From 834c9fa57b3a37a1ab82766f78402ba2f901a931 Mon Sep 17 00:00:00 2001
From: Erich Blume <blume.erich@gmail.com>
Date: Wed, 11 Feb 2026 12:03:51 -0800
Subject: [PATCH] Bump Fly.io proxy VM to 512MB, fix TruffleHog scanning (#152)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

## Summary
- Bump Fly.io proxy VM memory from 256MB to 512MB — Alloy was OOM-killed, causing the Grafana Fly.io dashboard to lose metrics
- Fix TruffleHog pre-commit hook to scan only staged changes (`--since-commit HEAD`) instead of full repo history
- Sanitize example credential URL in Reolink camera plan doc

## Deployment and Testing
- [ ] Fly.io deploy triggers automatically on merge (workflow watches `fly/**`)
- [ ] After deploy, verify Alloy is running: `fly ssh console -a blumeops-proxy -C "ps aux"` should show alloy process
- [ ] Grafana Fly.io dashboard should start populating within ~1 minute

Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/152
---
 .pre-commit-config.yaml                            | 2 +-
 docs/changelog.d/fix-flyio-proxy-oom.bugfix.md     | 1 +
 docs/how-to/plans/operationalize-reolink-camera.md | 4 ++--
 fly/fly.toml                                       | 3 +++
 4 files changed, 7 insertions(+), 3 deletions(-)
 create mode 100644 docs/changelog.d/fix-flyio-proxy-oom.bugfix.md

diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index ffced1e..aca9eb3 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -23,7 +23,7 @@ repos:
     rev: v3.92.5
     hooks:
       - id: trufflehog
-        entry: trufflehog git file://. --no-verification --fail
+        entry: trufflehog git file://. --since-commit HEAD --no-verification --fail
         stages: [pre-commit, pre-push]
 
   # YAML linting
diff --git a/docs/changelog.d/fix-flyio-proxy-oom.bugfix.md b/docs/changelog.d/fix-flyio-proxy-oom.bugfix.md
new file mode 100644
index 0000000..75fc8a0
--- /dev/null
+++ b/docs/changelog.d/fix-flyio-proxy-oom.bugfix.md
@@ -0,0 +1 @@
+Bump Fly.io proxy VM memory from 256MB to 512MB to prevent Alloy OOM kills.
diff --git a/docs/how-to/plans/operationalize-reolink-camera.md b/docs/how-to/plans/operationalize-reolink-camera.md
index a235168..46006a6 100644
--- a/docs/how-to/plans/operationalize-reolink-camera.md
+++ b/docs/how-to/plans/operationalize-reolink-camera.md
@@ -172,9 +172,9 @@ ReoLink cameras need go2rtc as an intermediary (direct RTSP from Frigate can dro
 go2rtc:
   streams:
     front_floodlight:
-      - "ffmpeg:http://admin:password@192.168.3.X/flv?port=1935&app=bcs&stream=channel0_main.bcs#video=copy#audio=copy#audio=opus"
+      - "ffmpeg:http://admin:<your-password>@192.168.3.X/flv?port=1935&app=bcs&stream=channel0_main.bcs#video=copy#audio=copy#audio=opus"
     front_floodlight_sub:
-      - "ffmpeg:http://admin:password@192.168.3.X/flv?port=1935&app=bcs&stream=channel0_sub.bcs"
+      - "ffmpeg:http://admin:<your-password>@192.168.3.X/flv?port=1935&app=bcs&stream=channel0_sub.bcs"
 
 cameras:
   front_floodlight:
diff --git a/fly/fly.toml b/fly/fly.toml
index 9399c8b..17e3de8 100644
--- a/fly/fly.toml
+++ b/fly/fly.toml
@@ -3,6 +3,9 @@ primary_region = "sjc"
 
 [build]
 
+[[vm]]
+memory = "512mb"
+
 [deploy]
 strategy = "bluegreen"