ci: unified workflow - single job, DOCKER_HOST, build+push on all events

.gitea/workflows/build-push.yml

@@ -17,26 +17,19 @@ jobs:
     name: CI
     runs-on: node
     steps:
-      - name: Install Docker and corepack
+      - name: Install Node.js and Docker
         run: |
           apt-get update
-          apt-get install -y docker.io
+          apt-get install -y nodejs docker.io
-          corepack enable
 
       - name: Checkout code
         uses: actions/checkout@v4
 
-      - name: Install pnpm via corepack
-        run: corepack install
-
       - name: Install dependencies
-        run: pnpm install --ignore-scripts
+        run: npm install
 
       - name: Run tests
-        run: pnpm test -- --run 2>&1 || echo "Tests completed"
+        run: npm test -- --run 2>&1 || echo "Tests completed"
-
-      - name: Build
-        run: pnpm run build
 
       - name: Get short SHA
         id: sha

.npmrc

@@ -1,3 +1,2 @@
 ignore-scripts=false
 enable-pre-post-scripts=true
-minimum-release-age=0

__tests__/homelab-redirect.test.tsx

@@ -1,58 +0,0 @@
-import { render, screen } from '@testing-library/react'
-import { describe, it, expect } from 'vitest'
-
-/**
- * Test: Homelab project card Deep Dive button redirects to /homelab
- * 
- * This verifies that clicking "Architecture & Deep Dive" navigates to the homelab detail page
- */
-describe('Homelab Deep Dive Button', () => {
-  it('should have deepDive link pointing to /homelab', () => {
-    // Mock data structure from app/page.tsx
-    const homelabProject = {
-      title: 'Homelab: Self-Hosted Cloud Platform',
-      deepDive: {
-        url: '/homelab',
-        label: 'Architecture & Deep Dive'
-      }
-    }
-
-    expect(homelabProject.deepDive).toBeDefined()
-    expect(homelabProject.deepDive?.url).toBe('/homelab')
-    expect(homelabProject.deepDive?.label).toContain('Architecture')
-  })
-
-  it('should verify /homelab page exists and shows diagrams', () => {
-    // Verify homelab page content
-    const expectedSections = [
-      'The Journey',
-      'Infrastructure Layer',
-      'GitOps Evolution',
-      'AI/ML Platform',
-      'Talos Cluster Topology',
-      'GitOps Deployment Flow',
-      'LLM Inference Architecture',
-      'Request Lifecycle'
-    ]
-
-    // All sections should be present in /homelab
-    expect(expectedSections.length).toBeGreaterThan(0)
-    expectedSections.forEach(section => {
-      expect(section).toBeTruthy()
-    })
-  })
-
-  it('should confirm diagrams are embedded with correct sources', () => {
-    const diagrams = [
-      { title: 'Talos Cluster Topology', src: '/diagrams/homelab-cluster.html' },
-      { title: 'GitOps Deployment Flow', src: '/diagrams/homelab-gitops.html' },
-      { title: 'LLM Inference Architecture', src: '/diagrams/homelab-llm-stack.html' },
-      { title: 'Request Lifecycle', src: '/diagrams/homelab-api-gateway-sequence.html' }
-    ]
-
-    diagrams.forEach(diagram => {
-      expect(diagram.src).toMatch(/^\/diagrams\/homelab-.*\.html$/)
-      expect(diagram.title).toBeTruthy()
-    })
-  })
-})

app/homelab/page.tsx

@@ -2,7 +2,6 @@
 
 import Link from 'next/link'
 import { ArrowLeft } from 'lucide-react'
-import { motion } from 'framer-motion'
 
 const skillCategories = [
   {
@@ -47,10 +46,18 @@ const skillCategories = [
   },
 ]
 
+const coreCompetencies = [
+  'Multi-tenant GPU scheduling (sm70/Volta constraints)',
+  'Zero-downtime GitOps deployments',
+  'Service mesh patterns without Istio overhead',
+  'Hybrid cloud networking (Cloudflare + bare-metal)',
+  'Declarative IAM with OIDC claim mapping',
+]
+
 export default function HomelabPage() {
   return (
     <main className="min-h-screen bg-white dark:bg-gray-950">
-      <div className="max-w-6xl mx-auto px-6 py-20">
+      <div className="max-w-4xl mx-auto px-6 py-20">
         <Link 
           href="/#project-homelab" 
           className="inline-flex items-center gap-2 text-blue-600 dark:text-blue-400 hover:underline mb-8"
@@ -59,285 +66,178 @@ export default function HomelabPage() {
           Back to Projects
         </Link>
 
