dominik/memory
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Auto-sync: 2026-07-26

Browse Source
This commit is contained in:
Dominik Schön
2026-07-26 22:00:53 +00:00
parent 92a13fdfa4
commit c96ad03ed7
3 changed files with 25 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
log.md
+7
View File
@@ -1,5 +1,12 @@
# Memory Log # Memory Log
## [2026-07-26] fix | Gitea SSH Push Key + Paperless IngressRoute Hostname
- **Gitea SSH access**: No SSH key on Hermes VM was authorized for Gitea. HTTP port 3000 has no external IngressRoute. Generated dedicated ED25519 key (`id_ed25519_gitea-hermes-push`), stored in 1Password (ID: lqaebdtewj5xatvpzfrkag73v4), registered in Gitea as key ID 4 for user dominik. SSH via `10.0.30.202:22` (LoadBalancer) is the reliable push path.
- **Paperless v3 IngressRoute**: Host was `dokumente.familie-schoen.com` instead of `dokumente-neu.familie-schoen.com`. Two-track fix: kubectl patch (immediate) + Git commit `fa4184b` (permanent via ArgoCD self-heal). Backtick escaping in Traefik Host() match requires `--patch-file` not inline `--patch`.
- Wiki updated: systems/gitea.md (SSH push key section), reference/ssh-keys.md (new key entry)
- Solution docs: workflows/2026-07-26-gitea-ssh-access-for-hermes.md, bug-fixes/2026-07-26-paperless-ingressroute-hostname-fix.md
- Hindsight: both solutions indexed with tags
## [2026-07-25] fix | Loki 500 Error + CNPG Leader Election + Stale Pods Cleanup ## [2026-07-25] fix | Loki 500 Error + CNPG Leader Election + Stale Pods Cleanup
- **Loki HTTP 500**: `replication_factor: 3` in hash ring with only 1 SingleBinary instance → "too many unhealthy instances in the ring". Chart v6.42.0 ignores `loki.common.replication_factor` — correct path is `loki.commonConfig.replication_factor`. Fix: commit `cb70d36` - **Loki HTTP 500**: `replication_factor: 3` in hash ring with only 1 SingleBinary instance → "too many unhealthy instances in the ring". Chart v6.42.0 ignores `loki.common.replication_factor` — correct path is `loki.commonConfig.replication_factor`. Fix: commit `cb70d36`
- **Memcached caches disabled**: `chunksCache.enabled: false`, `resultsCache.enabled: false` (SingleBinary doesn't need them). Commit `f8852e8` - **Memcached caches disabled**: `chunksCache.enabled: false`, `resultsCache.enabled: false` (SingleBinary doesn't need them). Commit `f8852e8`
reference/ssh-keys.md
+9 -1
View File
@@ -3,7 +3,7 @@ title: SSH-Keys (Quick Reference)
category: reference category: reference
tags: [ssh, keys, reference, quick-lookup] tags: [ssh, keys, reference, quick-lookup]
created: "2026-07-24" created: "2026-07-24"
modified: "2026-07-24" modified: "2026-07-26"
--- ---
# SSH-Keys # SSH-Keys
@@ -15,6 +15,8 @@ modified: "2026-07-24"
| `id_ed25519_workers` | RKE2 Worker Nodes | `...kzBo` | 10.0.30.6x | | `id_ed25519_workers` | RKE2 Worker Nodes | `...kzBo` | 10.0.30.6x |
| `id_ed25519_cloudinit` | Cloud-init initial | `...JUYm` | VM200, Workers | | `id_ed25519_cloudinit` | Cloud-init initial | `...JUYm` | VM200, Workers |
| `id_ed25519` | VM200 (debian user) | `...MmkM` | 10.0.30.124 | | `id_ed25519` | VM200 (debian user) | `...MmkM` | 10.0.30.124 |
| `id_ed25519_gitea-hermes-push` | Gitea Git Push (dominik) | `...rrI` | 10.0.30.202:22 (Gitea SSH LB) |
| `id_ed25519_galera` | Galera Cluster | — | 10.0.30.7x |
## SSH-Befehle ## SSH-Befehle
```bash ```bash
@@ -36,6 +38,12 @@ ssh -i /root/.ssh/id_ed25519_workers root@10.0.30.6x
## CT9999 (Traefik DMZ) ## CT9999 (Traefik DMZ)
- root / [REDACTED] (siehe 1Password) - root / [REDACTED] (siehe 1Password)
## Gitea Hermes Push Key
- Key: `~/.ssh/id_ed25519_gitea-hermes-push`
- 1Password: "Gitea Hermes Push Key" (ID: lqaebdtewj5xatvpzfrkag73v4)
- Verwendung: `GIT_SSH_COMMAND="ssh -i ~/.ssh/id_ed25519_gitea-hermes-push -o StrictHostKeyChecking=no" git push ssh://git@10.0.30.202:22/dominik/iac-homelab.git HEAD:main`
## Related ## Related
- [[reference/ip-map]] - [[reference/ip-map]]
- [[concepts/credential-policy]] - [[concepts/credential-policy]]
- [[systems/gitea]]
systems/gitea.md
+9 -1
View File
@@ -3,7 +3,7 @@ title: Gitea (Git Server + CI)
category: systems category: systems
tags: [gitea, git, ci, actions] tags: [gitea, git, ci, actions]
created: "2026-07-24" created: "2026-07-24"
modified: "2026-07-24" modified: "2026-07-26"
--- ---
# Gitea (Git Server + CI) # Gitea (Git Server + CI)
@@ -44,6 +44,14 @@ modified: "2026-07-24"
- iac-homelab hat EINEN remote: `origin` = K8s Gitea (git.schoen.codes) - iac-homelab hat EINEN remote: `origin` = K8s Gitea (git.schoen.codes)
- Alter CT108 remote wurde entfernt (CT108 decommissioned) - Alter CT108 remote wurde entfernt (CT108 decommissioned)
## Hermes Agent SSH Push Key
- **Key:** `~/.ssh/id_ed25519_gitea-hermes-push` (hermes-agent@gitea-push)
- **1Password:** "Gitea Hermes Push Key" (ID: lqaebdtewj5xatvpzfrkag73v4)
- **Gitea Key ID:** 4 (title: hermes-agent-push, user: dominik)
- **Verwendung:** `GIT_SSH_COMMAND="ssh -i ~/.ssh/id_ed25519_gitea-hermes-push -o StrictHostKeyChecking=no" git push ssh://git@10.0.30.202:22/dominik/iac-homelab.git HEAD:main`
- **Wichtig:** Gitea HTTP (Port 3000) hat keine externe IngressRoute — SSH (Port 22 via LoadBalancer) ist der einzige zuverlässige Weg für Git-Pushes von außerhalb K8s.
## Related ## Related
- [[systems/rke2-kubernetes]] - [[systems/rke2-kubernetes]]
- [[concepts/gitops-workflow]] - [[concepts/gitops-workflow]]
- Solution Doc: `docs/solutions/workflows/2026-07-26-gitea-ssh-access-for-hermes.md`