From c96ad03ed763fbef7bf70d90c1d18357d1c511ac Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Dominik=20Sch=C3=B6n?= Date: Sun, 26 Jul 2026 22:00:53 +0000 Subject: [PATCH] Auto-sync: 2026-07-26 --- log.md | 7 +++++++ reference/ssh-keys.md | 10 +++++++++- systems/gitea.md | 10 +++++++++- 3 files changed, 25 insertions(+), 2 deletions(-) diff --git a/log.md b/log.md index b96b2d1..07224f7 100644 --- a/log.md +++ b/log.md @@ -1,5 +1,12 @@ # Memory Log +## [2026-07-26] fix | Gitea SSH Push Key + Paperless IngressRoute Hostname +- **Gitea SSH access**: No SSH key on Hermes VM was authorized for Gitea. HTTP port 3000 has no external IngressRoute. Generated dedicated ED25519 key (`id_ed25519_gitea-hermes-push`), stored in 1Password (ID: lqaebdtewj5xatvpzfrkag73v4), registered in Gitea as key ID 4 for user dominik. SSH via `10.0.30.202:22` (LoadBalancer) is the reliable push path. +- **Paperless v3 IngressRoute**: Host was `dokumente.familie-schoen.com` instead of `dokumente-neu.familie-schoen.com`. Two-track fix: kubectl patch (immediate) + Git commit `fa4184b` (permanent via ArgoCD self-heal). Backtick escaping in Traefik Host() match requires `--patch-file` not inline `--patch`. +- Wiki updated: systems/gitea.md (SSH push key section), reference/ssh-keys.md (new key entry) +- Solution docs: workflows/2026-07-26-gitea-ssh-access-for-hermes.md, bug-fixes/2026-07-26-paperless-ingressroute-hostname-fix.md +- Hindsight: both solutions indexed with tags + ## [2026-07-25] fix | Loki 500 Error + CNPG Leader Election + Stale Pods Cleanup - **Loki HTTP 500**: `replication_factor: 3` in hash ring with only 1 SingleBinary instance → "too many unhealthy instances in the ring". Chart v6.42.0 ignores `loki.common.replication_factor` — correct path is `loki.commonConfig.replication_factor`. Fix: commit `cb70d36` - **Memcached caches disabled**: `chunksCache.enabled: false`, `resultsCache.enabled: false` (SingleBinary doesn't need them). Commit `f8852e8` diff --git a/reference/ssh-keys.md b/reference/ssh-keys.md index dcb9c12..5f68bbc 100644 --- a/reference/ssh-keys.md +++ b/reference/ssh-keys.md @@ -3,7 +3,7 @@ title: SSH-Keys (Quick Reference) category: reference tags: [ssh, keys, reference, quick-lookup] created: "2026-07-24" -modified: "2026-07-24" +modified: "2026-07-26" --- # SSH-Keys @@ -15,6 +15,8 @@ modified: "2026-07-24" | `id_ed25519_workers` | RKE2 Worker Nodes | `...kzBo` | 10.0.30.6x | | `id_ed25519_cloudinit` | Cloud-init initial | `...JUYm` | VM200, Workers | | `id_ed25519` | VM200 (debian user) | `...MmkM` | 10.0.30.124 | +| `id_ed25519_gitea-hermes-push` | Gitea Git Push (dominik) | `...rrI` | 10.0.30.202:22 (Gitea SSH LB) | +| `id_ed25519_galera` | Galera Cluster | — | 10.0.30.7x | ## SSH-Befehle ```bash @@ -36,6 +38,12 @@ ssh -i /root/.ssh/id_ed25519_workers root@10.0.30.6x ## CT9999 (Traefik DMZ) - root / [REDACTED] (siehe 1Password) +## Gitea Hermes Push Key +- Key: `~/.ssh/id_ed25519_gitea-hermes-push` +- 1Password: "Gitea Hermes Push Key" (ID: lqaebdtewj5xatvpzfrkag73v4) +- Verwendung: `GIT_SSH_COMMAND="ssh -i ~/.ssh/id_ed25519_gitea-hermes-push -o StrictHostKeyChecking=no" git push ssh://git@10.0.30.202:22/dominik/iac-homelab.git HEAD:main` + ## Related - [[reference/ip-map]] - [[concepts/credential-policy]] +- [[systems/gitea]] diff --git a/systems/gitea.md b/systems/gitea.md index 65e52de..2b555b9 100644 --- a/systems/gitea.md +++ b/systems/gitea.md @@ -3,7 +3,7 @@ title: Gitea (Git Server + CI) category: systems tags: [gitea, git, ci, actions] created: "2026-07-24" -modified: "2026-07-24" +modified: "2026-07-26" --- # Gitea (Git Server + CI) @@ -44,6 +44,14 @@ modified: "2026-07-24" - iac-homelab hat EINEN remote: `origin` = K8s Gitea (git.schoen.codes) - Alter CT108 remote wurde entfernt (CT108 decommissioned) +## Hermes Agent SSH Push Key +- **Key:** `~/.ssh/id_ed25519_gitea-hermes-push` (hermes-agent@gitea-push) +- **1Password:** "Gitea Hermes Push Key" (ID: lqaebdtewj5xatvpzfrkag73v4) +- **Gitea Key ID:** 4 (title: hermes-agent-push, user: dominik) +- **Verwendung:** `GIT_SSH_COMMAND="ssh -i ~/.ssh/id_ed25519_gitea-hermes-push -o StrictHostKeyChecking=no" git push ssh://git@10.0.30.202:22/dominik/iac-homelab.git HEAD:main` +- **Wichtig:** Gitea HTTP (Port 3000) hat keine externe IngressRoute — SSH (Port 22 via LoadBalancer) ist der einzige zuverlässige Weg für Git-Pushes von außerhalb K8s. + ## Related - [[systems/rke2-kubernetes]] - [[concepts/gitops-workflow]] +- Solution Doc: `docs/solutions/workflows/2026-07-26-gitea-ssh-access-for-hermes.md`