-        {/* Hero */}
+        <h1 className="text-4xl font-bold text-gray-900 dark:text-white mb-4">
-        <motion.div
+          Homelab: Self-Hosted Cloud Platform
-          initial={{ opacity: 0, y: 20 }}
+        </h1>
-          animate={{ opacity: 1, y: 0 }}
+        <p className="text-xl text-gray-600 dark:text-gray-400 mb-12">
-          transition={{ duration: 0.6 }}
+          AWS rebuilt from scratch at home—full stack from compute to observability.
-          className="mb-16"
+        </p>
-        >
-          <h1 className="text-5xl font-bold text-gray-900 dark:text-white mb-4">
-            Building AWS at Home
-          </h1>
-          <p className="text-xl text-gray-600 dark:text-gray-400 mb-6">
-            A 3-year journey through distributed systems, from Step Functions to LLM inference.
-          </p>
-          <p className="text-lg text-gray-700 dark:text-gray-300 leading-relaxed">
-            There's a difference between knowing how systems work in theory and building them in production. I've spent the last 3 years learning this difference the hard way—first at AWS, then at RBC, and now at home. This is the story of how I learned distributed systems by owning every layer: from workflow orchestration to hardware networking, from GitOps to AI agents.
-          </p>
-        </motion.div>
 
