blumeops

eblume/blumeops

Fork 0

Commit graph

6e06efa6d0 Add AI-drafted disclaimer to no-helm-policy explanation doc Erich Blume 2026-04-04 09:50:53 -07:00
64200a55c5 Migrate Immich from Helm chart to kustomize manifests (v2.5.6 → v2.6.3) Erich Blume 2026-04-04 09:42:25 -07:00
464e3222d2 Document upstream fix for Prowler --registry bug (pending release) Erich Blume 2026-04-02 20:21:19 -07:00
afb184fefc Add Sway fullscreen rule for RDR2 (gamescope broken on NVIDIA 580.x) Erich Blume 2026-04-02 16:04:29 -07:00
5de2ed9f96 Add gaming.nix for ringtail: gamescope + consolidate Steam config Erich Blume 2026-04-02 15:48:36 -07:00
306f580bdb Point Tempo at main-built container v2.10.3-75f9ba4 Erich Blume 2026-04-02 13:45:57 -07:00
75f9ba4943 Build Tempo container from source (2.10.3) (#323) Erich Blume 2026-04-02 13:45:02 -07:00
2ca63f8d21 Point Tempo at built container image v2.10.3-49ce545 local-tempo-container Erich Blume 2026-04-02 13:40:02 -07:00
49ce545176 Build Tempo container from source via forge mirror (2.10.3) Erich Blume 2026-04-02 13:33:34 -07:00
b1e2811077 Upgrade Grafana 12.3.3 → 12.4.2 (#322) Erich Blume 2026-04-02 11:33:19 -07:00
4f80b1e075 Update Grafana image tag to v12.4.2-4c54774 upgrade/grafana-12.4.2 Erich Blume 2026-04-02 11:27:16 -07:00
4c547745bf Upgrade Grafana 12.3.3 → 12.4.2 Erich Blume 2026-04-02 11:21:26 -07:00
08d57ef4d4 Review pulumi reference doc: fix Tailscale auth, add how-to links Erich Blume 2026-04-02 10:55:57 -07:00
1e67975acb Add changelog fragment for compensating control review Erich Blume 2026-04-01 22:04:38 -07:00
baee7ae54b Review single-user-cluster control and add evidence collection card Erich Blume 2026-04-01 22:01:57 -07:00
a18a424866 Pin NixOS service versions via nixpkgs-services overlay (#321) Erich Blume 2026-04-01 21:37:57 -07:00
264e057e57 Add nixpkgs-services to flake.lock pin-nixos-service-versions Erich Blume 2026-04-01 21:36:09 -07:00
696bc49290 Add SPA cache policy for authentik in Caddy Erich Blume 2026-04-01 21:28:28 -07:00
a890bcc882 Pin NixOS service versions via nixpkgs-services overlay Erich Blume 2026-04-01 21:12:38 -07:00
cfbf4cadbd Review argocd-cli reference doc: stamp last-reviewed Erich Blume 2026-04-01 20:35:18 -07:00
2b7b21dc9b Update docs release to v1.15.2 Forgejo Actions 2026-03-30 17:48:40 -07:00
4059b3d27b Add compensating controls framework and date-based report dirs (#320) v1.15.2 Erich Blume 2026-03-30 17:44:11 -07:00
f6ed751dc2 Organize scan reports into date-based subdirectories compensating-controls Erich Blume 2026-03-30 17:39:17 -07:00
4b85e8ca73 Add compensating controls framework with review tooling Erich Blume 2026-03-30 17:35:48 -07:00
a76e471d54 Add Prowler mutelist and fix kube-state-metrics seccomp (#319) Erich Blume 2026-03-30 17:22:31 -07:00
0b68d48eba Add Prowler mutelist and fix kube-state-metrics seccomp prowler-mutelist Erich Blume 2026-03-30 17:00:24 -07:00
1e391f96bb Upgrade forgejo-runner 12.7.0 → 12.7.3, add service card Erich Blume 2026-03-30 16:31:06 -07:00
0ec0246847 Remove doc-reviewer agent Erich Blume 2026-03-30 16:12:48 -07:00
77eebe507e Review Ansible reference doc: add missing roles, clarify IaC positioning Erich Blume 2026-03-30 16:10:24 -07:00
c069f889d2 Harden borgmatic photos backup: restrict dirs, add keepalives + checkpoints Erich Blume 2026-03-30 10:30:02 -07:00
b000efd6c3 Fix Kingfisher CronJob exit code handling Erich Blume 2026-03-30 07:16:02 -07:00
457ab19416 Scope Kingfisher scan to eblume user only on ringtail Erich Blume 2026-03-30 07:11:52 -07:00
2c1f0abefc Deploy Kingfisher v165768b-0fe0eed-nix (tmp permissions fix) Erich Blume 2026-03-30 06:54:57 -07:00
