Erich Blume
005e2a03ed
Splits the nebulous gandi-operations how-to into two single-topic cards (manage-eblu-me-dns, rotate-gandi-pat) and adds a mise task for the recurring _acme-challenge TXT cleanup needed due to a value-comparison bug in libdns/gandi v1.1.0 that prevents certmagic's cleanup phase from removing presented TXT values. The gandi reference card is updated to drop the false "different credential from Pulumi PAT" claim — verified during the 2026-04-27 incident that Caddy and Pulumi share a single PAT. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
94 lines
3.7 KiB
Markdown
94 lines
3.7 KiB
Markdown
---
|
|
title: Mise Tasks
|
|
modified: 2026-04-11
|
|
tags:
|
|
- reference
|
|
- tools
|
|
- mise
|
|
---
|
|
|
|
# Mise Tasks
|
|
|
|
Operational tasks for BlumeOps, run via `mise run <task>`. Tasks live in `mise-tasks/` and use `#USAGE` directives for argument parsing.
|
|
|
|
Run `mise tasks --sort name` for the live list with descriptions.
|
|
|
|
## AI & Documentation
|
|
|
|
| Task | Description |
|
|
|------|-------------|
|
|
| `ai-docs` | All documentation concatenated for AI context (~85K tokens) |
|
|
| `ai-sources` | All non-doc source files for deep AI context (~270K tokens) |
|
|
| `docs-check-frontmatter` | Check required frontmatter fields |
|
|
| `docs-check-links` | Validate wiki-links resolve correctly (supports path-based links) |
|
|
| `docs-mikado` | View active Mikado dependency chains (C2 changes) |
|
|
| `docs-review` | Review the most stale doc by `last-reviewed` date |
|
|
| `docs-review-stale` | Report docs by last-modified date |
|
|
| `docs-review-tags` | Print frontmatter tag inventory |
|
|
|
|
## Deployment & Provisioning
|
|
|
|
| Task | Description |
|
|
|------|-------------|
|
|
| `provision-indri` | Run Ansible playbook for [[indri]] |
|
|
| `provision-ringtail` | Run Ansible playbook for [[ringtail]] (NixOS) |
|
|
| `provision-sifaka` | Run Ansible playbook for [[sifaka]] |
|
|
| `fly-deploy` | Deploy Fly.io public proxy (uses op for auth) |
|
|
| `fly-reload` | Reload nginx config, re-resolve upstream DNS (no redeploy) |
|
|
| `fly-setup` | One-time Fly.io secrets and certs setup |
|
|
| `fly-shutoff` | Emergency shutoff: stop all Fly.io proxy machines |
|
|
| `dns-preview` | Preview DNS changes with [[pulumi]] |
|
|
| `dns-up` | Apply DNS changes with [[pulumi]] |
|
|
| `dns-acme-cleanup` | Delete orphaned `_acme-challenge.ops` TXT records (libdns/gandi v1.1.0 workaround) |
|
|
| `tailnet-preview` | Preview Tailscale ACL changes with [[pulumi]] |
|
|
| `tailnet-up` | Apply Tailscale ACL changes with [[pulumi]] |
|
|
|
|
## Containers & Registry
|
|
|
|
| Task | Description |
|
|
|------|-------------|
|
|
| `container-list` | List containers and their recent tags |
|
|
| `container-build-and-release` | Trigger container build workflows via Forgejo API |
|
|
| `container-version-check` | Validate version consistency across container.py, Dockerfiles, nix, and manifests |
|
|
| `mirror-create` | Create an upstream mirror in the `mirrors/` Forgejo org |
|
|
| `mirror-update-pats` | Update GitHub PAT on all mirror repos on indri |
|
|
|
|
## Git & Forge
|
|
|
|
| Task | Description |
|
|
|------|-------------|
|
|
| `branch-cleanup` | Delete merged branches (local and remote) |
|
|
| `pr-comments` | List unresolved PR comments |
|
|
| `runner-logs` | List Forgejo Actions runs and fetch job logs (supports `--repo`, `--limit`) |
|
|
| `validate-workflows` | Validate workflow files against runner schema |
|
|
| `mikado-branch-invariant-check` | Validate Mikado Branch Invariant on `mikado/*` branches |
|
|
|
|
## Operations & Monitoring
|
|
|
|
| Task | Description |
|
|
|------|-------------|
|
|
| `services-check` | Check all services are online and responding |
|
|
| `service-review` | Review the most stale service for version freshness |
|
|
| `blumeops-tasks` | List tasks from Todoist sorted by priority |
|
|
| `op-backup` | Encrypt 1Password export and send to indri for borgmatic |
|
|
|
|
## Infrastructure Setup
|
|
|
|
| Task | Description |
|
|
|------|-------------|
|
|
| `ensure-minikube-indri-kubectl-config` | Set up kubectl config for minikube-indri |
|
|
| `ensure-k3s-ringtail-kubectl-config` | Set up kubectl config for k3s-ringtail |
|
|
|
|
## ML & Hardware
|
|
|
|
| Task | Description |
|
|
|------|-------------|
|
|
| `frigate-export-model` | Export YOLOv9 model weights to ONNX via [[dagger]] |
|
|
|
|
## Related
|
|
|
|
- [[dagger]] — CI/CD build engine (containers, docs)
|
|
- [[ansible]] — Configuration management
|
|
- [[argocd-cli]] — ArgoCD deployment workflows
|
|
- [[pulumi]] — DNS and Tailscale IaC
|
|
- [[qart-tuner]] — QR code art generator (`utils/qart/`)
|