Erich Blume
71cb256527
## Summary C2 Mikado chain for deploying Authentik as the SSO identity provider, replacing Dex. This PR will evolve over multiple sessions. Each iteration adds documentation (prerequisite cards) and eventually code as leaf nodes are resolved. ## Current Mikado State - **Goal:** `deploy-authentik` (active) - **Leaf prerequisites:** - `build-authentik-container` — Build Nix container image - `provision-authentik-database` — Create PostgreSQL database on CNPG cluster - `create-authentik-secrets` — Create 1Password item with credentials ## Process refinements - Updated agent-change-process with lessons from first attempt: reset code before committing cards, open PRs early ## Test plan - [ ] `mise run docs-mikado` shows correct dependency chain - [ ] Leaf nodes can be worked independently - [ ] Container builds on ringtail - [ ] Authentik starts and reaches healthy state - [ ] Forgejo OAuth2 connector works Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/227
91 lines
2.9 KiB
Markdown
91 lines
2.9 KiB
Markdown
---
|
|
title: Reference
|
|
modified: 2026-02-19
|
|
tags:
|
|
- reference
|
|
---
|
|
|
|
# Reference
|
|
|
|
Technical specifications, inventories, and configuration details for BlumeOps infrastructure.
|
|
|
|
## Services
|
|
|
|
Individual service reference cards with URLs and configuration details.
|
|
|
|
| Service | Description | Location |
|
|
|---------|-------------|----------|
|
|
| [[alloy|Alloy]] | Observability collector (metrics & logs) | indri + k8s |
|
|
| [[argocd]] | GitOps continuous delivery | k8s |
|
|
| [[borgmatic]] | Backup system | indri |
|
|
| [[caddy]] | Reverse proxy & TLS termination | indri |
|
|
| [[1password]] | Secrets management | cloud + k8s |
|
|
| [[forgejo]] | Git forge & CI/CD | indri |
|
|
| [[frigate]] | Network video recorder | k8s (ringtail) |
|
|
| [[grafana]] | Dashboards & visualization | k8s |
|
|
| [[immich]] | Photo management | k8s |
|
|
| [[jellyfin]] | Media server | indri |
|
|
| [[kiwix]] | Offline Wikipedia & ZIM archives | k8s |
|
|
| [[loki]] | Log aggregation | k8s |
|
|
| [[miniflux]] | RSS feed reader | k8s |
|
|
| [[navidrome]] | Music streaming | k8s |
|
|
| [[ntfy]] | Push notifications | k8s (ringtail) |
|
|
| [[postgresql]] | Database cluster | k8s |
|
|
| [[prometheus]] | Metrics collection | k8s |
|
|
| [[teslamate]] | Tesla data logger | k8s |
|
|
| [[transmission]] | BitTorrent daemon | k8s |
|
|
| [[zot]] | Container registry | indri |
|
|
| [[devpi]] | PyPI caching proxy | k8s |
|
|
| [[cv]] | Resume / CV site | k8s |
|
|
| [[authentik]] | OIDC identity provider | k8s (ringtail) |
|
|
| [[docs]] | Documentation site (Quartz) | k8s |
|
|
| [[flyio-proxy]] | Public reverse proxy (Fly.io + Tailscale) | Fly.io |
|
|
| [[automounter]] | SMB share automounter | indri |
|
|
|
|
## Infrastructure
|
|
|
|
Host inventory and network configuration.
|
|
|
|
- [[hosts|Hosts]] - Device inventory
|
|
- [[indri]] - Primary server
|
|
- [[ringtail]] - Service host & gaming PC
|
|
- [[gilbert]] - Development workstation
|
|
- [[tailscale]] - ACLs, groups, tags
|
|
- [[gandi]] - DNS hosting for `eblu.me`
|
|
- [[unifi]] - Home WiFi router (UniFi Express 7)
|
|
- [[routing|Routing]] - DNS domains, port mappings
|
|
- [[power]] - Battery-backed power chain
|
|
|
|
## Tools
|
|
|
|
Build, deployment, and IaC tool reference.
|
|
|
|
- [[dagger]] - CI/CD build engine (Python SDK)
|
|
- [[argocd-cli]] - ArgoCD CLI workflows
|
|
- [[ansible]] - Configuration management for indri
|
|
- [[pulumi]] - Infrastructure-as-Code (DNS, Tailscale ACLs)
|
|
|
|
## Kubernetes
|
|
|
|
Cluster configuration and application registry.
|
|
|
|
- [[cluster|Cluster]] - Minikube specs, storage, networking
|
|
- [[apps|Apps]] - ArgoCD application registry
|
|
- [[tailscale-operator]] - Tailscale ingress for k8s services
|
|
- [[external-secrets]] - Secrets management
|
|
|
|
## Storage
|
|
|
|
Network storage and backup configuration.
|
|
|
|
- [[sifaka|Sifaka]] - Synology NAS configuration
|
|
- [[postgresql-storage]] - Database cluster
|
|
- [[backups|Backups]] - Backup policy and schedule
|
|
|
|
## Operations
|
|
|
|
Operational concerns and their components.
|
|
|
|
- [[observability]] - Metrics, logs, dashboards
|
|
- [[backup]] - Data protection
|
|
- [[disaster-recovery]] - Recovery procedures (TBD)
|