Commit Graph

75 Commits

Author SHA1 Message Date
juvdiaz e10be77cc2 Add application egress NetworkPolicies 2026-06-29 17:09:45 -06:00
juvdiaz bb5b618a22 Add high-signal homelab alerts 2026-06-29 17:06:10 -06:00
juvdiaz 8964fda2fd Add Kyverno pod hardening audits 2026-06-29 15:05:23 -06:00
juvdiaz 5c8b983666 Add internal security lab app 2026-06-29 15:02:53 -06:00
juvdiaz 3c24f05ff6 Allow Debian Docker root on NVMe root filesystem 2026-06-29 11:14:59 -06:00
juvdiaz acb6817c98 Add repo-managed Tailscale ACL policy 2026-06-27 17:46:21 -06:00
juvdiaz f38b065599 Expand PXE provisioning rescue menu 2026-06-27 17:40:04 -06:00
juvdiaz 23dd03b0ef Add generated homelab service catalog 2026-06-27 17:34:55 -06:00
juvdiaz 84855cd927 Add generated docs config 2026-06-27 15:42:59 -06:00
juvdiaz f0a82545cf Build app images for amd64 and arm64 2026-06-27 08:00:20 -06:00
juvdiaz fa0f2eaa56 Allow website and demos to schedule on any node 2026-06-27 07:39:42 -06:00
juvdiaz 84b60979f2 Update debian ip 2026-06-26 22:50:19 -06:00
juvdiaz 207f7274fe Update storage and add recovery tools for debian tools 2026-06-26 19:42:59 -06:00
juvdiaz 3429069b9e Adding arr stack 2026-06-22 08:47:35 -06:00
juvdiaz f121910cba Version website stylesheet asset 2026-06-10 15:53:50 -06:00
juvdiaz a270c6eca4 Update website retro theme styles 2026-06-10 15:14:00 -06:00
juvdiaz b45cd2d508 Document translation workflow architecture 2026-06-10 11:37:57 -06:00
juvdiaz d5abeca4b1 Fix website Ollama connectivity setup 2026-06-10 11:11:23 -06:00
juvdiaz ab68569dbe Add translation observability logs 2026-06-10 10:41:46 -06:00
juvdiaz 35c6c6f654 Add n8n workflow app 2026-06-10 10:38:50 -06:00
juvdiaz d4c823b3a2 Add dedicated website translation model 2026-06-10 10:34:00 -06:00
juvdiaz c0b3eeef83 Cache website translations in Redis 2026-06-10 10:31:16 -06:00
juvdiaz a3b6c79664 Add Redis cache for website translations 2026-06-10 10:27:26 -06:00
juvdiaz 73bae8eb92 Let Heimdall local PV drive scheduling 2026-06-04 18:17:09 -06:00
juvdiaz 53ae36a92b Start image validation in audit mode 2026-06-04 17:50:07 -06:00
juvdiaz d810fc61c0 Add signed SBOM enforcement for local images 2026-06-04 12:12:42 -06:00
juvdiaz a5fc43b78e Document website performance tuning 2026-06-04 11:32:38 -06:00
juvdiaz 2f3d1e2a9b Add cache headers for website static output 2026-06-04 10:59:23 -06:00
juvdiaz 307094794f Pre-render website read pages 2026-06-04 10:42:21 -06:00
juvdiaz a47671e2af Avoid duplicate Apache proxy module loads 2026-06-04 10:31:08 -06:00
juvdiaz dc63b6cb4d Load Alpine Apache proxy modules for website 2026-06-04 10:21:12 -06:00
juvdiaz 654fa4a201 Skip OPcache build on PHP 8.5 website image 2026-06-04 10:07:01 -06:00
juvdiaz 1038ea806c Run website with Apache PHP-FPM and OPcache 2026-06-04 09:50:23 -06:00
juvdiaz d1df0bcf6e Store Heimdall seeded links as generic apps 2026-06-02 22:25:35 -06:00
juvdiaz c2028e4963 Use recreate rollout for Heimdall 2026-06-02 22:18:01 -06:00
juvdiaz 39767377eb Pin seeded Heimdall apps to dashboard 2026-06-02 22:08:13 -06:00
juvdiaz 122407899d Expose seeded Heimdall dashboard 2026-06-02 22:02:01 -06:00
juvdiaz e16d99ffaf Fix Heimdall HTTPS asset URLs 2026-06-02 21:54:18 -06:00
jv 71dc248fc9 Fix heimdall app_url 2026-06-02 22:45:24 -05:00
juvdiaz 80df5624e2 Fix Argo CD ingress GitOps source 2026-06-02 16:39:44 -06:00
jv 740755ea4e Fix Argo CD ingress behind Traefik 2026-06-02 17:29:33 -05:00
juvdiaz ad81d37119 Adding traefik to the mix 2026-06-02 13:59:15 -06:00
juvdiaz ccb8247577 Quoting heimdall column order so it is not mistaken by sqlite 2026-06-02 10:13:15 -06:00
juvdiaz 62ed2c1f6d Making hemidall seeder to retry instead of ailing 2026-06-02 10:00:27 -06:00
juvdiaz 1b91bde443 Pointing heimdal image to latest 2026-06-02 09:46:46 -06:00
juvdiaz 0f02fa6efb Adding heimdal 2026-06-02 09:29:37 -06:00
juvdiaz b76075e0fc Update READMEs 2026-05-29 15:14:51 -06:00
juvdiaz a2fab4fe5f Fix nah home page 2026-05-29 13:54:20 -06:00
juvdiaz 1f6799271a Adding local tags to images and enforcing them at pods 2026-05-29 12:23:44 -06:00
juvdiaz 6e78988a6a Updating translation endpoint so its reachable 2026-05-29 12:05:30 -06:00