Deploy Fly.io Proxy / deploy (push) Successful in 1m37s

Details

Switch Fly proxy to upstream keepalive pools (#337 )

## Summary

- Replace per-request DNS resolution (variable-based `proxy_pass`) with static `upstream` blocks and `keepalive` connection pools
- Reuses TLS connections through the Tailscale tunnel instead of handshaking per request
- Add `mise run fly-reload` for nginx config reload without full redeploy (re-resolves upstream DNS)

## Trade-off

DNS is resolved at config load, not per-request. If Tailscale Ingress pods get new IPs (restart, reschedule), `mise run fly-reload` is needed. A Grafana alert will be added to detect this.

## Still TODO on this branch

- [ ] Grafana alert for upstream unreachable (triggers fly-reload reminder)
- [ ] Docs pass
- [ ] Deploy from branch and verify latency improvement
- [ ] Changelog fragment

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Reviewed-on: #337

2026-04-17 16:39:52 -07:00

3.6 KiB

Raw Blame History

title

modified

Mise Tasks

Operational tasks for BlumeOps, run via mise run <task>. Tasks live in mise-tasks/ and use #USAGE directives for argument parsing.

Run mise tasks --sort name for the live list with descriptions.

AI & Documentation

Task	Description
`ai-docs`	All documentation concatenated for AI context (~85K tokens)
`ai-sources`	All non-doc source files for deep AI context (~270K tokens)
`docs-check-frontmatter`	Check required frontmatter fields
`docs-check-links`	Validate wiki-links resolve correctly (supports path-based links)
`docs-mikado`	View active Mikado dependency chains (C2 changes)
`docs-review`	Review the most stale doc by `last-reviewed` date
`docs-review-stale`	Report docs by last-modified date
`docs-review-tags`	Print frontmatter tag inventory

Deployment & Provisioning

Task	Description
`provision-indri`	Run Ansible playbook for indri
`provision-ringtail`	Run Ansible playbook for ringtail (NixOS)
`provision-sifaka`	Run Ansible playbook for sifaka
`fly-deploy`	Deploy Fly.io public proxy (uses op for auth)
`fly-reload`	Reload nginx config, re-resolve upstream DNS (no redeploy)
`fly-setup`	One-time Fly.io secrets and certs setup
`fly-shutoff`	Emergency shutoff: stop all Fly.io proxy machines
`dns-preview`	Preview DNS changes with pulumi
`dns-up`	Apply DNS changes with pulumi
`tailnet-preview`	Preview Tailscale ACL changes with pulumi
`tailnet-up`	Apply Tailscale ACL changes with pulumi

Containers & Registry

Task	Description
`container-list`	List containers and their recent tags
`container-build-and-release`	Trigger container build workflows via Forgejo API
`container-version-check`	Validate version consistency across container.py, Dockerfiles, nix, and manifests
`mirror-create`	Create an upstream mirror in the `mirrors/` Forgejo org
`mirror-update-pats`	Update GitHub PAT on all mirror repos on indri

Git & Forge

Task	Description
`branch-cleanup`	Delete merged branches (local and remote)
`pr-comments`	List unresolved PR comments
`runner-logs`	List Forgejo Actions runs and fetch job logs (supports `--repo`, `--limit`)
`validate-workflows`	Validate workflow files against runner schema
`mikado-branch-invariant-check`	Validate Mikado Branch Invariant on `mikado/*` branches

Operations & Monitoring

Task	Description
`services-check`	Check all services are online and responding
`service-review`	Review the most stale service for version freshness
`blumeops-tasks`	List tasks from Todoist sorted by priority
`op-backup`	Encrypt 1Password export and send to indri for borgmatic

Infrastructure Setup

Task	Description
`ensure-minikube-indri-kubectl-config`	Set up kubectl config for minikube-indri
`ensure-k3s-ringtail-kubectl-config`	Set up kubectl config for k3s-ringtail

ML & Hardware

Task	Description
`frigate-export-model`	Export YOLOv9 model weights to ONNX via dagger

dagger — CI/CD build engine (containers, docs)
ansible — Configuration management
argocd-cli — ArgoCD deployment workflows
pulumi — DNS and Tailscale IaC
qart-tuner — QR code art generator (utils/qart/)

3.6 KiB Raw Blame History