This website requires JavaScript.
c4a302c3d1
feat(iam): add local-llm Authentik application with JWT auth
rock
2026-08-30 20:13:41 -07:00
3b26d4435e
refactor(ci): move forgejo-runners from worker-1 to talos-cp-2
rock
2026-08-30 09:29:38 -07:00
686c962ea9
fix(ci): aggressive GC for heavy Rust cargo builds
rock
2026-08-30 09:23:09 -07:00
136bfaf0f2
feat(ops): add cluster-wide stale job/pod cleanup CronJob
rock
2026-08-30 07:27:50 -07:00
91729f65e9
feat(ci): add GC CronJob for runner cleanup, expand reg PVCs to 20Gi
rock
2026-08-30 07:08:59 -07:00
bde6c740ec
fix: remove obsidian ingress (UI retired)
rock
2026-08-29 09:37:12 -07:00
854549d06e
fix: add websocket support to obsidian ingress (noVNC needs it)
rock
2026-08-28 21:04:33 -07:00
6d09f896f3
feat: add obsidian-vault PVC (RWX) to infra/databases
rock
2026-08-28 20:42:13 -07:00
b1f73562a2
fix: obsidian ingress points to obsidian-ui (noVNC) instead of REST API
rock
2026-08-28 17:20:40 -07:00
56be73ad3a
fix: obsidian ingress needs backend-protocol HTTPS (self-signed)
rock
2026-08-28 16:48:43 -07:00
a5bf8dc06b
feat: add obsidian.riotpiao.com ingress for poimen vault UI
rock
2026-08-28 16:43:29 -07:00
422ae3cf04
fix: update runner golang image from 1.25 to 1.26
rock
2026-08-28 15:41:23 -07:00
27907387f6
docs: remove outdated docs describing the retired core/talos CLI workflow
Story Crater Bot
2026-08-27 13:11:47 -07:00
33e36f1d4d
docs: Add JWT auth rollout status
Story Crater Bot
2026-08-27 12:29:39 -07:00
d055483aa2
feat: add poimen-memory as an Authentik service-to-service client
Story Crater Bot
2026-08-27 11:51:02 -07:00
e4de366d2a
feat: add ServiceAccounts for poimen-memory/kmsvc/immich operator Roles
Story Crater Bot
2026-08-26 19:51:05 -07:00
7e648d2251
feat: add vault-service-api group for non-human Vault access
Story Crater Bot
2026-08-26 19:42:12 -07:00
a5c7381c11
feat: add Vault as an Authentik OIDC app for human/CLI login
Story Crater Bot
2026-08-26 16:42:44 -07:00
aaa728bab4
fix: rotate vault unseal keys after vault-0 wipe/reinit
Story Crater Bot
2026-08-26 16:33:35 -07:00
6c758e3606
feat: add poimen-memory-admins group/permissions and k8s RBAC role
Story Crater Bot
2026-08-25 21:50:05 -07:00
7f0541a8dc
fix: shrink paperless-media to 500Gi, give immich the bigger share (2000Gi) - photo libraries grow faster than scanned docs
Story Crater Bot
2026-08-25 19:23:07 -07:00
bebbd3a690
fix: add CoreDNS rewrite for img.riotpiao.com
Story Crater Bot
2026-08-25 18:53:52 -07:00
2b01e7c5f3
fix: add cube+earthdistance to postInitApplicationSQL, immich needs them for geo queries
Story Crater Bot
2026-08-25 18:50:09 -07:00
abed329636
fix: add postInitApplicationSQL for pgvector, app role isn't superuser
Story Crater Bot
2026-08-25 18:49:09 -07:00
0e57444909
fix: use img.riotpiao.com instead of immich.riotpiao.com for hostname
Story Crater Bot
2026-08-25 18:46:58 -07:00
d0f79871c7
fix: shrink immich-media to 1400Gi, real disk headroom smaller than assumed
Story Crater Bot
2026-08-25 18:34:22 -07:00
61a1975669
feat: deploy Immich with Authentik OIDC, rock as admin
Story Crater Bot
2026-08-25 18:21:28 -07:00
