factory

arcodange-org/factory

Fork 0

Commit Graph

Select branches

Hide Pull Requests

docs/telegram-gateway-auth-adr

main

vibe/batch-pr-factory1-argocd-dlc

vibe/batch-pr-factory2-postgres-dlc

vibe/batch-pr-factory3-vault-oauth-user

vibe/batch-pr-factory4-secret-propagation-inventory

vibe/batch-pr-factory5-conditional-vault-disable

#1

#2

#3

#4

#5

#6

#7

#8

#9

827af6b392 Merge pull request 'docs(runbooks): runbook « mettre en service une nouvelle application web »' (#9) from claude/new-web-app-runbook into main main arcodange 2026-05-31 17:25:37 +02:00
8330d82225 docs(runbooks): add "new web app" setup runbook under doc/runbooks/ Gabriel Radureau 2026-05-31 17:22:30 +02:00
54b3092305 Merge pull request 'fix(docs): place ADR under doc/adr (singular) per convention' (#8) from fix/adr-path-doc-singular into main arcodange 2026-05-09 15:29:22 +02:00
e0fb337a5f docs: place new ADR under doc/adr (singular) per convention Gabriel Radureau 2026-05-09 14:25:37 +02:00
ea500abe62 Merge pull request 'docs(adr): telegram-gateway auth (Phase 1.5)' (#7) from docs/telegram-gateway-auth-adr into main arcodange 2026-05-09 14:22:12 +02:00
62673a2d65 docs(adr): telegram-gateway auth (Phase 1.5) docs/telegram-gateway-auth-adr Gabriel Radureau 2026-05-09 13:58:27 +02:00
4163b06659 Merge pull request 'argocd: add telegram-gateway application' (#6) from feat/homelab-gateway-app into main arcodange 2026-05-09 12:41:49 +02:00
3fb7544351 argocd: rename homelab-gateway → telegram-gateway Gabriel Radureau 2026-05-09 12:35:37 +02:00
5038956332 argocd: add homelab-gateway application Gabriel Radureau 2026-05-09 12:25:30 +02:00
6ede249da9 🔒 fix(ansible): gate vault auth disable behind vault_oidc_force_reset (default off) (#5) Gabriel Radureau 2026-05-06 15:03:33 +02:00
1a1d7da329 🔒 fix(ansible): gate vault auth disable behind vault_oidc_force_reset (default off) vibe/batch-pr-factory5-conditional-vault-disable Gabriel Radureau 2026-05-06 15:03:23 +02:00
9e821e1626 ♻️ refactor(ansible): move gitea secret user-propagation list to inventory (#4) Gabriel Radureau 2026-05-06 14:48:05 +02:00
654c1def2e ♻️ refactor(ansible): move gitea secret user-propagation list to inventory vibe/batch-pr-factory4-secret-propagation-inventory Gabriel Radureau 2026-05-06 14:47:51 +02:00
69b7e9ddcb Merge remote-tracking branch 'origin/main' Gabriel Radureau 2026-05-06 14:38:01 +02:00
069edd72f1 chore(cicd): drop temporary commented-out tasks from 03_cicd.yml Gabriel Radureau 2026-05-06 14:37:48 +02:00
a644436746 🔒 fix(ansible): propagate vault_oauth__sh_b64 to user-owned namespaces (arcodange) (#3) Gabriel Radureau 2026-05-06 14:18:06 +02:00
d42b031ec8 🔒 fix(ansible): propagate vault_oauth__sh_b64 to user-owned namespaces (arcodange) vibe/batch-pr-factory3-vault-oauth-user Gabriel Radureau 2026-05-06 14:17:52 +02:00
a3526e51f8 Merge remote-tracking branch 'origin/main' Gabriel Radureau 2026-05-06 12:58:01 +02:00
01f0f37691 chore(ansible): add per-collection ansible.cfg + drop trailing whitespace Gabriel Radureau 2026-05-06 12:55:54 +02:00
f114d7e6f0 feat(argocd): allow per-app syncPolicy override in values.yaml Gabriel Radureau 2026-05-06 12:55:49 +02:00
1688fe0dfd fix(crowdsec): clean up Failed pods before Traefik middleware reload Gabriel Radureau 2026-05-06 12:55:39 +02:00
499410a160 feat(cicd): persist gitea act-runner cache + isolate on dedicated docker network Gabriel Radureau 2026-05-06 12:55:34 +02:00
e3e0decd98 docs(adr): extend network-architecture ADR with .lab SSL/TLS deep dive Gabriel Radureau 2026-05-06 12:55:27 +02:00
1ae28cb944 docs(longhorn): document 2026-04-13 power-cut recovery + add data-recovery tooling Gabriel Radureau 2026-05-06 12:55:18 +02:00
934b62d922 chore(ansible): use project-local uv venv for ansible runtime deps Gabriel Radureau 2026-05-06 12:35:28 +02:00
