eblume/blumeops
1
1
Fork 0
Code Issues Pull requests Projects Releases 83 Packages Wiki Activity Actions

Add spaces around pipe in wiki-links (test for Quartz resolution)

Browse source 
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
Erich Blume 2026-02-03 16:17:20 -08:00
commit 9261ec7679
26 changed files with 59 additions and 59 deletions
Download patch file Download diff file Expand all files Collapse all files

14
docs/reference/index.md
View file

@ -14,7 +14,7 @@ Individual service reference cards with URLs and configuration details.
| Service | Description | Location |
|---------|-------------|----------|
| [[grafana-alloy|Alloy]] | Observability collector (metrics & logs) | indri + k8s |
| [[grafana-alloy | Alloy]] | Observability collector (metrics & logs) | indri + k8s |
| [[argocd]] | GitOps continuous delivery | k8s |
| [[borgmatic]] | Backup system | indri |
| [[1password]] | Secrets management | cloud + k8s |
@ -36,27 +36,27 @@ Individual service reference cards with URLs and configuration details.
Host inventory and network configuration.
- [[host-inventory|Hosts]] - Device inventory
- [[host-inventory | Hosts]] - Device inventory
- [[indri]] - Primary server
- [[gilbert]] - Development workstation
- [[tailscale]] - ACLs, groups, tags
- [[service-routing|Routing]] - DNS domains, port mappings
- [[service-routing | Routing]] - DNS domains, port mappings
## Kubernetes
Cluster configuration and application registry.
- [[kubernetes-cluster|Cluster]] - Minikube specs, storage, networking
- [[argocd-applications|Apps]] - ArgoCD application registry
- [[kubernetes-cluster | Cluster]] - Minikube specs, storage, networking
- [[argocd-applications | Apps]] - ArgoCD application registry
- [[external-secrets]] - Secrets management
## Storage
Network storage and backup configuration.
- [[sifaka-nas|Sifaka]] - Synology NAS configuration
- [[sifaka-nas | Sifaka]] - Synology NAS configuration
- [[postgresql-storage]] - Database cluster
- [[backup-policy|Backups]] - Backup policy and schedule
- [[backup-policy | Backups]] - Backup policy and schedule
## Operations

2
docs/reference/infrastructure/gilbert.md
View file

@ -24,4 +24,4 @@ Managed via `Brewfile` and `mise.toml` in the blumeops repo.
## Related
- [[indri]] - Server accessed from gilbert
- [[kubernetes-cluster|Cluster]] - Remote k8s access
- [[kubernetes-cluster | Cluster]] - Remote k8s access

8
docs/reference/infrastructure/hosts.md
View file

@ -12,9 +12,9 @@ All devices connected via [Tailscale](https://login.tailscale.com/) tailnet `tai
| Host | Description | Card |
|------|-------------|------|
| **Indri** | Mac Mini M1, 2020 - Primary server | [[indri|Details]] |
| **Gilbert** | MacBook Air M4, 2025 - Workstation | [[gilbert|Details]] |
| **[[sifaka-nas|Sifaka]]** | Synology NAS - Storage & backups | [[sifaka-nas|Details]] |
| **Indri** | Mac Mini M1, 2020 - Primary server | [[indri | Details]] |
| **Gilbert** | MacBook Air M4, 2025 - Workstation | [[gilbert | Details]] |
| **[[sifaka-nas | Sifaka]]** | Synology NAS - Storage & backups | [[sifaka-nas | Details]] |
| **Mouse** | MacBook Air M2 - Allison's laptop | - |
| **UniFi** | UniFi Express 7 - Home WiFi | - |
| **Dwarf** | iPad Air - Employer-provided, off tailnet | - |
@ -22,4 +22,4 @@ All devices connected via [Tailscale](https://login.tailscale.com/) tailnet `tai
## Related
- [[tailscale]] - Network configuration
- [[service-routing|Routing]] - Service URLs
- [[service-routing | Routing]] - Service URLs