1518ebc2dd
fix: shrink paperless-media to 2TB, split cp-3 HDD with Immich
Story Crater Bot
2026-08-25 18:09:23 -07:00
1260921450
fix: use 2.20.15 instead of 3.0.5, direct 2.13->3.0 migration is blocked
Story Crater Bot
2026-08-25 17:40:42 -07:00
b73903afb1
fix: bump paperless-ngx to 3.0.5 for iOS app API version compat
Story Crater Bot
2026-08-25 17:37:41 -07:00
89f01b6f2e
feat: add homelab-wide Authentik RBAC model and k8s OIDC auth wiring
Story Crater Bot
2026-08-25 15:03:44 -07:00
8b49b347b5
fix: disable email verification requirement on paperless OIDC signup
Story Crater Bot
2026-08-25 13:05:50 -07:00
e7c75bb9ce
fix: disable enableServiceLinks on paperless pod to stop gunicorn crash-loop
Story Crater Bot
2026-08-25 12:26:16 -07:00
2f9fc3ed96
fix: add Replace=true sync-option to paperless-media StorageClass
Story Crater Bot
2026-08-25 11:47:33 -07:00
6e97def009
fix: drop invalid nodeSelector param from paperless-media StorageClass
Story Crater Bot
2026-08-25 11:38:03 -07:00
bea76eeba6
fix: repoint ArgoCD Applications from GitHub to in-cluster Forgejo
Story Crater Bot
2026-08-25 11:20:26 -07:00
e8e5acfb13
feat: add paperless-ngx with OIDC, CNPG db, cp-3 HDD media, MinIO backup
Story Crater Bot
2026-08-25 11:11:37 -07:00
78e788abb3
(fix): fix sigV4 oidc issue when sign-in with authentik
Story Crater Bot
2026-08-25 08:15:43 -07:00
eac8414be5
Clean up template files
Story Crater Bot
2026-08-23 16:15:31 -07:00
9299514d6e
Add Forgejo registry PAT secret (encrypted with SOPS, ksops managed)
Story Crater Bot
2026-08-23 16:15:26 -07:00
7f0f74bf30
Add extra disks to talos-cp-2 via PostSync job, downsize memory-db to 2 instances
Story Crater Bot
2026-08-22 23:53:01 -07:00
23033bd7ef
Fix: memory-db use default longhorn (3 replicas), 20Gi
Story Crater Bot
2026-08-22 23:40:13 -07:00
600e148557
Fix: use longhorn-imessage-local (WaitForFirstConsumer) for stable volume binding
Story Crater Bot
2026-08-22 23:36:27 -07:00
80cafed201
Track all poimen-* repos in AppProject for flexible service onboarding
Story Crater Bot
2026-08-22 23:20:58 -07:00
9eb5c8ea1a
Remove separate memory app, bundle into wave 2 databases
Story Crater Bot
2026-08-22 23:16:40 -07:00
aa6b2ae9c3
Add Poimen Memory to ArgoCD wave 2 deployment (namespace: poimen)
Story Crater Bot
2026-08-22 21:46:59 -07:00
06855b3768
fix(argocd): update poimen repoURL after rock/poiman rename to rock/poimen
Story Crater Bot
2026-08-21 21:57:36 -07:00
2f5793899b
fix(argocd): poimen-root point to k8s/argocd directory
Story Crater Bot
2026-08-21 21:28:18 -07:00
2a1cb77443
fix(argocd): poimen-root point to k8s/argocd/apps like kmsvc-root
Story Crater Bot
2026-08-21 21:27:38 -07:00
9415a30309
fix(argocd): poimen-root use single source from poiman, remove workflows
Story Crater Bot
2026-08-21 21:25:55 -07:00
a63838bae3
feat(argocd): enable poimen-root Application for poiman orchestration
Story Crater Bot
2026-08-21 21:24:12 -07:00
0eb0dd89f6
chore(argocd): track main branch instead of prod for auto-sync on every commit
Story Crater Bot
2026-08-21 20:55:20 -07:00
7a7e0fe813
