blumeops

eblume/blumeops

Fork 0

Commit graph

bc34b601be Merge pull request 'heph Authentik: grant offline_access scope (fixes spoke sync refresh-token 400)' (#371) from heph-offline-access into main main remote_mirror_qoPYbFeh49/main Erich Blume 2026-06-06 18:29:47 -07:00
50a36ff93a heph Authentik: grant offline_access scope (fixes spoke sync refresh-token 400) heph-offline-access Erich Blume 2026-06-06 18:07:13 -07:00
cf63fcb5b5 C0: track heph in service-versions (self-updating; note drift task) Erich Blume 2026-06-05 08:22:46 -07:00
3abe80523a C0: bump indri heph hub to v1.2.1 (PWA Authentik login + /config) Erich Blume 2026-06-05 07:40:51 -07:00
6576880b0e heph Authentik: register heph-pwa redirect URIs (PKCE login) (#370) Erich Blume 2026-06-05 07:30:31 -07:00
3660b65981 heph Authentik: register heph-pwa redirect URIs for PKCE login heph-pwa-redirect-uris Erich Blume 2026-06-05 07:27:00 -07:00
a2f1e06224 Add hephaestus sync hub to indri (launchagent, PWA, device-code OIDC) (#369) Erich Blume 2026-06-05 06:46:58 -07:00
9ed6272dc7 heph docs: spoke sync uses direct http://...:8787, not Caddy HTTPS Erich Blume 2026-06-05 06:43:54 -07:00
dc9a951eb2 heph: pin RUSTUP_TOOLCHAIN=stable for build + self-update Erich Blume 2026-06-05 06:18:19 -07:00
82c37e0f78 heph Authentik: add empty redirect_uris (required by provider serializer) Erich Blume 2026-06-05 06:06:10 -07:00
d99c962fe1 Add hephaestus sync hub to indri (launchagent, PWA, device-code OIDC) Erich Blume 2026-06-04 22:14:24 -07:00
f6c926f1f5 C0: rebuild external-secrets off main, repoint both clusters to stable tags Erich Blume 2026-06-04 16:19:20 -07:00
13895bb04a Localize external-secrets on ringtail (amd64 nix build) (#368) Erich Blume 2026-06-04 15:37:42 -07:00
9df624289e Set ringtail external-secrets image to nix amd64 build (v2.2.0-59dace8-nix) external-secrets-ringtail-nix Erich Blume 2026-06-04 15:21:42 -07:00
59dace8b1a Localize external-secrets for ringtail (amd64) via nix build Erich Blume 2026-06-04 15:19:01 -07:00
30c82079b9 C0: rebuild external-secrets image off main (v2.2.0-0e70a1b) Erich Blume 2026-06-04 14:59:17 -07:00
0e70a1b524 Localize external-secrets container (native container.py build) (#367) Erich Blume 2026-06-04 14:55:55 -07:00
adc24358f4 Deploy external-secrets from local registry image local-external-secrets Erich Blume 2026-06-04 14:48:08 -07:00
2985007430 Add native Dagger build for external-secrets (container.py) Erich Blume 2026-06-04 14:37:52 -07:00
bb55fa9566 Recurring review sweep: 4 doc cards + nvidia-device-plugin v0.19.2 (#366) Erich Blume 2026-06-04 13:37:02 -07:00
813ce2ddaf Recurring review sweep: 4 doc cards + nvidia-device-plugin v0.19.2 reviews-jun4 Erich Blume 2026-06-04 13:23:03 -07:00
02ea1cc72a C0: point tailscale-operator base mirror fetch at tailnet forge Erich Blume 2026-06-04 12:39:50 -07:00
8f72f04d5c Update docs release to v1.17.0 Forgejo Actions 2026-06-03 21:52:22 -07:00