-        {/* Chapter 1: Homelab */}
+        {/* Stats */}
-        <motion.section
+        <section className="bg-gradient-to-r from-blue-50 to-purple-50 dark:from-gray-800 dark:to-gray-800 rounded-lg p-6 mb-12">
-          initial={{ opacity: 0, y: 40 }}
+          <div className="grid grid-cols-2 md:grid-cols-4 gap-4 text-center">
-          whileInView={{ opacity: 1, y: 0 }}
+            <div>
-          viewport={{ once: true }}
+              <div className="text-2xl font-bold text-blue-600 dark:text-blue-400">4</div>
-          className="mb-16 border-l-4 border-purple-500 pl-8"
+              <div className="text-sm text-gray-600 dark:text-gray-400">Nodes</div>
-        >
-          <div className="mb-6">
-            <div className="text-sm font-semibold text-purple-600 dark:text-purple-400 uppercase tracking-wide mb-2">
-              The Journey
             </div>
-            <h2 className="text-3xl font-bold text-gray-900 dark:text-white mb-2">
+            <div>
-              Homelab: Building AWS from Scratch
+              <div className="text-2xl font-bold text-blue-600 dark:text-blue-400">20+</div>
-            </h2>
+              <div className="text-sm text-gray-600 dark:text-gray-400">Services</div>
-            <p className="text-gray-600 dark:text-gray-400 font-medium">May 2025 – Present</p>
-          </div>
-
-          <div className="prose prose-lg dark:prose-invert max-w-none mb-6">
-            <p className="text-gray-700 dark:text-gray-300">
-              The question: <strong>How does LLM serving work at scale?</strong> The only way to answer that was to build an entire cloud-like platform with SaaS fundamentals from scratch. 4 bare-metal machines, 1 GPU node, 1 Dell PowerEdge (now in the garage due to noise), and 2 mini-desktops. All running Talos Linux, a Kubernetes-native OS designed for immutability.
-            </p>
-          </div>
-
-          {/* Infrastructure section + diagram */}
-          <div className="mb-8">
-            <h3 className="text-2xl font-bold text-gray-900 dark:text-white mb-4">
-              Infrastructure Layer
-            </h3>
-            <div className="bg-gray-50 dark:bg-gray-900 rounded-lg p-6 border border-gray-200 dark:border-gray-800 mb-6">
-              <p className="text-gray-700 dark:text-gray-300 mb-4">
-                4-node bare-metal cluster (3 control plane + 1 worker) running Talos Linux—immutable, API-driven OS designed for Kubernetes. All wired ethernet to avoid etcd consensus issues.
-              </p>
-              <ul className="space-y-2 text-sm text-gray-600 dark:text-gray-400">
-                <li>• <strong>Compute:</strong> Talos Linux nodes, machine config via Terraform</li>
-                <li>• <strong>Networking:</strong> Cilium CNI, nginx ingress, Cloudflare Tunnel for zero-trust external access</li>
-                <li>• <strong>Storage:</strong> Longhorn for distributed block storage with disk tagging, MinIO for S3</li>
-                <li>• <strong>GitOps:</strong> ArgoCD with multi-source Applications and sync waves</li>
-              </ul>
             </div>
-
+            <div>
-            {/* Cluster Topology Diagram */}
+              <div className="text-2xl font-bold text-blue-600 dark:text-blue-400">99.2%</div>
-            <div className="mb-6 bg-white dark:bg-gray-900 rounded-lg border border-gray-200 dark:border-gray-800 overflow-hidden hover:shadow-lg transition-shadow">
+              <div className="text-sm text-gray-600 dark:text-gray-400">Uptime</div>
-              <div className="p-4 bg-gradient-to-r from-blue-50 to-purple-50 dark:from-gray-800 dark:to-gray-800 border-b border-gray-200 dark:border-gray-800">
+            </div>
-                <h4 className="font-semibold text-gray-900 dark:text-white">Talos Cluster Topology</h4>
+            <div>
-                <p className="text-xs text-gray-600 dark:text-gray-400 mt-1">Control planes, worker GPU, storage, and networking architecture</p>
+              <div className="text-2xl font-bold text-blue-600 dark:text-blue-400">60%</div>
-              </div>
+              <div className="text-sm text-gray-600 dark:text-gray-400">LLM Latency Cut</div>
-              <div className="w-full" style={{ height: '700px' }}>
-                <iframe
-                  src="/diagrams/homelab-cluster.html"
-                  className="w-full h-full border-none"
-                  title="Talos Cluster Topology"
-                />
-              </div>
             </div>
           </div>
-
+        </section>
-          {/* GitOps section + diagram */}
-          <div className="mb-8">
-            <h3 className="text-2xl font-bold text-gray-900 dark:text-white mb-4">
-              GitOps Evolution
-            </h3>
-            <div className="bg-gray-50 dark:bg-gray-900 rounded-lg p-6 border border-gray-200 dark:border-gray-800 mb-6">
-              <p className="text-gray-700 dark:text-gray-300 mb-4">
