Commit Graph

86 Commits

Author SHA1 Message Date
jv c0830e2d63 feat: add argocd application for gitea-runner 2026-09-17 20:25:08 -05:00
jv 106a5a4752 fix: correctly encrypt gitea-runner secrets using sops 2026-09-17 20:21:26 -05:00
jv 9c64a79aef feat: implement containerized gitea-runner with encrypted secrets 2026-09-17 20:20:33 -05:00
jv 4d7b9d0216 chore: update website blog with worker-03 expansion and sync homelab.yml 2026-09-17 16:04:20 -05:00
jv c7f6e90ba2 Revert blog translation path to Redis (Valkey migration pending) 2026-09-17 08:37:40 -05:00
jv dce4fa6022 Edge matrix vhost, node-exporter scrape, arr/rpi refinements
- bootstrap/edge: add matrix-vhost template + matrix.conf mount
  (isolated cert path), config_hash includes matrix.conf so tofu
  regenerates edge config when it changes; add node-exporter sidecar
- bootstrap/platform: prometheus additionalScrapeConfigs for rpi-node
  and oci-edge-node targets, plus node-exporter edge port 9100
- apps/homelab-alerts: host filesystem >85% alert
- infra/arr-stack + rpi-services: compose refinements
- .gitignore: ignore tofu tfstate backups (*.tfstate.*.backup)
2026-09-16 11:37:35 -05:00
juvdiaz 8bc44edaf8 Adding limits 2026-07-02 17:32:25 -06:00
juvdiaz 140fc63a5f Moving heimdall outside k8s 2026-07-02 15:49:00 -06:00
juvdiaz af75f2c608 Move inactive MLOps app to labs 2026-06-29 21:04:37 -06:00
juvdiaz a57c459c8a Archive legacy ARR Kubernetes manifests 2026-06-29 21:02:11 -06:00
juvdiaz 1d553771f0 Add read-only Kubernetes access model 2026-06-29 17:11:55 -06:00
juvdiaz e10be77cc2 Add application egress NetworkPolicies 2026-06-29 17:09:45 -06:00
juvdiaz bb5b618a22 Add high-signal homelab alerts 2026-06-29 17:06:10 -06:00
juvdiaz 8964fda2fd Add Kyverno pod hardening audits 2026-06-29 15:05:23 -06:00
juvdiaz 5c8b983666 Add internal security lab app 2026-06-29 15:02:53 -06:00
juvdiaz 3c24f05ff6 Allow Debian Docker root on NVMe root filesystem 2026-06-29 11:14:59 -06:00
juvdiaz acb6817c98 Add repo-managed Tailscale ACL policy 2026-06-27 17:46:21 -06:00
juvdiaz f38b065599 Expand PXE provisioning rescue menu 2026-06-27 17:40:04 -06:00
juvdiaz 23dd03b0ef Add generated homelab service catalog 2026-06-27 17:34:55 -06:00
juvdiaz 84855cd927 Add generated docs config 2026-06-27 15:42:59 -06:00
juvdiaz f0a82545cf Build app images for amd64 and arm64 2026-06-27 08:00:20 -06:00
juvdiaz fa0f2eaa56 Allow website and demos to schedule on any node 2026-06-27 07:39:42 -06:00
juvdiaz 84b60979f2 Update debian ip 2026-06-26 22:50:19 -06:00
juvdiaz 207f7274fe Update storage and add recovery tools for debian tools 2026-06-26 19:42:59 -06:00
juvdiaz 3429069b9e Adding arr stack 2026-06-22 08:47:35 -06:00
juvdiaz f121910cba Version website stylesheet asset 2026-06-10 15:53:50 -06:00
juvdiaz a270c6eca4 Update website retro theme styles 2026-06-10 15:14:00 -06:00
juvdiaz b45cd2d508 Document translation workflow architecture 2026-06-10 11:37:57 -06:00
juvdiaz d5abeca4b1 Fix website Ollama connectivity setup 2026-06-10 11:11:23 -06:00
juvdiaz ab68569dbe Add translation observability logs 2026-06-10 10:41:46 -06:00
juvdiaz 35c6c6f654 Add n8n workflow app 2026-06-10 10:38:50 -06:00
juvdiaz d4c823b3a2 Add dedicated website translation model 2026-06-10 10:34:00 -06:00
juvdiaz c0b3eeef83 Cache website translations in Redis 2026-06-10 10:31:16 -06:00
juvdiaz a3b6c79664 Add Redis cache for website translations 2026-06-10 10:27:26 -06:00
juvdiaz 73bae8eb92 Let Heimdall local PV drive scheduling 2026-06-04 18:17:09 -06:00
juvdiaz 53ae36a92b Start image validation in audit mode 2026-06-04 17:50:07 -06:00
juvdiaz d810fc61c0 Add signed SBOM enforcement for local images 2026-06-04 12:12:42 -06:00
juvdiaz a5fc43b78e Document website performance tuning 2026-06-04 11:32:38 -06:00
juvdiaz 2f3d1e2a9b Add cache headers for website static output 2026-06-04 10:59:23 -06:00
juvdiaz 307094794f Pre-render website read pages 2026-06-04 10:42:21 -06:00
juvdiaz a47671e2af Avoid duplicate Apache proxy module loads 2026-06-04 10:31:08 -06:00
juvdiaz dc63b6cb4d Load Alpine Apache proxy modules for website 2026-06-04 10:21:12 -06:00
juvdiaz 654fa4a201 Skip OPcache build on PHP 8.5 website image 2026-06-04 10:07:01 -06:00
juvdiaz 1038ea806c Run website with Apache PHP-FPM and OPcache 2026-06-04 09:50:23 -06:00
juvdiaz d1df0bcf6e Store Heimdall seeded links as generic apps 2026-06-02 22:25:35 -06:00
juvdiaz c2028e4963 Use recreate rollout for Heimdall 2026-06-02 22:18:01 -06:00
juvdiaz 39767377eb Pin seeded Heimdall apps to dashboard 2026-06-02 22:08:13 -06:00
juvdiaz 122407899d Expose seeded Heimdall dashboard 2026-06-02 22:02:01 -06:00
juvdiaz e16d99ffaf Fix Heimdall HTTPS asset URLs 2026-06-02 21:54:18 -06:00
jv 71dc248fc9 Fix heimdall app_url 2026-06-02 22:45:24 -05:00