blumeops

eblume/blumeops

Fork 0

Commit graph

8498dbb559 docs: refresh devpi reference card and scrub stale references migrate-devpi-to-indri Erich Blume 2026-04-29 13:30:06 -07:00
b2ddd9a4d9 infra: redirect alloy-k8s devpi probe to public URL Erich Blume 2026-04-29 12:48:47 -07:00
5b3fde173c infra: remove devpi from minikube and finalize indri cutover Erich Blume 2026-04-29 12:44:51 -07:00
a64797b86f infra: devpi role for launchd on indri, retire from minikube Erich Blume 2026-04-29 12:33:06 -07:00
ad04f5cfb8 docs: how-to for devpi on indri (launchd) Erich Blume 2026-04-29 12:32:57 -07:00
f4a24595b1 C0: review CC ephemeral-privileged-jobs Erich Blume 2026-04-29 11:09:34 -07:00
817acc5e5e C0: transmission doc — review and correct storage/monitoring details Erich Blume 2026-04-29 11:00:01 -07:00
4d76fd5de5 C0: prowler — rebuild image against main HEAD Erich Blume 2026-04-29 10:49:27 -07:00
495e45d01d Address 6 critical Prowler IaC findings (mute + grafana RBAC tighten) (#340) Erich Blume 2026-04-29 10:43:32 -07:00
b8d2c3c1ed Bump prowler image to v5.23.0-2daf629 prowler-iac-mutelist Erich Blume 2026-04-28 10:24:15 -07:00
2daf6291b7 Replace dead Prowler IaC mutelist with Trivy ignorefile shim Erich Blume 2026-04-28 09:50:31 -07:00
0510a8151c Address critical Prowler IaC findings via mute + RBAC tightening Erich Blume 2026-04-27 12:48:54 -07:00
718e0a0043 C0: review-compliance-reports — summarize image and IaC scans Erich Blume 2026-04-27 12:18:06 -07:00
cfb6d7a7aa C0: service-review — mark cv reviewed 2026-04-27 Erich Blume 2026-04-27 11:57:33 -07:00
c9eb188e05 C0: blumeops-tasks — replace ambiguous due:+N with "Nd overdue" Erich Blume 2026-04-27 11:49:46 -07:00
4a37ffcdc2 C0: CLAUDE.md — import AGENTS.md instead of redirecting to it Erich Blume 2026-04-27 11:41:13 -07:00
f9d9e00057 C0: blumeops-tasks — show due offset + recurrence, sort by overdue-ness Erich Blume 2026-04-27 11:18:16 -07:00
005e2a03ed C0: split gandi-operations docs; add dns-acme-cleanup mise task Erich Blume 2026-04-27 09:48:46 -07:00
72b27b7fd2 C0: docs — add mealie borg restore how-to Erich Blume 2026-04-24 19:04:28 -07:00
34fa2ef28a C0: ringtail — restore sway default keybindings, fix fuzzel border config Erich Blume 2026-04-23 12:16:02 -07:00
88eabc3de6 Disable Xalia Erich Blume 2026-04-21 14:47:13 -07:00
7d94b9073a C0: docs — default argocd login to --sso; drop extraneous --grpc-web Erich Blume 2026-04-21 10:43:21 -07:00
86317315ed C0: remove argocd OIDC client_secret wiring Erich Blume 2026-04-21 10:38:26 -07:00
0e62ad5596 C0: argocd OIDC — switch to public client for CLI SSO Erich Blume 2026-04-21 10:34:39 -07:00
225b0e7008 C0: allow argocd CLI --sso localhost callback Erich Blume 2026-04-21 10:18:08 -07:00
e6a6a6042e C0: suggest mise run runner-logs in container-build-and-release Erich Blume 2026-04-21 10:12:00 -07:00
0ceafc374d C0: review operator-managed-pods CC (2026-04-21) Erich Blume 2026-04-21 09:59:48 -07:00
a9ef02a602 C0: bump frigate-notify to v0.5.4-e928054-nix (workdir fix) Erich Blume 2026-04-21 09:44:24 -07:00
e92805409e fix(frigate-notify): set WorkingDir=/app and create writable /app Erich Blume 2026-04-21 09:43:00 -07:00
c88b6d773c C0: point frigate-notify at local registry tag v0.5.4-fb4bf5a-nix Erich Blume 2026-04-21 09:31:29 -07:00
fb4bf5a7a3 Add frigate-notify nix container build (#339) Erich Blume 2026-04-21 09:28:02 -07:00
9a044b12c6 Add frigate-notify nix container build feature/frigate-notify-local Erich Blume 2026-04-21 09:23:37 -07:00
