100 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
forust	7cca330438	feat(crowdsec): switch agent to loki acquisition with static identity ... Read traefik logs from Loki instead of file tail. Static machine identity via pre-created secret stops 403 register races. Add janitor cronjob, dashboards, whitelists and metrics.	2026-09-18 19:02:43 +02:00
forust	5936de3e56	fix(alertmanager): quote null receiver and wire telegram template ... Unquoted null parses as YAML null and breaks routing. Add shared telegram message template.	2026-09-18 19:02:41 +02:00
forust	c98ea8b957	feat(monitoring): align storage to live pvc, add loki datasource and alerts ... Match grafana/alertmanager storageClass to live PVCs to avoid immutable-field failures. Add Loki datasource and LokiDown/AlloyDown alerts.	2026-09-18 19:02:38 +02:00
forust	34c33697bb	feat(loki): add single-binary loki and alloy stack ... Filesystem storage on local-path-retain, 14d retention. Alloy daemonset ships k8s pod logs to loki-gateway.	2026-09-18 19:02:36 +02:00
forust	82949613db	fix(cloudflared): drop bogus exec livenessProbe that SIGTERMed the tunnel	2026-09-17 19:34:28 +02:00
forust	47d788ca13	feat(cloudflared): add Cloudflare Tunnel deployment (token-based, cfddns-style)	2026-09-17 19:09:02 +02:00
forust	1e66b5f344	lint(postgres): 126:77 error no new line character at the end of file (new-line-at-end-of-file)	2026-09-14 11:56:23 +00:00
forust	d638a2c1f9	chore(gite): updated deprecated access log config	2026-09-14 11:56:23 +00:00
forust	b8512c6033	feat(postgres): migrate gitea to shared postgres database	2026-09-14 11:56:23 +00:00
forust	3e057ea18d	feat(postgres): upgrade shared database to PostgreSQL 17 ... Move the shared postgres service from 15.19 to 17.6 as the postgres17 StatefulSet with its own PVC, extend the initdb and ingress policy with the statuspage database, and drop the now-unused per-app postgres manifests for authentik, gitea and netronome.	2026-09-14 11:56:23 +00:00
forustandCopilot	77113fb629	feat(postgres): migrate apps to shared database ... Move Authentik and Netronome to the shared PostgreSQL service after logical dump and restore. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-09-14 11:56:23 +00:00
forust	a3a0ab92b7	feat(postgres): add shared database deployments	2026-09-14 11:56:23 +00:00
forust	68fb5eb45e	Merge pull request 'chore(deps): update renovate/renovate docker tag to v44.85.0' (#25) from renovate/renovate-renovate-44.x into main ... Reviewed-on: #25	2026-09-14 09:48:39 +00:00
forust	82124017c0	Merge pull request 'chore(deps): update redis docker tag to v8.10.1' (#23) from renovate/redis-8.x into main ... Reviewed-on: #23	2026-09-14 09:46:49 +00:00
forust	a4f8218b5e	Merge pull request 'chore(deps): update valkey/valkey docker tag to v9' (#24) from renovate/valkey-valkey-9.x into main ... Reviewed-on: #24	2026-09-14 09:46:24 +00:00
forust	9ca8514a0a	Merge pull request 'chore(deps): update renovate/renovate docker tag to v44.84.0' (#21) from renovate/renovate-renovate-44.x into main ... Reviewed-on: #21	2026-09-14 09:07:55 +00:00
forust	c6d8df2317	Merge pull request 'chore(deps): update ghcr.io/goauthentik/server docker tag to v2026' (#22) from renovate/ghcr.io-goauthentik-server-2026.x into main ... Reviewed-on: #22	2026-09-14 09:07:41 +00:00
forust	25f547ff78	Merge pull request 'chore(deps): update docker.n8n.io/n8nio/n8n docker tag to v2.39.5' (#18) from renovate/docker.n8n.io-n8nio-n8n-2.x into main ... Reviewed-on: #18	2026-09-14 09:04:42 +00:00
forust	663675f9a0	Merge pull request 'chore(deps): update ghcr.io/goauthentik/server docker tag to v2025.12.6' (#19) from renovate/ghcr.io-goauthentik-server-2025.x into main ... Reviewed-on: #19	2026-09-14 09:03:35 +00:00