0fe0eed35a Fix Kingfisher container: make /tmp world-writable Erich Blume 2026-03-30 06:53:34 -07:00
14f366f993 Deploy Kingfisher v165768b-c494b62-nix (/tmp fix) Erich Blume 2026-03-30 06:51:17 -07:00
c494b62713 Fix Kingfisher container: add /tmp directory Erich Blume 2026-03-30 06:49:59 -07:00
b01afb1c1d Deploy Kingfisher v165768b-aa9cc70-nix (bash fix) Erich Blume 2026-03-30 06:47:26 -07:00
aa9cc709ec Fix Kingfisher container: add bash and coreutils for CronJob shell Erich Blume 2026-03-30 06:45:39 -07:00
f0c6845f0f Deploy custom Kingfisher container v165768b-f9206bf-nix Erich Blume 2026-03-30 06:42:24 -07:00
f9206bf10b Build custom Kingfisher container from sporked deploy branch (#318) Erich Blume 2026-03-30 06:34:49 -07:00
8c5b7176a4 Add custom Kingfisher container built from sporked feature branches feature/kingfisher-container Erich Blume 2026-03-29 09:35:28 -07:00
99a1a49175 Revert kingfisher skip in container build workflow Erich Blume 2026-03-29 21:42:38 -07:00
a842b9c1e8 Skip kingfisher in CI container builds Erich Blume 2026-03-29 20:52:07 -07:00
924325ebd5 Fix DinD seccomp profile broken by RuntimeDefault rollout Erich Blume 2026-03-29 17:09:57 -07:00
9115044219 spork-create: check for conflicting branch names before sporking Erich Blume 2026-03-29 09:36:53 -07:00
99df78664e Note upstream history rewrite as a spork sync failure mode Erich Blume 2026-03-29 08:22:11 -07:00
e1429fc3e7 Document Spork Attack supply-chain risk Erich Blume 2026-03-29 08:16:09 -07:00
4e09aed9d8 spork-create: fix ambiguous main branch checkout in mirror-sync template Erich Blume 2026-03-29 00:28:00 -07:00
21b465bf18 spork-create: enable Actions on fork after creation Erich Blume 2026-03-29 00:26:25 -07:00
007b4fecdd spork-create: preflight all checks before any mutations Erich Blume 2026-03-28 23:06:10 -07:00
ee6f516b2b spork-create: bail if local clone already exists Erich Blume 2026-03-28 23:03:38 -07:00
6ecfaf02b6 Add spork strategy: tooling and documentation Erich Blume 2026-03-28 22:58:10 -07:00
bb60369956 Simplify Kingfisher CronJob to HTML-only output Erich Blume 2026-03-28 21:50:54 -07:00
2808ffd450 Document Kingfisher secret scanner service Erich Blume 2026-03-28 21:47:37 -07:00
35705faca2 Add Kingfisher secret scanner CronJob (#317) Erich Blume 2026-03-28 21:39:55 -07:00
b682128b84 Scope Kingfisher scan to eblume user only feature/kingfisher-cronjob Erich Blume 2026-03-28 21:32:45 -07:00
c0c83f52fe Add Kingfisher secret scanner CronJob Erich Blume 2026-03-28 21:12:12 -07:00
6b1717bf28 Add Kingfisher secret scanner to prek hooks Erich Blume 2026-03-28 21:06:16 -07:00
7fb6eff388 Update docs release to v1.15.1 Forgejo Actions 2026-03-28 09:15:21 -07:00
2bd1611ac1 Document sifaka NFS/Tailscale TUN troubleshooting v1.15.1 Erich Blume 2026-03-28 09:12:00 -07:00
8cbd412380 Update services-check: forgejo uses launchctl not brew Erich Blume 2026-03-28 08:21:51 -07:00
3017f759a7 Migrate Forgejo from Homebrew to source build (#316) Erich Blume 2026-03-28 08:19:23 -07:00
de8a08ca2d Fix build instructions: never use make forgejo directly build-forgejo-from-source Erich Blume 2026-03-28 08:16:19 -07:00
521cec5fde Migrate Forgejo Ansible role from Homebrew to source build Erich Blume 2026-03-28 07:53:49 -07:00
4489fe4492 Update docs for Forgejo source build migration Erich Blume 2026-03-28 07:52:17 -07:00
3cb4303a54 Add changelog for Immich resource/probe fix Erich Blume 2026-03-27 22:37:15 -07:00
b632cd9ffb Fix Immich resource limits and probe timeouts Erich Blume 2026-03-27 22:36:32 -07:00
c78b86c72c Add offsite backup for immich photo library to BorgBase (#315) Erich Blume 2026-03-27 19:43:05 -07:00
