stack.basicstack.de

basicstack/stack.basicstack.de

Fork 0

Commit graph

c16ece7616 apps/outline/redis.yaml aktualisiert main andreas.leinen 2026-10-25 21:05:57 +00:00
acfa125fb6 Update PcoketID Version to 2.19.1 al66 2026-10-24 12:06:03 +02:00
0626c29eec Scale down outline al66 2026-10-24 12:00:48 +02:00
a418b03d56 Scale down opencloud al66 2026-10-24 11:44:37 +02:00
65f88e16d3 Scale down kaneo, grist, vikunja al66 2026-10-24 11:36:20 +02:00
dae6813386 imagePullPolicy: Always al66 2026-10-24 11:28:59 +02:00
221bd6b473 Merge branch 'main' of https://forgejo.basicstack.de/basicstack/stack.basicstack.de al66 2026-10-24 11:09:14 +02:00
b09fe3b23d imagePullPolicy: Always al66 2026-10-24 11:08:42 +02:00
ab60ef78f9 fix(argocd): bump application-controller memory 512Mi→1Gi (OOMKilled 1919× in 7d, DEV-596 preflight unblocker) CTO 2026-10-18 01:07:26 +00:00
5b627f9e73 feat(os-update): bounded retry on post-uncordon health gate (DEV-595) CTO (Paperclip Agent) 2026-10-11 02:56:55 +00:00
4fea809116 chore: restore README.md to non-executable (accidental mode flip) CTO (Paperclip Agent) 2026-09-27 02:34:24 +00:00
da9777358b feat(os-update): SSH-key drift preflight (DEV-587) CTO (Paperclip Agent) 2026-09-27 02:34:13 +00:00
a71c5d9a63 fix(opencloud): reduce CPU request 250m→50m to free worker-2 slot for backup CronJob (DEV-594) CTO 2026-10-11 01:11:29 +00:00
0164c8cb4e fix(velero-drill): switch webhook from bearer to github_hmac (DEV-590) CTO 2026-10-01 04:45:44 +00:00
5188784e86 apps/grist/grist-deployment.yaml aktualisiert andreas.leinen 2026-09-27 09:55:23 +00:00
9305eb7415 fix(monitoring): Prometheus deployment source-of-truth + Recreate strategy (DEV-583) CTO 2026-09-13 01:11:01 +00:00
7368283d76 retire(monitoring): remove backup-k8s-resources CronJob + restic alerts (DEV-576) CTO (Paperclip Agent) 2026-09-12 18:24:00 +00:00
765962c936 fix(velero-drill): hostAliases to reach paperclip.home webhook from cluster (DEV-579) CTO 2026-09-12 18:15:51 +00:00
ac9f36b1e7 feat(velero): monthly restore-drill CronJob for openwebui (DEV-575) CTO (Paperclip Agent) 2026-09-12 18:03:37 +00:00
6a66924595 feat(velero): ServiceMonitor + PrometheusRule for backup alerts (DEV-574) CTO (Paperclip Agent) 2026-09-12 17:58:45 +00:00
ec3e9624b3 feat(velero): schedules + PVC exclude annotations (DEV-573) CTO (Paperclip Agent) 2026-09-12 17:35:49 +00:00
9b8cfebbd5 velero: reseal S3 credential with new Hetzner project key CTO (Paperclip Agent) 2026-09-12 17:25:15 +00:00
60cc931d6b fix(velero): pin AWS plugin to v1.14.2 (v1.14.3 unreleased); shrink node-agent memory req to fit workers (DEV-572) CTO Agent 2026-09-12 17:08:09 +00:00
b3d98bf902 feat(velero): Argo app + Helm values for Kopia/Hetzner S3 backups (DEV-572) CTO Agent 2026-09-12 17:05:42 +00:00
f318719c59 velero(secrets): seal dedicated Hetzner OS S3 credential (DEV-570) CTO Agent 2026-09-12 17:00:43 +00:00
