blumeops

eblume/blumeops

Fork 0

Commit graph

6b690eb033 Review CC sso-gated-admin-tools: scope to ArgoCD only Erich Blume 2026-04-14 13:07:52 -07:00
be30668eef Automate Prowler MANUAL finding verification (#335) Erich Blume 2026-04-14 13:00:44 -07:00
16c6580903 Automate Prowler MANUAL finding verification in review-compliance-reports automate-manual-prowler-checks Erich Blume 2026-04-14 12:59:18 -07:00
8c2f035e6d Update docs release to v1.15.6 Forgejo Actions 2026-04-14 11:46:42 -07:00
04b44b350b Add changelog for ArgoCD token rotation after DR v1.15.6 Erich Blume 2026-04-14 11:45:00 -07:00
f2514a6f02 Update docs release to v1.15.5 Forgejo Actions 2026-04-14 11:29:27 -07:00
9d85c97b9b Update forgejo-runner kustomization tag to main-branch image v1.15.5 Erich Blume 2026-04-14 11:10:36 -07:00
0e93cc08b4 Build forgejo-runner container locally (#334) Erich Blume 2026-04-14 11:06:36 -07:00
36ae1e99ca Set forgejo-runner kustomization tag to branch-built image local-forgejo-runner Erich Blume 2026-04-14 10:49:44 -07:00
12d83baa61 Build forgejo-runner container locally via native Dagger pipeline Erich Blume 2026-04-14 09:30:43 -07:00
223b134776 Document uv.lock as the source of devpi dependency in Dagger builds Erich Blume 2026-04-14 07:41:45 -07:00
ccaef4c1a7 Document devpi cold cache failure mode and deploy teslamate v3.0.0-08c698e Erich Blume 2026-04-14 07:38:06 -07:00
08c698e833 Migrate teslamate to native Dagger container.py (#333) Erich Blume 2026-04-14 07:20:52 -07:00
1495f88309 Migrate teslamate container build from Dockerfile to native Dagger container.py teslamate-dagger-migration Erich Blume 2026-04-14 07:18:59 -07:00
4ca0630d76 Review enforce-tag-immutability doc: add review date and zot reference link Erich Blume 2026-04-14 07:00:55 -07:00
d7c3c687f4 Document DR rebuild procedure and update restart-indri Erich Blume 2026-04-13 18:07:54 -07:00
405dab8b59 Add changelog fragments for DR recovery work Erich Blume 2026-04-13 17:59:16 -07:00
cd5b6b63f7 Add paperless DB to borgmatic backups Erich Blume 2026-04-13 17:58:06 -07:00
2d2d495f95 Fix paperless redis: use upstream valkey instead of amd64-only nix image Erich Blume 2026-04-13 17:48:20 -07:00
fca3010042 Hints about service version tracking Erich Blume 2026-04-13 08:40:49 -07:00
22a417ac3c Oops, looks like a log file got lost, nbd Erich Blume 2026-04-13 08:36:20 -07:00
f61bb4f2e7 Add uv.lock for version pinning of dagger pipeline Erich Blume 2026-04-13 08:35:01 -07:00
b5551e227e Route Dagger build telemetry to Tempo Erich Blume 2026-04-13 08:27:12 -07:00
ab834b641a Fix OTEL metrics exporter warnings in Dagger builds Erich Blume 2026-04-13 08:11:15 -07:00
db6d8af8b1 Update grafana-sidecar image tag to v2.6.0-61fcd5d (merge build) Erich Blume 2026-04-13 08:02:39 -07:00
61fcd5d70a Upgrade grafana-sidecar 1.28.0 → 2.6.0 + container.py port (#332) Erich Blume 2026-04-13 07:57:13 -07:00
e686812f8a Update grafana-sidecar image tag to v2.6.0-b75c4f9 grafana-sidecar-2.6.0 Erich Blume 2026-04-13 07:34:19 -07:00
b94792168b Add comment explaining venv cleanup find command Erich Blume 2026-04-13 07:33:31 -07:00
d1b62a38d5 Compact find command in grafana-sidecar container.py Erich Blume 2026-04-13 07:31:44 -07:00
b75c4f970b Upgrade grafana-sidecar 1.28.0 → 2.6.0, port to container.py Erich Blume 2026-04-13 07:28:19 -07:00
6455d93cb3 Review local-registry control: fix inaccurate description, enumerate exceptions Erich Blume 2026-04-12 09:59:37 -07:00
6e60287e99 Doc review: delete install-dagger-on-nix-runner, add service-versions ref card Erich Blume 2026-04-12 09:52:38 -07:00
8d80a4a3a5 Rewrite runner-logs: API-based log fetching, multi-repo support Erich Blume 2026-04-12 09:42:58 -07:00
