blumeops

eblume/blumeops

Fork 0

Commit graph

4f335abb56 Use Merge creationPolicy for safer secret migration Erich Blume 2026-01-28 19:03:31 -08:00
f2cdb41f35 Add ExternalSecret for devpi as proof of concept Erich Blume 2026-01-28 18:47:02 -08:00
eafcdb2f28 Add External Secrets Operator for GitOps secret management Erich Blume 2026-01-28 18:46:54 -08:00
38179337e0 Add 1Password Connect server for secrets automation Erich Blume 2026-01-28 18:46:46 -08:00
3971670832 Remove immich-sync ansible role (#65) Erich Blume 2026-01-28 08:49:22 -08:00
d3f35335c6 Remove immich-sync ansible role Erich Blume 2026-01-28 08:48:22 -08:00
aa4464f84e Upgrade Immich from v2.4.1 to v2.5.0 (#64) Erich Blume 2026-01-27 20:51:09 -08:00
689bdf92a1 Upgrade Immich from v2.4.1 to v2.5.0 Erich Blume 2026-01-27 20:43:05 -08:00
54945be0e3 Add immich-sync ansible role for photo library sync (#63) Erich Blume 2026-01-26 12:38:38 -08:00
df32bc8f82 Add lockfile to prevent concurrent immich-sync runs Erich Blume 2026-01-26 12:34:55 -08:00
e11e84cb20 Fix osxphotos export options Erich Blume 2026-01-26 12:20:09 -08:00
dd80724b71 Use explicit paths in immich-sync script for LaunchAgent Erich Blume 2026-01-26 12:15:41 -08:00
4e41e1f057 Add immich-sync ansible role for photo library sync Erich Blume 2026-01-26 12:04:39 -08:00
8621996343 Add Immich photo management + migrate forge URLs (#62) Erich Blume 2026-01-26 11:20:11 -08:00
6b9b8bcc6f Use VectorChord 0.5.0 for Immich compatibility Erich Blume 2026-01-26 10:47:20 -08:00
18f56a8890 Update Immich to chart v0.10.3 and app v2.4.1 Erich Blume 2026-01-26 10:40:28 -08:00
2818758817 Fix immich values: add DB env vars under controllers.main Erich Blume 2026-01-26 10:17:14 -08:00
4832044a65 Temp: point immich values at feature branch for testing Erich Blume 2026-01-26 10:12:08 -08:00
c0333458fa Fix immich values.yaml: correct persistence structure Erich Blume 2026-01-26 10:11:36 -08:00
57b79baf26 Fix immich-storage: exclude kustomization.yaml from includes Erich Blume 2026-01-26 10:09:19 -08:00
367b86710e Fix immich-pg: use VectorChord with correct config Erich Blume 2026-01-26 10:05:16 -08:00
f1f4575554 Fix immich-pg: use correct cloudnative-pgvecto.rs image Erich Blume 2026-01-26 09:57:55 -08:00
89e5edca56 Fix immich-pg: remove shared_preload_libraries parameter Erich Blume 2026-01-26 09:51:51 -08:00
b01400bcbb Add rule: always use --context=minikube-indri with kubectl Erich Blume 2026-01-26 08:13:48 -08:00
5482f74500 Add Immich photo management service Erich Blume 2026-01-26 07:52:24 -08:00
dbc47d0231 Migrate ArgoCD repos from indri:2200 to forge.ops.eblu.me:2222 Erich Blume 2026-01-26 07:52:11 -08:00
c8b655f177 Build local containers for k8s services (#61) Erich Blume 2026-01-25 21:35:57 -08:00
653a2dc4f2 Fix teslamate: use RUN chmod instead of COPY --chmod (no BuildKit) teslamate-v1.0.1 devpi-v1.0.0 Erich Blume 2026-01-25 21:31:22 -08:00
7a2daeb179 Bump transmission to v1.0.1 transmission-v1.0.1 teslamate-v1.0.0 miniflux-v1.0.0 kubectl-v1.0.0 Erich Blume 2026-01-25 21:21:05 -08:00
b69af80911 Add curl to transmission container for RPC scripts Erich Blume 2026-01-25 21:20:44 -08:00
32353a3c05 Fix transmission: handle NFS volumes that don't allow chown transmission-v1.0.0 Erich Blume 2026-01-25 21:17:04 -08:00
cb5f39bbd9 Fix transmission: use RUN chmod instead of COPY --chmod (no BuildKit) Erich Blume 2026-01-25 21:14:40 -08:00
01f1b60b23 Fix transmission container: handle existing user from package Erich Blume 2026-01-25 21:13:11 -08:00