09a270d179 🤖 ci(postgres): declare dance-lessons-coach DB + role + pgbouncer lookup (#2) Gabriel Radureau 2026-05-06 08:18:30 +02:00
84f8e28978 🤖 ci(postgres): declare dance-lessons-coach DB + role + pgbouncer lookup vibe/batch-pr-factory2-postgres-dlc Gabriel Radureau 2026-05-06 08:18:08 +02:00
0ce004cc6a 🤖 ci(argocd): enroll dance-lessons-coach + per-app org override in apps template (#1) Gabriel Radureau 2026-05-06 08:01:50 +02:00
f8009989fc 🤖 ci(argocd): enroll dance-lessons-coach + per-app org override in apps template vibe/batch-pr-factory1-argocd-dlc Gabriel Radureau 2026-05-06 08:00:45 +02:00
e6fc24c101 fix(dns): harden DNS resilience after power-cut incident Gabriel Radureau 2026-04-14 10:54:42 +02:00
355ab11c4d fix(system_docker): fix daemon.json corruption on re-run Gabriel Radureau 2026-04-14 10:52:27 +02:00
ad70b424cf Add sequence diagram to Docker storage ADR Gabriel Radureau 2026-04-08 11:33:03 +02:00
b299469d00 Consolidate ADRs into docs/adr/ Gabriel Radureau 2026-04-08 11:09:34 +02:00
fc9164f11e Update README with detailed playbook execution sequence Gabriel Radureau 2026-04-08 11:04:11 +02:00
c751b621ba Enable PostgreSQL backup in backup playbook Gabriel Radureau 2026-04-08 11:04:07 +02:00
07a619b274 Fix step-issuer ARM64 compatibility on pi3 Gabriel Radureau 2026-04-08 11:04:03 +02:00
9931f81998 Update Docker storage configuration and revoke token task Gabriel Radureau 2026-04-07 19:19:03 +02:00
437fd506ed Fix Vault Gitea OIDC setup: remove trailing slash from bound_issuer and pass CA certificate Gabriel Radureau 2026-04-07 19:17:47 +02:00
943915be74 gitea act runner: reuse docker images Gabriel Radureau 2026-04-07 09:20:30 +02:00
8a82d14797 upgrade gitea version to 1.25.5 Gabriel Radureau 2026-04-06 10:55:20 +02:00
0285d171ff tweack backup and setup cronjob to fix pg table ownership Gabriel Radureau 2026-03-15 22:14:12 +01:00
55d137132f backup k3s volumes Gabriel Radureau 2026-01-22 19:05:31 +01:00
451dfa5133 restart traefik when editing crowdsec middleware Gabriel Radureau 2026-01-03 20:08:00 +01:00
17e99db641 runner image and setup for gitea workflow with self signed cert Gabriel Radureau 2026-01-03 12:44:27 +01:00
07e5ff460b use self signed cert Gabriel Radureau 2026-01-02 15:07:59 +01:00
5b3c896a25 use self signed cert for internal domain arcodange.lab Gabriel Radureau 2025-12-31 17:38:04 +01:00
91219c49f1 use exposed webapp.arcodange.fr instead in gitea cicd Gabriel Radureau 2025-12-23 14:23:12 +01:00
74b8676244 auto upgrade webapp image Gabriel Radureau 2025-12-23 14:20:56 +01:00
1fd47e9d97 install pihole to fix failing duckdns name servers Gabriel Radureau 2025-12-23 14:20:04 +01:00
0fbfbd589f tool plausible CE analytics database Gabriel Radureau 2025-12-11 07:24:56 +01:00
8d6be311ae argocd: add --enable-helm to kustomize ; enable shell from web ui Gabriel Radureau 2025-12-10 13:48:22 +01:00
2b4aa30a64 use cache redis with crowdsec traefik bouncer Gabriel Radureau 2025-12-06 15:09:36 +01:00
cd3c4d86ff install socat package to enable kubectl port-forward Gabriel Radureau 2025-12-06 15:09:12 +01:00
45d39d13b4 postgres db for crowdsec Gabriel Radureau 2025-12-03 16:45:43 +01:00
f4cb04c9c9 configure crowdsec captcha with cloudflare turnstile Gabriel Radureau 2025-12-03 15:07:37 +01:00
17a0f23bbb declare gitea external service Gabriel Radureau 2025-12-01 16:22:44 +01:00
f7bfe2f71d get cloudflared client real ip and fix crowdsec mw Gabriel Radureau 2025-11-29 17:24:51 +01:00
72628f0f0e add crowdsec plugin and middleware for traefik Gabriel Radureau 2025-11-26 14:19:33 +01:00
b6d240ce31 configure ovh client and allow cms project to access zoho client Gabriel Radureau 2025-11-07 13:54:52 +01:00
2d8f5de482 add s3 endpoint to cf r2 secret Gabriel Radureau 2025-10-30 10:27:48 +01:00
