blumeops/Brewfile

# CLI tools for blumeops management
brew "actionlint"  # GitHub/Forgejo Actions workflow linter
brew "argocd"  # ArgoCD CLI for GitOps management
brew "bat"  # Syntax-highlighted file concatenation
brew "tea"  # Gitea/Forgejo CLI for forge.ops.eblu.me
brew "podman"  # Container CLI (uses VM on macOS, for building/pushing images)
Add Brewfile and document dependency tracking - Add Brewfile with tea (Forgejo CLI) for forge interaction - Update CLAUDE.md with dependency tracking guidance Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> 2026-01-13 21:38:58 -08:00			`# CLI tools for blumeops management`
Add actionlint pre-commit hook for workflow validation (#49) ## Summary - Fix workflow to use `github.` context variables (Forgejo schema validator only recognizes GitHub Actions syntax, not `gitea.` aliases) - Pass untrusted inputs through environment variables (security best practice per actionlint) - Add actionlint to Brewfile and pre-commit config to catch workflow validation errors locally ## Deployment and Testing - [x] Pre-commit hooks all pass - [x] actionlint validates `.forgejo/workflows/test.yaml` successfully - [ ] Verify workflow runs without errors on Forge after merge 🤖 Generated with [Claude Code](https://claude.com/claude-code) Reviewed-on: https://forge.tail8d86e.ts.net/eblume/blumeops/pulls/49 2026-01-23 17:56:24 -08:00			`brew "actionlint" # GitHub/Forgejo Actions workflow linter`
K8s Migration Phase 1: Infrastructure Setup (#29) ## Summary - Split k8s migration plan into phases folder for easier navigation - Added `tag:k8s` to Pulumi ACLs for Kubernetes workloads - Phase 1 work in progress ## Phase 1 Goals - Tailscale Kubernetes Operator - CloudNativePG Operator - PostgreSQL cluster for future app migrations ## Deployment and Testing - [ ] Review Phase 1 plan - [ ] `mise run tailnet-preview` to verify ACL changes - [ ] `mise run tailnet-up` to apply ACL changes - [ ] Create Tailscale OAuth client (manual) - [ ] Deploy operators and PostgreSQL cluster 🤖 Generated with [Claude Code](https://claude.com/claude-code) Reviewed-on: https://forge.tail8d86e.ts.net/eblume/blumeops/pulls/29 2026-01-19 09:49:52 -08:00			`brew "argocd" # ArgoCD CLI for GitOps management`
Add zk-docs mise task for zettelkasten documentation (#10) ## Summary - Add `mise run zk-docs` task to concatenate all blumeops-tagged zettelkasten cards - Main project card is shown first, followed by service management logs - Uses `bat` for output (added to Brewfile) - Args are passed through to bat for custom formatting - Update CLAUDE.md to use zk-docs command with plain output options - Update README.md to note zettelkasten is private with contact email ## Test plan - [x] `mise run zk-docs` displays all 6 blumeops cards - [x] `mise run zk-docs -- --style=header --color=never --decorations=always` shows filenames without decoration 🤖 Generated with [Claude Code](https://claude.com/claude-code) Reviewed-on: https://forge.tail8d86e.ts.net/eblume/blumeops/pulls/10 2026-01-15 11:25:02 -08:00			`brew "bat" # Syntax-highlighted file concatenation`
Add Caddy layer4 for Forgejo SSH (#56) ## Summary - Add layer4 TCP proxy configuration to Caddyfile template for SSH services - Configure Forgejo SSH on port 2222 → localhost:2200 - Switch HTTPS from port 8443 (testing) to 443 (production) - Requires Caddy rebuilt with `github.com/mholt/caddy-l4` plugin ## What This Enables Git+SSH access via `forge.ops.eblu.me:2222` is now accessible from: - Tailnet clients (gilbert) - Docker containers on indri - Kubernetes pods in minikube This solves the DNS resolution issues where containers couldn't reach Tailscale MagicDNS names. ## Testing Done - [x] Caddy rebuilt with layer4 plugin - [x] Validated Caddyfile syntax - [x] Cleared `svc:forge` from tailscale serve - [x] Verified HTTPS works: `curl https://forge.ops.eblu.me` - [x] Verified SSH works: `ssh -p 2222 forgejo@forge.ops.eblu.me` - [x] Verified git clone works via new endpoint - [x] Verified minikube pods can reach both HTTPS and SSH endpoints ## Deployment Caddy is already running with the new config on indri. This PR captures the ansible changes. ## Next Steps - Update zk docs with new git remote format - Migrate registry and other services to Caddy - Retire tailscale_services ansible role 🤖 Generated with [Claude Code](https://claude.com/claude-code) Reviewed-on: https://forge.tail8d86e.ts.net/eblume/blumeops/pulls/56 2026-01-25 11:37:23 -08:00			`brew "tea" # Gitea/Forgejo CLI for forge.ops.eblu.me`
K8s Migration Phase 0: Foundation Infrastructure (#26) ## Summary - Step 0.1: Update Pulumi ACLs with tag:registry - Step 0.3: Create Zot registry ansible role with mcquack LaunchAgent - Step 0.4: Add Zot to Tailscale Serve configuration - Step 0.5: Create Zot metrics role for Prometheus scraping - Step 0.6: Add Zot log collection to Alloy - Step 0.7: Update indri-services-check with zot checks - Step 0.8: Add podman role for container runtime - Step 0.9: Add minikube role for Kubernetes cluster - Step 0.10: Configure remote kubectl access with 1Password credentials ## Remaining Steps - [ ] Step 0.11: Add minikube to indri-services-check - [ ] Step 0.12: Create zettelkasten documentation - [ ] Step 0.13: Verify main playbook (already done - roles added) ## Deployment and Testing - [x] Zot registry deployed and accessible at https://registry.tail8d86e.ts.net - [x] Podman machine running on indri - [x] Minikube cluster running on indri - [x] kubectl access from gilbert working with 1Password credentials - [ ] indri-services-check passes all checks 🤖 Generated with [Claude Code](https://claude.com/claude-code) Reviewed-on: https://forge.tail8d86e.ts.net/eblume/blumeops/pulls/26 2026-01-18 12:06:28 -08:00			`brew "podman" # Container CLI (uses VM on macOS, for building/pushing images)`