forust	b5d6f75330	Merge pull request 'chore(deps): update mcr.microsoft.com/playwright docker tag to v1.63.0' (#20) from renovate/mcr.microsoft.com-playwright-1.x into main ... Reviewed-on: #20	2026-09-14 09:02:49 +00:00
forust	7799b676ca	ci: validate Renovate manifests with kubeconform	2026-09-14 10:51:40 +02:00
forustandCopilot	24d3686f60	ci: fix formatting and YAML lint scope ... Lint tracked YAML files without scanning generated dependencies. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-09-14 09:30:55 +02:00
forust	b8b3bba264	Merge branch 'feat/renovate'	2026-09-14 09:16:43 +02:00
forustandCopilot	abfbc04067	fix(infra): align monitoring and Gitea database config ... Keep CrowdSec scraping explicit and define Gitea's database name. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-09-14 09:16:01 +02:00
forustandCopilot	23ed72826a	chore(images): pin service image updates ... Replace floating service images with reviewable tags or digests. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-09-14 09:16:01 +02:00
forustandCopilot	7288058df6	feat(renovate): add Gitea update automation ... Run Renovate in Kubernetes to create reviewed image update PRs. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-09-14 09:16:01 +02:00
forust	6715f9e9af	chore(k8s): raise resource limits for glance, edu and crowdsec	2026-09-14 01:29:28 +02:00
forust	ccec1102ef	ci(deploy): helm upgrade kube-prometheus-stack when active	2026-09-14 01:29:24 +02:00
forust	360a6fc5dc	feat(prometheus): add alerting rules and alertmanager config	2026-09-14 01:21:27 +02:00
forust	9a806724af	chore(crowdsec): remove crowdsec bouncer from dns and headscale ingresses	2026-09-14 01:15:55 +02:00
forustandCopilot	ed1ddaad5d	feat(crowdsec): restore web traffic protection ... Protect public Traefik routes with CrowdSec HTTP decisions and restore access logging for web traffic analysis. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-09-12 21:05:12 +02:00
forustandCopilot	726b3ee544	fix(edu): run redis as statefulset ... Keep the existing Redis PVC and data while migrating the edu-master workload from Deployment to StatefulSet. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-09-10 23:35:59 +02:00
forust	13309b26e0	fix: add checkmk agent entrypoint ... update traefik to v3.7.13	2026-09-10 14:52:49 +02:00
forust	eddc256bed	chore: remove esp32/ingress.yaml from main	2026-09-10 12:12:54 +02:00
forust	52f821cbba	Merge branch 'main' of ssh://gitssh.forust.xyz:2221/forust/homelab	2026-09-10 11:47:25 +02:00
forust	0dbc2fff13	Merge branch 'sidetree'	2026-09-10 11:47:25 +02:00
forust	91ec83bc1c	Merge branch 'main' of ssh://gitssh.forust.xyz:2221/forust/homelab	2026-09-10 11:47:20 +02:00
forust	9fec1dae39	Merge branch 'sidetree'	2026-09-10 11:47:15 +02:00
forust	e5626b7b2d	chore: remove untracked README.md	2026-09-10 11:45:00 +02:00
forust	8fb12a2176	chore: remove untracked README.md	2026-09-10 11:44:23 +02:00
forust	fe0c7067b6	Merge branch 'main' of ssh://gitssh.forust.xyz:2221/forust/homelab	2026-09-10 11:42:17 +02:00
forust	d0f0843774	Merge branch 'sidetree'	2026-09-10 11:41:35 +02:00
forust	81a5b207ac	Merge branch 'main' of ssh://gitssh.forust.xyz:2221/forust/homelab	2026-09-10 11:41:31 +02:00
forust	e3d5970ae3	chore: remove untracked README.md	2026-09-10 11:39:20 +02:00
forust	85f05c26cb	feat(edu): activate k8s management for edu-master	2026-09-10 00:55:22 +02:00
forust	68630eb773	fix(edu): read diary event times directly from DOM, drop 25 AJAX clicks ... _collect_event_times re-clicked every a.event-link and waited ~3s per event for a visible span.data, but the calendar embeds all times in div.event-full-info[data-event-full-info-id] span.data already. The old loop took ~109s for 25 events and collected 0 (original divs stay sf-hidden), effectively hanging /diary. Now a single evaluate reads all times (~3.7s), parsing HH:MM from p.date span.data.	2026-09-10 00:31:04 +02:00
