0f77faea81
ci(neuron-prod): deploy neuron@v0.4.0
2026-04-24 10:22:56 +00:00
add9d92fd0
chore(neuron-prod): restart pods to pick up NEURON_DATA_DIR configmap change
2026-04-24 04:57:11 -05:00
b5e8ea9111
fix(neuron-prod): set NEURON_DATA_DIR to point app to PVC database
...
NeuronModule reads NEURON_DATA_DIR to construct the DB path as
$NEURON_DATA_DIR/neuron.db. Without this env var the app falls
back to a temp file, losing all data on pod restart. Also renamed
the PVC file from neuron-prod.db to neuron.db to match.
2026-04-24 04:56:29 -05:00
883c4afd50
ci(neuron-prod): restart mcp and rest pods to reload DB state
2026-04-24 04:47:33 -05:00
bd2a6ccddb
ci(neuron-stage): deploy neuron@stage-e743beed
2026-04-24 09:25:54 +00:00
87d11aa87c
ci(neuron-prod): deploy neuron@v0.3.2
2026-04-24 09:21:57 +00:00
9d824aaf1f
feat(neuron-stage): scale stage MCP and REST to 1 replica for cultivation loop
2026-04-24 04:03:01 -05:00
129dd0d606
ci(neuron-prod): deploy neuron@v0.3.1
2026-04-24 08:58:38 +00:00
9bf99bdd8e
fix(neuron-prod): add PVC and volume mount for neuron-license SQLite data
...
The license server writes its database to /data/neuron-license.db.
The deployment had no volume, causing CrashLoopBackOff on first start.
2026-04-24 03:13:56 -05:00
d66062b4cc
ci(neuron-prod): deploy neuron@v0.3.0
2026-04-24 08:12:04 +00:00
7a47e0cbf9
ci(neuron-prod): deploy neuron@v0.2.0
2026-04-24 08:04:37 +00:00
59aa0f0dfb
deploy neuron-license service to prod
...
Adds license deployment, service, ingress route (/license), and
Unkey + admin token secrets via ExternalSecret. Image built and
pushed by CI on merge of neuron PR #30 .
2026-04-24 01:42:07 -05:00
b1867a542d
add nightly Vault raft snapshot backup to R2
...
Snapshot via vault operator raft snapshot save using a least-privilege
periodic token. Stored in legion-vault-backup R2 bucket via restic.
Retains 30 daily / 12 weekly / 6 monthly snapshots. Runs at 3am,
offset from the Gitea backup at 2am.
2026-04-24 01:36:30 -05:00
816d79760d
add alpha/beta/gamma subdomains on neurontechnologies.ai
...
- Tunnel ingress rules for alpha/beta/gamma.neurontechnologies.ai
- DNS CNAME records pointing to legion tunnel
- k8s ingress rules routing to neuron-alpha/beta/gamma services (port 8001)
- TLS certs via cert-manager for new hostnames
2026-04-24 01:13:03 -05:00
3e28dd88eb
ci(neuron-prod): deploy neuron@v0.0.15
2026-04-24 05:45:09 +00:00
97973ba6be
ci(neuron-prod): deploy neuron@v0.0.14
2026-04-24 05:35:02 +00:00
c3f2ecc9a9
ci(neuron-prod): deploy neuron@v0.0.13
2026-04-24 05:16:25 +00:00
b9e1c94b36
ci(neuron-prod): deploy neuron@v0.0.11
2026-04-24 04:53:51 +00:00
69c2f1d2f9
ci(neuron-prod): deploy neuron@v0.0.8
2026-04-24 04:23:02 +00:00
0b23a5e964
ci(neuron-prod): deploy neuron@v0.0.7
2026-04-24 04:14:10 +00:00
d71bc3bd9e
ci(neuron-prod): scale prod to 1 replica — DB migrated, v0.0.6 ready
2026-04-23 23:06:55 -05:00
c9e9f11db8
ci(neuron-prod): deploy neuron@v0.0.6
2026-04-24 04:04:24 +00:00
5085840a79
Add neuron prod DB backup and tighten actuator surface
...