29e0f012cd C0: pin Quartz docs build to v4.5.2 (v5.0.0 broke build) v1.17.0 Erich Blume 2026-06-03 21:39:41 -07:00
2148714584 C0: retire Todoist blumeops-tasks; point task discovery at heph Erich Blume 2026-06-03 21:32:10 -07:00
308c8e3dad C0: drop duplicate Homepage static entries for ringtail-migrated services Erich Blume 2026-06-03 15:31:59 -07:00
eaa899cfc6 C0: wave-1 decommission follow-ups (argocd admin RBAC, teslamate probe) Erich Blume 2026-06-03 13:02:05 -07:00
46f0002178 Decommission wave-1 minikube services (paperless, teslamate, mealie) (#365) Erich Blume 2026-06-03 12:36:06 -07:00
2ad2b6b8d1 Decommission wave-1 minikube services (paperless, teslamate, mealie) Erich Blume 2026-06-03 12:34:40 -07:00
44798a6429 C0: mealie-ringtail image rebuilt from main (e0057b4-nix) Erich Blume 2026-06-03 12:26:55 -07:00
e0057b46e4 Wire ringtail blumeops-pg into backups + Grafana (#364) Erich Blume 2026-06-03 12:25:30 -07:00
71d5759eb5 borgmatic: stage SQLite dump beside source DB (minimal images lack /tmp) Erich Blume 2026-06-03 11:32:17 -07:00
0d6584f3c3 mealie-ringtail: use python3-enabled image v3.16.0-22cfd86-nix Erich Blume 2026-06-03 11:27:37 -07:00
22cfd864e2 mealie: add python3 to image for the borgmatic SQLite dump helper Erich Blume 2026-06-03 11:26:19 -07:00
83b4306edb borgmatic: add .pgpass entry for ringtail blumeops-pg (port 5434) Erich Blume 2026-06-03 11:15:18 -07:00
f80aae693f Wire ringtail blumeops-pg into backups + Grafana Erich Blume 2026-06-03 11:02:03 -07:00
92b54e7ba9 C0: ringtail wave-1 images rebuilt from main (fcac8e5-nix tags) Erich Blume 2026-06-03 10:36:15 -07:00
fcac8e5a72 Wave 1 indri→ringtail migration: paperless, teslamate, mealie (#363) Erich Blume 2026-06-03 10:34:00 -07:00
6bcbca3ca0 wave-1: neutralize minikube paperless/teslamate/mealie (replicas 0, drop ingress) Erich Blume 2026-06-03 10:31:43 -07:00
4016a86d3f paperless-ringtail: amd64 valkey (-nix tag) + /data mount for redis sidecar Erich Blume 2026-06-03 10:09:19 -07:00
852eaba3ac paperless-ringtail: redis as native sidecar so migrate init can reach it Erich Blume 2026-06-03 10:07:23 -07:00
8293f5197c paperless-ringtail: add migrate initContainer (Nix split has no s6 migrate step) Erich Blume 2026-06-03 10:04:50 -07:00
727818480d teslamate-ringtail: use cookie-fixed image v3.0.0-191be1b-nix Erich Blume 2026-06-03 10:01:01 -07:00
191be1b2cf teslamate: keep Erlang release cookie (removeCookie = false) Erich Blume 2026-06-03 09:54:21 -07:00
18dc9a143c wave-1 ringtail: app manifests + ArgoCD apps (paperless, teslamate, mealie) Erich Blume 2026-06-03 09:42:22 -07:00
1d4cbbfb84 databases-ringtail: add blumeops-pg cluster for wave-1 (paperless, teslamate) Erich Blume 2026-06-03 09:26:39 -07:00
39686c8a2e teslamate: port container from Dagger to Nix (default.nix) Erich Blume 2026-06-03 09:09:01 -07:00
4dbd93c4fc mealie: port container from Dockerfile to Nix (default.nix) Erich Blume 2026-06-03 08:44:23 -07:00
43047423c4 paperless: port container from Dockerfile to Nix (default.nix) Erich Blume 2026-06-03 08:39:07 -07:00
944a1570cf docs: add wave-1 ringtail migration runbook + changelog Erich Blume 2026-06-03 08:38:00 -07:00
40bd929820 C0: remove visible GNU Terry Pratchett from naughty.html body Erich Blume 2026-06-01 20:55:05 -07:00
a36a18aaa6 C0: black-hole /mirrors/* at Fly edge + name-and-shame scrapers Erich Blume 2026-06-01 20:52:20 -07:00
e0064de83d C0: update ringtail flake inputs (nixpkgs, disko) Erich Blume 2026-06-01 15:52:09 -07:00
f588638331 C0: rebuild valkey from squashed main commit Erich Blume 2026-05-28 14:53:21 -07:00
ecded30073 Make valkey local on ringtail (nix amd64) + bump to 8.1.7 (#362) Erich Blume 2026-05-28 14:51:09 -07:00
607ea75e0a C1(valkey-nix): point immich-ringtail and paperless at new valkey tags valkey-nix Erich Blume 2026-05-28 14:39:02 -07:00
1ce381cb6e C0: surface missing-log failures in runner-logs Erich Blume 2026-05-28 14:36:33 -07:00
02859c55d1 C1(valkey-nix): add nix-built amd64 variant for ringtail/immich Erich Blume 2026-05-28 10:21:02 -07:00
e703d25efe C0: rebuild unpoller container from squashed main commit Erich Blume 2026-05-28 10:10:21 -07:00
4d1f4af25b Upgrade unpoller v2.34.0 → v3.2.0, migrate to container.py (#361) Erich Blume 2026-05-28 09:59:46 -07:00
4b5a0c376a C1(unpoller-v3): bump kustomization to v3.2.0-1b27242 unpoller-v3 Erich Blume 2026-05-28 09:46:00 -07:00
1b27242437 C1(unpoller-v3): upgrade v2.34.0 -> v3.2.0, migrate to container.py Erich Blume 2026-05-28 09:34:12 -07:00
f6febb1f77 C0: switch fly proxy deploy strategy to immediate Erich Blume 2026-05-28 07:59:22 -07:00
4e25180b0a C0: clone blumeops via tailnet on ringtail provision Erich Blume 2026-05-28 07:13:13 -07:00
c00d7db507 Recurring maintenance batch (2026-05-27) (#360) Erich Blume 2026-05-28 06:01:57 -07:00
bf72493e7f C1: doc review — refresh indri reference card recurring-maintenance-2026-05-27 Erich Blume 2026-05-27 18:40:17 -07:00
568e355d10 C1: tooling deps bump — prek hooks, fly proxy, typer Erich Blume 2026-05-27 18:40:05 -07:00
bd53ad51f8 C1: update ringtail flake inputs (disko, home-manager, nixpkgs) Erich Blume 2026-05-27 18:32:58 -07:00
753fa9cb63 C0: disable VRR on ringtail DP-1 to stop OMEN panel flicker Erich Blume 2026-05-27 12:59:29 -07:00
c09bd5b612 C0: cap systemd-coredump on ringtail to stop game-crash lockups Erich Blume 2026-05-27 11:54:32 -07:00
35ae171783 C0: fix sync button location in manage-forgejo-mirrors Erich Blume 2026-05-27 07:15:07 -07:00
57fd88b269 C0: fix op item edit syntax in zot key rotation Erich Blume 2026-05-22 21:50:43 -07:00
08a1cb164a C0: fix 1password export filename in backup how-to Erich Blume 2026-05-22 21:36:13 -07:00
d02bf062af C0: review 1password reference card Erich Blume 2026-05-22 21:29:11 -07:00
