jv
/
my-homelab-configs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore: update website blog with worker-03 expansion and sync homelab.yml

This commit is contained in:
jv 2026-09-17 16:04:20 -05:00
parent c7f6e90ba2
commit 4d7b9d0216
3 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
apps/website/lang/en.php
View File

@ -175,6 +175,7 @@ return [
'blog_activity_14' => 'Reworked the website image to keep Apache as the web server while moving PHP execution to PHP-FPM, enabling OPcache, and validating the runtime through Gitea Actions instead of local image builds.',
'blog_activity_15' => 'Pre-rendered the read-heavy website pages into static HTML, moved visitor ideas behind a small JSON endpoint, added cache headers, enabled HTTP/2 and connection reuse at the OCI edge, and measured reused HTTP/2 asset loads around 60ms.',
'blog_activity_16' => 'Added image signing and SBOM validation: jeannie now builds with SBOM metadata, signs php-website and demos-static with Cosign, attaches signed SPDX SBOM attestations, and Kyverno audits unsigned local-registry pods before enforcement is promoted.',
'blog_activity_17' => 'Provisioned and joined a fourth node (pimox-worker-03) to the cluster, offloading stateless workloads from the Debian control plane to stabilize system memory usage.',
'blog_todo_kicker' => 'Improvement backlog',
'blog_todo_title' => 'Todo list for the next homelab pass',
'blog_todo_intro' => 'These are improvement proposals, not chores for the sake of chores. Each item either reduces rebuild risk, tightens supply-chain hygiene, or makes the platform easier to operate when something fails.',
@ -190,9 +191,8 @@ return [
'blog_todo_10' => 'Tighten TLS, SSH, and token rotation around the OCI edge, Gitea, registry, and runner credentials.',
'blog_todo_11' => 'Document the new storage split: local for the Pimox template, data-vg on the HP Debian laptop for Kubernetes app data, Raspberry Pi SSD /data for Gitea and Docker, and backup targets for anything that must survive a rebuild.',
'blog_todo_12' => 'Move sensitive app configuration into Sealed Secrets, External Secrets, or another explicit secret-management path.',
'blog_todo_13' => 'After the new disk has breathing room, clone the first Pimox worker from VM 9000, join it with kubeadm, and verify labels, taints, CNI, storage, and workload scheduling.',
'blog_todo_14' => 'Test the OpenWrt VM in a maintenance window before making it a gateway: confirm WAN, LAN, rollback access, DHCP settings, and that Pimox remains reachable.',
'blog_todo_15' => 'Buy or configure a managed switch before VLAN work. Until then, keep OpenWrt as a simple two-interface firewall and avoid risky remote bridge rewrites.',
'blog_todo_13' => 'Test the OpenWrt VM in a maintenance window before making it a gateway: confirm WAN, LAN, rollback access, DHCP settings, and that Pimox remains reachable.',
'blog_todo_14' => 'Buy or configure a managed switch before VLAN work. Until then, keep OpenWrt as a simple two-interface firewall and avoid risky remote bridge rewrites.',
'blog_ideas_kicker' => 'Visitor ideas',
'blog_ideas_title' => 'What would you improve next?',
'blog_ideas_intro' => 'Send a practical idea for the homelab backlog. Submissions are stored as plain text, limited in size, and rendered escaped.',

6
apps/website/lang/nah.php
View File

@ -175,6 +175,7 @@ return [
'blog_activity_14' => 'Reworked website image para Apache ma mocahua web server while PHP runs through PHP-FPM, OPcache enabled, ihuan runtime validated through Gitea Actions instead of local image builds.',
'blog_activity_15' => 'Pre-rendered read-heavy website pages into static HTML, moved visitor ideas behind small JSON endpoint, added cache headers, enabled HTTP/2 ihuan connection reuse at OCI edge, ihuan measured reused HTTP/2 asset loads around 60ms.',
'blog_activity_16' => 'Added image signing ihuan SBOM validation: jeannie axcan builds ika SBOM metadata, signs php-website ihuan demos-static ika Cosign, attaches signed SPDX SBOM attestations, ihuan Kyverno audits unsigned local-registry pods before enforcement is promoted.',
'blog_activity_17' => 'Added fourth node (pimox-worker-03) ipan cluster, para tlapalehuia Debian control plane ihuan stabilize memory usage.',
'blog_todo_kicker' => 'Improvement tlatecpanaliztli',
'blog_todo_title' => 'Todo list para next homelab pass',
'blog_todo_intro' => 'Inin cateh improvement proposals, amo chores zan pampa chores. Each item either reduces rebuild risk, tightens supply-chain hygiene, o makes platform easier to operate quema tlein fails.',
@ -190,9 +191,8 @@ return [
'blog_todo_10' => 'Tighten TLS, SSH, ihuan token rotation around OCI edge, Gitea, registry, ihuan runner credentials.',
'blog_todo_11' => 'Document new storage split: local para Pimox template, data-vg ipan HP Debian laptop para Kubernetes app data, Raspberry Pi SSD /data para Gitea ihuan Docker, ihuan backup targets para tlein must survive rebuild.',
'blog_todo_12' => 'Move sensitive app configuration into Sealed Secrets, External Secrets, o occe explicit secret-management path.',
'blog_todo_13' => 'After new disk has breathing room, clone first Pimox worker from VM 9000, join it ika kubeadm, ihuan verify labels, taints, CNI, storage, ihuan workload scheduling.',
'blog_todo_14' => 'Test OpenWrt VM ipan maintenance window before making it gateway: confirm WAN, LAN, rollback access, DHCP settings, ihuan Pimox remains reachable.',
'blog_todo_15' => 'Buy o configure managed switch before VLAN work. Until then, keep OpenWrt as simple two-interface firewall ihuan avoid risky remote bridge rewrites.',
'blog_todo_13' => 'Test the OpenWrt VM ipan maintenance window before making it a gateway: confirm WAN, LAN, rollback access, DHCP settings, ihuan Pimox remains reachable.',
'blog_todo_14' => 'Buy o configure managed switch before VLAN work. Until then, keep OpenWrt quen simple two-interface firewall ihuan avoid risky remote bridge rewrites.',
'blog_ideas_kicker' => 'Visitor tlamachiliztli',
'blog_ideas_title' => 'Tlein tijpatlaz next?',
'blog_ideas_intro' => 'Xititla ce practical idea para homelab backlog. Submissions mocahua quen plain text, limited size, ihuan escaped quema rendered.',

2
homelab.yml
View File

@ -152,7 +152,7 @@ services:
pimox:
template_vmid: 9000
worker_base_vmid: 9010
default_worker_count: 1
default_worker_count: 2
worker_name_prefix: pimox-worker
ai_gateway: