From 4d7b9d021612b0738a873d86055b2826ca3937b3 Mon Sep 17 00:00:00 2001 From: jv Date: Thu, 17 Sep 2026 16:04:20 -0500 Subject: [PATCH] chore: update website blog with worker-03 expansion and sync homelab.yml --- apps/website/lang/en.php | 6 +++--- apps/website/lang/nah.php | 6 +++--- homelab.yml | 2 +- 3 files changed, 7 insertions(+), 7 deletions(-) diff --git a/apps/website/lang/en.php b/apps/website/lang/en.php index 6f1ccd2..49329e0 100644 --- a/apps/website/lang/en.php +++ b/apps/website/lang/en.php @@ -175,6 +175,7 @@ return [ 'blog_activity_14' => 'Reworked the website image to keep Apache as the web server while moving PHP execution to PHP-FPM, enabling OPcache, and validating the runtime through Gitea Actions instead of local image builds.', 'blog_activity_15' => 'Pre-rendered the read-heavy website pages into static HTML, moved visitor ideas behind a small JSON endpoint, added cache headers, enabled HTTP/2 and connection reuse at the OCI edge, and measured reused HTTP/2 asset loads around 60ms.', 'blog_activity_16' => 'Added image signing and SBOM validation: jeannie now builds with SBOM metadata, signs php-website and demos-static with Cosign, attaches signed SPDX SBOM attestations, and Kyverno audits unsigned local-registry pods before enforcement is promoted.', + 'blog_activity_17' => 'Provisioned and joined a fourth node (pimox-worker-03) to the cluster, offloading stateless workloads from the Debian control plane to stabilize system memory usage.', 'blog_todo_kicker' => 'Improvement backlog', 'blog_todo_title' => 'Todo list for the next homelab pass', 'blog_todo_intro' => 'These are improvement proposals, not chores for the sake of chores. Each item either reduces rebuild risk, tightens supply-chain hygiene, or makes the platform easier to operate when something fails.', @@ -190,9 +191,8 @@ return [ 'blog_todo_10' => 'Tighten TLS, SSH, and token rotation around the OCI edge, Gitea, registry, and runner credentials.', 'blog_todo_11' => 'Document the new storage split: local for the Pimox template, data-vg on the HP Debian laptop for Kubernetes app data, Raspberry Pi SSD /data for Gitea and Docker, and backup targets for anything that must survive a rebuild.', 'blog_todo_12' => 'Move sensitive app configuration into Sealed Secrets, External Secrets, or another explicit secret-management path.', - 'blog_todo_13' => 'After the new disk has breathing room, clone the first Pimox worker from VM 9000, join it with kubeadm, and verify labels, taints, CNI, storage, and workload scheduling.', - 'blog_todo_14' => 'Test the OpenWrt VM in a maintenance window before making it a gateway: confirm WAN, LAN, rollback access, DHCP settings, and that Pimox remains reachable.', - 'blog_todo_15' => 'Buy or configure a managed switch before VLAN work. Until then, keep OpenWrt as a simple two-interface firewall and avoid risky remote bridge rewrites.', + 'blog_todo_13' => 'Test the OpenWrt VM in a maintenance window before making it a gateway: confirm WAN, LAN, rollback access, DHCP settings, and that Pimox remains reachable.', + 'blog_todo_14' => 'Buy or configure a managed switch before VLAN work. Until then, keep OpenWrt as a simple two-interface firewall and avoid risky remote bridge rewrites.', 'blog_ideas_kicker' => 'Visitor ideas', 'blog_ideas_title' => 'What would you improve next?', 'blog_ideas_intro' => 'Send a practical idea for the homelab backlog. Submissions are stored as plain text, limited in size, and rendered escaped.', diff --git a/apps/website/lang/nah.php b/apps/website/lang/nah.php index 557d29d..e08ad42 100644 --- a/apps/website/lang/nah.php +++ b/apps/website/lang/nah.php @@ -175,6 +175,7 @@ return [ 'blog_activity_14' => 'Reworked website image para Apache ma mocahua web server while PHP runs through PHP-FPM, OPcache enabled, ihuan runtime validated through Gitea Actions instead of local image builds.', 'blog_activity_15' => 'Pre-rendered read-heavy website pages into static HTML, moved visitor ideas behind small JSON endpoint, added cache headers, enabled HTTP/2 ihuan connection reuse at OCI edge, ihuan measured reused HTTP/2 asset loads around 60ms.', 'blog_activity_16' => 'Added image signing ihuan SBOM validation: jeannie axcan builds ika SBOM metadata, signs php-website ihuan demos-static ika Cosign, attaches signed SPDX SBOM attestations, ihuan Kyverno audits unsigned local-registry pods before enforcement is promoted.', + 'blog_activity_17' => 'Added fourth node (pimox-worker-03) ipan cluster, para tlapalehuia Debian control plane ihuan stabilize memory usage.', 'blog_todo_kicker' => 'Improvement tlatecpanaliztli', 'blog_todo_title' => 'Todo list para next homelab pass', 'blog_todo_intro' => 'Inin cateh improvement proposals, amo chores zan pampa chores. Each item either reduces rebuild risk, tightens supply-chain hygiene, o makes platform easier to operate quema tlein fails.', @@ -190,9 +191,8 @@ return [ 'blog_todo_10' => 'Tighten TLS, SSH, ihuan token rotation around OCI edge, Gitea, registry, ihuan runner credentials.', 'blog_todo_11' => 'Document new storage split: local para Pimox template, data-vg ipan HP Debian laptop para Kubernetes app data, Raspberry Pi SSD /data para Gitea ihuan Docker, ihuan backup targets para tlein must survive rebuild.', 'blog_todo_12' => 'Move sensitive app configuration into Sealed Secrets, External Secrets, o occe explicit secret-management path.', - 'blog_todo_13' => 'After new disk has breathing room, clone first Pimox worker from VM 9000, join it ika kubeadm, ihuan verify labels, taints, CNI, storage, ihuan workload scheduling.', - 'blog_todo_14' => 'Test OpenWrt VM ipan maintenance window before making it gateway: confirm WAN, LAN, rollback access, DHCP settings, ihuan Pimox remains reachable.', - 'blog_todo_15' => 'Buy o configure managed switch before VLAN work. Until then, keep OpenWrt as simple two-interface firewall ihuan avoid risky remote bridge rewrites.', + 'blog_todo_13' => 'Test the OpenWrt VM ipan maintenance window before making it a gateway: confirm WAN, LAN, rollback access, DHCP settings, ihuan Pimox remains reachable.', + 'blog_todo_14' => 'Buy o configure managed switch before VLAN work. Until then, keep OpenWrt quen simple two-interface firewall ihuan avoid risky remote bridge rewrites.', 'blog_ideas_kicker' => 'Visitor tlamachiliztli', 'blog_ideas_title' => 'Tlein tijpatlaz next?', 'blog_ideas_intro' => 'Xititla ce practical idea para homelab backlog. Submissions mocahua quen plain text, limited size, ihuan escaped quema rendered.', diff --git a/homelab.yml b/homelab.yml index 1e88da9..ba250f1 100644 --- a/homelab.yml +++ b/homelab.yml @@ -152,7 +152,7 @@ services: pimox: template_vmid: 9000 worker_base_vmid: 9010 - default_worker_count: 1 + default_worker_count: 2 worker_name_prefix: pimox-worker ai_gateway: