Commit Graph

248 Commits

Author SHA1 Message Date
juvdiaz 1d553771f0 Add read-only Kubernetes access model 2026-06-29 17:11:55 -06:00
juvdiaz e10be77cc2 Add application egress NetworkPolicies 2026-06-29 17:09:45 -06:00
juvdiaz f7cf1423f9 Add restore drill checklist 2026-06-29 17:08:16 -06:00
juvdiaz bb5b618a22 Add high-signal homelab alerts 2026-06-29 17:06:10 -06:00
juvdiaz d2c959bebd Add identity and access audit 2026-06-29 16:58:45 -06:00
juvdiaz 0777bed10c Add GitOps validation promotion flow 2026-06-29 16:57:00 -06:00
juvdiaz 329a3d1abd Add what-broke status signals 2026-06-29 16:53:44 -06:00
juvdiaz 5f8fdfef3d Add Kubernetes attack path drill 2026-06-29 15:07:34 -06:00
juvdiaz 8964fda2fd Add Kyverno pod hardening audits 2026-06-29 15:05:23 -06:00
juvdiaz d333ba8ae4 Add Tetragon runtime detection 2026-06-29 15:04:25 -06:00
juvdiaz 5c8b983666 Add internal security lab app 2026-06-29 15:02:53 -06:00
juvdiaz 8f41a42a68 Add security log summary command 2026-06-29 15:01:27 -06:00
juvdiaz 88e7ccd214 Add repo secret scanning command 2026-06-29 14:59:46 -06:00
juvdiaz 5aeb953362 Add web security quick check 2026-06-29 14:58:35 -06:00
juvdiaz e1c33ff42e Focus Lynis host audit on highest risk finding 2026-06-29 14:42:58 -06:00
juvdiaz eaf74b50eb Install Lynis in Debian host bootstrap 2026-06-29 14:38:35 -06:00
juvdiaz adb2b921ed Add report-only Lynis host audit 2026-06-29 14:35:12 -06:00
juvdiaz c8be38a213 Add security scan preparation command 2026-06-29 14:28:48 -06:00
juvdiaz 4f1c973cb5 Add defensive security scan commands 2026-06-29 14:25:47 -06:00
juvdiaz 45efd87960 Relax Gitea public status probe 2026-06-29 14:16:38 -06:00
juvdiaz 3e23b794e7 Fix Pi-hole v6 LAN DNS mode 2026-06-29 14:10:50 -06:00
juvdiaz 727ab402a3 Clean up RPi service reload output 2026-06-29 14:00:42 -06:00
juvdiaz 836eeed40f Allow LAN DNS queries to Pi-hole 2026-06-29 13:55:14 -06:00
juvdiaz 806475afc0 Improve status probe diagnostics 2026-06-29 13:47:04 -06:00
juvdiaz 6241a14bac Refine cascade status health probes 2026-06-29 13:44:59 -06:00
juvdiaz d8f518c8e9 Add cascade health checks to status 2026-06-29 13:40:33 -06:00
juvdiaz 1d73c33703 Add Jeannie man page 2026-06-29 13:28:49 -06:00
juvdiaz 8582c3ea61 Add pre-apply readiness doctor checks 2026-06-29 13:27:46 -06:00
juvdiaz d9d7bc20a3 Back up local OpenTofu state before deletion 2026-06-29 13:25:24 -06:00
juvdiaz 21364a4202 Require explicit edge HAProxy password 2026-06-29 13:24:23 -06:00
juvdiaz a26f420d4a Require confirmation for direct nuke 2026-06-29 13:24:01 -06:00
juvdiaz c526b57f30 Guard Prometheus data deletion workflow 2026-06-29 13:23:33 -06:00
juvdiaz 4561dd9788 Make edge Docker installation opt-in 2026-06-29 13:22:59 -06:00
juvdiaz f8a9e7b792 Redact sensitive values from Jeannie logs 2026-06-29 13:22:27 -06:00
juvdiaz ee51fbd421 Add compact step logging for noisy commands 2026-06-29 13:16:37 -06:00
juvdiaz df46fbbf9b Align nuke with worker topology state 2026-06-29 13:11:34 -06:00
juvdiaz 9497b8dc86 Validate homelab inventory with YAML parser 2026-06-29 13:08:55 -06:00
juvdiaz 889396eaa4 Make remote Docker installation opt-in 2026-06-29 12:57:19 -06:00
juvdiaz 755f60267f Add homelab tofu plan mode 2026-06-29 12:55:19 -06:00
juvdiaz 9ce4ec6c04 Defer kubeadm join token creation to apply 2026-06-29 12:52:44 -06:00
juvdiaz 1a8bf9a77d Preserve manual worker topology file 2026-06-29 12:50:50 -06:00
juvdiaz 8cd0b14e5e Resolve Pimox worker count from cluster state 2026-06-29 12:48:07 -06:00
juvdiaz 28cb7ed70f Run early preflight before mutating up pipeline 2026-06-29 12:45:51 -06:00
juvdiaz b763e8c747 Start existing cluster during up when stopped 2026-06-29 12:38:13 -06:00
juvdiaz 3c24f05ff6 Allow Debian Docker root on NVMe root filesystem 2026-06-29 11:14:59 -06:00
juvdiaz b49df4f2eb Add Debian Docker root repair command 2026-06-29 11:13:29 -06:00
juvdiaz 67d514bf59 Reset existing Gitea bootstrap password 2026-06-29 11:02:54 -06:00
juvdiaz 61db0ce277 Normalize Ollama host configuration 2026-06-28 00:19:24 -06:00
juvdiaz 3c5dfd08c2 Wait for Ollama API during setup 2026-06-28 00:15:51 -06:00
juvdiaz 26be9bfb0c Make Ollama installer setup more resilient 2026-06-28 00:09:54 -06:00