b3c59b1dd0 Fix architecture detection in kiwix-serve and kubectl Dockerfiles kiwix-serve-v1.0.0 Erich Blume 2026-01-25 21:04:58 -08:00
79b35610b5 Add teslamate container, update deployment to use local image Erich Blume 2026-01-25 20:53:06 -08:00
d1d45538b3 Add transmission container, update deployments to use local image Erich Blume 2026-01-25 20:51:05 -08:00
7ee8c86b24 Add kiwix-serve container, update deployment to use local image Erich Blume 2026-01-25 20:49:31 -08:00
753fede0b8 Add miniflux container, update deployment to use local image Erich Blume 2026-01-25 20:46:55 -08:00
9364849941 Add kubectl container, update zim-watcher to use local image Erich Blume 2026-01-25 20:44:21 -08:00
fe911d4087 Move devpi Dockerfile to containers/devpi/, use v1.0.0 tag Erich Blume 2026-01-25 20:43:12 -08:00
ea42362b6f Migrate Forgejo runner to Kubernetes with DinD (#60) Erich Blume 2026-01-25 19:56:17 -08:00
ce10997f79 Fix: Move DOCKER_HOST to runner.envs (not container.env) nettest-v0.9.0 Erich Blume 2026-01-25 19:52:30 -08:00
c4b14c0b89 Move DOCKER_HOST to runner config instead of workflow Erich Blume 2026-01-25 19:40:33 -08:00
2c6e450e1a Bump runner job image to v2.1.7 Erich Blume 2026-01-25 19:35:28 -08:00
4927c79f5b Retire host-mode forgejo runner (Phase 3 complete) Erich Blume 2026-01-25 19:31:00 -08:00
c7a58b8fdb Add DOCKER_HOST env var to workflow for k8s DinD support forgejo-runner-v2.1.7 Erich Blume 2026-01-25 19:22:37 -08:00
1f595b6041 Use k8s label for k8s runner testing forgejo-runner-v2.1.6 Erich Blume 2026-01-25 19:11:38 -08:00
47bbdf5d00 Set docker_host for DinD in k8s runner config forgejo-runner-v2.1.5 Erich Blume 2026-01-25 19:06:49 -08:00
24e7df02df Add k8s forgejo-runner deployment (Phase 2 ratcheting) forgejo-runner-v2.1.4 Erich Blume 2026-01-25 18:57:20 -08:00
411b07e23c Mount Docker socket in job containers for DinD forgejo-runner-v2.1.3 Erich Blume 2026-01-25 18:48:57 -08:00
e61e70078a Use forge.ops.eblu.me for runner URL (works from containers) forgejo-runner-v2.1.2 Erich Blume 2026-01-25 18:18:50 -08:00
fcbc3b958e Add docker mode to runner for containerized job execution forgejo-runner-v2.1.1 Erich Blume 2026-01-25 18:12:32 -08:00
f19795615c Simplify forgejo-runner to job execution image forgejo-runner-v2.1.0 Erich Blume 2026-01-25 18:06:33 -08:00
82d0162282 Switch container builds to docker runner (Phase 1 ratcheting) forgejo-runner-v2.0.2 Erich Blume 2026-01-25 17:49:16 -08:00
ef6e40d8f2 Fix: add xz-utils for runner binary extraction forgejo-runner-v2.0.1 Erich Blume 2026-01-25 17:22:56 -08:00
008533491f Add containerized forgejo-runner for Phase 1 ratcheting forgejo-runner-v2.0.0 Erich Blume 2026-01-25 17:21:29 -08:00
66badfafd1 Migrate k8s services to Caddy (*.ops.eblu.me) (#59) nettest-v0.8.0 Erich Blume 2026-01-25 12:56:31 -08:00
bdc0ed159b Migrate k8s services to Caddy (*.ops.eblu.me) Erich Blume 2026-01-25 12:40:46 -08:00
d6e6b48f6a Migrate registry to Caddy (registry.ops.eblu.me) (#58) Erich Blume 2026-01-25 12:06:15 -08:00
a04ee64721 Migrate registry to Caddy (registry.ops.eblu.me) Erich Blume 2026-01-25 11:59:30 -08:00
9c1b7c7ca1 Update docs for Caddy migration (#57) Erich Blume 2026-01-25 11:52:35 -08:00
0096e4e3f0 Update CLAUDE.md for Caddy migration Erich Blume 2026-01-25 11:51:22 -08:00
1184b4de1d Add Caddy layer4 for Forgejo SSH (#56) Erich Blume 2026-01-25 11:37:23 -08:00
f7cc30850b Remove forge from tailscale_serve role Erich Blume 2026-01-25 11:36:46 -08:00
8be959929c Update all forge references to use ops.eblu.me domain Erich Blume 2026-01-25 11:35:05 -08:00
1c5fcd15d8 Update Forgejo config to use new ops.eblu.me domain Erich Blume 2026-01-25 11:32:14 -08:00