ee51bcafb4 Rip out compensating-controls framework (#359) Erich Blume 2026-05-22 21:08:53 -07:00
3e2c481034 C1: drop CC: prefixes from mutelist entries; remove CC tooling rip-out-compensating-controls Erich Blume 2026-05-22 20:09:39 -07:00
69737dc915 C1: docs-first removal of compensating-controls framework Erich Blume 2026-05-22 20:09:28 -07:00
2fae0f7161 C0: switch grafana deployment to Recreate strategy Erich Blume 2026-05-19 06:33:26 -07:00
1897eb1c5b C0: move immich blackbox probe to ringtail alloy Erich Blume 2026-05-17 08:46:22 -07:00
e222d47d45 C0: deploy shower v1.1.3 (kustomize newTag bump) Erich Blume 2026-05-15 20:09:54 -07:00
3645098bf1 C0: bump shower to v1.1.3 Erich Blume 2026-05-15 19:56:08 -07:00
96dbbb3cbe C0: add sn2-prelaunch wrapper to clear SN2 stale lockfiles Erich Blume 2026-05-15 12:11:54 -07:00
815a0cc6e6 C0: shower — rebuild from main SHA (post-merge retag) Erich Blume 2026-05-15 06:57:24 -07:00
a33fa47b80 C1: deploy shower v1.1.2 (#358) Erich Blume 2026-05-15 06:50:46 -07:00
24807d608a C1: deploy shower v1.1.2 (kustomize newTag bump) shower-v1.1.2 Erich Blume 2026-05-15 06:29:02 -07:00
12314857d8 C0: add GE-Proton to ringtail Steam extraCompatPackages Erich Blume 2026-05-15 06:27:43 -07:00
b8c7783443 C1: pin shower v1.1.2 FOD outputHash (probed on ringtail) Erich Blume 2026-05-15 06:26:33 -07:00
9d069a1457 C1: bump shower to v1.1.2 (probe FOD hash) Erich Blume 2026-05-15 06:22:05 -07:00
4d2bc9975f C0: deploy shower v1.1.1 (kustomize newTag bump) Erich Blume 2026-05-13 20:51:10 -07:00
4e117dc921 C0: pin shower v1.1.1 FOD outputHash (probed on ringtail) Erich Blume 2026-05-13 20:40:22 -07:00
6e90c4c363 C0: bump shower to v1.1.1 (probe FOD hash) Erich Blume 2026-05-13 20:12:00 -07:00
dc69b8c68b C1: fix borgmatic shower SQLite dump (ssh to ringtail) (#357) Erich Blume 2026-05-13 18:55:50 -07:00
f26105dea9 C1: borgmatic shower SQLite dump via ssh to ringtail fix-borgmatic-shower-via-ssh Erich Blume 2026-05-13 17:17:45 -07:00
947e4310c3 C2: migrate immich from minikube to ringtail (mikado chain) (#356) Erich Blume 2026-05-13 16:46:17 -07:00
b21d13fe20 C2(migrate-immich-to-ringtail): finalize chain — strip mikado frontmatter, add changelog mikado/migrate-immich-to-ringtail Erich Blume 2026-05-13 13:46:27 -07:00
7400807be3 C2(migrate-immich-to-ringtail): close immich-cutover-and-decommission Erich Blume 2026-05-13 13:42:31 -07:00
7573a72318 C2(migrate-immich-to-ringtail): impl decommission minikube immich; add ringtail immich-pg tailscale service Erich Blume 2026-05-13 13:31:09 -07:00
aad76fc3e0 C2(migrate-immich-to-ringtail): impl rename ringtail immich ingress photos-ringtail -> photos Erich Blume 2026-05-13 13:27:04 -07:00
18e6c7ef5d C2(migrate-immich-to-ringtail): close immich-app-on-ringtail Erich Blume 2026-05-13 13:23:24 -07:00
5a9596c7d9 C2(migrate-immich-to-ringtail): impl add immich Deployments + bump GPU time-slicing Erich Blume 2026-05-13 13:14:07 -07:00