c1e7497e12 Add offsite backup for immich photo library to BorgBase immich-photos-backup Erich Blume 2026-03-27 19:20:12 -07:00
ca0c9354ee Add borgmatic backups for authentik and immich databases (#314) Erich Blume 2026-03-27 16:59:58 -07:00
1b18748f51 Add borgmatic backups for authentik and immich databases feature/borgmatic-all-pg-backups Erich Blume 2026-03-27 16:52:41 -07:00
33463764d1 Add QArt Tuner: QR code art generator with interactive web UI Erich Blume 2026-03-27 15:33:36 -07:00
66a47738dd Add ringtail post-deploy maintenance: kernel check, generation pruning, GC Erich Blume 2026-03-27 07:55:45 -07:00
a5b33591d3 Update ringtail flake inputs (nixpkgs, home-manager) Erich Blume 2026-03-27 07:37:43 -07:00
831b82950a Upgrade nvidia-device-plugin v0.18.2 → v0.19.0 and add reference card Erich Blume 2026-03-27 07:19:24 -07:00
687e972713 Review CV doc and close build-dep review gap Erich Blume 2026-03-27 07:11:22 -07:00
2c1652604b Reduce PodNotReady alert lookback from 5m to 60s Erich Blume 2026-03-26 19:48:37 -07:00
a37012385f Tighten ArgoCDAppOutOfSync alert timing to clear faster after sync Erich Blume 2026-03-26 15:44:09 -07:00
fc8d2cdb12 Add preserve/* branch protection and document Pyroscope blocker Erich Blume 2026-03-26 15:32:25 -07:00
a4b5a8d917 Mount host /proc and /sys for eBPF kernel symbol access preserve/pyroscope-profiling/pr-313 Erich Blume 2026-03-26 15:26:20 -07:00
f1bc7531c5 Add /tmp emptyDir mount for pyroscope.ebpf symbol cache Erich Blume 2026-03-26 15:24:27 -07:00
97f363df2c Fix Alloy profiling config: remove invalid targets_only, add required labels Erich Blume 2026-03-26 15:23:01 -07:00
4680e4d4ff Fix Pyroscope config flag: -config.file not -config.path Erich Blume 2026-03-26 15:15:46 -07:00
14f0221cdf Set Pyroscope container tag to built image v1.19.1-a269bd6-nix Erich Blume 2026-03-26 15:13:25 -07:00
a269bd6526 Fix UI installPhase: use relative path from cwd after cd in buildPhase Erich Blume 2026-03-26 15:04:17 -07:00
78a89d7ed1 Fix webpack CopyPlugin: rewrite icons path instead of deleting entry Erich Blume 2026-03-26 14:56:55 -07:00
10398c715c Fix icons path: use root node_modules in mkYarnPackage layout Erich Blume 2026-03-26 14:55:40 -07:00
f727a352c3 Fix icons copy: use directory copy instead of glob expansion Erich Blume 2026-03-26 14:50:37 -07:00
98bff9e3eb Fix icons glob: pre-copy icons and patch webpack CopyPlugin Erich Blume 2026-03-26 14:45:39 -07:00
1327972183 Restore embedded frontend with symlink workaround for icons glob Erich Blume 2026-03-26 14:43:11 -07:00
ef2385322a Drop embedded frontend from Pyroscope build Erich Blume 2026-03-26 14:39:34 -07:00
602a89812b Fix Pyroscope build: add frontend via mkYarnPackage, use go/bin target Erich Blume 2026-03-26 14:31:40 -07:00
8a766a907d Set real goModules hash for Pyroscope Nix build Erich Blume 2026-03-26 14:29:09 -07:00
268645f561 Fix goModules derivation: disable fixup to avoid store path references Erich Blume 2026-03-26 14:25:33 -07:00
01317634ad Add Nix container build for Pyroscope and update to v1.19.1 Erich Blume 2026-03-26 14:20:05 -07:00
e7d3871144 Deploy Grafana Pyroscope for continuous eBPF profiling on ringtail Erich Blume 2026-03-26 14:05:57 -07:00
f97b5c9d5d Deploy Homepage v1.11.0-e375859 Erich Blume 2026-03-26 10:25:07 -07:00
e375859221 Upgrade Homepage container to v1.11.0 Erich Blume 2026-03-26 10:17:36 -07:00
a5e51bd600 Review tailscale-setup tutorial: fix inaccuracies Erich Blume 2026-03-26 07:44:36 -07:00
4ae55f9bf4 Review kubernetes-bootstrap tutorial: fix inaccuracies Erich Blume 2026-03-25 16:16:33 -07:00