CI deploy [CI SKIP] 2026-05-10 22:49:51 +00:00
reverse-proxy chore: remove decommissioned registry.viktorbarzin.me ingress 2026-05-09 11:03:51 +00:00
rybbit infra: document auth = "app|none" tier on every legacy ingress 2026-05-11 19:25:48 +00:00
sealed-secrets [infra] Suppress Goldilocks vpa-update-mode label drift on all namespaces [ci skip] 2026-04-18 21:15:27 +00:00
send infra: document auth = "app|none" tier on every legacy ingress 2026-05-11 19:25:48 +00:00
servarr aiostreams: weekly backup of Stremio account addon collection 2026-05-15 23:48:41 +00:00
shadowsocks [infra] Sweep dns_config ignore_changes across all pod-owning resources [ci skip] 2026-04-18 21:19:48 +00:00
speedtest fix: pvc-autoresizer + TF drift safety — bulk add ignore_changes 2026-05-10 21:57:01 +00:00
status-page [infra] Establish KYVERNO_LIFECYCLE_V1 drift-suppression convention [ci skip] 2026-04-18 14:15:51 +00:00
stirling-pdf fix: pvc-autoresizer + TF drift safety — bulk add ignore_changes 2026-05-10 21:57:01 +00:00
tandoor infra/ingress_factory: add auth = "app" mode for self-authed backends 2026-05-11 18:59:20 +00:00
technitium fix: pvc-autoresizer + TF drift safety — bulk add ignore_changes 2026-05-10 21:57:01 +00:00
terminal terminal: extract app code to viktor/terminal-lobby on Forgejo 2026-05-13 21:10:56 +00:00
tor-proxy fix: pvc-autoresizer + TF drift safety — bulk add ignore_changes 2026-05-10 21:57:01 +00:00
trading-bot ingress_factory: replace protected bool with auth enum + audit pass across 100 stacks 2026-05-10 18:53:49 +00:00
traefik ingress_factory: replace protected bool with auth enum + audit pass across 100 stacks 2026-05-10 18:53:49 +00:00
travel_blog anubis: HA with shared valkey/redis store + replicas=2 2026-05-16 11:54:54 +00:00
tuya-bridge infra: document auth = "app|none" tier on every legacy ingress 2026-05-11 19:25:48 +00:00
uptime-kuma fix: pvc-autoresizer + TF drift safety — bulk add ignore_changes 2026-05-10 21:57:01 +00:00
url ingress_factory: replace protected bool with auth enum + audit pass across 100 stacks 2026-05-10 18:53:49 +00:00
vault recruiter-responder: vault DB role + switch proactive push to Telegram 2026-05-15 22:47:45 +00:00
vaultwarden infra: document auth = "app|none" tier on every legacy ingress 2026-05-11 19:25:48 +00:00
vpa ingress_factory: replace protected bool with auth enum + audit pass across 100 stacks 2026-05-10 18:53:49 +00:00
wealthfolio wealth: positions table panel (shares + cost basis + unrealised return) 2026-05-14 16:01:27 +00:00
webhook_handler infra: document auth = "app|none" tier on every legacy ingress 2026-05-11 19:25:48 +00:00
whisper fix: pvc-autoresizer + TF drift safety — bulk add ignore_changes 2026-05-10 21:57:01 +00:00
wireguard [infra] Suppress Goldilocks vpa-update-mode label drift on all namespaces [ci skip] 2026-04-18 21:15:27 +00:00
woodpecker infra: document auth = "app|none" tier on every legacy ingress 2026-05-11 19:25:48 +00:00
xray infra: document auth = "app|none" tier on every legacy ingress 2026-05-11 19:25:48 +00:00
ytdlp ingress_factory: replace protected bool with auth enum + audit pass across 100 stacks 2026-05-10 18:53:49 +00:00