• Joined on 2025-08-16
viktor pushed to master at viktor/infra 2026-06-20 08:09:17 +00:00
a9384a4067 Merge remote-tracking branch 'origin/master'
44a98d408e k8s-version-upgrade: detector next-minor probe must follow 302 (curl -sfL)
Compare 2 commits »
viktor pushed to master at viktor/infra 2026-06-20 08:08:54 +00:00
910d589205 fix(forgejo): raise git-op timeouts + lower gc.auto to stop push-mirror timeouts
viktor pushed to master at viktor/infra 2026-06-20 08:07:25 +00:00
45bed1c133 Merge remote-tracking branch 'origin/master'
e1736d2e5c calico: hop 3.28.5->3.30.7 (operator v1.38.13) — restores a SUPPORTED Calico/k8s-1.34 pairing. Disabled new-in-3.30 Goldmane/Whisker (their CRs render before crds/ install on helm upgrade; we use Prometheus/Loki). calico-node 7/7 on quay/v3.30.7, tigerastatus green. Applied manually + verified overnight.
Compare 2 commits »
viktor pushed to master at viktor/infra 2026-06-19 22:29:04 +00:00
3e3fdb34f0 homelab: v0.6.0 — usage telemetry (usage top), evidence-driven verb prioritization
viktor pushed to master at viktor/infra 2026-06-19 22:09:27 +00:00
666fefd22b calico: hop 3.26->3.28.5 (operator v1.34.13); calico-node 7/7 healthy, tigerastatus green, kube-controller-manager restarted (3.28 UID change). Applied manually + verified.
viktor pushed to master at viktor/infra 2026-06-19 21:50:36 +00:00
8ed5368be9 calico: bring tigera-operator under Terraform via Helm (adopt at 3.26.1)
viktor pushed to master at viktor/infra 2026-06-19 17:49:28 +00:00
dd029ca7fb traefik/crowdsec: switch bouncer to live mode (stream cache doesn't enforce under Yaegi)
0cc48d83ac traefik/crowdsec: disable bouncer redis cache (broken under Yaegi → in-memory)
531efb218d traefik: bump crowdsec-bouncer plugin v1.4.2 -> v1.6.0 (fix stream not pulling)
Compare 3 commits »
viktor pushed to master at viktor/infra 2026-06-19 17:37:49 +00:00
78095aa273 docs(forgejo): runbook reflects Authentik disabled + zero-click GitHub
viktor pushed to master at viktor/infra 2026-06-19 17:34:21 +00:00
7d99203fc6 forgejo: re-enable ENABLE_AUTO_REGISTRATION for zero-click GitHub sign-up
viktor pushed to master at viktor/infra 2026-06-19 17:24:31 +00:00
ef530b7d38 forgejo: drop ENABLE_AUTO_REGISTRATION — it broke Authentik sign-in
viktor pushed to master at viktor/infra 2026-06-19 17:18:57 +00:00
a5bb4db9c5 crowdsec: register the Traefik bouncer with LAPI (fix fail-open)
viktor pushed to master at viktor/infra 2026-06-19 16:58:37 +00:00
56dadda453 traefik: pin helm chart to 40.2.0 (deployed version)
viktor pushed to master at viktor/infra 2026-06-19 16:41:52 +00:00
4a66377425 forgejo: add "Sign in with GitHub" (OAuth2 source + auto-registration)
fd0c7493c3 traefik/crowdsec: serve Cloudflare Turnstile for captcha remediation
Compare 2 commits »
viktor pushed to master at viktor/infra 2026-06-19 16:05:22 +00:00
963e4fcdde forgejo: open native self-signups, gated by Turnstile + email confirmation
viktor pushed to master at viktor/infra 2026-06-19 11:27:58 +00:00
21dbd79ae4 Merge remote-tracking branch 'origin/master' into wizard/homelab-obs
e91e1612dd homelab: v0.5.0 — net/dns/metrics/logs probes (endpoint resolution)
Compare 2 commits »
viktor pushed to master at viktor/infra 2026-06-19 11:27:25 +00:00
6cb823e431 k8s-version-upgrade: complete autonomy P0 — blocked alert + deeper postflight + runbook
cecd9fe247 k8s-version-upgrade: compat gate — auto-upgrade when safe, halt + alert when not
Compare 2 commits »
viktor pushed to master at viktor/infra 2026-06-19 10:59:17 +00:00
9189560ac3 homelab: v0.4.0 — ci/deploy verbs (watch what you trigger)
viktor pushed to master at viktor/infra 2026-06-19 09:09:36 +00:00
787ce4edfa homelab: v0.3.1 — fix k8s db PG target (resolve CNPG primary pod, not the Service)
viktor pushed to master at viktor/infra 2026-06-19 09:06:47 +00:00
90c944a265 woodpecker: disable partial clone (partial: false) — fix intermittent git exit-128
viktor pushed to master at viktor/infra 2026-06-19 08:45:53 +00:00
fd77c0dc4f monitoring: RpiSofiaUndervoltage alerts on new brown-out, not until reboot