685 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
forustandCopilot	77113fb629	feat(postgres): migrate apps to shared database ... Move Authentik and Netronome to the shared PostgreSQL service after logical dump and restore. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-09-14 11:56:23 +00:00
forust	a3a0ab92b7	feat(postgres): add shared database deployments	2026-09-14 11:56:23 +00:00
forust	68fb5eb45e	Merge pull request 'chore(deps): update renovate/renovate docker tag to v44.85.0' (#25) from renovate/renovate-renovate-44.x into main ... Reviewed-on: #25	2026-09-14 09:48:39 +00:00
renovate-bot	1c58c78892	chore(deps): update renovate/renovate docker tag to v44.85.0	2026-09-14 09:48:21 +00:00
forust	82124017c0	Merge pull request 'chore(deps): update redis docker tag to v8.10.1' (#23) from renovate/redis-8.x into main ... Reviewed-on: #23	2026-09-14 09:46:49 +00:00
renovate-bot	e502f46f43	chore(deps): update redis docker tag to v8.10.1	2026-09-14 09:46:49 +00:00
forust	a4f8218b5e	Merge pull request 'chore(deps): update valkey/valkey docker tag to v9' (#24) from renovate/valkey-valkey-9.x into main ... Reviewed-on: #24	2026-09-14 09:46:24 +00:00
renovate-bot	d162a50bba	chore(deps): update valkey/valkey docker tag to v9	2026-09-14 09:44:41 +00:00
forust	9ca8514a0a	Merge pull request 'chore(deps): update renovate/renovate docker tag to v44.84.0' (#21) from renovate/renovate-renovate-44.x into main ... Reviewed-on: #21	2026-09-14 09:07:55 +00:00
renovate-bot	6fa809a8d2	chore(deps): update renovate/renovate docker tag to v44.84.0	2026-09-14 09:07:55 +00:00
forust	c6d8df2317	Merge pull request 'chore(deps): update ghcr.io/goauthentik/server docker tag to v2026' (#22) from renovate/ghcr.io-goauthentik-server-2026.x into main ... Reviewed-on: #22	2026-09-14 09:07:41 +00:00
renovate-bot	c28d7323b3	chore(deps): update ghcr.io/goauthentik/server docker tag to v2026	2026-09-14 09:06:56 +00:00
forust	25f547ff78	Merge pull request 'chore(deps): update docker.n8n.io/n8nio/n8n docker tag to v2.39.5' (#18) from renovate/docker.n8n.io-n8nio-n8n-2.x into main ... Reviewed-on: #18	2026-09-14 09:04:42 +00:00
renovate-bot	50911b4ec1	chore(deps): update docker.n8n.io/n8nio/n8n docker tag to v2.39.5	2026-09-14 09:04:30 +00:00
forust	663675f9a0	Merge pull request 'chore(deps): update ghcr.io/goauthentik/server docker tag to v2025.12.6' (#19) from renovate/ghcr.io-goauthentik-server-2025.x into main ... Reviewed-on: #19	2026-09-14 09:03:35 +00:00
renovate-bot	8b28bd24ff	chore(deps): update ghcr.io/goauthentik/server docker tag to v2025.12.6	2026-09-14 09:03:24 +00:00
forust	b5d6f75330	Merge pull request 'chore(deps): update mcr.microsoft.com/playwright docker tag to v1.63.0' (#20) from renovate/mcr.microsoft.com-playwright-1.x into main ... Reviewed-on: #20	2026-09-14 09:02:49 +00:00
renovate-bot	f5b5ecaafa	chore(deps): update mcr.microsoft.com/playwright docker tag to v1.63.0	2026-09-14 09:01:58 +00:00
forust	7799b676ca	ci: validate Renovate manifests with kubeconform	2026-09-14 10:51:40 +02:00
forustandCopilot	24d3686f60	ci: fix formatting and YAML lint scope ... Lint tracked YAML files without scanning generated dependencies. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-09-14 09:30:55 +02:00
forust	b8b3bba264	Merge branch 'feat/renovate'	2026-09-14 09:16:43 +02:00
forustandCopilot	abfbc04067	fix(infra): align monitoring and Gitea database config ... Keep CrowdSec scraping explicit and define Gitea's database name. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-09-14 09:16:01 +02:00
forustandCopilot	23ed72826a	chore(images): pin service image updates ... Replace floating service images with reviewable tags or digests. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-09-14 09:16:01 +02:00
forustandCopilot	7288058df6	feat(renovate): add Gitea update automation ... Run Renovate in Kubernetes to create reviewed image update PRs. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-09-14 09:16:01 +02:00
forust	6715f9e9af	chore(k8s): raise resource limits for glance, edu and crowdsec	2026-09-14 01:29:28 +02:00