8
docs/reference/infrastructure/indri.md
View file

@ -26,13 +26,13 @@ Primary BlumeOps server. Mac Mini M1 (2020).
- [[zot]] - Container registry
- [[jellyfin]] - Media server
- [[borgmatic]] - Backup system
- [[grafana-alloy|Alloy]] - Metrics/logs collector
- [[grafana-alloy | Alloy]] - Metrics/logs collector
- Caddy - Reverse proxy for `*.ops.eblu.me`
**Kubernetes (via minikube):**
- [[argocd-applications|All k8s applications]]
- [[argocd-applications | All k8s applications]]
## Related
- [[service-routing|Routing]] - Port mappings
- [[kubernetes-cluster|Cluster]] - Minikube details
- [[service-routing | Routing]] - Port mappings
- [[kubernetes-cluster | Cluster]] - Minikube details

2
docs/reference/infrastructure/routing.md
View file

@ -38,7 +38,7 @@ DNS points to indri's Tailscale IP (100.98.163.89). TLS via Let's Encrypt (ACME
| [[navidrome]] | https://dj.ops.eblu.me | Music streaming |
| [[jellyfin]] | https://jellyfin.ops.eblu.me | Media server |
| [[postgresql]] | pg.ops.eblu.me:5432 | Database |
| [[sifaka-nas|Sifaka]] | https://nas.ops.eblu.me | NAS dashboard |
| [[sifaka-nas | Sifaka]] | https://nas.ops.eblu.me | NAS dashboard |
## Tailscale-Only Services

4
docs/reference/infrastructure/tailscale.md
View file

@ -58,5 +58,5 @@ Pulumi uses OAuth client from 1Password (blumeops vault):
## Related
- [[service-routing|Routing]] - Service URLs
- [[host-inventory|Hosts]] - Device inventory
- [[service-routing | Routing]] - Service URLs
- [[host-inventory | Hosts]] - Device inventory

4
docs/reference/kubernetes/apps.md
View file

@ -26,7 +26,7 @@ Registry of all applications deployed via [[argocd]].
| `grafana` | monitoring | Helm chart (forge mirror) | [[grafana]] |
| `grafana-config` | monitoring | `argocd/manifests/grafana-config/` | [[grafana]] |
| `immich` | immich | Helm chart | [[immich]] |
| `alloy-k8s` | alloy | `argocd/manifests/alloy-k8s/` | [[grafana-alloy|Alloy]] |
| `alloy-k8s` | alloy | `argocd/manifests/alloy-k8s/` | [[grafana-alloy | Alloy]] |
| `kube-state-metrics` | monitoring | `argocd/manifests/kube-state-metrics/` | K8s metrics |
| `miniflux` | miniflux | `argocd/manifests/miniflux/` | [[miniflux]] |
| `kiwix` | kiwix | `argocd/manifests/kiwix/` | [[kiwix]] |
@ -45,4 +45,4 @@ Registry of all applications deployed via [[argocd]].
## Related
- [[argocd]] - GitOps platform details
- [[kubernetes-cluster|Cluster]] - Kubernetes infrastructure
- [[kubernetes-cluster | Cluster]] - Kubernetes infrastructure

4
docs/reference/kubernetes/cluster.md
View file

@ -24,7 +24,7 @@ Single-node Minikube cluster running on [[indri]].
## Volume Mounting
Pods mount NFS directly from [[sifaka-nas|Sifaka]]. Docker NATs outbound traffic through indri's LAN IP (192.168.1.50), allowing access to Sifaka's NFS exports.
Pods mount NFS directly from [[sifaka-nas | Sifaka]]. Docker NATs outbound traffic through indri's LAN IP (192.168.1.50), allowing access to Sifaka's NFS exports.
## Registry Mirror
@ -34,6 +34,6 @@ Mirrors configured: `registry.ops.eblu.me`, `docker.io`, `ghcr.io`, `quay.io`
## Related
- [[argocd-applications|Apps]] - ArgoCD applications
- [[argocd-applications | Apps]] - ArgoCD applications
- [[argocd]] - GitOps deployment
- [[zot]] - Registry mirror