forust	dad9cf2104	feat(edu): parse event times in /diary and drop weekend days ... - fetch each event's time via Playwright (click event-link, read span.data, close fancybox) and render as 'title (HH:MM)' - '08:00' placeholder renders as localized 'unknown' (time_unknown key in ru/uk/en) - diary week view shows Mon-Fri only (title ends at Friday) - diary month view skips Sat/Sun by weekday_idx with name-based fallback - schedule keyboard drops Sat/Sun day buttons	2026-09-10 00:05:56 +02:00
forust	60886e8be2	style(edu): ruff-format webinar-checker/checker.py	2026-09-09 23:47:04 +02:00
forust	4528321225	fix(edu): add TZ to .env.example	2026-09-09 11:46:35 +02:00
forust	b246a3dea1	fix(edu): review findings for checker.py i18n — group chat language via resolve_lang/chat: keys (default uk), weekday normalization with _norm_day + logging, drop dead translation keys, html.escape, single lang lookup, distinct whitelist emoji	2026-09-09 11:44:17 +02:00
forustandassistant	4c59a2d2fe	lang(edu): translate k8s manifest comments to English only ... - restore-seed-job.yaml.example: translate runbook to English - secrets.yaml.example: translate section headers to English - webinar-checker.yaml: translate initContainer dependency-order comments to English Co-authored-by: assistant	2026-09-09 10:46:36 +02:00
forust	fcc7b0d611	ci(deploy): gate redeploy behind manual workflow_dispatch ... removes automatic redeploy on push to main; deploy now runs only on explicit manual trigger	2026-09-06 20:55:40 +02:00
forust	9633fe3a10	style(ci): add trailing newline to deploy workflows	2026-09-06 20:45:30 +02:00
forust	d9f1c8325a	feat(userbot): prereqs at startup, SPA path guard, provision lock ... - ensure_prerequisites runs on startup, not per-request; kube config errors surface as 503 PanelError - serialize provisioning with a lock; drop per-endpoint prereq checks - guard SPA fallback against path traversal (relative_to) - add backend tests for auth flow, k8s service, spa routing; ci comment for legacy userbot deployments	2026-09-06 20:39:12 +02:00
forust	861d89d36a	ci(deploy): split runtime by k8s/active marker ... services marked k8s/active are applied via kubectl; the rest via docker compose. inactive services with k8s/ keep only routing manifests (external Services, EndpointSlices, Ingresses) to reach docker backends. headscale/nextcloud routing moved to k8s/routing/. validations: compose config --quiet + kubectl apply --dry-run=client. namespace manifests applied first. pull_policy:build stacks get build+push before up so the registry image stays fresh.	2026-09-06 20:39:12 +02:00
forust	71cddd6a91	feat(userbot): add Kubernetes control panel ... Manage Telegram instances through Kubernetes with legacy adoption for forust and anna. Build and deploy the panel image alongside the runtime.	2026-09-06 20:39:12 +02:00
forust	30e6f05584	fix(edu_master): satisfy ruff in schedule scraper ... - rename ambiguous loop var, merge nested if (E741, SIM102) - use tempfile.gettempdir() for debug dump (S108) - drop unused total_lessons assignment (F841)	2026-09-06 20:37:18 +02:00
forust	bc8d74fd28	feat(schedule): per-user class picker, parser fixes ... - fix parser: capture tr attrs via finditer, strip HTML comments before cell parse (was leaving '-->' in subject names) - store class choice in redis: user:{id}:schedule_class (private) and chat:{id}:schedule_class (groups, admin-only via /setclass) - /schedule renders day for stored class, /setclass sets it directly - drop teacher emoji, format grade as "N клас"	2026-09-06 16:17:48 +02:00
forust	d2d4efb0d7	feat: add schedule scraper for lessons table ... Add /schedule command to scrape edu.edu.vn.ua/lessons/table via Playwright. Inline keyboard flow: pick weekday (with today/tomorrow shortcuts), then pick class. Cache 5h per user. Parse subjects/notes/teachers, multi-lesson cells (hr-separated).	2026-09-06 15:46:41 +02:00