a2fd688865 Add Caddy layer4 support for Forgejo SSH Erich Blume 2026-01-25 11:20:04 -08:00
682a68dc9c Add Caddy reverse proxy for blumeops services (#55) Erich Blume 2026-01-25 09:35:06 -08:00
465cfa76d2 Fix Caddy DNS plugin syntax and add wrapper script Erich Blume 2026-01-25 09:31:25 -08:00
e590945006 Fix caddy handler and add port to site addresses Erich Blume 2026-01-25 09:00:38 -08:00
df003e214f Add Caddy reverse proxy ansible role Erich Blume 2026-01-25 08:58:36 -08:00
b08faa50cc Add Gandi DNS management via Pulumi (#54) Erich Blume 2026-01-25 08:15:46 -08:00
e1d82935fb Address PR feedback: dynamic IP resolution and documentation updates Erich Blume 2026-01-25 08:12:47 -08:00
cdeda4856f Restructure Pulumi into separate projects for Tailscale and Gandi DNS Erich Blume 2026-01-25 07:59:22 -08:00
ed8fbdc7ea Force HTTPS by specifying port 443 in skopeo destination URL nettest-v0.7.1 fix/skopeo-force-https Erich Blume 2026-01-24 20:12:54 -08:00
af3536bc17 Simplify indri IP extraction from tailscale status nettest-v0.7.0 Erich Blume 2026-01-24 20:04:28 -08:00
04fdd5906d Get indri's IP from tailscale status for registry access nettest-v0.6.0 Erich Blume 2026-01-24 20:00:57 -08:00
16ccabbc34 Resolve registry IP via Tailscale and add to /etc/hosts nettest-v0.5.0 Erich Blume 2026-01-24 19:44:39 -08:00
b4b8abb2d9 Add tag:ci-gateway to Tailscale ACL for CI builds nettest-v0.4.0 Erich Blume 2026-01-24 19:38:02 -08:00
9f98b3007e Add debugging for Tailscale container failures nettest-v0.3.0 Erich Blume 2026-01-24 19:32:40 -08:00
424647cd93 Use Tailscale sidecar for container registry push nettest-v0.2.0 Erich Blume 2026-01-24 19:29:01 -08:00
b598ea8d5a Add indri-runner-logs script to fetch workflow logs Erich Blume 2026-01-24 17:25:32 -08:00
31697b4d63 Add nettest container for CI/CD network debugging (#52) nettest-v0.1.0 Erich Blume 2026-01-24 16:54:35 -08:00
13d231687d Remove test workflow Erich Blume 2026-01-24 16:54:21 -08:00
de72274efd Refactor container build to use generic workflow Erich Blume 2026-01-24 16:52:44 -08:00
bf95e87c5d Add nettest container for CI/CD network debugging Erich Blume 2026-01-24 16:41:07 -08:00
13b8d16eb2 Remove mention of plans dir Erich Blume 2026-01-24 16:22:39 -08:00
ceba6b3c2c Remove plans, they dont seem to work Erich Blume 2026-01-24 16:21:49 -08:00
8ca8798121 Switch to Buildah for container builds (#51) Erich Blume 2026-01-24 13:30:26 -08:00
34211fa874 Remove placeholder workflows and ci-base manifest Erich Blume 2026-01-24 13:29:54 -08:00
ad968eea46 Remove tailscale_ci_gateway role and ACLs Erich Blume 2026-01-24 13:26:36 -08:00
cfe5c0c0dd Switch forgejo-runner to host execution mode Erich Blume 2026-01-24 13:23:39 -08:00
c79dc94325 Fix forgejo-runner networking for tailnet access Erich Blume 2026-01-24 12:56:25 -08:00
911913bb2e Fix launchd templates to use full docker path Erich Blume 2026-01-24 11:37:04 -08:00
fdf5153130 Containerize forgejo-runner with Tailscale gateway for tailnet access Erich Blume 2026-01-24 11:28:35 -08:00
018b44186f Add tag:ci-gateway for Forgejo runner Tailscale sidecar Erich Blume 2026-01-24 11:03:02 -08:00
476b80e985 Use --add-host to map localhost to Docker host in job containers Erich Blume 2026-01-24 10:40:35 -08:00
15e3ec98ea Use host networking for job containers Erich Blume 2026-01-24 10:30:28 -08:00
50b925791d Update test workflow comment to trigger CI Erich Blume 2026-01-24 10:28:12 -08:00
35136e361e Add comment to test workflow to trigger CI run Erich Blume 2026-01-24 10:23:37 -08:00