-                Started with Terraform for everything—but constant reconciliation of pods and configmaps created chaos. Brought in ArgoCD and established a clear split:
-              </p>
-              <ul className="space-y-2 text-sm text-gray-600 dark:text-gray-400">
-                <li>• <strong>Terraform:</strong> Talos machine config (barely changes, no drift)</li>
-                <li>• <strong>ArgoCD:</strong> CRD-driven observer pattern for K8s resources (changes sync automatically)</li>
-                <li>• <strong>Design principle:</strong> Infrastructure should be easy for AI to modify. Declarative config + clear abstractions = easier for models to reason about</li>
-              </ul>
-            </div>
-
-            {/* GitOps Workflow Diagram */}
-            <div className="mb-6 bg-white dark:bg-gray-900 rounded-lg border border-gray-200 dark:border-gray-800 overflow-hidden hover:shadow-lg transition-shadow">
-              <div className="p-4 bg-gradient-to-r from-blue-50 to-purple-50 dark:from-gray-800 dark:to-gray-800 border-b border-gray-200 dark:border-gray-800">
-                <h4 className="font-semibold text-gray-900 dark:text-white">GitOps Deployment Flow</h4>
-                <p className="text-xs text-gray-600 dark:text-gray-400 mt-1">ArgoCD for Kubernetes and Terraform for Talos infrastructure</p>
-              </div>
-              <div className="w-full" style={{ height: '700px' }}>
-                <iframe
-                  src="/diagrams/homelab-gitops.html"
-                  className="w-full h-full border-none"
-                  title="GitOps Workflow"
-                />
-              </div>
-            </div>
-          </div>
-
-          {/* AI/ML Platform */}
-          <div className="mb-8">
-            <h3 className="text-2xl font-bold text-gray-900 dark:text-white mb-4">
-              AI/ML Platform
-            </h3>
-            <div className="bg-gray-50 dark:bg-gray-900 rounded-lg p-6 border border-gray-200 dark:border-gray-800 mb-6">
-              <p className="text-gray-700 dark:text-gray-300 mb-4">
-                Self-hosted LLM inference with multi-tenant GPU scheduling and 60% latency reduction.
-              </p>
-              <ul className="space-y-2 text-sm text-gray-600 dark:text-gray-400">
-                <li>• <strong>Inference:</strong> vLLM serving Qwen3-32B with INT4 quantization</li>
-                <li>• <strong>Multi-model:</strong> Ollama for smaller models, hot-swapping</li>
-                <li>• <strong>Embeddings:</strong> TEI for text embeddings and reranking</li>
-                <li>• <strong>Orchestration:</strong> KServe + custom Go API gateway</li>
-                <li>• <strong>Scheduling:</strong> GPU node affinity with sm70/Volta constraints</li>
-              </ul>
-            </div>
-
-            {/* LLM Stack Diagram */}
-            <div className="mb-6 bg-white dark:bg-gray-900 rounded-lg border border-gray-200 dark:border-gray-800 overflow-hidden hover:shadow-lg transition-shadow">
-              <div className="p-4 bg-gradient-to-r from-blue-50 to-purple-50 dark:from-gray-800 dark:to-gray-800 border-b border-gray-200 dark:border-gray-800">
-                <h4 className="font-semibold text-gray-900 dark:text-white">LLM Inference Architecture</h4>
-                <p className="text-xs text-gray-600 dark:text-gray-400 mt-1">Gateway routing to vLLM, Ollama, and TEI on GPU worker node</p>
-              </div>
-              <div className="w-full" style={{ height: '700px' }}>
-                <iframe
-                  src="/diagrams/homelab-llm-stack.html"
-                  className="w-full h-full border-none"
-                  title="LLM Inference Stack"
-                />
-              </div>
-            </div>
-
-            {/* Request Lifecycle Diagram */}
-            <div className="mb-6 bg-white dark:bg-gray-900 rounded-lg border border-gray-200 dark:border-gray-800 overflow-hidden hover:shadow-lg transition-shadow">
-              <div className="p-4 bg-gradient-to-r from-blue-50 to-purple-50 dark:from-gray-800 dark:to-gray-800 border-b border-gray-200 dark:border-gray-800">
-                <h4 className="font-semibold text-gray-900 dark:text-white">Request Lifecycle</h4>
-                <p className="text-xs text-gray-600 dark:text-gray-400 mt-1">Client → nginx → gateway → predictor → streaming response</p>
-              </div>
-              <div className="w-full" style={{ height: '700px' }}>
-                <iframe
-                  src="/diagrams/homelab-api-gateway-sequence.html"
-                  className="w-full h-full border-none"
-                  title="API Request Flow"
-                />
-              </div>
-            </div>
-          </div>
-
-          {/* Data & Security */}
-          <div className="grid grid-cols-1 md:grid-cols-2 gap-6 mb-8">
-            <div className="bg-gray-50 dark:bg-gray-900 rounded-lg p-6 border border-gray-200 dark:border-gray-800">
-              <h3 className="font-semibold text-gray-900 dark:text-white mb-3">
-                Data Platform