chore(argocd): update api-gateway to track homelab-frontend prod branch
Story Crater Bot
2026-08-21 20:47:38 -07:00
9e5e51733d
chore(argocd): add poimen application placeholder
Story Crater Bot
2026-08-21 20:44:49 -07:00
544fa371f6
chore(argocd): add kmsvc-manage bootstrap application
Story Crater Bot
2026-08-21 20:44:35 -07:00
dbc4a55b02
feat(forgejo-runner): split into golang/node/rust runners, retire generic docker runner
Story Crater Bot
2026-08-21 16:49:26 -07:00
130746e6a1
Add Temporal worker for production task queue
Story Crater Bot
2026-08-21 16:44:59 -07:00
236c9e189d
fix: restore YaRN rope-scaling for reasoning-predictor (GPTQ requant dropped it, checkpoint's own ceiling was 40960 not 131072)
Story Crater Bot
2026-08-21 16:42:39 -07:00
b93e7e3362
fix: swap reasoning-predictor to Qwen3-32B-GPTQ-Int4, 131072 context (bnb-4bit decode too slow, GPTQ is Volta-native)
Story Crater Bot
2026-08-21 16:39:33 -07:00
bedf062906
chore(forgejo-runner): arm for cascading delete ahead of 3-runner migration
Story Crater Bot
2026-08-21 16:35:01 -07:00
d6fcf1016e
refactor(forgejo-runner): template PVC names off Release.Name for multi-instance reuse
Story Crater Bot
2026-08-21 16:30:41 -07:00
cfd5a96331
fix: retire one reasoning-predictor replica, run PP=2 across both V100s (Qwen3.5 MoE swap abandoned, moving to Ollama)
Story Crater Bot
2026-08-21 16:23:07 -07:00
7234eb596f
fix(forgejo-runner): job containers must use host network to reach dind
Story Crater Bot
2026-08-21 16:13:51 -07:00
7cb438e25d
fix(forgejo-runner): egress to ingress-nginx by namespace, not a stale LB IP
Story Crater Bot
2026-08-21 16:02:36 -07:00
c46e69fd43
fix(forgejo-runner): allow job containers to mount /docker-certs/client so docker login/build/push work
Story Crater Bot
2026-08-21 15:55:07 -07:00
d7c30a8af6
chore: retire TemporalWorker CRD — agent-harness-worker and Forgejo build workflow removed
Story Crater Bot
2026-08-20 23:10:06 -07:00
81d0764d8c
fix(forgejo): enable Actions globally so workflow runs are created
Story Crater Bot
2026-08-20 21:40:43 -07:00
c938a58544
stage1: A1-A2 AppProject and projects Application
Story Crater Bot
2026-08-20 21:31:05 -07:00
e669ee0ec2
pi-models: fix baseUrl to match homelab-frontend gateway contract
Story Crater Bot
2026-08-20 00:26:52 -07:00
05b7a847e3
chore: drop the Kong key-auth credential secret, unused now that Kong is gone
Story Crater Bot
2026-08-19 23:40:50 -07:00
fd5d9fe05c
feat: point api.riotpiao.com at the gateway ahead of Kong removal
Story Crater Bot
2026-08-19 23:34:33 -07:00
4d27cc057b
fix: resolve forgejo.riotpiao.com to the ingress LB on nodes
Story Crater Bot
2026-08-19 23:25:41 -07:00
970de02e96
revert: point api.riotpiao.com back at kong-proxy
Story Crater Bot
2026-08-19 22:56:22 -07:00
7e40a4baf6
feat: cut api.riotpiao.com over to the Go gateway and retire Kong
Story Crater Bot
2026-08-19 22:51:53 -07:00
f8136f4e1e
fix: ignore Reloader's injected env var on the Forgejo Deployment
Story Crater Bot
2026-08-19 22:43:29 -07:00
df5e623347
feat: manage Forgejo with Argo instead of the bootstrap Helm release
Story Crater Bot
2026-08-19 22:37:56 -07:00
