infrastructure

will.anderson/infrastructure

Fork 0

Commit Graph

Author	SHA1	Message	Date
Will Anderson	b5e8ea9111	fix(neuron-prod): set NEURON_DATA_DIR to point app to PVC database NeuronModule reads NEURON_DATA_DIR to construct the DB path as $NEURON_DATA_DIR/neuron.db. Without this env var the app falls back to a temp file, losing all data on pod restart. Also renamed the PVC file from neuron-prod.db to neuron.db to match.	2026-04-24 04:56:29 -05:00
Will Anderson	5085840a79	Add neuron prod DB backup and tighten actuator surface - Add hourly restic backup CronJob to neuron-prod namespace - Backs up /data/neuron-prod.db to Cloudflare R2 (legion-neuron-backup bucket) - Retention: 24 hourly, 7 daily, 4 weekly — <$0.01/month at current DB size - ExternalSecret pulls restic password + R2 creds from Vault secret/r2 - Actuator exposure per environment: - prod: health,info only / show-details=never (no internals exposed) - stage: health,info,metrics,loggers / show-details=always (pre-prod visibility) - dev: full (health,info,metrics,env,beans,loggers,mappings) / show-details=always	2026-04-23 21:43:20 -05:00
Will Anderson	1b8ea63541	feat(neuron): add stage and prod k8s manifests + Argo CD apps Completes the three-env setup (dev was added previously). Each env has deployments, services, ingress, PVC, ConfigMap, and ExternalSecret pulling from Vault. Prod has larger resource limits and 10Gi PVC. Vault secret at secret/neuron-technologies/prod seeded separately.	2026-04-17 09:43:23 -05:00

Author

SHA1

Message

Date

Will Anderson

b5e8ea9111

fix(neuron-prod): set NEURON_DATA_DIR to point app to PVC database

NeuronModule reads NEURON_DATA_DIR to construct the DB path as
$NEURON_DATA_DIR/neuron.db. Without this env var the app falls
back to a temp file, losing all data on pod restart. Also renamed
the PVC file from neuron-prod.db to neuron.db to match.

2026-04-24 04:56:29 -05:00

Will Anderson

5085840a79

Add neuron prod DB backup and tighten actuator surface

- Add hourly restic backup CronJob to neuron-prod namespace
  - Backs up /data/neuron-prod.db to Cloudflare R2 (legion-neuron-backup bucket)
  - Retention: 24 hourly, 7 daily, 4 weekly — <$0.01/month at current DB size
  - ExternalSecret pulls restic password + R2 creds from Vault secret/r2
- Actuator exposure per environment:
  - prod: health,info only / show-details=never (no internals exposed)
  - stage: health,info,metrics,loggers / show-details=always (pre-prod visibility)
  - dev: full (health,info,metrics,env,beans,loggers,mappings) / show-details=always

2026-04-23 21:43:20 -05:00

Will Anderson

1b8ea63541

feat(neuron): add stage and prod k8s manifests + Argo CD apps

Completes the three-env setup (dev was added previously). Each env has
deployments, services, ingress, PVC, ConfigMap, and ExternalSecret pulling
from Vault. Prod has larger resource limits and 10Gi PVC. Vault secret at
secret/neuron-technologies/prod seeded separately.

2026-04-17 09:43:23 -05:00

3 Commits