0c82ded5f7 velero(secrets): seal Kopia repo password for velero namespace CTO Agent 2026-09-12 16:22:19 +00:00
b2ee3ffa67 feat(openwebui): deploy Open WebUI v0.11.3 with Pocket ID OIDC (DEV-567) CTO 2026-09-12 14:06:56 +00:00
0e796dff14 fix(os-update): accept 401/403 as /livez alive in CP reboot poll (DEV-566) CTO 2026-09-06 01:47:47 +00:00
b7e34236db fix(os-update): add k3s-worker-6 to SSH target maps (DEV-566) CTO 2026-09-06 01:04:35 +00:00
b2b0d27803 fix(vikunja): set pod FQDN so SMTP EHLO passes Stalwart validation (DEV-563) CTO 2026-09-05 10:05:26 +00:00
2ec560e090 feat(vikunja): enable mailer via port-25 in-cluster relay (DEV-563) CTO 2026-09-05 10:03:07 +00:00
bf7e78a573 feat(kaneo): wire SMTP submission via kaneo@basicstack.de (DEV-562) CTO 2026-09-05 10:01:52 +00:00
2c9e90ac2b docs(outline): note PKCE must be disabled on the Pocket ID client CTO 2026-09-05 09:57:39 +00:00
244ff86714 docs(vikunja): note PKCE must be off on Pocket ID client (DEV-560) CTO 2026-09-05 09:56:07 +00:00
18eba97fcb feat(vikunja): request vikunja_scope for OIDC group→team mapping (DEV-564) CTO 2026-09-05 09:47:06 +00:00
38c7b8c624 feat(outline): deploy Outline knowledge base at outline.basicstack.de (DEV-559) cto-agent 2026-09-05 09:42:16 +00:00
c184eeaff3 chore(vikunja): rename JWT env to non-deprecated service.secret (DEV-560) CTO 2026-09-05 09:41:05 +00:00
1743815703 feat(vikunja): deploy Vikunja 2.6.0 with Pocket ID OIDC (DEV-560) CTO 2026-09-05 09:38:25 +00:00
28a28bf7c0 feat(kaneo): deploy Kaneo project management (DEV-561) CTO 2026-09-05 09:37:56 +00:00
dda91a7471 apps/grist/grist-deployment.yaml aktualisiert andreas.leinen 2026-08-30 12:03:03 +00:00
f29e2a5cb5 chore(grist): enable ArgoCD auto-sync + selfHeal (DEV-556) CTO 2026-08-30 11:07:29 +00:00
8cdfd0e2f9 feat(grist): deploy Grist community edition (DEV-556) CTO 2026-08-30 11:05:15 +00:00
a61f0cd630 fix(opencloud): shrink backup pod requests to fit worker-3 (DEV-555) CTO Agent 2026-08-30 10:24:43 +00:00
d5e88d884e docs(infra): refresh k3s ops doc and add --node-ip to provision script (DEV-410) CTO Agent 2026-08-30 10:07:25 +00:00
a30274d1eb feat(os-update): integrate control planes into weekly rolling cycle (DEV-553) CTO Agent 2026-08-30 09:41:22 +00:00
0dfd6ada6e chore(stalwart): retire RocksDB PVC + backup — Postgres backend is authoritative (DEV-474) feat/DEV-474-rocksdb-teardown CTO Agent 2026-08-28 15:12:25 +00:00
c97a2d218e chore(stalwart): bump v0.16.11 -> v0.16.18 (DEV-542) CTO 2026-08-23 16:46:31 +00:00
e69e3d8eb4 chore(restic): bump image 0.17.3 -> 0.19.1 (DEV-541) CTO 2026-08-23 15:52:15 +00:00
96c3846202 chore(stalwart): bump alpine 3.19 -> 3.24 in backup cronjob (DEV-539) CTO Agent 2026-08-23 15:42:36 +00:00
76e250c334 fix(opencloud): use Recreate rollout strategy for RWO PVC (DEV-538) CTO Agent 2026-08-23 15:39:17 +00:00
0887f87c82 chore(opencloud): bump 7.2.0 -> 7.4.0 (DEV-538) CTO Agent 2026-08-23 15:35:03 +00:00
a7e81db4e1 chore(directus): bump 12.1.1 -> 12.3.0 (DEV-537) CTO 2026-08-23 15:27:14 +00:00
