klaatu
f82a93535a
chore: update flake.lock 2026-08-02
2026-08-02 00:01:17 +00:00
klaatu and greg
1d9921f1ae
chore: update flake.lock 2026-07-19
buildbot/nix-eval Build done. (2 warnings)
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.pkg-setup-ssh Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.hm-builder2 Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.hm-icdm-root Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.hm-hermes Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.hm-linode Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.hm-jeremiah Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.hm-zeke Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.hm-exodus Build done.
buildbot/nix-build Build done.
2026-07-25 17:06:07 +00:00
klaatu and Greg Hellings
a8ccb1b6ba
chore: update flake.lock 2026-05-24
buildbot/nix-eval Build done. (1 warning)
buildbot/nix-build Build started.
2026-05-24 21:30:35 -05:00
klaatu
2daf74d134
chore: update flake.lock 2026-05-18
buildbot/nix-eval Build done. (1 warning)
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.pkg-hms Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-genesis Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-icdm-root Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-exodus Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-isaiah Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.hm-icdm-root Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-iso Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-zeke Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-hosea Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-jeremiah Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.hm-linode Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.hm-zeke Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.hm-jeremiah Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.hm-exodus Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-proxmoxtemplate Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-linode Build done.
buildbot/nix-build Build done.
2026-05-18 17:58:09 +00:00
klaatu
81936ac524
feat: Gitea Actions shell runners + flake-lock workflow
...
buildbot/nix-eval Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-linode Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-isaiah Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-jeremiah Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-zeke Build done.
buildbot/nix-build Build done.
- Add modules/nixos/gitea-runner.nix: NixOS module for act_runner in
shell mode, with options for enable, instanceURL, name, labels, and
tokenFile (agenix secret path).
- Deploy gitea-runner to jeremiah, isaiah, zeke, and linode with
appropriate labels. Agenix secret placeholders left with TODOs.
- Add .gitea/workflows/update-flake-lock.yaml: weekly workflow (Sunday
midnight) that runs nix flake update and opens a PR if flake.lock
changed, using GITEA_TOKEN secret for authentication.
Closes part of #15 (NixOS shell runners + flake-lock workflow).
2026-04-05 04:58:27 -05:00
klaatu
757b07c22f
fix: replace placeholder Secret with ExternalSecret via bitwarden-login
buildbot/nix-eval Build done. (1 warning)
buildbot/nix-build Build done.
2026-04-04 19:05:17 +00:00
klaatu
b7fba0e151
fix: chart name act_runner -> actions, version 0.2.5 -> 0.0.4
2026-04-04 19:05:06 +00:00
klaatu
67f12856e1
fix: set MC_CONFIG_DIR to /tmp/.mc so mc can write config as non-root
buildbot/nix-eval Build done. (1 warning)
buildbot/nix-build Build done.
2026-04-04 18:18:43 +00:00
klaatu
0218447008
fix: address review feedback on backup improvements
...
buildbot/nix-eval Build done. (1 warning)
buildbot/nix-build Build done.
- manifests/gitea/dump-cronjob.yaml: Remove --skip-log, --skip-custom-dir,
--skip-db flags to make backup complete
- manifests/gitea/dump-cronjob.yaml: Replace NFS volume + cleanup container
with S3 upload to backup-gitea bucket using MinIO client (mc).
30-day lifecycle set via mc ilm. Uses minio_key/minio_secret from
existing gitea-config secret.
- hosts/unstable/hosea/default.nix: Replace raw services.restic.backups.albyhub
block with greg.backup.jobs.albyhub using the greg.backup module.
Remove manual age.secrets.restic-env and age.secrets.restic-pw entries
since the greg.backup module declares them.
2026-04-04 02:05:03 -05:00
klaatu
2741be72c7
feat: add update-manifests workflow
buildbot/nix-eval Build done. (1 warning)
buildbot/nix-build Build done.
2026-04-04 06:18:14 +00:00
klaatu
e8beb7f2a9
feat: add update-flake-lock workflow
2026-04-04 06:18:12 +00:00
klaatu
b2728bf1de
feat: add gitea-runner NixOS module
2026-04-04 06:18:10 +00:00
klaatu
d65dcb51a3
feat: add gitea-runner secret placeholder
2026-04-04 06:18:07 +00:00
klaatu
87bc9a21d9
feat: add gitea-runner kustomization
2026-04-04 06:18:04 +00:00
klaatu
ca25dde780
feat: add gitea-runner FluxCD HelmRelease
2026-04-04 06:18:01 +00:00
klaatu
c61900f9e6
feat: add gitea-runner namespace manifest
2026-04-04 06:17:59 +00:00
klaatu
1077d357ca
feat(immich): switch backup to rclone sync → MinIO immich bucket on nas1
2026-04-04 06:13:43 +00:00
klaatu
6b84824a53
feat(gitea): add dump-cronjob to kustomization
2026-04-04 06:13:00 +00:00
klaatu
c74d647ec3
feat(gitea): add daily dump CronJob writing to NAS1 NFS
2026-04-04 06:12:56 +00:00
klaatu
58a5c95c32
feat(hosea): add Restic backup for AlbyHub /chain/alby
2026-04-04 06:12:31 +00:00
klaatu
9bbdb74f85
fix: merge conflict — keep both nebula.enable and buildbot proxies
buildbot/nix-eval Build done. (1 warning)
buildbot/nix-build Build done.
2026-04-03 22:18:17 -05:00
klaatu and Greg Hellings
45536f4a8d
feat: update kubernetes and network Grafana dashboards
buildbot/nix-eval Build done. (1 warning)
buildbot/nix-build Build done.
2026-03-27 08:19:45 -05:00
klaatu and Greg Hellings
4717763fed
feat: add restic ExternalSecret for Prometheus basic auth
2026-03-27 08:19:45 -05:00
klaatu and Greg Hellings
53f33eb13a
feat: add kube-state-metrics
2026-03-27 08:19:45 -05:00
klaatu and Greg Hellings
b18807b1ef
feat: add kube-state-metrics.yaml and restic-secret.yaml to kustomization
2026-03-27 08:19:45 -05:00
klaatu and Greg Hellings
2c0b4b1472
feat: add kube_state_metrics job, restic basic_auth, remove kea job
2026-03-27 08:19:40 -05:00
klaatu and Greg Hellings
d713e5104c
feat: mount restic-credentials secret into Prometheus
2026-03-27 08:18:53 -05:00
klaatu