forust	ccec1102ef	ci(deploy): helm upgrade kube-prometheus-stack when active	2026-09-14 01:29:24 +02:00
forust	360a6fc5dc	feat(prometheus): add alerting rules and alertmanager config	2026-09-14 01:21:27 +02:00
forust	9a806724af	chore(crowdsec): remove crowdsec bouncer from dns and headscale ingresses	2026-09-14 01:15:55 +02:00
forustandCopilot	ed1ddaad5d	feat(crowdsec): restore web traffic protection ... Protect public Traefik routes with CrowdSec HTTP decisions and restore access logging for web traffic analysis. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-09-12 21:05:12 +02:00
forustandCopilot	726b3ee544	fix(edu): run redis as statefulset ... Keep the existing Redis PVC and data while migrating the edu-master workload from Deployment to StatefulSet. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-09-10 23:35:59 +02:00
forust	13309b26e0	fix: add checkmk agent entrypoint ... update traefik to v3.7.13	2026-09-10 14:52:49 +02:00
forust	eddc256bed	chore: remove esp32/ingress.yaml from main	2026-09-10 12:12:54 +02:00
forust	52f821cbba	Merge branch 'main' of ssh://gitssh.forust.xyz:2221/forust/homelab	2026-09-10 11:47:25 +02:00
forust	0dbc2fff13	Merge branch 'sidetree'	2026-09-10 11:47:25 +02:00
forust	91ec83bc1c	Merge branch 'main' of ssh://gitssh.forust.xyz:2221/forust/homelab	2026-09-10 11:47:20 +02:00
forust	9fec1dae39	Merge branch 'sidetree'	2026-09-10 11:47:15 +02:00
forust	e5626b7b2d	chore: remove untracked README.md	2026-09-10 11:45:00 +02:00
forust	8fb12a2176	chore: remove untracked README.md	2026-09-10 11:44:23 +02:00
forust	fe0c7067b6	Merge branch 'main' of ssh://gitssh.forust.xyz:2221/forust/homelab	2026-09-10 11:42:17 +02:00
forust	d0f0843774	Merge branch 'sidetree'	2026-09-10 11:41:35 +02:00
forust	81a5b207ac	Merge branch 'main' of ssh://gitssh.forust.xyz:2221/forust/homelab	2026-09-10 11:41:31 +02:00
forust	e3d5970ae3	chore: remove untracked README.md	2026-09-10 11:39:20 +02:00
forust	85f05c26cb	feat(edu): activate k8s management for edu-master	2026-09-10 00:55:22 +02:00
forust	68630eb773	fix(edu): read diary event times directly from DOM, drop 25 AJAX clicks ... _collect_event_times re-clicked every a.event-link and waited ~3s per event for a visible span.data, but the calendar embeds all times in div.event-full-info[data-event-full-info-id] span.data already. The old loop took ~109s for 25 events and collected 0 (original divs stay sf-hidden), effectively hanging /diary. Now a single evaluate reads all times (~3.7s), parsing HH:MM from p.date span.data.	2026-09-10 00:31:04 +02:00
forust	dad9cf2104	feat(edu): parse event times in /diary and drop weekend days ... - fetch each event's time via Playwright (click event-link, read span.data, close fancybox) and render as 'title (HH:MM)' - '08:00' placeholder renders as localized 'unknown' (time_unknown key in ru/uk/en) - diary week view shows Mon-Fri only (title ends at Friday) - diary month view skips Sat/Sun by weekday_idx with name-based fallback - schedule keyboard drops Sat/Sun day buttons	2026-09-10 00:05:56 +02:00
forust	60886e8be2	style(edu): ruff-format webinar-checker/checker.py	2026-09-09 23:47:04 +02:00
forust	4528321225	fix(edu): add TZ to .env.example	2026-09-09 11:46:35 +02:00
forust	b246a3dea1	fix(edu): review findings for checker.py i18n — group chat language via resolve_lang/chat: keys (default uk), weekday normalization with _norm_day + logging, drop dead translation keys, html.escape, single lang lookup, distinct whitelist emoji	2026-09-09 11:44:17 +02:00
forustandassistant	4c59a2d2fe	lang(edu): translate k8s manifest comments to English only ... - restore-seed-job.yaml.example: translate runbook to English - secrets.yaml.example: translate section headers to English - webinar-checker.yaml: translate initContainer dependency-order comments to English Co-authored-by: assistant	2026-09-09 10:46:36 +02:00
forust	fcc7b0d611	ci(deploy): gate redeploy behind manual workflow_dispatch ... removes automatic redeploy on push to main; deploy now runs only on explicit manual trigger	2026-09-06 20:55:40 +02:00