2
docs/reference/operations/backup.md
View file

@ -11,5 +11,5 @@ Daily automated backups of BlumeOps data.
## Components
- [[borgmatic]] - Backup orchestration
- [[sifaka-nas|Sifaka]] - Backup target (NAS)
- [[sifaka-nas | Sifaka]] - Backup target (NAS)
- [[backup-policy]] - What gets backed up and retention

2
docs/reference/operations/disaster-recovery.md
View file

@ -8,7 +8,7 @@ tags:
TBD. Current state:
- [[borgmatic]] provides daily backups to [[sifaka-nas|Sifaka]]
- [[borgmatic]] provides daily backups to [[sifaka-nas | Sifaka]]
- Infrastructure can be rebootstrapped using the blumeops repo
- Detailed DR procedures not yet documented

2
docs/reference/operations/observability.md
View file

@ -12,5 +12,5 @@ Metrics, logs, and dashboards for BlumeOps infrastructure.
- [[prometheus]] - Metrics storage and querying
- [[loki]] - Log aggregation
- [[grafana-alloy|Alloy]] - Metrics and log collection
- [[grafana-alloy | Alloy]] - Metrics and log collection
- [[grafana]] - Dashboards and visualization

4
docs/reference/services/argocd.md
View file

@ -7,7 +7,7 @@ tags:
# ArgoCD
GitOps continuous delivery platform for the [[kubernetes-cluster|Kubernetes cluster]].
GitOps continuous delivery platform for the [[kubernetes-cluster | Kubernetes cluster]].
## Quick Reference
@ -33,5 +33,5 @@ GitOps continuous delivery platform for the [[kubernetes-cluster|Kubernetes clus
## Related
- [[argocd-applications|Apps]] - Full application registry
- [[argocd-applications | Apps]] - Full application registry
- [[forgejo]] - Git source

6
docs/reference/services/borgmatic.md
View file

@ -16,7 +16,7 @@ Daily backup system using Borg backup, running on indri.
| **Install** | mise (pipx) |
| **Config** | `~/.config/borgmatic/config.yaml` |
| **Schedule** | Daily at 2:00 AM |
| **Repository** | `/Volumes/backups/borg/` on [[sifaka-nas|Sifaka]] |
| **Repository** | `/Volumes/backups/borg/` on [[sifaka-nas | Sifaka]] |
## What Gets Backed Up
@ -55,6 +55,6 @@ Dashboard: "Borgmatic Backups" in [[grafana]]
## Related
- [[backup-policy|Backups]] - Full backup policy
- [[sifaka-nas|Sifaka]] - Backup target
- [[backup-policy | Backups]] - Full backup policy
- [[sifaka-nas | Sifaka]] - Backup target
- [[postgresql]] - Database backups

2
docs/reference/services/grafana.md
View file

@ -47,4 +47,4 @@ Optional annotation: `grafana_folder: "FolderName"`
- [[prometheus]] - Metrics datasource
- [[loki]] - Logs datasource
- [[grafana-alloy|Alloy]] - Data collector
- [[grafana-alloy | Alloy]] - Data collector

4
docs/reference/services/immich.md
View file

@ -17,10 +17,10 @@ Self-hosted photo and video management.
| **Namespace** | `immich` |
| **Deployment** | Helm chart (k8s) |
| **Database** | [[postgresql]] (CNPG) |
| **Storage** | [[sifaka-nas|Sifaka]] photos volume |
| **Storage** | [[sifaka-nas | Sifaka]] photos volume |
## Related
- [[postgresql]] - Database backend
- [[sifaka-nas|Sifaka]] - Photo storage
- [[sifaka-nas | Sifaka]] - Photo storage
- [[jellyfin]] - Video streaming (separate service)

4
docs/reference/services/jellyfin.md
View file

@ -42,10 +42,10 @@ Dashboard > Playback:
## Observability
- Metrics: `jellyfin_metrics` ansible role
- Logs: Forwarded via [[grafana-alloy|Alloy]]
- Logs: Forwarded via [[grafana-alloy | Alloy]]
- Dashboard: "Jellyfin Media Server" in [[grafana]]
## Related
- [[navidrome]] - Music streaming
- [[sifaka-nas|Sifaka]] - Media storage
- [[sifaka-nas | Sifaka]] - Media storage

