Erich Blume 430f2c6ec5 Add plans for Dagger CI/CD and upstream fork strategy (#150 )

## Summary

Two new plan documents in `docs/how-to/plans/`:

- **adopt-dagger-ci** — Migrate CI/CD build logic from Forgejo Actions YAML to Dagger (Python SDK). Forgejo Actions stays as a thin trigger layer. Covers:
  - Container builds with local iteration (`dagger call build ... terminal`)
  - Docs builds with Forgejo packages migration (replacing Forgejo releases)
  - Runner simplification (only Docker + dagger CLI needed)
  - Secrets handling via Dagger's `Secret` type
  - Future: forked project builds, Python packages, pre-merge validation

- **upstream-fork-strategy** — Stacked-branch pattern for maintaining forks of upstream projects. Covers:
  - Daily automated rebase with conflict detection and issue creation
  - Branch model: `upstream/main` → `blumeops` → `feature/*`
  - Quartz fork as first instance, enabling `last-reviewed` frontmatter rendering in docs
  - Upstream PR path for contributing changes back

## Context

These plans emerged from evaluating alternatives to the GHA ecosystem (BuildKite, Concourse, Earthly) for CI/CD. Dagger was chosen for its local iteration story, Python-native pipelines, and zero-infrastructure requirements. The fork strategy is a prerequisite for customizing Quartz and other upstream tools.

Neither plan is ready for execution yet — they are design documents for future work.

Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/150

2026-02-11 10:20:14 -08:00

1.9 KiB

Raw Blame History

title

How-To Guides

Task-oriented instructions for common BlumeOps operations. These guides assume you already understand the basic concepts - see tutorials if you're learning.

Deployment

Guide	Description
deploy-k8s-service	Deploy a new service to Kubernetes via ArgoCD
add-ansible-role	Add a new Ansible role for indri services

Configuration

Guide	Description
update-tailscale-acls	Update Tailscale access control policies
gandi-operations	Manage DNS records and cycle the Gandi API token
use-pypi-proxy	Configure pip and publish packages to devpi
expose-service-publicly	Expose a service to the public internet via Fly.io + Tailscale

Documentation

Guide	Description
update-documentation	Publish docs via build-blumeops workflow

Knowledge Base

Guide	Description
review-documentation	Periodically review and maintain documentation

Operations

Guide	Description
restart-indri	Safely shut down and restart indri
manage-flyio-proxy	Deploy, shutoff, and troubleshoot the public proxy
restore-1password-backup	Recover 1Password credentials from borgmatic backup
troubleshooting	Diagnose and fix common issues

Plans

Migration and transition plans for upcoming infrastructure changes.

Plan	Description
plans	Index of all plans
migrate-forgejo-from-brew	Transition Forgejo from Homebrew to source-built binary
add-unifi-pulumi-stack	Add Pulumi IaC for UniFi Express 7
adopt-dagger-ci	Adopt Dagger as CI/CD build engine
upstream-fork-strategy	Stacked-branch forking strategy for upstream projects

1.9 KiB Raw Blame History