a18ec9d958 Update miniflux to main image tag, disable OTEL metrics in Dagger module Erich Blume 2026-04-12 08:59:32 -07:00
138e23d525 Miniflux 2.2.19 + container.py migration + ty typechecker (#331) Erich Blume 2026-04-12 08:54:32 -07:00
2787aacf45 Split changelog into infra and feature fragments miniflux-upgrade-and-ty Erich Blume 2026-04-12 08:54:06 -07:00
2b72ef7b74 Deploy miniflux 2.2.19 from branch build (v2.2.19-e08c95c) Erich Blume 2026-04-12 08:43:14 -07:00
e08c95c5fb Revert prek ty hook to bare 'ty check' (mise shims handle PATH in normal shells) Erich Blume 2026-04-12 08:23:13 -07:00
99480ce4f3 Miniflux 2.2.19 upgrade, container.py migration, ty typechecker, mise version tracking Erich Blume 2026-04-12 08:22:57 -07:00
dc5bffdd97 Update ringtail flake inputs Erich Blume 2026-04-11 21:14:46 -07:00
c06eccc61c Review hosts.md: add last-reviewed, normalize links, add reference tag Erich Blume 2026-04-11 21:06:53 -07:00
94c937d588 Disable OTLP metrics exporter in CI, update navidrome to main tag Erich Blume 2026-04-11 17:26:25 -07:00
c86b5d7772 Native Dagger container builds + Navidrome v0.61.1 (#330) Erich Blume 2026-04-11 17:11:56 -07:00
215ebef73e Update docs for Dagger module restructure native-dagger-containers Erich Blume 2026-04-11 17:09:51 -07:00
c1bed58214 Flag Dockerfile containers for Dagger migration during service review Erich Blume 2026-04-11 16:54:17 -07:00
47e15213c0 Update navidrome kustomization to v0.61.1-470b4bd Erich Blume 2026-04-11 16:29:17 -07:00
470b4bdd5f Migrate Dagger module to repo root with native container builds Erich Blume 2026-04-11 16:28:12 -07:00
851b6b22c3 Upgrade Navidrome to v0.61.1 Erich Blume 2026-04-11 15:28:04 -07:00
9bd5c00c95 Update navidrome kustomization to v0.61.1-d54f6e8 upgrade/navidrome-v0.61.1 Erich Blume 2026-04-11 15:01:08 -07:00
d54f6e8242 Upgrade Navidrome to v0.61.1 Erich Blume 2026-04-11 15:00:18 -07:00
4fc0192731 Track Fly.io proxy component versions in service-versions.yaml Erich Blume 2026-04-10 19:40:57 -07:00
e02305e72d Pin Fly.io Tailscale to v1.94.1 to fix MagicDNS regression in v1.96.5 Erich Blume 2026-04-10 19:32:38 -07:00
b08b1a833f Fix services-check to show all firing alerts per alert name Erich Blume 2026-04-10 19:10:09 -07:00
a75f28e073 Fix fly.io proxy rate limit to key on real client IP Erich Blume 2026-04-10 19:00:33 -07:00
40556e5a2d Review gandi.md: add missing forge.eblu.me CNAME record Erich Blume 2026-04-09 09:54:46 -07:00
5757df115d Upgrade ollama from 0.17.5 to 0.20.4 Erich Blume 2026-04-09 06:42:05 -07:00
22fc615a28 Update paperless image tag to main build Erich Blume 2026-04-08 19:01:02 -07:00
07f52e9488 Deploy Paperless-ngx document management (#328) Erich Blume 2026-04-08 17:54:12 -07:00
3027fa6089 Disable local self-service registration in paperless deploy-paperless Erich Blume 2026-04-08 17:50:49 -07:00
ba5c3a6bae Add Authentik OIDC provider and application for Paperless Erich Blume 2026-04-08 17:49:24 -07:00
0bde34d6e1 Fix paperless port: override k8s-injected PAPERLESS_PORT env var Erich Blume 2026-04-08 17:39:53 -07:00
919ad04e30 Pin paperless and redis image tags from registry Erich Blume 2026-04-08 17:34:17 -07:00
42f6299eaa Rewrite paperless Dockerfile to match upstream structure Erich Blume 2026-04-08 17:03:31 -07:00
fba339e543 Fix jbig2enc download: ADD doesn't expand shell subcommands Erich Blume 2026-04-08 16:44:11 -07:00
d036782b43 Fix paperless admin username and email Erich Blume 2026-04-08 16:38:57 -07:00
041c47acfb Deploy Paperless-ngx document management system Erich Blume 2026-04-08 16:33:34 -07:00
e04455c911 Add changelog fragment for adding-a-service tutorial review Erich Blume 2026-04-08 11:29:54 -07:00
d3235c5ca9 Review adding-a-service tutorial: fix ingress, repoURL, add kustomize and reference card steps Erich Blume 2026-04-08 11:28:46 -07:00