140dab4f1d cloudflare management for cms Gabriel Radureau 2025-10-30 10:17:14 +01:00
9b09e6bd86 fixes and set preferred_ip since new interface eth0 Gabriel Radureau 2025-10-09 17:27:42 +02:00
83410d9eb1 set cms application argo image updater strategy Gabriel Radureau 2025-10-09 16:12:31 +02:00
fa5bc7e30e deploy argocd image updater Gabriel Radureau 2025-10-09 14:42:45 +02:00
c19cf7eced register cms argo application Gabriel Radureau 2025-09-09 09:04:18 +02:00
68fb29357a add tag to run single arcodange.factory.gitea_sync role Gabriel Radureau 2025-09-09 09:03:51 +02:00
6d3adb5834 setup cron local mail reporting and longhorn recurring backup job Gabriel Radureau 2025-09-01 19:38:50 +02:00
2d4cb5d8a5 setup gcs backup bucket for longhorn Gabriel Radureau 2025-08-31 20:50:28 +02:00
b9a46afb82 renamed iac/main.tf Gabriel Radureau 2025-08-30 18:00:28 +02:00
c6807851c5 edit crontab to store backup for postgres and gitea Gabriel Radureau 2025-08-28 19:35:52 +02:00
c5a8d5ef52 fixes Gabriel Radureau 2025-08-28 10:13:16 +02:00
6ec2d299fc fix gitea action registration Gabriel Radureau 2025-08-27 18:11:14 +02:00
3cfc5f2bfd refactor storage and setup shared backup directory Gabriel Radureau 2025-08-27 17:26:05 +02:00
588a6482e9 setup longhorn and prepare nfs server to store backups Gabriel Radureau 2025-08-14 15:42:33 +02:00
b4bde14809 fixes Gabriel Radureau 2025-08-09 17:01:18 +02:00
561331b825 fixes Gabriel Radureau 2025-08-07 15:51:53 +02:00
b8636a6d48 document uv python package manager command for ansible setup - minor fixes in playbook Gabriel Radureau 2025-08-05 12:22:27 +02:00
58aece92b6 disable allowIp middleware while fixing ip filtering - upgrade traefik and fix gitea admin urls by adding prefix Gabriel Radureau 2025-08-04 17:35:11 +02:00
b185999478 add pi3 to inventory + fixes Gabriel Radureau 2024-12-15 22:13:03 +01:00
fa0df6f175 create gitea tofu bot user Gabriel Radureau 2024-11-05 16:33:58 +01:00
66e9ec5091 ERP: declare argocd app and postgresql database Gabriel Radureau 2024-11-04 12:58:49 +01:00
1c22b946d6 role management for postgres synergy with vault dynamic credentials Gabriel Radureau 2024-10-30 10:36:31 +01:00
f9a47c8ccf traefik CA pem is a client crt not the Authority (let's encrypt) and is not needed here Gabriel Radureau 2024-10-18 19:27:00 +02:00
50399328dc configure vault oidc login and cicd jwt login Gabriel Radureau 2024-10-07 17:24:25 +02:00
5beaee60ac argocd: add webapp app Gabriel Radureau 2024-09-29 17:55:19 +02:00
2fd5ee703b gitea_action: fix extra_hosts Gabriel Radureau 2024-09-29 17:11:38 +02:00
ed45b993a9 fix ingress pending status Gabriel Radureau 2024-09-28 22:09:44 +02:00
407bf12165 setup gitea as oidc provider for tool vault Gabriel Radureau 2024-09-27 18:21:52 +02:00
1332def067 setup pgbouncer role and pg function Gabriel Radureau 2024-09-02 11:29:15 +02:00
aa127b53ec reference tool repo Gabriel Radureau 2024-08-29 14:42:20 +02:00
955006dd5d changed app path from argocd to chart Gabriel Radureau 2024-08-27 10:14:33 +02:00
3c77cb007a upgrade to traefik v3 - switched to DaemonSet to prevent NAT and keep source IP Gabriel Radureau 2024-08-26 19:27:45 +02:00
f15bdb707e simple helm chart for url-shortener app Gabriel Radureau 2024-08-23 12:37:31 +02:00
3b4140a0c1 deploy argo cd Gabriel Radureau 2024-08-21 00:42:49 +02:00
95f365dbb5 provide PACKAGES_TOKEN secret Gabriel Radureau 2024-08-20 11:25:19 +02:00
80fa4ca92f doc: begin cicd setup md Gabriel Radureau 2024-08-18 12:02:16 +02:00
aaaee3066a new gitea_sync role Gabriel Radureau 2024-08-18 11:34:37 +02:00
22533623bd désactiver le mode mirroir pour pouvoir 'git push' sur gitea Gabriel Radureau 2024-08-17 14:15:40 +02:00
4d83e9fceb gitea add ssh key in setup Gabriel Radureau 2024-08-17 13:49:36 +02:00
459d255471 new role gitea_repo Gabriel Radureau 2024-08-16 13:52:17 +02:00

1 2