blumeops

eblume/blumeops

Fork 0

Commit graph

796baaa41a Upgrade External Secrets Operator v2.2.0 + migrate Helm to kustomize (#312) Erich Blume 2026-03-25 15:56:41 -07:00
b178ee54ca Upgrade External Secrets Operator v2.2.0 + migrate Helm to kustomize upgrade-external-secrets-v2 Erich Blume 2026-03-25 15:39:46 -07:00
b97e37543f Deploy Tor Snowflake proxy on ringtail (#311) Erich Blume 2026-03-24 20:51:40 -07:00
86226c94db Add geoip databases for snowflake proxy country metrics deploy-snowflake-proxy Erich Blume 2026-03-24 20:48:28 -07:00
508f7a957d Add Grafana dashboard and Prometheus scraping for snowflake proxy Erich Blume 2026-03-24 20:44:56 -07:00
f2362086ef Deploy Tor Snowflake proxy on ringtail Erich Blume 2026-03-24 20:37:42 -07:00
243a862901 Update docs release to v1.15.0 Forgejo Actions 2026-03-24 19:51:17 -07:00
a1c2e0833d Include link to upstream prowler issue v1.15.0 Erich Blume 2026-03-24 19:48:43 -07:00
75fd5b029d Use prowler image for registry enumeration init container Erich Blume 2026-03-24 17:36:02 -07:00
d365e79068 Add kubectl image tag to prowler kustomization Erich Blume 2026-03-24 17:34:24 -07:00
d90be355dd Work around Prowler --registry bug with init container Erich Blume 2026-03-24 17:29:25 -07:00
7d1ae1a57e Fix prowler image and IaC scan arguments Erich Blume 2026-03-24 16:58:33 -07:00
7f2d53bc77 Fix prowler image scan registry URL (add https:// scheme) Erich Blume 2026-03-24 16:57:05 -07:00
38281a35fd Update prowler container tag to 6960243 (with Trivy) Erich Blume 2026-03-24 16:54:36 -07:00
fe201a495c Add Prowler IaC scanning of blumeops repo (Saturday 2am) Erich Blume 2026-03-24 16:49:38 -07:00
696024306c Add Prowler image vulnerability scanning for blumeops containers Erich Blume 2026-03-24 16:43:08 -07:00
07e9c810ca Add RuntimeDefault seccomp profiles to all managed workloads Erich Blume 2026-03-24 16:19:40 -07:00
87f56f78b3 Update container tags to d021b35 (post-merge rebuild) Erich Blume 2026-03-24 16:09:07 -07:00
d021b3534f Deploy Prowler CIS scanner (#310) Erich Blume 2026-03-24 16:08:09 -07:00
9053ce5955 Add security reference card and compliance report how-to deploy-prowler Erich Blume 2026-03-24 16:05:17 -07:00
070a684946 Fix prowler output-formats args (separate values, not comma-separated) Erich Blume 2026-03-24 15:50:45 -07:00
9d0001355c Fix NFS mount path for shared reports share Erich Blume 2026-03-24 15:45:13 -07:00
6f0ec0e160 Update prowler image tag to branch build Erich Blume 2026-03-24 15:37:45 -07:00
ed9478f493 Fix container-build-and-release to use single unified workflow Erich Blume 2026-03-24 15:32:22 -07:00
870be4e6a8 Use forge mirror for Prowler container build Erich Blume 2026-03-24 15:22:01 -07:00
a97391177a Deploy Prowler CIS scanner as weekly CronJob on minikube-indri Erich Blume 2026-03-24 15:00:48 -07:00
3b7abbd689 Update container tags to fd0bebb (post-merge rebuild) Erich Blume 2026-03-24 13:39:26 -07:00
fd0bebb0fc Localize authentik-redis container (#309) Erich Blume 2026-03-24 13:27:36 -07:00
8876422d1f Fix detect job checkout for workflow_dispatch builds localize-redis Erich Blume 2026-03-24 13:23:45 -07:00
353a141181 Remove tag = "latest" from nix container definitions Erich Blume 2026-03-24 13:19:23 -07:00
a1a97966cc Localize authentik-redis: nix-built container from nixpkgs Erich Blume 2026-03-24 13:16:22 -07:00
fc45989a6c Decommission JobSync service (#308) Erich Blume 2026-03-24 08:44:23 -07:00
f389533d1c Decommission JobSync service feature/decommission-jobsync Erich Blume 2026-03-24 08:43:19 -07:00