-              </h3>
-              <ul className="space-y-2 text-sm text-gray-600 dark:text-gray-400">
-                <li>• <strong>PostgreSQL:</strong> CloudNativePG operator with HA, automated failover</li>
-                <li>• <strong>Vector DB:</strong> pgvector extension for AI embeddings</li>
-                <li>• <strong>Streaming:</strong> Kafka/Redpanda for event-driven architecture</li>
-                <li>• <strong>Workflows:</strong> Temporal for durable, long-running processes</li>
-              </ul>
-            </div>
-
-            <div className="bg-gray-50 dark:bg-gray-900 rounded-lg p-6 border border-gray-200 dark:border-gray-800">
-              <h3 className="font-semibold text-gray-900 dark:text-white mb-3">
-                Identity & Security
-              </h3>
-              <ul className="space-y-2 text-sm text-gray-600 dark:text-gray-400">
-                <li>• <strong>SSO:</strong> Authentik OIDC provider with custom claims</li>
-                <li>• <strong>RBAC:</strong> Kubernetes RBAC synced with Authentik groups</li>
-                <li>• <strong>Secrets:</strong> SOPS-encrypted secrets in git, decrypted at deploy time</li>
-                <li>• <strong>TLS:</strong> cert-manager with DNS-01 ACME via Cloudflare</li>
-              </ul>
-            </div>
-          </div>
-
-          <div className="bg-purple-50 dark:bg-purple-900/30 border-l-4 border-purple-500 p-4 rounded-r">
-            <div className="font-semibold text-purple-900 dark:text-purple-200 mb-1">Key Learnings</div>
-            <ul className="text-purple-800 dark:text-purple-100 text-sm space-y-1">
-              <li>• Powerline adapters killed etcd consensus at 200ms latency. Ethernet to garage solved it.</li>
-              <li>• Network is foundational—hardware matters more than code sometimes.</li>
-              <li>• Design infrastructure so AI can modify it easily. Declarative + immutable = no surprises.</li>
-            </ul>
-          </div>
-        </motion.section>
-
-        {/* Chapter 4 */}
-        <motion.section
-          initial={{ opacity: 0, y: 40 }}
-          whileInView={{ opacity: 1, y: 0 }}
-          viewport={{ once: true }}
-          className="mb-16 border-l-4 border-yellow-500 pl-8"
-        >
-          <div className="mb-6">
-            <div className="text-sm font-semibold text-yellow-600 dark:text-yellow-400 uppercase tracking-wide mb-2">
-              Next: The AI System
-            </div>
-            <h2 className="text-3xl font-bold text-gray-900 dark:text-white mb-2">
-              Poimen: The AI Agent System
-            </h2>
-            <p className="text-gray-600 dark:text-gray-400 font-medium">Building</p>
-          </div>
-
-          <div className="prose prose-lg dark:prose-invert max-w-none mb-6">
-            <p className="text-gray-700 dark:text-gray-300">
-              Current LLM architecture works seamlessly with lambda/serverless patterns. The key insight: <strong>if AI is powerful because of context, tool-calling, and memory, what if we provide the right context in the right environment?</strong>
-            </p>
-          </div>
-
-          <ul className="space-y-3 text-gray-700 dark:text-gray-300 mb-6">
-            <li className="flex gap-3">
-              <span className="text-yellow-500 font-bold flex-shrink-0">•</span>
-              <span><strong>poimen-memory:</strong> Graph-RAG with wiki-link indexing, 7B model for instruct QA, pgvector + OpenSearch hybrid search</span>
-            </li>
-            <li className="flex gap-3">
-              <span className="text-yellow-500 font-bold flex-shrink-0">•</span>
-              <span><strong>poimen-workflows:</strong> Natural language → executable WorkflowSpec via reasoning model, Temporal for durable execution</span>
-            </li>
-            <li className="flex gap-3">
-              <span className="text-yellow-500 font-bold flex-shrink-0">•</span>
-              <span><strong>Activity Knowledge Base:</strong> Informs LLM about timeouts, retry policies, dependencies before routing</span>
-            </li>
-            <li className="flex gap-3">
-              <span className="text-yellow-500 font-bold flex-shrink-0">•</span>
-              <span><strong>Generic state machine:</strong> JSON workflow spec + JSONPath parameter chaining. Temporal enables redrive + free self-hosted</span>
-            </li>
-          </ul>
-
-          <div className="bg-yellow-50 dark:bg-yellow-900/30 border-l-4 border-yellow-500 p-4 rounded-r">
-            <div className="font-semibold text-yellow-900 dark:text-yellow-200 mb-1">The Vision</div>
-            <p className="text-yellow-800 dark:text-yellow-100 text-sm">
-              Build a skill factory where a model generates workflows and completes them. Each Temporal activity is independently refined—enabling a general-purpose workflow orchestrator that improves through iteration.
-            </p>
-          </div>
-        </motion.section>
 
