-
cda7153da2
fix: add PAPERLESS_USERNAME env var to paperless-ai (#45)
rock
2026-09-13 04:58:44 +00:00
-
0aaa45edb0
fix(comfyui): disable k8s service links to fix COMFYUI_PORT env collision
rock
2026-09-13 09:29:14 +09:00
-
e4f6f03a8c
fix(comfyui): correct port 8188->18188, add TLS ingress at comfyui.riotpiao.com (#44)
rock
2026-09-13 00:18:54 +00:00
-
682138c664
fix(paperless-ai): increase memory limit 512Mi -> 2Gi (OOMKilled)
rock
2026-09-13 08:35:55 +09:00
-
f8de5f506b
feat(paperless): add paperless-ai with local LLM for auto-tagging
rock
2026-09-13 06:04:49 +09:00
-
899e2aed2a
fix: authentik probe timeouts blocking DB migration on fresh cluster
rock
2026-09-13 06:02:28 +09:00
-
cd126d5339
feat(forgejo): enable SMTP email notifications via Gmail
rock
2026-09-13 06:01:05 +09:00
-
d2fb52e425
fix(smtp): update gotify-smtp with real Gmail App Password
rock
2026-09-13 05:57:21 +09:00
-
27c13f24ee
chore: remove AUTH_INTEGRATION.md
rock
2026-09-13 05:25:22 +09:00
-
e34232cc98
chore: remove intermediate progress markdown files
rock
2026-09-13 05:25:13 +09:00
-
03044614b7
chore: add encrypted backups and rotation schedule
rock
2026-09-12 23:52:34 +09:00
-
f871eb90ec
docs: oauth2 providers complete reference
rock
2026-09-12 23:51:58 +09:00
-
3f626948f8
docs: phase 1 complete + queue oauth2 setup summary
rock
2026-09-12 23:51:13 +09:00
-
641ab8bf2f
iam: add queue oauth2 provider + temporal-worker queue access
rock
2026-09-12 23:50:32 +09:00
-
7613b4fbf2
feat(iam): rock user with Forgejo email, email password recovery, encrypt SMTP creds
rock
2026-09-12 23:44:26 +09:00
-
0d55e77bc4
chore: remove unused obsidian-vault PVC
rock
2026-09-12 23:18:18 +09:00
-
92a8a9ef20
fix(ha): scale all CNPG clusters to 3 replicas, raise overprovisioning to 200%
rock
2026-09-12 19:02:47 +09:00
-
ad3b4f40b3
fix(longhorn): remove invalid ext4 mount options uid=26,gid=26 from longhorn-cnpg
rock
2026-09-12 18:49:21 +09:00
-
e4f75bde90
fix(databases): Scale authentik-db to 2 replicas (production-safe HA)
rock
2026-09-12 18:18:41 +09:00
-
29ab21efff
fix(databases): Scale authentik-db to 3 replicas for HA (fresh clean cluster)
rock
2026-09-12 18:10:12 +09:00
-
8e6ebed984
restore: authentik-db cluster (was accidentally deleted)
rock
2026-09-12 18:07:57 +09:00
-
afc023ff2b
temp: remove authentik-db from kustomization (corruption recovery)
rock
2026-09-12 18:04:38 +09:00
-
707271fab0
temp: remove authentik-db cluster (corruption recovery)
rock
2026-09-12 18:03:14 +09:00
-
1d47234f12
fix(databases): Scale authentik-db and gotify-db to 1 replica (Longhorn corruption recovery)
rock
2026-09-12 17:27:45 +09:00
-
43fec41ec4
feat: scale memory-db to 3 replicas for HA
rock
2026-09-12 04:52:18 +09:00
-
2e99c3cc7e
Merge branch 'feature/37-vllm-prometheus-scraping'
rock
2026-09-12 04:52:14 +09:00
-
-
4b63e809e2
fix(argocd-image-updater): remove duplicate ARGOCD_GRPC_WEB env var
rock
2026-09-11 11:06:05 +09:00
-
179e12b9a9
feat: vLLM Prometheus metrics scraping (#37)
rock
2026-09-11 10:46:15 +09:00
-
-
3462096311
fix(longhorn): isolate GPU worker from general storage scheduling
fix/longhorn-storage-isolation
rock
2026-09-11 09:31:51 +09:00
-
-
7bd9f83fa7
fix(cnpg): scale paperless-db, immich-db, gotify-db to 3 instances (#30)
rock
2026-09-10 22:56:41 +00:00
-
f71d116a40
fix(cnpg): scale paperless-db, immich-db, gotify-db to 3 instances
fix/cnpg-3-replicas
rock
2026-09-11 07:56:21 +09:00
-
-
9d3a669dfe
fix(gotify): move SOPS secrets to ksops generator
fix/org-transfer-urls
rock
2026-09-10 22:32:24 +09:00
-
436c7d8d42
fix(argocd): update git repoURLs for org transfer rock -> riotpiao-poimen
rock
