Commit Graph
27 Commits
Author SHA1 Message Date
ahmza 1f26627488 Begin Authentik final cutover 2026-10-16 16:50:43 +00:00
ahmza db3c8e4694 Enable production TLS for Authentik 2026-10-16 16:46:10 +00:00
ahmza 019039126a Add CloudNativePG for Authentik 2026-10-16 15:50:56 +00:00
ahmza faebef6c58 use internal DNS name for VictoriaMetrics endpoint 2026-10-16 01:39:57 +00:00
ahmza 6f43b5e343 add NetBird connectivity to Talos nodes 2026-10-16 00:51:47 +00:00
ahmza 4ddc5e0151 added soulsync 3.5.3 2026-10-09 10:41:17 +00:00
ahmza cf61c8f96d updated network docs 2026-09-11 09:04:38 +00:00
ahmza dad8da6358 Update Argo CD repository endpoint 2026-09-04 12:42:43 +00:00
ahmza e08b9dccc7 added mcpacks application to server packwiz pack.toml files. initial 2026-09-04 11:56:08 +00:00
ahmza e5c018ce8f Make Ingress the default path for reaching new apps 2026-09-03 05:29:05 +01:00
ahmza ae278d8ba1 Mark demo.ahmza.com TLS as live in network map 2026-09-03 05:28:42 +01:00
ahmza 4affbaf973 Add cert-manager with Cloudflare DNS-01 ClusterIssuers 2026-09-03 05:03:10 +01:00
ahmza e6a42a39a8 Reclaim demo's former dedicated address in network map 2026-09-03 04:57:47 +01:00
ahmza bb69db8041 Route demo app through Ingress at demo.ahmza.com 2026-09-03 04:44:41 +01:00
ahmza 923cdd5162 Add ingress-nginx 2026-09-03 04:37:04 +01:00
ahmza 7e9406dff0 Fix .sops.yaml to scope encryption to secret payload fields only 2026-09-03 04:31:03 +01:00
ahmza 0a733a7d76 Add SOPS+age secrets pipeline 2026-09-03 04:24:38 +01:00
ahmza 41dfd195a1 Align 09-growing-up with actual control-plane/worker split 2026-09-03 04:01:12 +01:00
ahmza c34b58e0b2 Add cascade-delete finalizer to stateless apps; document the distinction 2026-09-03 03:58:47 +01:00
ahmza f5cb20ad6b Add whoami as a second real app (docs/08 hands-on exercise) 2026-09-03 03:52:11 +01:00
ahmza 574d3032db Align 08-adding-new-apps with Gitea repo and Pod Security lesson 2026-09-03 03:50:43 +01:00
ahmza 39e04e43d0 Update Longhorn docs for two-worker topology 2026-09-03 03:28:13 +01:00
ahmza 502de4fdf0 Configure MetalLB BGP service network 2026-09-03 02:19:46 +01:00
ahmza b6f8f36c5b Point Argo CD at Gitea and configure storage workers 2026-09-03 01:54:37 +01:00
ahmza a5ddf11992 Adapt Talos config for five-node mixed architecture cluster 2026-09-02 22:50:34 +01:00
Maxwell MorrisandClaude Sonnet 5 110bd97cca Move to a three-node cluster with a Talos VIP; add Longhorn
Every node is now both control plane and worker, giving real tolerance
for losing any single machine (etcd quorum needs 3, not 1). A Talos VIP
gives the cluster one stable address regardless of which node answers.

Also pre-installs Longhorn for replicated storage, backed by a Talos
UserVolume on each node's second disk (>=900GB, non-system) rather than
the default path — mirroring the pattern from the homescale repo.

Docs renumbered to make room for 06-longhorn.md; checklist, glossary,
network map, and CLAUDE.md's guided-bootstrap instructions updated to
match, including asking the user for node IPs, VIP, and disk info before
generating any Talos config.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-08-22 18:25:38 +01:00
Maxwell MorrisandClaude Sonnet 5 92c3ad3191 Initial commit: GitOps Starter Pack
A teaching-first, single-cluster GitOps setup: Talos Linux + Argo CD with
an app-of-apps layout, MetalLB pre-installed for real LoadBalancer IPs on
bare metal, a demo app, and a progressive docs/ walkthrough with a
CLAUDE.md tutor persona and guided bootstrap checklist.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-08-22 17:30:45 +01:00