Auto-sync: 2026-08-12

This commit is contained in:
Dominik Schön
2026-08-12 22:00:11 +00:00
parent c392fc45f0
commit 222f286adc
5 changed files with 22 additions and 13 deletions
+1 -1
View File
@@ -27,7 +27,7 @@
- Velero backups PartiallyFailed for 121 days — all PVCs skipped - Velero backups PartiallyFailed for 121 days — all PVCs skipped
- Fix 1: Created VolumeSnapshotClass `ceph-rbd-snapclass` (rbd.csi.ceph.com) - Fix 1: Created VolumeSnapshotClass `ceph-rbd-snapclass` (rbd.csi.ceph.com)
- Fix 2: Migrated ArgoCD repoURLs from dead Gitea (10.0.30.105) to new (ssh://git@10.0.30.202:22) - Fix 2: Migrated ArgoCD repoURLs from dead Gitea (10.0.30.105) to new (ssh://git@10.0.30.202:22)
- Gitea SSH user is `git` not `gitea`; git.schoen.codes → Traefik (10.0.30.203), SSH on 10.0.30.202 - Gitea SSH user is `git` not `gitea`; git.schoen.codes → Traefik (10.0.30.208), SSH on 10.0.30.202
- New SSH deploy key generated, added to Gitea repo - New SSH deploy key generated, added to Gitea repo
- Fix 3: `features: EnableCSI` must be under `configuration:` in Velero Helm values (not top-level) - Fix 3: `features: EnableCSI` must be under `configuration:` in Velero Helm values (not top-level)
- Must be string, not array — array form breaks Helm template - Must be string, not array — array form breaks Helm template
+17 -8
View File
@@ -55,14 +55,23 @@ modified: "2026-07-24"
| 10.0.30.141 | CT141 | Monitoring (Prometheus/Grafana) | | 10.0.30.141 | CT141 | Monitoring (Prometheus/Grafana) |
| 10.0.30.145 | CT145 | Voice Pipeline (PJSIP :5060) | | 10.0.30.145 | CT145 | Voice Pipeline (PJSIP :5060) |
## K8s LoadBalancers (10.0.30.2xx) ## K8s LoadBalancers (10.0.30.2xx) — Cilium LB IPAM, all pinned
| IP | Service | Namespace | | IP | Service | Namespace | Port |
|----|---------|-----------| |----|---------|-----------|------|
| 10.0.30.201 | Hindsight API :9177 | hindsight | | 10.0.30.200 | Gitea SSH | gitea | 22 |
| 10.0.30.204 | InfluxDB :8086 | influxdb | | 10.0.30.201 | Grafana | monitoring | 3000 |
| 10.0.30.205 | Grafana | monitoring | | 10.0.30.202 | Prometheus | monitoring | 9090 |
| 10.0.30.206 | Prometheus :9090 | monitoring | | 10.0.30.203 | Traefik (K8s Ingress) | kube-system | 80/443 |
| 10.0.30.207 | Loki :3100 | logging | | 10.0.30.204 | InfluxDB | influxdb | 8086 |
| 10.0.30.205 | PostgreSQL (CNPG rw LB) | postgres | 5432 |
| 10.0.30.208 | Hindsight API | hindsight | 9177 |
## External CTs (10.0.30.xxx)
| IP | CT/VM | Service | Notes |
|----|-------|---------|-------|
| 10.0.30.99 | CT111 | Seafile v13.0.19 (Docker) | cloud.familie-schoen.com, routed via K8s Traefik IngressRoute |
> All IPs pinned via `io.cilium/lb-ipam-ips` annotation. Pool: 10.0.30.200250.
## DMZ / Reverse Proxies (10.0.60.x) ## DMZ / Reverse Proxies (10.0.60.x)
| IP | Host | Service | | IP | Host | Service |
+1 -1
View File
@@ -23,7 +23,7 @@ modified: "2026-07-24"
| 9090 | Prometheus | 10.0.30.206 | LB | | 9090 | Prometheus | 10.0.30.206 | LB |
| 9093 | Alertmanager | K8s internal | | | 9093 | Alertmanager | K8s internal | |
| 9095 | HolmesGPT Adapter | K8s internal | Alertmgr → HolmesGPT | | 9095 | HolmesGPT Adapter | K8s internal | Alertmgr → HolmesGPT |
| 9177 | Hindsight API | 10.0.30.201 | LB, NOT localhost | | 9177 | Hindsight API | 10.0.30.208 | LB, NOT localhost |
| 9221 | PVE Exporter | 10.0.30.141 | | | 9221 | PVE Exporter | 10.0.30.141 | |
| 9283 | Ceph Prometheus | 10.0.20.91 | active mgr | | 9283 | Ceph Prometheus | 10.0.20.91 | active mgr |
| 9345 | RKE2 Server URL | 10.0.30.50 | cp-01 | | 9345 | RKE2 Server URL | 10.0.30.50 | cp-01 |
+2 -2
View File
@@ -10,8 +10,8 @@ modified: "2026-07-24"
## Deployment ## Deployment
- **Namespace:** hindsight (K8s) - **Namespace:** hindsight (K8s)
- **API:** LoadBalancer `10.0.30.201:9177` (**NICHT localhost**) - **API:** LoadBalancer `10.0.30.208:9177` (**NICHT localhost**)
- **Health:** `curl -s http://10.0.30.201:9177/health` - **Health:** `curl -s http://10.0.30.208:9177/health`
- **Backend:** PostgreSQL + pgvector - **Backend:** PostgreSQL + pgvector
- **Config:** `~/.hermes/hindsight/config.json` (api_url gesetzt) - **Config:** `~/.hermes/hindsight/config.json` (api_url gesetzt)
+1 -1
View File
@@ -31,7 +31,7 @@ modified: "2026-07-24"
## GitOps ## GitOps
- **ArgoCD**: SSH Deploy Keys (read-only) auf Gitea - **ArgoCD**: SSH Deploy Keys (read-only) auf Gitea
- 15 Applications via SSH (`ssh://git@10.0.30.202:22/dominik/iac-homelab.git`) - 15 Applications via SSH (`ssh://git@10.0.30.202:22/dominik/iac-homelab.git`)
- **Gitea SSH user is `git`, not `gitea`** — `git.schoen.codes` resolves to Traefik (10.0.30.203, HTTP only), SSH is on 10.0.30.202:22 - **Gitea SSH user is `git`, not `gitea`** — `git.schoen.codes` resolves to Traefik (10.0.30.208, HTTP only), SSH is on 10.0.30.202:22
- Workflow: IaC repo auschecken → ändern → commit+push → ArgoCD sync → verify → lokale Kopie löschen - Workflow: IaC repo auschecken → ändern → commit+push → ArgoCD sync → verify → lokale Kopie löschen
- Siehe [[concepts/gitops-workflow]] - Siehe [[concepts/gitops-workflow]]