2026-09-10 10:49:30 +09:00
-
b571d518e0
fix(argocd): update repoURL after org transfer (#29)
rock
2026-09-10 01:41:37 +00:00
-
f8baeed581
fix(argocd): update repoURL from rock/homelab to riotpiao-poimen/homelab
fix/argocd-repo-url
rock
2026-09-10 10:41:04 +09:00
-
-
128e76ce2d
feat(gotify): push notification server + SMTP email relay (#19)
rock
2026-09-10 01:35:59 +00:00
-
3abe2a7184
fix(gotify): CNPG Postgres backend, SOPS-encrypt secrets
feat/gotify-notifications
rock
2026-09-10 10:34:44 +09:00
-
b0c17527f2
feat(gotify): add push notification server + SMTP email relay
rock
2026-09-10 08:25:36 +09:00
-
-
5b16b882be
fix(comfyui): port 8888, emptyDir storage, liveness probe (#18)
rockandpoimen
2026-09-09 22:38:25 +00:00
-
8790de6038
feat: add ComfyUI + rebalance GPU allocation (#17)
rock
2026-09-09 02:11:28 +00:00
-
371ab10252
test: add e2e auth flow test script
feat/p3.9-e2e-auth-test
rockandpoimen
2026-09-08 17:39:33 -07:00
-
-
c5aadd98f8
chore: gitignore IAM provisioning scripts
rock
2026-09-08 15:29:42 -07:00
-
95c67f9437
P3.8: Restrict llm-serving ingress to api-gateway only (#15)
rock
2026-09-08 16:56:36 +00:00
-
1630704f8b
feat: switch image-updater to digest-based :latest tracking
rock
2026-09-07 18:19:46 -07:00
-
ce1539a634
revert: remove unsupported buildOptions (ArgoCD v3.4.5 doesn't support it)
rock
2026-09-07 17:49:58 -07:00
-
2799e3a675
fix: enable ksops plugin for portfolio Application
rock
2026-09-07 17:47:03 -07:00
-
1da7e0aa4d
fix: wait for dind to be ready before starting runner daemon
rock
2026-09-07 13:22:09 -07:00
-
8970e35539
fix: use tcp://localhost:2375 for dind (no TLS, no socket permission issues)
rock
2026-09-07 13:20:20 -07:00
-
92239561cd
fix: run runner as root to access dind socket
rock
2026-09-07 13:18:54 -07:00
-
2d92383951
fix: runner uses unix socket instead of TLS TCP for dind
rock
2026-09-07 13:16:49 -07:00
-
7d77935d15
ci: fix runner labels + CoreDNS rewrite + cleanup
rock
2026-09-07 13:01:56 -07:00
-
fee4f9edfc
ci: fix golang runner - use docker:27-cli (has Node.js + golang + git)
rock
2026-09-05 22:50:43 -07:00
-
12fc2796e2
ci: fix rust runner - use docker:27-cli (has Node.js + git + docker)
rock
2026-09-05 22:49:25 -07:00
-
f0976bfc61
fix: remove spec wrapper from ClusterRoleBinding
rock
2026-09-05 15:04:00 -07:00
-
4a4e57d0f2
fix: remove namespace from rbac Application destination
rock
2026-09-05 14:53:59 -07:00
-
4fc833f9b2
fix: remove backslash line continuations from YAML multiline string
rock
2026-09-05 14:48:21 -07:00
-
647fba8814
fix: add admin-oidc-binding to kustomization resources
rock
2026-09-05 14:42:17 -07:00
-
bcae41e338
chore: revert node-runner to stock image, remove Dockerfile
rock
2026-09-05 14:33:27 -07:00
-
1425ab7cbc
chore: remove homelab CI workflow
rock
2026-09-05 14:33:13 -07:00
-
978f9c8147
feat: add OIDC group binding for cluster-admin access
rock
2026-09-05 14:30:41 -07:00
-
4193c8ab99
feat: custom forgejo-runner-node image with docker.io pre-installed
rock
2026-09-05 14:20:42 -07:00
-
2c011e08e2
feat: Image Updater git write-back for multi-source poimen Application
rock
2026-09-05 13:56:40 -07:00
-
9da6829e05
feat: multi-source poimen Application (memory, workflows, frontend)
rock
2026-09-05 13:55:29 -07:00
-
69537a4e6a
fix: remove poimen-root Application (external repo dependency)
rock
2026-09-05 13:52:53 -07:00
-
76c053d895
Revert "feat: enable Image Updater for poimen services"
rock
2026-09-05 13:52:50 -07:00
-
cfc27c5420
feat: enable Image Updater for poimen services
rock
2026-09-05 13:51:29 -07:00
-
97c951bef3
Phase 6.6: Add Poimen Memory DLQ queues (ArgoCD managed)