30f39ae050 Review contributing tutorial: add last-reviewed, .ai.md fragment type, prek provenance Erich Blume 2026-04-21 08:53:41 -07:00
fb32cc07c4 chore: repoint runner-job-image tag at CI-built v0.20.6-50f8c2a Erich Blume 2026-04-21 08:38:33 -07:00
50f8c2a33f Roll k8s runner to runner-job-image v0.20.6-9b6be09 Erich Blume 2026-04-21 08:18:25 -07:00
db8fd946ae Bump Dagger to 0.20.6 and migrate runner-job-image to Alpine container.py Erich Blume 2026-04-21 08:12:33 -07:00
624f795967 Roll k8s runner to runner-job-image v0.20.6-9b6be09 bump/dagger-0.20.6 Erich Blume 2026-04-21 08:18:25 -07:00
9b6be09473 Bump Dagger to 0.20.6 and migrate runner-job-image to Alpine container.py Erich Blume 2026-04-21 08:12:33 -07:00
58fe4f0073 ty Erich Blume 2026-04-20 15:48:15 -07:00
54841dbf70 Update ringtail flake inputs Erich Blume 2026-04-20 10:09:16 -07:00
d6ad8e8e59 chore: refresh forgejo-runner review date Erich Blume 2026-04-20 09:15:35 -07:00
21177ff47f chore: update forgejo-runner image tag Erich Blume 2026-04-20 09:11:37 -07:00
1425bf1f5c Upgrade forgejo-runner to v12.8, adopt server.connections, and clean up docs (#338) Erich Blume 2026-04-20 09:03:54 -07:00
0a657a1442 chore: update forgejo-runner image tag forgejo-runner-v12-8-server-connections Erich Blume 2026-04-20 08:53:56 -07:00
bf16b8a3f8 feat: adopt declarative forgejo-runner config Erich Blume 2026-04-20 08:44:27 -07:00
030daf286b docs: consolidate forgejo-runner how-tos Erich Blume 2026-04-20 08:15:25 -07:00
353e2785c3 docs: review zot oidc client card Erich Blume 2026-04-20 07:55:25 -07:00
53a7374ac1 C0: drop fix-ntfy-nix-version mikado card Erich Blume 2026-04-20 07:26:53 -07:00
51a878cddb C0: review navidrome reference doc Erich Blume 2026-04-18 20:25:19 -07:00
deedeecef9 C0: adopt AGENTS.md as canonical agent config Erich Blume 2026-04-18 20:15:30 -07:00
71c1c453d6 Fetch job logs via SSH to indri instead of Forgejo web endpoint Erich Blume 2026-04-18 17:08:46 -07:00
4f5a963ef6 Add API token auth and git remote detection to runner-logs Erich Blume 2026-04-18 16:39:21 -07:00
1d62653871 Fix forge.eblu.me static assets by adding missing Host header Erich Blume 2026-04-18 16:00:56 -07:00
55abb17f50 Add resource limits to ArgoCD pods to prevent unbounded consumption Erich Blume 2026-04-18 13:03:57 -07:00
bdfcb4b677 Update docs release to v1.16.0 Forgejo Actions 2026-04-18 10:00:54 -07:00
d26a6ae3b2 Update docs for Caddy routing and direct WireGuard peering v1.16.0 Erich Blume 2026-04-18 09:57:30 -07:00
12b2786ca2 Route Fly proxy through Caddy on indri for direct WireGuard peering Erich Blume 2026-04-18 09:40:20 -07:00
bca4c2bede Expose Tailscale WireGuard UDP port on Fly proxy Erich Blume 2026-04-18 09:17:03 -07:00
c8da243663 Run alloy-tracing as root for eBPF capabilities Erich Blume 2026-04-18 08:42:26 -07:00
3a2913ba1f Allow BPF in privileged containers on ringtail Erich Blume 2026-04-18 08:32:30 -07:00
24f3f9b24a Raise k3s memlock rlimit for eBPF tracing on ringtail Erich Blume 2026-04-18 08:27:07 -07:00
a72a2c2bd4 Update docs release to v1.15.7 Forgejo Actions 2026-04-18 08:14:58 -07:00
9bafe85b2b Add teslamate extensions to DR restore procedure v1.15.7 Erich Blume 2026-04-18 08:12:26 -07:00
b4472c7849 Deploy devpi 6.19.3 Erich Blume 2026-04-18 08:04:23 -07:00
4dab6d11bb Add remote commit check to container-build-and-release Erich Blume 2026-04-18 08:03:21 -07:00
37b8a21524 Migrate devpi to Dagger build and bump to 6.19.3 Erich Blume 2026-04-18 07:57:05 -07:00
fe0e913963 Switch Fly proxy to upstream keepalive pools (#337) Erich Blume 2026-04-17 16:39:52 -07:00
