Erich Blume
8d634861f6
## Summary
Replace the cv (`cv.eblu.me`) and docs (`docs.eblu.me`) minikube Deployments with indri-native ansible roles. Caddy serves the extracted release tarballs directly via a new `kind: static` service-block — no daemon, no nginx pod, no ProxyGroup ingress on the request path. Mirrors the rationale of the recent devpi migration; part of the broader minikube wind-down.
## What's in this commit
- `ansible/roles/{cv,docs}` — sentinel-gated tarball download + extract into `~/{cv,docs}/content/`
- `ansible/roles/caddy/` — new `kind: static` branch in the Caddyfile template (encoded gzip, immutable cache headers for fingerprinted assets, optional `try_html` for Quartz-style clean URLs, optional per-path `download_paths` for the resume PDF's `Content-Disposition`)
- `ansible/playbooks/indri.yml` — wires `cv` and `docs` roles before `caddy`
- `service-versions.yaml` — both services flip to `type: ansible`. `docs.current-version` stays at `1.28.2` for this commit so `container-version-check` keeps passing while `containers/quartz/Dockerfile` still exists; it moves to the docs release tag in the cleanup commit
- `.forgejo/workflows/{cv-deploy,build-blumeops}.yaml` — deploy step now bumps `cv_version`/`docs_version` in the role defaults and pushes; running ansible + purging the Fly cache is manual from gilbert (matches devpi)
- Docs: `docs/how-to/operations/{cv,docs}-on-indri.md`, updated `docs/reference/services/{cv,docs}.md`, changelog fragment
## What is not in this commit
The dead artifacts. After PR review and successful cutover, a follow-up commit deletes:
- `argocd/apps/{cv,docs}.yaml` and `argocd/manifests/{cv,docs}/`
- `containers/cv/`, `containers/quartz/`
- `CONTAINER_TO_SERVICE['quartz']` mapping in `mise-tasks/container-version-check`
- bumps `docs.current-version` in `service-versions.yaml` to the release tag
## Cutover plan (manual, from gilbert, after review)
1. **Take down old:**
- Remove the cv and docs Applications: `argocd app delete cv --cascade && argocd app delete docs --cascade`
- Verify k8s namespaces gone: `kubectl --context=minikube-indri get ns | grep -E '^(cv|docs)\\b'` (should be empty)
- Verify tailnet MagicDNS no longer advertises the VIPs: `nslookup cv.tail8d86e.ts.net` and `nslookup docs.tail8d86e.ts.net` should both fail
2. **Bring up new:**
- `mise run provision-indri -- --tags cv,docs,caddy --check --diff` (already validated on branch)
- `mise run provision-indri -- --tags cv,docs,caddy`
- `fly ssh console -a blumeops-proxy -C "sh -c 'rm -rf /tmp/cache && nginx -s reload'"`
3. **Verify:** `mise run services-check` and the curl checks listed in `docs/how-to/operations/{cv,docs}-on-indri.md`
4. **Cleanup commit + merge.**
Total expected downtime: minutes (not the few-hour budget you authorized).
## Test plan
- [ ] `mise run provision-indri -- --tags cv,docs --check --diff` clean
- [ ] `mise run provision-indri -- --tags caddy --check --diff` shows only the cv + docs blocks changing as previewed in the PR thread
- [ ] After cutover: `cv.eblu.me`, `cv.ops.eblu.me`, `docs.eblu.me`, `docs.ops.eblu.me` all return 200
- [ ] `cv.eblu.me/resume.pdf` includes `Content-Disposition: attachment`
- [ ] A clean Quartz URL (e.g. `docs.eblu.me/explanation/agent-change-process`) resolves to the right page
- [ ] `mise run services-check` clean
- [ ] `mise run service-review --type ansible` shows cv and docs
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Reviewed-on: #342
95 lines
3.1 KiB
YAML
95 lines
3.1 KiB
YAML
- Host Services:
|
|
- Forgejo:
|
|
href: https://forge.eblu.me
|
|
icon: forgejo
|
|
description: Git forge
|
|
widget:
|
|
type: gitea
|
|
url: https://forge.eblu.me
|
|
key: "{{HOMEPAGE_VAR_FORGEJO_API_KEY}}"
|
|
fields: ["notifications", "pulls"]
|
|
- Registry:
|
|
href: https://registry.ops.eblu.me
|
|
icon: zot-registry
|
|
description: Container registry
|
|
- Devpi:
|
|
href: https://pypi.ops.eblu.me
|
|
icon: mdi-language-python
|
|
description: PyPI caching mirror
|
|
- Sifaka NAS:
|
|
href: https://nas.ops.eblu.me
|
|
icon: synology
|
|
description: NAS dashboard
|
|
widget:
|
|
type: prometheusmetric
|
|
url: https://prometheus.ops.eblu.me
|
|
metrics:
|
|
- label: Used
|
|
query: node_filesystem_size_bytes{mountpoint="/Volumes/backups"} - node_filesystem_avail_bytes{mountpoint="/Volumes/backups"}
|
|
format:
|
|
type: bytes
|
|
- label: Total
|
|
query: node_filesystem_size_bytes{mountpoint="/Volumes/backups"}
|
|
format:
|
|
type: bytes
|
|
- Borg Backups:
|
|
href: https://grafana.ops.eblu.me/d/borgmatic
|
|
icon: borgmatic
|
|
description: Backup system
|
|
widget:
|
|
type: prometheusmetric
|
|
url: https://prometheus.ops.eblu.me
|
|
metrics:
|
|
- label: Last backup
|
|
query: time() - borgmatic_last_archive_timestamp
|
|
format:
|
|
type: duration
|
|
- label: Archive size
|
|
query: borgmatic_repo_deduplicated_size_bytes
|
|
format:
|
|
type: bytes
|
|
# TODO: Add Caddy widget when admin API is enabled (currently admin off)
|
|
# - Caddy:
|
|
# href: https://indri.tail8d86e.ts.net
|
|
# icon: caddy
|
|
# description: Reverse proxy
|
|
# widget:
|
|
# type: caddy
|
|
# url: http://indri.tail8d86e.ts.net:2019
|
|
- Home:
|
|
- NVR:
|
|
href: https://nvr.ops.eblu.me
|
|
icon: frigate.png
|
|
description: Network video recorder
|
|
- Jellyfin:
|
|
href: https://jellyfin.ops.eblu.me
|
|
icon: jellyfin
|
|
description: Media server
|
|
widget:
|
|
type: jellyfin
|
|
url: https://jellyfin.ops.eblu.me
|
|
key: "{{HOMEPAGE_VAR_JELLYFIN_API_KEY}}"
|
|
enableBlocks: true
|
|
enableNowPlaying: false
|
|
fields: ["movies", "series", "episodes"]
|
|
- Infrastructure:
|
|
- Authentik:
|
|
href: https://authentik.ops.eblu.me
|
|
icon: authentik
|
|
description: Identity provider
|
|
- Ntfy:
|
|
href: https://ntfy.ops.eblu.me
|
|
icon: ntfy.png
|
|
description: Push notifications
|
|
- Services:
|
|
# CV and Docs were previously auto-discovered from k8s Ingresses; after
|
|
# the indri-native migration ([[cv-on-indri]], [[docs-on-indri]]) there
|
|
# is no Ingress to discover, so they live here as static entries.
|
|
- CV:
|
|
href: https://cv.eblu.me
|
|
icon: mdi-file-document
|
|
description: Resume / CV
|
|
- Docs:
|
|
href: https://docs.eblu.me
|
|
icon: mdi-book-open-page-variant
|
|
description: BlumeOps Documentation
|