rock
2026-09-05 01:10:51 -07:00
-
e414a3e394
Revert "feat: add memory service queues (processing, indexing, dlq)"
rock
2026-09-05 01:09:30 -07:00
-
e5ae5b16b7
feat: add memory service queues (processing, indexing, dlq)
rock
2026-09-05 01:05:01 -07:00
-
e41165f358
fix(grafana): give homelab-admins Admin org role, akadmin GrafanaAdmin
rock
2026-09-04 23:41:22 -07:00
-
bd8c9fe033
fix: grant GrafanaAdmin (server admin) to homelab-admins for Administration menu
rock
2026-09-04 23:18:19 -07:00
-
2eda66c095
fix: add groups scope to grafana OIDC so role mapping works
rock
2026-09-04 23:14:11 -07:00
-
edc5dadd82
feat: add nginx-ingress ServiceMonitor for gateway traffic metrics
rock
2026-09-04 23:07:44 -07:00
-
60786a17ea
fix: map grafana admin role from homelab-admins group (grafana-admins deleted)
rock
2026-09-04 23:04:01 -07:00
-
efbe530b5c
refactor: consolidate 13 dashboards into 2 (cluster-infrastructure + api-gateway)
rock
2026-09-04 22:58:53 -07:00
-
4c63f8b125
feat: add cluster and api-gateway alert rules with SLA targets
rock
2026-09-04 22:37:48 -07:00
-
2a9220b576
feat: add cluster-infrastructure and api-gateway grafana dashboards
rock
2026-09-04 22:31:51 -07:00
-
26714d2ef3
feat: add api-gateway blackbox probes for healthz and /v1/models
rock
2026-09-04 22:13:00 -07:00
-
39e7ada3c6
fix: use external Authentik URL for MinIO OIDC config discovery
rock
2026-09-04 21:25:30 -07:00
-
1fe8707e3c
gitops: add secret-rotation controller ArgoCD Application
rock
2026-09-04 13:51:26 -07:00
-
82a4e3e4fe
feat: automated secret rotation controller
rock
2026-09-03 23:37:24 -07:00
-
6ad4c0d294
fix(minio): use in-cluster URL for OIDC config fetch
rock
2026-09-03 23:15:19 -07:00
-
910f8e70d5
iam: move provisioning script to scripts/iam, remove k8s job
rock
2026-09-03 19:03:58 -07:00
-
20513c8b3b
iam: add memory scope, service accounts, manual provisioning
rock
2026-09-03 18:07:22 -07:00
-
87786d8733
messaging: remove queue-crd/management-service (moved to kmsvc-manage)
rock
2026-09-03 08:28:38 -07:00
-
17a98afa3f
image-updater: filter to SHA tags only (skip :latest)
rock
2026-09-03 08:07:19 -07:00
-
7e9ef86826
appproject: allow argo-helm repo for image-updater
rock
2026-09-02 20:32:28 -07:00
-
c6032cc354
argocd: add Image Updater for auto-deploy on image push
rock
2026-09-02 20:31:09 -07:00
-
f21cc4721a
kmsvc: migrate image from GHCR to Forgejo registry
rock
2026-09-02 20:12:35 -07:00
-
51c66299e9
forgejo-runner: gc every 30min instead of daily
rock
2026-09-02 19:52:41 -07:00
-
77683ec7c6
fix: add poimen-memory and poimen-workflows Forgejo repos to sourceRepos
rock
2026-09-02 09:52:41 -07:00
-
88c9f3047a
fix: disable name suffix hash for portfolio-secrets to match deployment reference
rock
2026-09-01 10:38:05 -07:00
-
a6c3fdf786
feat: add portfolio LLM_API_TOKEN to ksops secrets
rock
2026-09-01 09:42:02 -07:00
-
bfc376d032
feat(iam): add llm:inference permission to llm-admins group
rock
2026-08-31 23:02:33 -07:00
-
4a1a60104d
feat: add portfolio SOPS secret for CI status
rock
2026-08-31 22:33:00 -07:00
-
f3c88c0d9d
chore: remove nextjs integration folder
rock
2026-08-31 20:45:45 -07:00
-
4af000c6ae
feat(integrations): add NextJS LLM/Grafana integration + enable dashboard embedding
rock
2026-08-31 20:22:26 -07:00
-
1af9232613
feat: add tempo and otel-collector for distributed tracing
rock
2026-08-31 15:02:15 -07:00
-
be55d68571
feat(argocd): add portfolio app, explicit sourceRepos, coredns rewrite for riotpiao.com
rock
2026-08-31 14:18:57 -07:00
-
2038253d48
feat(security): add Kyverno for image scanning and Pod security policies
rock
2026-08-31 11:43:04 -07:00