777a4d0404 chore(pocket-id): bump v2.11.0 -> v2.14.0 (DEV-536) CTO 2026-08-23 15:18:23 +00:00
3317401eba chore(headlamp): bump v0.43.0 -> v0.45.0 (DEV-535) CTO 2026-08-23 15:14:38 +00:00
71496fc5ac chore(dozzle): bump v10.6.10 -> v10.7.3 (DEV-534) CTO Agent 2026-08-23 15:11:47 +00:00
6313b85999 chore(pangolin): bump postgres 17.5 -> 17.11 (DEV-533) CTO Agent 2026-08-23 15:07:38 +00:00
7cbb603ec1 chore(pangolin): bump busybox 1.37 -> 1.38.0 (DEV-532) CTO Agent 2026-08-23 15:02:26 +00:00
a226958b16 chore(paperclip): bump busybox 1.36 -> 1.38.0 (DEV-531) CTO Agent 2026-08-23 14:59:34 +00:00
e6a94ae26a chore(stalwart): remove no-op stalwart-allow-cluster-ips job (DEV-530) CTO Agent 2026-08-23 14:18:26 +00:00
1c3cd31381 fix(dns): cap hostNetwork/coredns pod DNS at 3 upstreams (DEV-527) fix/DEV-527-dns-config-hostnetwork CTO Agent 2026-08-23 12:05:12 +00:00
e9fcf4cbb4 fix(bookstack): Recreate rollout strategy for RWO PVC (DEV-528) (#8) forgejoadmin 2026-08-23 12:01:49 +00:00
e155ab6a17 fix(bookstack): use Recreate rollout strategy (DEV-528) cto-agent 2026-08-23 12:01:35 +00:00
862dbbf203 fix(bookstack): point probes at /status instead of / (DEV-528) (#7) forgejoadmin 2026-08-23 11:56:58 +00:00
8a80068b95 fix(bookstack): point probes at /status instead of / (DEV-528) cto-agent 2026-08-23 11:56:37 +00:00
c9a60a56c3 Merge pull request 'fix(argocd): label argocd-oidc-secret so Argo CD reads its keys (DEV-523)' (#6) from fix/DEV-523-argocd-oidc-secret-label into main forgejoadmin 2026-08-23 10:37:11 +00:00
f5a0982222 fix(argocd): label argocd-oidc-secret so Argo CD reads its keys (DEV-523) fix/DEV-523-argocd-oidc-secret-label CTO Agent 2026-08-23 10:37:01 +00:00
2cf6c65d23 fix(argocd): reference argocd-oidc-secret directly for OIDC (DEV-523) forgejoadmin 2026-08-23 10:34:16 +00:00
d1641c9047 fix(argocd): reference argocd-oidc-secret directly for OIDC (DEV-523) fix/DEV-523-argocd-oidc-secret-ref CTO Agent 2026-08-23 10:33:50 +00:00
e8ab9d4674 fix(argocd): server.insecure=true for TLS-terminating ingress (DEV-522) CTO Agent 2026-08-23 10:20:55 +00:00
447ff93ccf fix(argocd): add forgejo internal SSH host key to values (DEV-522) CTO Agent 2026-08-23 10:18:04 +00:00
82de4507a8 feat(argocd): switch to community Helm chart (DEV-521) forgejoadmin 2026-08-23 10:11:26 +00:00
43610fb16d feat(argocd): switch to community Helm chart (DEV-519) feat/DEV-521-argocd-helm CTO Agent 2026-08-23 08:32:23 +00:00
e848d225cd os-update: generalize CP procedure to HA cp-1/cp-2/cp-3 (DEV-515) CTO Agent 2026-08-23 01:53:14 +00:00
34350a03bf os-update: exclude all control-plane nodes by role, not just cp-1 (DEV-513) CTO Agent 2026-08-23 01:39:25 +00:00
89cf3094d0 chore(monitoring): add restic alerts for forgejo repo (DEV-514) CTO Agent 2026-08-23 01:16:27 +00:00
585d6ee114 feat(forgejo-backup): migrate to pg_dump -> restic -> Hetzner S3 (DEV-514) CTO Agent 2026-08-23 01:13:28 +00:00