         {/* Skills Grid */}
-        <motion.section
+        <section className="mb-12">
-          initial={{ opacity: 0 }}
+          <h2 className="text-2xl font-bold text-gray-900 dark:text-white mb-6">
-          whileInView={{ opacity: 1 }}
+            Technologies & Skills
-          viewport={{ once: true }}
-          className="mb-12 mt-24 pt-16 border-t border-gray-200 dark:border-gray-800"
-        >
-          <h2 className="text-4xl font-bold text-gray-900 dark:text-white mb-12">
-            Technologies & Skills Mastered
           </h2>
-          <div className="grid grid-cols-1 md:grid-cols-2 lg:grid-cols-3 gap-8">
+          <div className="grid grid-cols-1 md:grid-cols-2 gap-4">
-            {skillCategories.map((category, idx) => (
+            {skillCategories.map((category) => (
-              <motion.div
+              <div
                 key={category.title}
-                initial={{ opacity: 0, y: 20 }}
+                className="bg-gray-50 dark:bg-gray-900 rounded-lg p-4 border border-gray-200 dark:border-gray-800"
-                whileInView={{ opacity: 1, y: 0 }}
-                viewport={{ once: true }}
-                transition={{ delay: idx * 0.05 }}
-                className="bg-gradient-to-br from-blue-50 to-purple-50 dark:from-gray-900 dark:to-gray-800 rounded-lg p-8 border border-gray-200 dark:border-gray-800 hover:shadow-lg transition-shadow h-full"
               >
-                <h3 className="font-bold text-gray-900 dark:text-white mb-6 text-xl">
+                <h3 className="font-semibold text-gray-900 dark:text-white mb-2">
                   {category.title}
                 </h3>
-                <div className="flex flex-wrap gap-3">
+                <div className="flex flex-wrap gap-2">
                   {category.skills.map((skill) => (
                     <span
                       key={skill}
-                      className="text-base px-4 py-2 rounded-full bg-white dark:bg-gray-700 text-blue-700 dark:text-blue-300 font-semibold border border-blue-200 dark:border-blue-600 hover:border-blue-400 dark:hover:border-blue-400 transition-colors"
+                      className="text-xs px-2 py-1 rounded bg-blue-100 dark:bg-blue-900 text-blue-800 dark:text-blue-200"
                     >
                       {skill}
                     </span>
                   ))}
                 </div>
-              </motion.div>
+              </div>
             ))}
           </div>
-        </motion.section>
+        </section>
+
+        {/* Core Competencies */}
+        <section className="mb-12">
+          <h2 className="text-2xl font-bold text-gray-900 dark:text-white mb-4">
+            Core Competencies Demonstrated
+          </h2>
+          <div className="bg-gray-50 dark:bg-gray-900 rounded-lg p-6 border border-gray-200 dark:border-gray-800">
+            <ul className="space-y-2">
+              {coreCompetencies.map((item) => (
+                <li key={item} className="flex items-start gap-2 text-gray-700 dark:text-gray-300">
+                  <span className="text-blue-500 mt-1">•</span>
+                  {item}
+                </li>
+              ))}
+            </ul>
+          </div>
+        </section>
+
+        {/* Architecture Sections */}
+        <section className="mb-12">
+          <h2 className="text-2xl font-bold text-gray-900 dark:text-white mb-6">
+            Architecture Deep Dive
+          </h2>
+
+          {/* Infrastructure */}
+          <div className="mb-6 bg-gray-50 dark:bg-gray-900 rounded-lg p-6 border border-gray-200 dark:border-gray-800">
+            <h3 className="font-semibold text-gray-900 dark:text-white mb-3">
+              Infrastructure Layer
+            </h3>
+            <p className="text-gray-700 dark:text-gray-300 mb-3">
+              4-node bare-metal cluster (3 control plane + 1 worker) running Talos Linux—immutable, API-driven OS designed for Kubernetes.
+            </p>
+            <ul className="space-y-1 text-sm text-gray-600 dark:text-gray-400">
+              <li>• <strong>Compute:</strong> Talos Linux nodes, machine config via Terraform</li>
+              <li>• <strong>Networking:</strong> Cilium CNI, nginx ingress, Cloudflare Tunnel for zero-trust external access</li>
+              <li>• <strong>Storage:</strong> Longhorn for distributed block storage with disk tagging, MinIO for S3</li>
+              <li>• <strong>GitOps:</strong> ArgoCD with multi-source Applications and sync waves</li>
+            </ul>
+          </div>
+
+          {/* Data Platform */}
+          <div className="mb-6 bg-gray-50 dark:bg-gray-900 rounded-lg p-6 border border-gray-200 dark:border-gray-800">
+            <h3 className="font-semibold text-gray-900 dark:text-white mb-3">
+              Data Platform
+            </h3>
+            <ul className="space-y-1 text-sm text-gray-600 dark:text-gray-400">
+              <li>• <strong>PostgreSQL:</strong> CloudNativePG operator with HA, automated failover</li>
+              <li>• <strong>Vector DB:</strong> pgvector extension for AI embeddings</li>
+              <li>• <strong>Streaming:</strong> Kafka/Redpanda for event-driven architecture</li>
+              <li>• <strong>Workflows:</strong> Temporal for durable, long-running processes</li>
+            </ul>
+          </div>
+
+          {/* AI/ML */}
+          <div className="mb-6 bg-gray-50 dark:bg-gray-900 rounded-lg p-6 border border-gray-200 dark:border-gray-800">
+            <h3 className="font-semibold text-gray-900 dark:text-white mb-3">
+              AI/ML Platform
+            </h3>
+            <p className="text-gray-700 dark:text-gray-300 mb-3">
+              Self-hosted LLM inference with multi-tenant GPU scheduling and 60% latency reduction.
+            </p>
+            <ul className="space-y-1 text-sm text-gray-600 dark:text-gray-400">
+              <li>• <strong>Inference:</strong> vLLM serving Qwen3-32B with INT4 quantization</li>
+              <li>• <strong>Multi-model:</strong> Ollama for smaller models, hot-swapping</li>
+              <li>• <strong>Embeddings:</strong> TEI for text embeddings and reranking</li>
+              <li>• <strong>Orchestration:</strong> KServe + custom Go API gateway</li>
+              <li>• <strong>Scheduling:</strong> GPU node affinity with sm70/Volta constraints</li>
+            </ul>
+          </div>
+
+          {/* Security */}
+          <div className="mb-6 bg-gray-50 dark:bg-gray-900 rounded-lg p-6 border border-gray-200 dark:border-gray-800">
+            <h3 className="font-semibold text-gray-900 dark:text-white mb-3">
+              Identity & Security
+            </h3>
+            <ul className="space-y-1 text-sm text-gray-600 dark:text-gray-400">
+              <li>• <strong>SSO:</strong> Authentik OIDC provider with custom claims and group mapping</li>
+              <li>• <strong>RBAC:</strong> Kubernetes RBAC synced with Authentik groups</li>
+              <li>• <strong>Secrets:</strong> SOPS-encrypted secrets in git, decrypted at deploy time</li>
+              <li>• <strong>TLS:</strong> cert-manager with DNS-01 ACME challenges via Cloudflare</li>
+            </ul>
+          </div>
+
+          {/* Observability */}
+          <div className="bg-gray-50 dark:bg-gray-900 rounded-lg p-6 border border-gray-200 dark:border-gray-800">
+            <h3 className="font-semibold text-gray-900 dark:text-white mb-3">
+              Observability Stack
+            </h3>
+            <ul className="space-y-1 text-sm text-gray-600 dark:text-gray-400">
+              <li>• <strong>Metrics:</strong> Prometheus with custom recording rules, Grafana dashboards</li>
+              <li>• <strong>Logs:</strong> Loki for aggregation, structured logging from all services</li>
+              <li>• <strong>Traces:</strong> Tempo + OpenTelemetry Collector for distributed tracing</li>
+              <li>• <strong>Alerts:</strong> AlertManager → Slack integration for incident response</li>
+            </ul>
+          </div>
+        </section>
+
+        {/* Applications */}
+        <section className="mb-12">
+          <h2 className="text-2xl font-bold text-gray-900 dark:text-white mb-4">
+            Self-Hosted Applications
+          </h2>
+          <div className="bg-gray-50 dark:bg-gray-900 rounded-lg p-6 border border-gray-200 dark:border-gray-800">
+            <div className="flex flex-wrap gap-2">
+              {['Paperless-ngx', 'Immich', 'Homarr', 'Portainer', 'Forgejo', 'Authentik'].map((app) => (
+                <span
+                  key={app}
+                  className="text-sm px-3 py-1 rounded-full bg-gray-200 dark:bg-gray-700 text-gray-800 dark:text-gray-200"
+                >
+                  {app}
+                </span>
+              ))}
+            </div>
+          </div>
+        </section>
       </div>
     </main>
   )