4
docs/reference/services/kiwix.md
View file

@ -17,7 +17,7 @@ Offline Wikipedia and ZIM archive server.
| **Tailscale URL** | https://kiwix.tail8d86e.ts.net |
| **Namespace** | `kiwix` |
| **Image** | `ghcr.io/kiwix/kiwix-serve:3.8.1` |
| **Storage** | NFS from [[sifaka-nas|Sifaka]] (`/volume1/torrents`) |
| **Storage** | NFS from [[sifaka-nas | Sifaka]] (`/volume1/torrents`) |
## Architecture
@ -49,4 +49,4 @@ Full list: `argocd/manifests/kiwix/configmap-zim-torrents.yaml`
## Related
- [[transmission]] - Downloads ZIM files
- [[sifaka-nas|Sifaka]] - ZIM storage
- [[sifaka-nas | Sifaka]] - ZIM storage

4
docs/reference/services/loki.md
View file

@ -24,7 +24,7 @@ Log aggregation system for BlumeOps infrastructure.
- Single-node deployment with filesystem storage
- TSDB index with 24h period
- Logs collected by [[grafana-alloy|Alloy]] and pushed via Loki API
- Logs collected by [[grafana-alloy | Alloy]] and pushed via Loki API
- Queried via [[grafana]]
## Log Sources
@ -46,6 +46,6 @@ Log aggregation system for BlumeOps infrastructure.
## Related
- [[grafana-alloy|Alloy]] - Log collector
- [[grafana-alloy | Alloy]] - Log collector
- [[grafana]] - Log visualization
- [[prometheus]] - Metrics counterpart

2
docs/reference/services/navidrome.md
View file

@ -39,4 +39,4 @@ The `/data` directory contains SQLite database, configuration, and cache.
## Related
- [[jellyfin]] - Video streaming
- [[sifaka-nas|Sifaka]] - Music storage
- [[sifaka-nas | Sifaka]] - Music storage

2
docs/reference/services/postgresql.md
View file

@ -34,7 +34,7 @@ Database cluster via CloudNativePG operator.
| miniflux | app owner | Owns miniflux database |
| teslamate | superuser | TeslaMate (needs extensions) |
| eblume | superuser | Admin access |
| borgmatic | pg_read_all_data | [[borgmatic|Backup]] access |
| borgmatic | pg_read_all_data | [[borgmatic | Backup]] access |
## Backup

8
docs/reference/services/prometheus.md
View file

@ -23,19 +23,19 @@ Metrics storage and querying for BlumeOps infrastructure.
## Data Sources
### Remote Write (from Alloy)
- Indri system metrics via [[grafana-alloy|Alloy]] remote_write
- Indri system metrics via [[grafana-alloy | Alloy]] remote_write
- Textfile metrics: minikube, borgmatic, zot, jellyfin
### Scrape Targets
| Target | Metrics |
|--------|---------|
| `sifaka:9100` | [[sifaka-nas|Sifaka]] NAS (node_exporter) |
| `cnpg-metrics.tail8d86e.ts.net:9187` | [[postgresql|CloudNativePG]] metrics |
| `sifaka:9100` | [[sifaka-nas | Sifaka]] NAS (node_exporter) |
| `cnpg-metrics.tail8d86e.ts.net:9187` | [[postgresql | CloudNativePG]] metrics |
| `kube-state-metrics.monitoring.svc:8080` | Kubernetes resource metrics |
## Related
- [[grafana-alloy|Alloy]] - Metrics collector
- [[grafana-alloy | Alloy]] - Metrics collector
- [[grafana]] - Visualization
- [[loki]] - Logs counterpart