0d422f5234 Update tooling dependencies (March 2026) (#307) Erich Blume 2026-03-24 08:11:46 -07:00
e198c70af6 Update tooling dependencies (March 2026) update-tooling-deps-2026-03 Erich Blume 2026-03-24 08:10:48 -07:00
0698013355 Review ArgoCD config tutorial: fix sync policy, typo, add cross-references Erich Blume 2026-03-24 07:55:00 -07:00
bec554110a Upgrade Frigate 0.17.0-rc2 → 0.17.1, add motion retention tier Erich Blume 2026-03-24 07:30:18 -07:00
b96b4dad47 Move Alerts dashboard into Infrastructure Alerts folder Erich Blume 2026-03-23 21:20:14 -07:00
9024d41230 Add Grafana alerts dashboard for mobile-friendly alert overview Erich Blume 2026-03-23 21:16:54 -07:00
9efe5c97fe Fix authentik worker OOMKill: limit concurrency to 2 Erich Blume 2026-03-23 21:05:16 -07:00
bd0ff30d3f Unify container build workflows (#306) Erich Blume 2026-03-23 20:55:50 -07:00
5dbdbf7cbe Remove nixpkgs version fallback and delete nettest container unify-container-workflows Erich Blume 2026-03-23 20:54:48 -07:00
b3dfb8d13c Remove Dockerfile version fallback from nix build path Erich Blume 2026-03-23 20:50:01 -07:00
b5a366d829 Unify Dockerfile and Nix container build workflows Erich Blume 2026-03-23 20:47:11 -07:00
4cc26ed5eb Update ntfy tag to main build v2.19.2-d1dac0c-nix Erich Blume 2026-03-23 10:36:34 -07:00
d1dac0c241 Upgrade ntfy v2.17.0 → v2.19.2 (#305) Erich Blume 2026-03-23 10:32:06 -07:00
2e5724f0f6 Update ntfy kustomization tag to v2.19.2-f654c57-nix upgrade/ntfy-v2.19.2 Erich Blume 2026-03-23 10:21:27 -07:00
f654c57e95 Upgrade ntfy v2.17.0 → v2.19.2 Erich Blume 2026-03-23 10:16:17 -07:00
06e721841c Review 12 reference docs: fix stale image refs, expand stubs, add cross-refs Erich Blume 2026-03-23 09:51:57 -07:00
3750428b58 Fix ArgoCD apps app permanent OutOfSync Erich Blume 2026-03-22 20:42:37 -07:00
044ad7dad7 Revert fly/start.sh to polling loop — tailscale wait needs v1.96.2+ Erich Blume 2026-03-22 19:44:47 -07:00
e9b8e3d80b Revert Tailscale operator to v1.94.2 — images not yet published Erich Blume 2026-03-22 19:41:40 -07:00
2e46f99820 Upgrade Tailscale operator v1.94.2 → v1.96.3 (#304) Erich Blume 2026-03-22 19:31:22 -07:00
bcd732e23f Upgrade Tailscale operator v1.94.2 → v1.96.3 upgrade-tailscale-operator-1.96.3 Erich Blume 2026-03-22 19:28:47 -07:00
262299c82a Update docs release to v1.14.3 Forgejo Actions 2026-03-22 18:20:41 -07:00
2cb0ce4289 Review and correct Tailscale reference doc v1.14.3 Erich Blume 2026-03-22 18:18:45 -07:00
f7221f3990 Update ringtail flake inputs Erich Blume 2026-03-22 17:57:54 -07:00
6d65e6928c C2: Deploy infrastructure alerting pipeline (#303) Erich Blume 2026-03-22 14:52:56 -07:00
67883950c3 C2(deploy-infra-alerting): finalize rewrite cards as historical docs mikado/deploy-infra-alerting Erich Blume 2026-03-22 14:24:47 -07:00
2e2a33d7ca C2(deploy-infra-alerting): close port-services-check-alerts Erich Blume 2026-03-22 14:23:42 -07:00
52eed44542 C2(deploy-infra-alerting): impl refactor services-check to query alerts Erich Blume 2026-03-22 14:21:42 -07:00
cdd85c7ac9 C2(deploy-infra-alerting): impl fix TextfileStale to always return data Erich Blume 2026-03-22 14:13:20 -07:00
da452e2bf5 C2(deploy-infra-alerting): impl fix TextfileStale noDataState to OK Erich Blume 2026-03-22 14:10:05 -07:00
d9ab004479 C2(deploy-infra-alerting): impl fix Grafana probe port (80 not 3000) Erich Blume 2026-03-22 14:05:25 -07:00
957ee90fa2 C2(deploy-infra-alerting): impl add ArgoCD scrape and sync alert Erich Blume 2026-03-22 13:45:34 -07:00
2fa536e547 C2(deploy-infra-alerting): impl add textfile staleness and Frigate alerts Erich Blume 2026-03-22 13:43:16 -07:00