22b77ac141 Fix Frigate preview config and services-check NoData detection Erich Blume 2026-04-08 11:12:42 -07:00
ec63d560f3 Deploy authentik 2026.2.2 container to ringtail Erich Blume 2026-04-08 10:56:50 -07:00
2eb28301e4 Upgrade authentik 2026.2.0 → 2026.2.2 (patch release) Erich Blume 2026-04-08 10:53:03 -07:00
0366a0346b Set Frigate preview quality to CRF 8 for faster timeline loading Erich Blume 2026-04-08 08:43:43 -07:00
936d29bbe1 Fix UnPoller dashboard UIDs exceeding Grafana 12's 40-char limit Erich Blume 2026-04-08 07:03:39 -07:00
3c894e659d Pin kube-state-metrics to main-SHA container tags Erich Blume 2026-04-07 16:10:14 -07:00
f59f8859dc Localize kube-state-metrics container (Dockerfile + nix) (#327) Erich Blume 2026-04-07 16:09:25 -07:00
d4e78d2239 Update kube-state-metrics tags to CI-built images localize-kube-state-metrics Erich Blume 2026-04-07 16:03:35 -07:00
e2e35cc732 Add local kube-state-metrics container (Dockerfile + nix) Erich Blume 2026-04-07 15:56:58 -07:00
84eda0301f Bump authentik worker memory limit 1Gi → 2Gi (OOMKilled after ringtail restart) Erich Blume 2026-04-07 15:39:29 -07:00
efae404d1e Remove superuser from teslamate PG role, transfer extension ownership Erich Blume 2026-04-07 15:36:39 -07:00
fc34a7da5b Review postgresql.md: add authentik user/db, immich-pg borgmatic secret Erich Blume 2026-04-07 15:21:48 -07:00
1fd8aae8f6 Upgrade ArgoCD v3.3.2 → v3.3.6, SHA-pin install manifest Erich Blume 2026-04-07 08:21:11 -07:00
e85c71e73f Add changelog fragments for seccomp hardening and bracket fix Erich Blume 2026-04-06 10:38:41 -07:00
d3d67272a7 Fix blumeops-tasks swallowing bracket content in descriptions Erich Blume 2026-04-06 10:37:40 -07:00
59f3422d3e Review compensating control: tailscale-network-isolation Erich Blume 2026-04-06 10:35:13 -07:00
18fe172a54 Add seccomp RuntimeDefault profiles to alloy-k8s and immich pods Erich Blume 2026-04-06 10:21:23 -07:00
a059d81314 Add review-compliance-reports task and reorganize report storage Erich Blume 2026-04-06 10:16:46 -07:00
54213ab810 Fix flake-update pipeline and update ringtail flake inputs Erich Blume 2026-04-06 08:24:48 -07:00
370a3574b2 Update docs release to v1.15.4 Forgejo Actions 2026-04-06 07:53:54 -07:00
0eaf8680fd Rewrite observability stack tutorial to match actual practices v1.15.4 Erich Blume 2026-04-06 07:52:35 -07:00
f42fa2d558 Remove stale Helm chart mirror references from forgejo docs Erich Blume 2026-04-06 07:37:21 -07:00
c7e5af6d51 Migrate 1Password Connect from Helm to kustomize (1.8.1 → 1.8.2) (#326) Erich Blume 2026-04-06 07:31:40 -07:00
aae7726ecc Migrate 1Password Connect from Helm to kustomize (1.8.1 → 1.8.2) 1password-connect-kustomize Erich Blume 2026-04-06 07:15:41 -07:00
facb803010 Update docs release to v1.15.3 Forgejo Actions 2026-04-05 21:24:25 -07:00
f9397b7fa0 Review core-services tutorial: add SSH rationale, runner example, TODO notice v1.15.3 Erich Blume 2026-04-05 21:22:00 -07:00
4625d44fd7 Add Haskell port of docs-check-links via stack script preserve/haskell-docs-check-links/pr-325 Erich Blume 2026-04-05 11:52:26 -07:00
5597e02467 Fix Homepage pod-selector for Immich (Helm labels → kustomize labels) Erich Blume 2026-04-04 12:12:33 -07:00
ccf5502232 Fix Homepage pod-selector for Immich (Helm labels → kustomize labels) immich-kustomize-v2.6.3 Erich Blume 2026-04-04 12:12:33 -07:00
0f1143a5bd Merge pull request 'Migrate Immich from Helm to kustomize (v2.5.6 → v2.6.3)' (#324) from immich-kustomize-v2.6.3 into main Erich Blume 2026-04-04 12:09:40 -07:00
6cab5091ea Add storage-provisioner health check to minikube Ansible role Erich Blume 2026-04-04 12:04:25 -07:00
3c819cf16e Fix Homepage migration date: 2025-12 → 2026-02 (per git history) Erich Blume 2026-04-04 09:53:48 -07:00