5aa4cb403a Bump ProxyGroup ingress pod resource requests fly-proxy-keepalive Erich Blume 2026-04-17 16:30:49 -07:00
f5ba7f03aa Add Grafana alert for Fly proxy upstream unreachable (502 rate) Erich Blume 2026-04-17 16:08:12 -07:00
a700befd5b Docs: update proxy architecture for upstream keepalive Erich Blume 2026-04-17 16:04:54 -07:00
903db4079d Fix upstream keepalive: set proxy_ssl_name for correct SNI Erich Blume 2026-04-17 15:51:51 -07:00
1236d381eb Wait for MagicDNS readiness before starting nginx Erich Blume 2026-04-17 15:47:21 -07:00
6a1d9cc0bf Switch Fly proxy to upstream keepalive pools Erich Blume 2026-04-17 15:42:57 -07:00
54b1cee950 Fix Connection header: only send 'upgrade' for WebSocket requests Erich Blume 2026-04-17 15:27:40 -07:00
1c0ee099fb Move forge-specific latency panels to Forgejo dashboard Erich Blume 2026-04-17 15:13:40 -07:00
d7af004842 Add Forgejo metrics + upstream latency histogram to Fly proxy dashboard Erich Blume 2026-04-17 15:05:59 -07:00
8fccbda573 Extend Fly proxy latency histogram buckets to 60s Erich Blume 2026-04-17 14:50:28 -07:00
1631e11137 Add /user/ to forge robots.txt exclusion Erich Blume 2026-04-17 14:34:24 -07:00
0a98f76068 Update kiwix-serve to Dagger-built container (Alpine 3.23) Erich Blume 2026-04-17 14:27:42 -07:00
65bc21b162 Add op-based auth to fly-deploy mise task Erich Blume 2026-04-17 14:26:29 -07:00
7a42aeb77c Mitigate Forgejo archive endpoint DoS from crawler abuse Erich Blume 2026-04-17 14:21:22 -07:00
5f38779d52 Migrate kiwix-serve container from Dockerfile to native Dagger build Erich Blume 2026-04-17 13:56:32 -07:00
fd9e1ac93b Remove nativeMessagingHosts.packages — breaks Firefox wrapper build Erich Blume 2026-04-16 16:57:44 -07:00
e60e3d5fc7 Use programs.firefox module with 1Password extension via policy Erich Blume 2026-04-16 16:54:33 -07:00
f283f9453d Set Firefox as default browser via home-manager xdg.mimeApps Erich Blume 2026-04-16 16:43:35 -07:00
50dfdba4e6 Add Firefox, remove claude-cli:// handler workarounds Erich Blume 2026-04-16 16:42:36 -07:00
dd1cf4f198 Configure Librewolf to delegate claude-cli:// URIs to xdg-open Erich Blume 2026-04-16 16:37:16 -07:00
68f845e773 Add changelog fragment for forge robots.txt Erich Blume 2026-04-16 15:40:34 -07:00
7f6bbdc82c Add robots.txt to forge.eblu.me blocking crawlers from /mirrors/ Erich Blume 2026-04-16 15:39:48 -07:00
5ec2411e20 Update navidrome, miniflux, forgejo-runner image tags to Alpine 3.23 builds [main] Erich Blume 2026-04-16 15:37:30 -07:00
3ecd888537 Switch container builds to manual-only workflow dispatch Erich Blume 2026-04-16 14:25:14 -07:00
352b95c141 Refactor Dagger go_build() helper and standardize Alpine 3.23 Erich Blume 2026-04-16 10:10:46 -07:00
99f78c8745 Register claude-cli:// URI handler on ringtail for Claude Code OAuth Erich Blume 2026-04-16 07:42:52 -07:00
fb1e8ff672 Deploy transmission containers from Dagger builds Erich Blume 2026-04-15 11:34:28 -07:00
2c483cefff Migrate transmission containers from Dockerfile to Dagger builds Erich Blume 2026-04-15 11:26:00 -07:00
519175c672 Fix borgmatic LaunchAgent TCC dialog hang by removing mise wrapper Erich Blume 2026-04-15 07:23:46 -07:00
30ed018fd8 Update prowler image tag to v5.23.0-7c1cd11 [main] Erich Blume 2026-04-14 13:51:26 -07:00
7c1cd11e45 Upgrade Prowler to 5.23.0, remove registry workaround (#336) Erich Blume 2026-04-14 13:45:28 -07:00
6a8ec71aac Update prowler image tag to v5.23.0-d05b503 upgrade-prowler-5.23 Erich Blume 2026-04-14 13:20:58 -07:00
d05b503a1a Upgrade Prowler to 5.23.0 and remove registry workaround Erich Blume 2026-04-14 13:12:40 -07:00