b2b0d6efa7 C2(deploy-infra-alerting): impl fix PodNotReady noDataState to OK Erich Blume 2026-03-22 13:35:24 -07:00
02e07aeb41 C2(deploy-infra-alerting): impl exclude Job-owned pods from PodNotReady Erich Blume 2026-03-22 12:19:33 -07:00
8e6a803076 C2(deploy-infra-alerting): impl add probes and alert rules for services-check coverage Erich Blume 2026-03-22 12:11:12 -07:00
e33b0bc184 C2(deploy-infra-alerting): close first-alert-and-runbook Erich Blume 2026-03-22 12:05:43 -07:00
4c0bd0055f C2(deploy-infra-alerting): impl use custom payload for ntfy-native JSON Erich Blume 2026-03-22 11:59:26 -07:00
94413f73ba C2(deploy-infra-alerting): impl fix alert rule multi-series evaluation Erich Blume 2026-03-22 11:00:21 -07:00
549c57ab82 C2(deploy-infra-alerting): impl add first alert rule and runbook Erich Blume 2026-03-22 10:57:23 -07:00
c1acc808d5 C2(deploy-infra-alerting): close configure-grafana-alerting-pipeline Erich Blume 2026-03-22 10:51:02 -07:00
261f20601a C2(deploy-infra-alerting): impl configure grafana alerting pipeline Erich Blume 2026-03-22 10:35:36 -07:00
1d5990a2f7 C2(deploy-infra-alerting): plan add alerting pipeline cards Erich Blume 2026-03-22 10:28:31 -07:00
f1620abb17 Improve Frigate health checks to catch NFS and camera failures Erich Blume 2026-03-22 09:55:53 -07:00
dcab489b60 agent memory ignore Erich Blume 2026-03-21 19:03:21 -07:00
810340a328 Update service-versions.yaml for loki Erich Blume 2026-03-20 16:10:19 -07:00
531a49abeb C0 update deployment for loki to 3.6.7 Erich Blume 2026-03-20 16:06:29 -07:00
f9426b734c Update loki to 3.6.7 (#302) Erich Blume 2026-03-20 16:02:28 -07:00
16b07a67c8 Update loki to 3.6.7 update-loki-3.6.7 Erich Blume 2026-03-20 15:52:41 -07:00
0f0ee2a319 Update docs and kiwix kustomization tags to 613f05d builds Erich Blume 2026-03-19 06:40:49 -07:00
3d2a97aaf9 Update kustomization tags to OCI-labeled builds (613f05d) Erich Blume 2026-03-19 06:34:12 -07:00
613f05dfde Add consistent OCI labels to all container Dockerfiles Erich Blume 2026-03-18 20:42:00 -07:00
c92b949a20 Fix UID sed to target root-level dashboard uid only Erich Blume 2026-03-18 12:56:50 -07:00
334fbbb9e3 Fix TeslaMate/UnPoller dashboard UID sed clobbering datasource refs Erich Blume 2026-03-18 12:53:00 -07:00
6f88baeb91 Fix Grafana starred dashboards lost on pod restart Erich Blume 2026-03-18 12:40:44 -07:00
0dffdb9974 Add Claude Code subagents for infrastructure workflows Erich Blume 2026-03-18 11:57:36 -07:00
ef8c2118a1 Standardize USAGE pragmas and typer parsing across mise tasks Erich Blume 2026-03-18 11:42:01 -07:00
86220b7b88 Update Prometheus deployment to v3.10.0-0d27797 Erich Blume 2026-03-18 08:46:07 -07:00
0d2779762a Upgrade Prometheus to v3.10.0 (#301) Erich Blume 2026-03-18 07:47:46 -07:00
49737b38e2 Upgrade Prometheus to v3.10.0 upgrade/prometheus-3.10.0 Erich Blume 2026-03-18 07:46:44 -07:00
528d3da327 Review power.md: add ringtail, mark reviewed Erich Blume 2026-03-18 07:37:31 -07:00
e0dbcbd997 Update retention changelog to reflect final PVC decision Erich Blume 2026-03-18 06:46:55 -07:00
21ddc74cdc Revert PVC size changes, add hostpath comment Erich Blume 2026-03-18 06:46:17 -07:00
ef199b70f0 Increase Prometheus and Loki data retention Erich Blume 2026-03-18 06:44:00 -07:00
50d3b3b21e Rename Borgmatic to Borg Backups on Homepage Erich Blume 2026-03-18 06:34:13 -07:00
e8bdecdb11 Rename Borgmatic dashboard to Borg Backups, add duration graph Erich Blume 2026-03-18 06:33:27 -07:00
8425f56dc3 Add Fly.io dashboard to Homepage admin bookmarks Erich Blume 2026-03-18 06:29:44 -07:00