blumeops/docs/how-to
Erich Blume db0512b5d4 Doc review: 5 stalest cards; scale back ai-docs rule; document heph CLI (#373)
## Doc review (5 stalest, all never-reviewed)

Each card was verified against live state (ArgoCD app list/health, manifests, 1Password item fields, Mealie API probe) and stamped `last-reviewed: 2026-06-09`.

| Card | Findings fixed |
|------|----------------|
| `reference/services/argocd.md` | Added Authentik SSO (public PKCE client, `--sso` login, admins→role:admin RBAC); documented dual-cluster management (minikube + ringtail k3s at `ringtail.tail8d86e.ts.net:6443`); corrected sync policy — the `apps` root is **manual**, not automated |
| `reference/services/authentik.md` | Blueprint list grown from 5 to 10 files; OIDC client table now lists all 8 clients with types; secrets table updated to `postgresql-*` fields and per-client secrets |
| `reference/services/grafana.md` | TeslaMate datasource moved to `pg.ops.eblu.me:5434` (ringtail); dashboard inventory refreshed (20 provisioned ConfigMaps); TeslaMate dashboards documented as init-container fetch from forge mirror at pinned tag; SSO role mapping wording corrected (Admin only for `admins` group) |
| `reference/infrastructure/unifi.md` | UnPoller image is now locally built (`registry.ops.eblu.me/blumeops/unpoller`); verified namespace/port |
| `how-to/mealie/plan-a-meal.md` | Procedure verified; **found the stored API token (`op://blumeops/mealie/credential`) returns 401** — operational fix in progress, doc content unchanged |

## AGENTS.md

- **Scaled back the ai-docs rule** (per discussion): agents now start by finding and reading relevant docs; `mise run ai-docs` (~130K tokens now) and `ai-sources` become opt-in bulk loads. `agent-change-process.md` updated to match. The `ai-docs` mise task itself is kept for now — happy to retire it in a follow-up if desired.
- **Documented the heph CLI** task workflow (list/show/context/log read paths; done/drop/skip/log/edit/task write paths) so future sessions can read and manipulate Blumeops tasks without rediscovery.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Reviewed-on: #373
2026-06-09 16:05:01 -07:00
..
authentik Restructure docs: consolidate, recategorize, and extract 2026-03-15 19:55:59 -07:00
configuration C0: retire Todoist blumeops-tasks; point task discovery at heph 2026-06-03 21:32:10 -07:00
dagger Switch container builds to manual-only workflow dispatch 2026-04-16 14:25:14 -07:00
deployment Switch container builds to manual-only workflow dispatch 2026-04-16 14:25:14 -07:00
forgejo-runner Upgrade forgejo-runner to v12.8, adopt server.connections, and clean up docs (#338) 2026-04-20 09:03:54 -07:00
grafana Upgrade grafana-sidecar 1.28.0 → 2.6.0 + container.py port (#332) 2026-04-13 07:57:13 -07:00
immich Wave 1 indri→ringtail migration: paperless, teslamate, mealie (#363) 2026-06-03 10:34:00 -07:00
knowledgebase Doc review: delete install-dagger-on-nix-runner, add service-versions ref card 2026-04-12 09:52:38 -07:00
mealie Doc review: 5 stalest cards; scale back ai-docs rule; document heph CLI (#373) 2026-06-09 16:05:01 -07:00
operations Retire Prowler image + IaC scans (keep K8s CIS only) (#372) 2026-06-08 09:30:09 -07:00
ringtail Wave 1 indri→ringtail migration: paperless, teslamate, mealie (#363) 2026-06-03 10:34:00 -07:00
runbooks C2: Deploy infrastructure alerting pipeline (#303) 2026-03-22 14:52:56 -07:00
zot docs: review zot oidc client card 2026-04-20 07:55:25 -07:00