19af6918f0 feat(os-update): reconcile Docker + label after node updates (DEV-499) CTO Agent 2026-08-16 20:22:43 +00:00
8dffba2c52 fix(forgejo-runner): pin to nodes with docker installed (DEV-498) CTO 2026-08-16 20:15:01 +00:00
129464d4c7 docs(os-update): point kine guardrails and order rules to cp-1 procedure CTO Agent 2026-08-16 19:29:21 +00:00
05000b3e06 docs(infra): design cp-1 OS update procedure (DEV-496) CTO Agent 2026-08-16 19:28:46 +00:00
91983e8c8e docs(os-update): kine thundering-herd guardrails after DEV-495 incident CTO Agent 2026-08-16 18:35:40 +00:00
810d22f0a6 feat(monitoring): prometheus-backup → restic client-side encrypted (DEV-492) CTO Agent 2026-08-16 16:29:22 +00:00
ef62dde67c feat(observability): wire node-exporter textfile collector for backup metrics (DEV-494) CTO Agent 2026-08-16 16:21:56 +00:00
b1680431c6 feat(monitoring): pull restic image from Harbor mirror (DEV-493) CTO Agent 2026-08-16 16:20:06 +00:00
550d1276f7 feat(monitoring): Prometheus backup-freshness + restic alerts (DEV-490) CTO Agent 2026-08-16 16:07:55 +00:00
0c1c05fc50 feat(monitoring): retire legacy backup-volumes CronJob + backup-storage PVC (DEV-489) CTO Agent 2026-08-16 15:58:43 +00:00
49b724439b docs(monitoring): add restic restore runbook + first drill log (DEV-488) CTO Agent 2026-08-16 15:47:45 +00:00
e434fa751b feat(monitoring): backup-k8s-resources → restic --stdin to Hetzner S3 (DEV-487) CTO Agent 2026-08-16 15:39:06 +00:00
d495a5936f feat(monitoring): backup-grafana-restic CronJob → Hetzner S3 (DEV-486) CTO Agent 2026-08-16 15:34:37 +00:00
e2fd90a22b feat(monitoring): backup-loki-restic CronJob → Hetzner S3 (DEV-485) CTO Agent 2026-08-16 15:27:40 +00:00
95de27437b feat(monitoring): seal restic-password into monitoring-s3-backup (DEV-484) CTO Agent 2026-08-16 13:22:10 +00:00
890809c91c fix(monitoring): Loki uses Recreate strategy for RWO PVC rollouts (DEV-483) CTO Agent 2026-08-16 12:54:26 +00:00
e4a7e5629a fix(monitoring): pin Loki to k3s-worker-2 to unblock backup-volumes (DEV-483) CTO Agent 2026-08-16 12:50:22 +00:00
8cd2829cd8 feat(stalwart): switch config/data store from RocksDB to PostgreSQL (DEV-476) paperclip 2026-08-15 14:46:29 +00:00
c4551495e0 fix(stalwart): co-locate stalwart-backup pod with stalwart-0 (DEV-468) CTO Agent 2026-08-15 12:11:22 +00:00
471b6a6109 feat(stalwart): deploy stalwart-postgres StatefulSet + backup (DEV-469) forgejoadmin 2026-08-15 12:06:08 +00:00
9fe442ce0d feat(stalwart): deploy stalwart-postgres StatefulSet + backup (DEV-469) feat/DEV-469-stalwart-postgres CTO Agent 2026-08-15 12:05:25 +00:00
a5ceedf4da fix(monitoring): prune Prometheus S3 backups by prefix-date, not file mtime (DEV-465) CTO Agent 2026-08-09 17:40:50 +00:00
63aa116ef1 Add dedicated Prometheus data backup CronJob (DEV-465) CTO Agent 2026-08-09 17:18:21 +00:00
9d1996051e fix(backups): Repair three broken CronJobs blocking weekly OS updates (DEV-464) CTO Agent 2026-08-09 16:50:51 +00:00