- Add hourly restic backup CronJob to neuron-prod namespace
- Backs up /data/neuron-prod.db to Cloudflare R2 (legion-neuron-backup bucket)
- Retention: 24 hourly, 7 daily, 4 weekly — <$0.01/month at current DB size
- ExternalSecret pulls restic password + R2 creds from Vault secret/r2
- Actuator exposure per environment:
- prod: health,info only / show-details=never (no internals exposed)
- stage: health,info,metrics,loggers / show-details=always (pre-prod visibility)
- dev: full (health,info,metrics,env,beans,loggers,mappings) / show-details=always
2026-04-23 21:43:20 -05:00
cd0cb30933
ci: add neuron-technologies runner for Gitea Actions
2026-04-23 21:19:26 -05:00
cc4db4dc11
feat(neuron): gamma zone, all-slot ingress, snapshot job, self-improvement loop script
2026-04-23 13:57:13 -05:00
27b4b1e066
feat(neuron): add alpha slot + lb Service; standardize all slots to port 8001
2026-04-23 13:47:21 -05:00
882c4a79d4
feat(neuron): add neuron-beta deployment on port 8002 with separate PVC
2026-04-23 13:34:55 -05:00
43737ce5cb
chore(ci-runner): restore ESO refresh interval to 1h
2026-04-23 13:32:18 -05:00
c8ee5e66ee
fix(ci-runner): use NodePort HTTP URL to bypass Cloudflare gRPC issue
2026-04-23 13:15:16 -05:00
e69052d89e
fix(ci-runner): use external Gitea URL now that REQUIRE_SIGNIN_VIEW is disabled
2026-04-23 12:58:51 -05:00
28fb4e29f4
fix(ci-runner): use internal cluster URL for runner registration (gRPC)
2026-04-23 12:57:11 -05:00
b1898a7a0f
fix(ci-runner): revert to external Gitea URL for git clone compatibility
2026-04-23 12:53:41 -05:00
521079590b
chore(ci-runner): restore ESO refresh interval to 1h
2026-04-23 12:45:34 -05:00
0d9f74f68f
fix(ci-runner): use internal cluster URL for Gitea to bypass Cloudflare Access
2026-04-23 12:45:00 -05:00
415ee9eb68
chore(ci): restore ESO refresh interval to 1h after token sync
2026-04-23 12:33:01 -05:00
b31aad85a7
chore(ci): shorten ESO refresh to 10s to force runner token update
2026-04-23 12:31:11 -05:00
e84c586282
chore(ci): force ESO resync for gitea-runner-secret with fresh registration token
2026-04-23 12:29:58 -05:00
095d874552
Remove docuseal-old temp instance
2026-04-21 18:15:49 -05:00
7ba730324f
Restore HOST env var for Docuseal registration
2026-04-21 18:13:31 -05:00
bfe59cafac
Remove explicit HOST env var, let Traefik Host header handle registration
2026-04-21 18:00:17 -05:00
a5c8e78c1f
Set HOST env var so Docuseal registers correct public hostname
2026-04-21 17:43:15 -05:00
0cbb06660a
Add temporary docuseal-old at sign.neuralplatform.ai for license transfer
2026-04-21 17:33:40 -05:00
8e87077bf0
Move Docuseal to sign.neurontechnologies.ai
2026-04-21 17:24:10 -05:00
e7fda0c9ee
Upgrade Docuseal to Pro image (ee.docuseal.com/lip5viwf/ds-ee)
2026-04-21 16:40:06 -05:00
85e5cca571
Scale down Mudcraft to free memory on Legion
2026-04-21 16:21:10 -05:00
5b739b3217
Add Gmail SMTP config to Docuseal via Vault ExternalSecret
2026-04-21 16:17:50 -05:00
d18dd66f0c
Fix Docuseal crash: remove invalid DATABASE_URL, let it default to SQLite
2026-04-21 14:53:32 -05:00
d40fb8c3f1
Add Docuseal e-signature service at sign.neuralplatform.ai
...
- k8s manifests: Deployment, Service, PVC, Ingress, ExternalSecret
- Argo CD app watching servers/legion/k8s/docuseal
- CF tunnel ingress rule for sign.neuralplatform.ai
- Vault secret at secret/docuseal (secret_key_base seeded)
2026-04-21 14:26:01 -05:00
3b3811942c
Update Legion LAN IP from 192.168.68.77 to 192.168.8.148
...
Static IP assigned on new network segment. Updates:
- variables.tf default legion_ip
- headscale nameserver config
- bootstrap.sh default target
- README/RUNBOOK documentation
- media ingress comment
2026-04-21 10:32:39 -05:00
4b548590ef
config: add NEURON_DATA_DIR and NEURON_CHROMA_URL to neuron-dev configmap
2026-04-17 11:46:10 -05:00
Neuron CI