forust	b752bf88bd	feat: add edu_master k8s manifests for k0s migration	2026-09-06 15:00:51 +02:00
forust	587611ca88	chore: remove empty middlewares blocks from k8s ingresses	2026-09-02 12:17:04 +02:00
forust	ace23ad1f9	fix: remove www.xdfnx.cfd from ingress, add Gitea access log config	2026-07-20 11:40:41 +02:00
forust	92aa731e44	deleted crowdsec stack from the repo. will figure something else ... Signed-off-by: mr-forust <vzlomdsisma@gmail.com>	2026-07-19 23:16:14 +02:00
forust	87ca3fd40c	chore: updatet chernuha's pfp, added projects sections for forust.xyz	2026-07-05 02:59:31 +02:00
forust	82bcd30ed8	updated xdfnx's page	2026-07-04 01:01:05 +02:00
forust	620262d98c	ci: fetch full history for change detection after rebase	2026-07-04 00:55:46 +02:00
forust	831f3a46b0	updated xdfnx's page	2026-07-04 00:46:13 +02:00
forust	f7902e74e8	ci: require lint and validate before build	2026-06-30 01:23:53 +02:00
forust	eb8d1b361e	ci: add branch tags to docker builds	2026-06-30 01:20:51 +02:00
forust	6e2cafb206	ci: merge lint validate and docker builds	2026-06-30 01:17:31 +02:00
forust	67b0c0824f	ci: restore docker-based lint and validate jobs	2026-06-30 01:12:23 +02:00
forust	8e72e0a920	ci: run lint and validate tools locally	2026-06-30 00:14:14 +02:00
forust	73a1132beb	Align Traefik Helm log values with chart v41	2026-06-29 23:02:26 +02:00
forust	a128523c24	Fix CrowdSec middleware references in Traefik ingresses	2026-06-29 22:47:21 +02:00
forust	ee881acd0e	refactor: update xdfnx homepage index.html	2026-06-28 11:59:57 +02:00
forust	bacb2f4b9f	fix: correct Traefik rule syntax for local IngressRoutes ... Move parentheses outside Host() calls so that || and && operators are properly grouped in Traefik rule expressions.	2026-06-28 11:59:52 +02:00
forust	91211e7b78	fix: resolve CrowdSec Helm upgrade failure - remove duplicate DISABLE_ONLINE_API env and add metrics config	2026-06-28 11:59:46 +02:00
forust	9b3a7aadb4	fix: resolve pyrogram imports by adding venv and pyright config ... - Create .venv with pyrofork and all dependencies installed - Add pyrightconfig.json at workspace root and in userbot/ - Enable pyright as language server for Python in Zed settings - Update uv.lock with resolved dependency tree	2026-06-21 22:33:04 +02:00
forust	b123621ead	chore: remove github obsolete prod deploy workflow	2026-06-21 22:24:30 +02:00
forust	a2df8504f5	Fix DL3013: pin pip version in webinar-checker Dockerfile	2026-06-21 22:07:44 +02:00
forust	fb43306571	Fix all lint issues: Dockerfiles (DL3015/DL3013/DL4006) + Ruff (173→0 errors) ... Dockerfile fixes: - edu_master/phpsessid-bot: add --no-install-recommends, pin pip versions - edu_master/webinar-checker: pin pip versions with --no-cache-dir - userbot: add SHELL with pipefail for pipe operations Ruff fixes (173 → 0): - W293/W291/W292: whitespace clean via ruff format - N806: camelCase → snake_case (anilist, safone, hearts, flux, etc.) - ARG001/ARG002: prefix unused params with _ - SIM115: use context managers for file I/O - SIM117: combine nested with statements - S608: noqa on SQL f-strings (module name is validated) - E402/N812/N817: import fixes - B023: pass loop variable as argument - I001: auto-sorted imports - syntax: fixed = vs == in dtek_notif/main.py	2026-06-21 22:01:51 +02:00
forust	f424d91405	Tighten lint workflow scope	2026-06-21 21:51:20 +02:00
forust	88a8f2987f	Unify workflow job naming	2026-06-21 21:46:22 +02:00
forust	17027b232b	Rename workflows to yaml	2026-06-21 21:45:16 +02:00
forust	6ecbbb39b4	Fix yamllint workflow invocation	2026-06-21 21:40:11 +02:00
forust	175cbc8860	Fix validation workflows for self-hosted runner	2026-06-21 21:37:30 +02:00
