27 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
klaatu	f6d86d25b0	ci: retry flake.lock eval (transient libgit2 fetch failures)	2026-06-07 11:25:32 -05:00
klaatu	37cf9825a7	chore: update flake.lock 2026-06-07	2026-06-07 00:02:03 +00:00
klaatuandGreg Hellings	a8ccb1b6ba	chore: update flake.lock 2026-05-24	2026-05-24 21:30:35 -05:00
klaatu	2daf74d134	chore: update flake.lock 2026-05-18	2026-05-18 17:58:09 +00:00
klaatu	81936ac524	feat: Gitea Actions shell runners + flake-lock workflow ... - Add modules/nixos/gitea-runner.nix: NixOS module for act_runner in shell mode, with options for enable, instanceURL, name, labels, and tokenFile (agenix secret path). - Deploy gitea-runner to jeremiah, isaiah, zeke, and linode with appropriate labels. Agenix secret placeholders left with TODOs. - Add .gitea/workflows/update-flake-lock.yaml: weekly workflow (Sunday midnight) that runs nix flake update and opens a PR if flake.lock changed, using GITEA_TOKEN secret for authentication. Closes part of #15 (NixOS shell runners + flake-lock workflow).	2026-04-05 04:58:27 -05:00
klaatu	757b07c22f	fix: replace placeholder Secret with ExternalSecret via bitwarden-login	2026-04-04 19:05:17 +00:00
klaatu	b7fba0e151	fix: chart name act_runner -> actions, version 0.2.5 -> 0.0.4	2026-04-04 19:05:06 +00:00
klaatu	67f12856e1	fix: set MC_CONFIG_DIR to /tmp/.mc so mc can write config as non-root	2026-04-04 18:18:43 +00:00
klaatu	0218447008	fix: address review feedback on backup improvements ... - manifests/gitea/dump-cronjob.yaml: Remove --skip-log, --skip-custom-dir, --skip-db flags to make backup complete - manifests/gitea/dump-cronjob.yaml: Replace NFS volume + cleanup container with S3 upload to backup-gitea bucket using MinIO client (mc). 30-day lifecycle set via mc ilm. Uses minio_key/minio_secret from existing gitea-config secret. - hosts/unstable/hosea/default.nix: Replace raw services.restic.backups.albyhub block with greg.backup.jobs.albyhub using the greg.backup module. Remove manual age.secrets.restic-env and age.secrets.restic-pw entries since the greg.backup module declares them.	2026-04-04 02:05:03 -05:00
klaatu	2741be72c7	feat: add update-manifests workflow	2026-04-04 06:18:14 +00:00
klaatu	e8beb7f2a9	feat: add update-flake-lock workflow	2026-04-04 06:18:12 +00:00
klaatu	b2728bf1de	feat: add gitea-runner NixOS module	2026-04-04 06:18:10 +00:00
klaatu	d65dcb51a3	feat: add gitea-runner secret placeholder	2026-04-04 06:18:07 +00:00
klaatu	87bc9a21d9	feat: add gitea-runner kustomization	2026-04-04 06:18:04 +00:00
klaatu	ca25dde780	feat: add gitea-runner FluxCD HelmRelease	2026-04-04 06:18:01 +00:00
klaatu	c61900f9e6	feat: add gitea-runner namespace manifest	2026-04-04 06:17:59 +00:00
klaatu	1077d357ca	feat(immich): switch backup to rclone sync → MinIO immich bucket on nas1	2026-04-04 06:13:43 +00:00
klaatu	6b84824a53	feat(gitea): add dump-cronjob to kustomization	2026-04-04 06:13:00 +00:00
klaatu	c74d647ec3	feat(gitea): add daily dump CronJob writing to NAS1 NFS	2026-04-04 06:12:56 +00:00
klaatu	58a5c95c32	feat(hosea): add Restic backup for AlbyHub /chain/alby	2026-04-04 06:12:31 +00:00
klaatu	9bbdb74f85	fix: merge conflict — keep both nebula.enable and buildbot proxies	2026-04-03 22:18:17 -05:00
klaatuandGreg Hellings	45536f4a8d	feat: update kubernetes and network Grafana dashboards	2026-03-27 08:19:45 -05:00
klaatuandGreg Hellings	4717763fed	feat: add restic ExternalSecret for Prometheus basic auth	2026-03-27 08:19:45 -05:00
klaatuandGreg Hellings	53f33eb13a	feat: add kube-state-metrics	2026-03-27 08:19:45 -05:00
klaatuandGreg Hellings	b18807b1ef	feat: add kube-state-metrics.yaml and restic-secret.yaml to kustomization	2026-03-27 08:19:45 -05:00
klaatuandGreg Hellings	2c0b4b1472	feat: add kube_state_metrics job, restic basic_auth, remove kea job	2026-03-27 08:19:40 -05:00
klaatuandGreg Hellings	d713e5104c	feat: mount restic-credentials secret into Prometheus	2026-03-27 08:18:53 -05:00