ops: scale down all non-critical services — dedicate resources to Neuron

Scaled to replicas: 0: fornax (coordinator/ui/workers), jellyfin via media, overseerr, plex, radarr, sonarr, bazarr, prowlarr, flaresolverr, ollama, harmonic-wordpress, docuseal, listmonk, memos, plane, redpanda, wp-coordinator
2026-04-24 20:07:41 -05:00
parent 6160e8e6b8
commit 91bfc42989
31 changed files with 1022 additions and 27 deletions
@@ -0,0 +1,44 @@
+# ── Outputs ───────────────────────────────────────────────────────────────────
+# After `terraform apply`, use these IPs to update Cloudflare DNS A records.
+#
+# Prod:  neurontechnologies.ai + www.neurontechnologies.ai → prod_lb_ip
+# Stage: stage.neurontechnologies.ai                       → stage_lb_ip
+#
+# In the Legion Terraform (dns-neurontechnologies.tf), replace the tunnel CNAMEs
+# for neurontechnologies.ai, www, and stage with A records pointing to these IPs.
+# Set proxied=true in Cloudflare to keep CDN/DDoS protection layered in front.
+
+output "prod_lb_ip" {
+  description = "Global anycast IP for the production load balancer (neurontechnologies.ai + www)"
+  value       = google_compute_global_address.prod.address
+}
+
+output "stage_lb_ip" {
+  description = "Global anycast IP for the staging load balancer (stage.neurontechnologies.ai)"
+  value       = google_compute_global_address.stage.address
+}
+
+output "prod_ssl_cert_name" {
+  description = "Name of the Google-managed SSL cert for prod (check provisioning status in GCP console)"
+  value       = google_compute_managed_ssl_certificate.prod.name
+}
+
+output "stage_ssl_cert_name" {
+  description = "Name of the Google-managed SSL cert for stage"
+  value       = google_compute_managed_ssl_certificate.stage.name
+}
+
+output "marketing_service_account_email" {
+  description = "Service account email for Cloud Run services"
+  value       = google_service_account.marketing.email
+}
+
+output "cloud_run_services" {
+  description = "Cloud Run service URLs per region"
+  value = {
+    prod_us   = google_cloud_run_v2_service.prod_us.uri
+    prod_eu   = google_cloud_run_v2_service.prod_eu.uri
+    prod_apac = google_cloud_run_v2_service.prod_apac.uri
+    stage     = google_cloud_run_v2_service.stage.uri
+  }
+}