forust	6363d050b0	Add YAML validation workflows	2026-06-21 21:27:31 +02:00
forust	c855764bc6	feat: add vaultwarden deployment config (compose + k8s)	2026-06-21 01:02:09 +02:00
forust	7d92b85e21	Merge commit '4355f451d4b4288d43468e08cad1f377e511f98a'	2026-06-19 23:23:28 +02:00
forust	9364392bc0	Merge commit '3eaef5dc90b716cc0fa391cbe2394be56d5f6041' as 'userbot'	2026-06-19 23:20:23 +02:00
forust	4355f451d4	Merge commit '3eaef5dc90b716cc0fa391cbe2394be56d5f6041' as 'userbot'	2026-06-19 23:20:23 +02:00
forust	3eaef5dc90	Squashed 'userbot/' content from commit 7fb0a0e ... git-subtree-dir: userbot git-subtree-split: 7fb0a0e179	2026-06-19 23:20:23 +02:00
forust	69ffd3682e	refactor: userbot to subtree	2026-06-19 23:20:13 +02:00
forust	1930600c40	Revert "refactor: extract userbot to standalone repo, add as git submodule" ... This reverts commit 3c383db9a7.	2026-06-19 23:11:27 +02:00
forust	d74a705d53	chore(k8s): rewritten ingressroute to include headplane AND headscale-admin ui ... new routes groupping style	2026-06-19 23:02:22 +02:00
forust	3c383db9a7	refactor: extract userbot to standalone repo, add as git submodule ... userbot now lives at ssh://git@gitssh.forust.xyz:2221/forust/userbot.git and is included in homelab as a submodule at userbot/	2026-06-19 15:39:00 +02:00
forust	7fb0a0e179	chore: batch lint fixes across userbot and edu_master ... - S113: Add timeout=10 to all requests calls (74 fixes) - E722: Replace bare except: with except Exception: - B904: Replace redundant re-raise with bare raise - E402: Add noqa for intentional late imports after import_library() - S102/S307/S310/S311/S603/S605/S606/S607/S108: Add noqa for intentional usage - F601: Fix duplicate dict key in unsplash.py - N802: Rename ReplyCheck -> reply_check with backward compat alias - N813: Rename bs -> BS in icons.py - B007/B020: Rename loop var _j in animations.py - SIM102: Collapse nested if in autofwd.py - SIM113: Use enumerate() in calculator.py - A002: Add noqa for builtin shadowing in admlist.py - F811: Add noqa for cohere redefinition - edu_master: Fix ARG001, S108, S110, SIM117, apply --unsafe-fixes - Add modules_list.txt with full module inventory	2026-06-19 15:36:25 +02:00
forust	227e5fda27	chore: batch lint fixes across userbot and edu_master ... - S113: Add timeout=10 to all requests calls (74 fixes) - E722: Replace bare except: with except Exception: - B904: Replace redundant re-raise with bare raise - E402: Add noqa for intentional late imports after import_library() - S102/S307/S310/S311/S603/S605/S606/S607/S108: Add noqa for intentional usage - F601: Fix duplicate dict key in unsplash.py - N802: Rename ReplyCheck -> reply_check with backward compat alias - N813: Rename bs -> BS in icons.py - B007/B020: Rename loop var _j in animations.py - SIM102: Collapse nested if in autofwd.py - SIM113: Use enumerate() in calculator.py - A002: Add noqa for builtin shadowing in admlist.py - F811: Add noqa for cohere redefinition - edu_master: Fix ARG001, S108, S110, SIM117, apply --unsafe-fixes - Add modules_list.txt with full module inventory	2026-06-19 15:36:25 +02:00
forust	20bce5b31c	fix(userbot): add missing safone.py imports, apply ruff --unsafe-fixes ... - Add missing aiohttp, PIL, BytesIO imports to safone.py (F821 runtime bugs) - Apply ruff --unsafe-fixes (27 fixes): ternary operators, .get() patterns, contextlib.suppress, enumerate(), collapsible if/else, remove .keys()	2026-06-19 15:27:12 +02:00
forust	70d7855f06	fix(userbot): add missing safone.py imports, apply ruff --unsafe-fixes ... - Add missing aiohttp, PIL, BytesIO imports to safone.py (F821 runtime bugs) - Apply ruff --unsafe-fixes (27 fixes): ternary operators, .get() patterns, contextlib.suppress, enumerate(), collapsible if/else, remove .keys()	2026-06-19 15:27:12 +02:00