6
docs/reference/services/transmission.md
View file

@ -17,7 +17,7 @@ BitTorrent daemon, primarily for downloading ZIM archives for [[kiwix]].
| **Tailscale URL** | https://torrent.tail8d86e.ts.net |
| **Namespace** | `torrent` |
| **Image** | `lscr.io/linuxserver/transmission:latest` |
| **Storage** | NFS PVC from [[sifaka-nas|Sifaka]] |
| **Storage** | NFS PVC from [[sifaka-nas | Sifaka]] |
## Storage Layout
@ -43,11 +43,11 @@ When downloads complete, the zim-watcher CronJob detects new ZIMs and restarts K
## Monitoring
Basic uptime via blackbox probe in [[grafana-alloy|Alloy]] k8s (Services Health dashboard).
Basic uptime via blackbox probe in [[grafana-alloy | Alloy]] k8s (Services Health dashboard).
Web UI shows: active/seeding/paused counts, speeds, disk usage.
## Related
- [[kiwix]] - ZIM archive consumer
- [[sifaka-nas|Sifaka]] - Download storage
- [[sifaka-nas | Sifaka]] - Download storage

4
docs/reference/services/zot.md
View file

@ -30,7 +30,7 @@ OCI-native container registry providing pull-through cache and private image sto
## Pull-Through Cache
When [[kubernetes-cluster|minikube]] pulls an image, containerd checks zot first. If cached, returns immediately. If not, zot fetches from upstream, caches it, then returns.
When [[kubernetes-cluster | minikube]] pulls an image, containerd checks zot first. If cached, returns immediately. If not, zot fetches from upstream, caches it, then returns.
## Security Model
@ -39,4 +39,4 @@ Network access only (no authentication). Defense is the Tailscale ACL boundary.
## Related
- [[forgejo]] - Container build CI
- [[kubernetes-cluster|Cluster]] - Registry consumer
- [[kubernetes-cluster | Cluster]] - Registry consumer

10
docs/reference/storage/backups.md
View file

@ -7,7 +7,7 @@ tags:
# Backup Policy
Daily automated backups from [[indri]] to [[sifaka-nas|Sifaka]] NAS.
Daily automated backups from [[indri]] to [[sifaka-nas | Sifaka]] NAS.
## Schedule
@ -31,8 +31,8 @@ Daily automated backups from [[indri]] to [[sifaka-nas|Sifaka]] NAS.
| Database | Host | Method |
|----------|------|--------|
| miniflux | [[postgresql|pg.ops.eblu.me]] | pg_dump stream |
| teslamate | [[postgresql|pg.ops.eblu.me]] | pg_dump stream |
| miniflux | [[postgresql | pg.ops.eblu.me]] | pg_dump stream |
| teslamate | [[postgresql | pg.ops.eblu.me]] | pg_dump stream |
## What Is NOT Backed Up
@ -53,7 +53,7 @@ Daily automated backups from [[indri]] to [[sifaka-nas|Sifaka]] NAS.
## Backup Target
Repository: `/Volumes/backups/borg/` on [[sifaka-nas|Sifaka]]
Repository: `/Volumes/backups/borg/` on [[sifaka-nas | Sifaka]]
## Monitoring
@ -67,5 +67,5 @@ Dashboard: "Borgmatic Backups" in [[grafana]]
## Related
- [[borgmatic]] - Backup system details
- [[sifaka-nas|Sifaka]] - Backup storage
- [[sifaka-nas | Sifaka]] - Backup storage
- [[postgresql]] - Database backups

4
docs/reference/storage/sifaka.md
View file

@ -46,13 +46,13 @@ Node exporter running in Docker container, scraped by [[prometheus]] at `sifaka:
## Backup
Sifaka is the **target** for [[backup|backups]], not a backup source. [[borgmatic]] sends backups TO sifaka, not OF sifaka.
Sifaka is the **target** for [[backup | backups]], not a backup source. [[borgmatic]] sends backups TO sifaka, not OF sifaka.
Data protection for sifaka itself currently relies on the Synology RAID 5 configuration, which provides single-disk fault tolerance. Future plans include offsite duplication for additional resiliency.
## Related
- [[backup-policy|Backups]] - Backup policy
- [[backup-policy | Backups]] - Backup policy
- [[borgmatic]] - Backup system
- [[immich]] - Photo consumer
- [[jellyfin]] - Media consumer