blumeops/docs/reference/infrastructure
Erich Blume d99c962fe1 Add hephaestus sync hub to indri (launchagent, PWA, device-code OIDC)
Deploy hephd --mode server on indri as a self-updating LaunchAgent managed
by Ansible (ansible/roles/heph, tag heph), making indri the canonical heph
hub for the hub-and-spoke task/context system.

- Server mode on 0.0.0.0:8787, self-update every 10 minutes (cargo install
  from the public forge URL; ~/.cargo/bin on the agent PATH).
- heph-pwa shell served via --web-root straight from a version-pinned checkout,
  TLS-terminated at heph.ops.eblu.me through Caddy (new caddy_services entry).
- New Authentik device-code (RFC 8628) OIDC app 'heph' (public client) plus a
  default-device-code-flow bound to the default brand's flow_device_code.
- Docs: new services/hephaestus.md service card (incl. Path A seeding runbook
  and the gilbert spoke caveat), indri.md service list, changelog fragment.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-04 22:14:24 -07:00
..
gandi.md C0: split gandi-operations docs; add dns-acme-cleanup mise task 2026-04-27 09:48:46 -07:00
gilbert.md Add last-updated subsort to docs-review, review gilbert card 2026-03-17 13:22:01 -07:00
hosts.md Review hosts.md: add last-reviewed, normalize links, add reference tag 2026-04-11 21:06:53 -07:00
indri.md Add hephaestus sync hub to indri (launchagent, PWA, device-code OIDC) 2026-06-04 22:14:24 -07:00
power.md Review power.md: add ringtail, mark reviewed 2026-03-18 07:37:31 -07:00
ringtail.md C1: pin ringtail wired IP to 192.168.1.21 (static) 2026-05-12 09:33:57 -07:00
routing.md Update docs for Caddy routing and direct WireGuard peering 2026-04-18 09:57:30 -07:00
tailscale.md Migrate devpi from minikube to indri (launchd) (#341) 2026-04-29 13:38:36 -07:00
unifi.md Add UnPoller for UniFi network metrics (#298) 2026-03-16 15:52:45 -07:00