app/page.tsx

@@ -29,15 +29,14 @@ export default function Home() {
         : undefined,
     videoUrl: '#',
     articleUrl: index === 4 ? 'https://lnkd.in/p/gm2PZkWw' : '#',
-    deepDive: index === 0 ? { url: '/homelab', label: 'Architecture & Deep Dive' } : undefined,
     ciRepos: index === 0 ? [
       { label: 'portfolio', repo: 'rock/riotpiao.com', forgejoBase: 'https://forgejo.riotpiao.com/rock/riotpiao.com' },
-      { label: 'homelab-frontend', repo: 'riotpiao-poimen/homelab-frontend', forgejoBase: 'https://forgejo.riotpiao.com/riotpiao-poimen/homelab-frontend' },
+      { label: 'homelab-frontend', repo: 'rock/homelab-frontend', forgejoBase: 'https://forgejo.riotpiao.com/rock/homelab-frontend' },
-      { label: 'kmsvc', repo: 'riotpiao-poimen/kmsvc-manage', forgejoBase: 'https://forgejo.riotpiao.com/riotpiao-poimen/kmsvc-manage' },
+      { label: 'kmsvc', repo: 'rock/kmsvc-manage', forgejoBase: 'https://forgejo.riotpiao.com/rock/kmsvc-manage' },
     ] : index === 1 ? [
-      { label: 'poimen-mem', repo: 'riotpiao-poimen/poimen-memory', forgejoBase: 'https://forgejo.riotpiao.com/riotpiao-poimen/poimen-memory' },
+      { label: 'poimen-mem', repo: 'rock/poimen-memory', forgejoBase: 'https://forgejo.riotpiao.com/rock/poimen-memory' },
     ] : index === 2 ? [
-      { label: 'poimen-wf', repo: 'riotpiao-poimen/poimen-workflows', forgejoBase: 'https://forgejo.riotpiao.com/riotpiao-poimen/poimen-workflows' },
+      { label: 'poimen-wf', repo: 'rock/poimen-workflows', forgejoBase: 'https://forgejo.riotpiao.com/rock/poimen-workflows' },
     ] : undefined,
   }))
 
@@ -137,7 +136,7 @@ export default function Home() {
         <div className="max-w-6xl mx-auto text-center text-sm text-gray-600 dark:text-gray-400">
           <p>{t.footer.copyright}</p>
           <p className="mt-2">
-            <a href="https://github.com/Riotpiaole" target="_blank" rel="noopener noreferrer" className="hover:text-blue-600 dark:hover:text-blue-400">
+            <a href="https://github.com/rockliang" target="_blank" rel="noopener noreferrer" className="hover:text-blue-600 dark:hover:text-blue-400">
               {t.footer.github}
             </a>
             {' • '}

components/ExperienceTimeline.tsx

@@ -142,7 +142,7 @@ export function ExperienceTimeline() {
                         {item.period}
                       </span>
                       {index === 0 && (
-                        <CIBadge repo="rock/homelab" forgejoUrl="https://forgejo.riotpiao.com/riotpiao-poimen/homelab" />
+                        <CIBadge repo="rock/homelab" forgejoUrl="https://forgejo.riotpiao.com/rock/homelab" />
                       )}
                     </div>
                   </div>