523b950759
fix: set proxy-body-size 0 on the Forgejo chart Ingress
Story Crater Bot
2026-08-19 22:25:51 -07:00
720181c900
feat: let the runner build and the cluster pull from the Forgejo registry
Story Crater Bot
2026-08-19 21:48:01 -07:00
081bbf97fc
coordinator: make gitignore/PLAN.md setup idempotent, run every phase
Story Crater Bot
2026-08-19 21:12:33 -07:00
1b38297cbf
coordinator: detect+respawn dead pool sessions, bound resolver call
Story Crater Bot
2026-08-19 20:27:17 -07:00
052f235d7b
reasoning: raise num_cpu_blocks 32->256 for real DRAM KV offload capacity
Story Crater Bot
2026-08-19 18:42:37 -07:00
ea0c00f76e
reasoning: swap to dense Qwen3-32B-bnb-4bit for reliable tool calling
Story Crater Bot
2026-08-19 18:40:15 -07:00
9ae0b90d4c
reasoning: revert to DeepSeek-R1-Distill-32B, retire Kimi/Qwen3 swap attempt
Story Crater Bot
2026-08-19 18:34:15 -07:00
3aed5ea948
reasoning: switch to on-the-fly bnb quant, worker-1 GPU is sm70 (V100)
Story Crater Bot
2026-08-19 18:30:24 -07:00
5470d55b79
reasoning: fix quantization flag mismatch (compressed-tensors, not awq_marlin)
Story Crater Bot
2026-08-19 18:23:15 -07:00
ff9f0e99e3
reasoning: fall back to official Qwen3-30B-A3B-Thinking-2507 AWQ-4bit
Story Crater Bot
2026-08-19 18:20:34 -07:00
d42ee34bd5
reasoning: halve max-num-seqs to 2 for Kimi swap's first boot
Story Crater Bot
2026-08-19 18:14:22 -07:00
f21679f601
reasoning: swap DeepSeek-R1-Distill-32B for Kimi-K2.6-distilled Qwen3.6-35B-A3B
Story Crater Bot
2026-08-19 18:11:45 -07:00
e7da32843e
fix(agent-pod): force judge to actually call tools instead of narrating
Story Crater Bot
2026-08-19 17:13:49 -07:00
d1b650041e
fix(agent-pod): install rust+gcc toolchain, symlink go, drop brave-search skill
Story Crater Bot
2026-08-19 15:59:11 -07:00
596b5cb4d7
fix(llm-serving): bump reasoning memory limit to 36Gi headroom
Story Crater Bot
2026-08-19 15:16:46 -07:00
07c3367ffe
fix(llm-serving): num_cpu_blocks=2000 hung pod startup, drop to 32
Story Crater Bot
2026-08-19 15:09:28 -07:00
7bec3a8c49
feat(llm-serving): offload reasoning's KV cache to CPU DRAM
Story Crater Bot
2026-08-19 15:02:28 -07:00
7c7a171c8d
fix(agent-pod): committed progress ledger so resume skips done tasks
Story Crater Bot
2026-08-19 13:16:03 -07:00
f6de231999
fix(agent-pod): group sessions by repo, resume phase branches, fix empty-diff bug
Story Crater Bot
2026-08-19 11:46:53 -07:00
19cc4062b4
fix(agent-pod): absolute paths for every sentinel/verdict file, cwd reminder per call
Story Crater Bot
2026-08-19 11:26:33 -07:00
8db0cd3a8b
fix(agent-pod): fold judgeOnly status check into planner, drop separate judge pre-check
Story Crater Bot
2026-08-19 10:57:21 -07:00
f5ea65c04b
fix(agent-pod): install python3 and sqlite3 in the container init
Story Crater Bot
2026-08-19 10:46:50 -07:00
00af9d8349
fix(agent-pod): sync coordinator.js (slug repoId), tighten compaction, route judge to reasoning model
Story Crater Bot
2026-08-19 10:41:33 -07:00
f6d25552f3
fix(agent-pod): stateless role pool (/new per reuse), never commit PLAN.md
Story Crater Bot
2026-08-19 07:59:01 -07:00
rock
Story Crater Bot