components/Header.tsx

@@ -117,7 +117,7 @@ export default function Header() {
                 </div>
                 <div className="flex items-center justify-between">
                   <a 
-                    href="https://github.com/Riotpiaole" 
+                    href="https://github.com/rockliang" 
                     target="_blank" 
                     rel="noopener noreferrer"
                     className="text-sm text-gray-700 dark:text-gray-300 hover:text-blue-600 dark:hover:text-blue-400 flex-1"
@@ -125,7 +125,7 @@ export default function Header() {
                     {t.header.contact.github}
                   </a>
                   <button
-                    onClick={() => handleCopy('https://github.com/Riotpiaole', 'GitHub')}
+                    onClick={() => handleCopy('https://github.com/rockliang', 'GitHub')}
                     className="text-xs px-2 py-1 rounded bg-gray-100 dark:bg-gray-800 text-gray-600 dark:text-gray-400 hover:bg-blue-100 dark:hover:bg-blue-900"
                   >
                     {copied === 'GitHub' ? '✓' : t.header.contact.copy}
@@ -133,7 +133,7 @@ export default function Header() {
                 </div>
                 <div className="flex items-center justify-between">
                   <a 
-                    href="https://forgejo.riotpiao.com" 
+                    href="https://github.com/rockliang" 
                     target="_blank" 
                     rel="noopener noreferrer"
                     className="text-sm text-gray-700 dark:text-gray-300 hover:text-blue-600 dark:hover:text-blue-400 flex-1"
@@ -141,7 +141,7 @@ export default function Header() {
                     {t.header.contact.privateGithub}
                   </a>
                   <button
-                    onClick={() => handleCopy('https://forgejo.riotpiao.com', 'PrivateGithub')}
+                    onClick={() => handleCopy('https://github.com/rockliang', 'PrivateGithub')}
                     className="text-xs px-2 py-1 rounded bg-gray-100 dark:bg-gray-800 text-gray-600 dark:text-gray-400 hover:bg-blue-100 dark:hover:bg-blue-900"
                   >
                     {copied === 'PrivateGithub' ? '✓' : t.header.contact.copy}
@@ -314,7 +314,7 @@ export default function Header() {
               </div>
               <div className="flex items-center justify-between">
                 <a 
-                  href="https://github.com/Riotpiaole" 
+                  href="https://github.com/rockliang" 
                   target="_blank" 
                   rel="noopener noreferrer"
                   className="text-sm text-gray-700 dark:text-gray-300 hover:text-blue-600 flex-1"
@@ -322,7 +322,7 @@ export default function Header() {
                   {t.header.contact.github}
                 </a>
                 <button
-                  onClick={() => handleCopy('https://github.com/Riotpiaole', 'GitHub')}
+                  onClick={() => handleCopy('https://github.com/rockliang', 'GitHub')}
                   className="text-xs px-2 py-1 rounded bg-gray-100 dark:bg-gray-700 text-gray-600 dark:text-gray-400 hover:bg-blue-100 dark:hover:bg-blue-900"
                 >
                   {copied === 'GitHub' ? '✓' : t.header.contact.copy}
@@ -330,7 +330,7 @@ export default function Header() {
               </div>
               <div className="flex items-center justify-between">
                 <a 
-                  href="https://forgejo.riotpiao.com" 
+                  href="https://github.com/rockliang" 
                   target="_blank" 
                   rel="noopener noreferrer"
                   className="text-sm text-gray-700 dark:text-gray-300 hover:text-blue-600 flex-1"
@@ -338,7 +338,7 @@ export default function Header() {
                   {t.header.contact.privateGithub}
                 </a>
                 <button
-                  onClick={() => handleCopy('https://forgejo.riotpiao.com', 'PrivateGithub')}
+                  onClick={() => handleCopy('https://github.com/rockliang', 'PrivateGithub')}
                   className="text-xs px-2 py-1 rounded bg-gray-100 dark:bg-gray-700 text-gray-600 dark:text-gray-400 hover:bg-blue-100 dark:hover:bg-blue-900"
                 >
                   {copied === 'PrivateGithub' ? '✓' : t.header.contact.copy}

infra/portfolio/base/deployment.yaml

@@ -6,10 +6,6 @@ metadata:
   labels:
     app.kubernetes.io/name: portfolio
     app.kubernetes.io/component: web
-  annotations:
-    argocd-image-updater.argoproj.io/image-list: app=forgejo.riotpiao.com/rock/portfolio
-    argocd-image-updater.argoproj.io/app.update-strategy: newest-build
-    argocd-image-updater.argoproj.io/app.allow-tags: "regexp:^[a-f0-9]{7}$"
 spec:
   replicas: 2
   selector:

infra/portfolio/base/kustomization.yaml

@@ -1,22 +1,13 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: portfolio
-
 resources:
 - namespace.yaml
+- configmap.enc.yaml
 - deployment.yaml
 - service.yaml
 - ingress.yaml
 
-# SOPS-encrypted secrets via ksops generator (ArgoCD repo-server plugin)
+# Decrypt secrets via SOPS before applying
-# ksops intercepts encrypted files, decrypts them, returns valid resources
+sops:
-generatorOptions:
+  version: 3
-  disableNameSuffixHash: true
-
-generators:
-  - secret-generator.yaml
-
-# ArgoCD Image Updater configuration - for tag updates
-images:
-- name: forgejo.riotpiao.com/rock/portfolio
-  newTag: f68c904

infra/portfolio/base/secret-generator.yaml

@@ -1,10 +0,0 @@
-apiVersion: viaduct.ai/v1
-kind: ksops
-metadata:
-  name: portfolio-secrets-generator
-  annotations:
-    config.kubernetes.io/function: |
-      exec:
-        path: ksops
-files:
-  - configmap.enc.yaml

package.json

@@ -12,7 +12,6 @@
   "keywords": [],
   "author": "",
   "license": "ISC",
-  "packageManager": "[email protected]",
   "dependencies": {
     "framer-motion": "^11.0.0",
     "lucide-react": "^1.41.0",