d66062b4cc
ci(neuron-prod): deploy neuron@v0.3.0
2026-04-24 08:12:04 +00:00
7a47e0cbf9
ci(neuron-prod): deploy neuron@v0.2.0
2026-04-24 08:04:37 +00:00
59aa0f0dfb
deploy neuron-license service to prod
...
Adds license deployment, service, ingress route (/license), and
Unkey + admin token secrets via ExternalSecret. Image built and
pushed by CI on merge of neuron PR #30 .
2026-04-24 01:42:07 -05:00
b1867a542d
add nightly Vault raft snapshot backup to R2
...
Snapshot via vault operator raft snapshot save using a least-privilege
periodic token. Stored in legion-vault-backup R2 bucket via restic.
Retains 30 daily / 12 weekly / 6 monthly snapshots. Runs at 3am,
offset from the Gitea backup at 2am.
2026-04-24 01:36:30 -05:00
816d79760d
add alpha/beta/gamma subdomains on neurontechnologies.ai
...
- Tunnel ingress rules for alpha/beta/gamma.neurontechnologies.ai
- DNS CNAME records pointing to legion tunnel
- k8s ingress rules routing to neuron-alpha/beta/gamma services (port 8001)
- TLS certs via cert-manager for new hostnames
2026-04-24 01:13:03 -05:00
3e28dd88eb
ci(neuron-prod): deploy neuron@v0.0.15
2026-04-24 05:45:09 +00:00
97973ba6be
ci(neuron-prod): deploy neuron@v0.0.14
2026-04-24 05:35:02 +00:00
c3f2ecc9a9
ci(neuron-prod): deploy neuron@v0.0.13
2026-04-24 05:16:25 +00:00
b9e1c94b36
ci(neuron-prod): deploy neuron@v0.0.11
2026-04-24 04:53:51 +00:00
69c2f1d2f9
ci(neuron-prod): deploy neuron@v0.0.8
2026-04-24 04:23:02 +00:00
0b23a5e964
ci(neuron-prod): deploy neuron@v0.0.7
2026-04-24 04:14:10 +00:00
d71bc3bd9e
ci(neuron-prod): scale prod to 1 replica — DB migrated, v0.0.6 ready
2026-04-23 23:06:55 -05:00
c9e9f11db8
ci(neuron-prod): deploy neuron@v0.0.6
2026-04-24 04:04:24 +00:00
5085840a79
Add neuron prod DB backup and tighten actuator surface
...
- Add hourly restic backup CronJob to neuron-prod namespace
- Backs up /data/neuron-prod.db to Cloudflare R2 (legion-neuron-backup bucket)
- Retention: 24 hourly, 7 daily, 4 weekly — <$0.01/month at current DB size
- ExternalSecret pulls restic password + R2 creds from Vault secret/r2
- Actuator exposure per environment:
- prod: health,info only / show-details=never (no internals exposed)
- stage: health,info,metrics,loggers / show-details=always (pre-prod visibility)
- dev: full (health,info,metrics,env,beans,loggers,mappings) / show-details=always
2026-04-23 21:43:20 -05:00
cd0cb30933
ci: add neuron-technologies runner for Gitea Actions
2026-04-23 21:19:26 -05:00
cc4db4dc11
feat(neuron): gamma zone, all-slot ingress, snapshot job, self-improvement loop script
2026-04-23 13:57:13 -05:00
27b4b1e066
feat(neuron): add alpha slot + lb Service; standardize all slots to port 8001
2026-04-23 13:47:21 -05:00
882c4a79d4
feat(neuron): add neuron-beta deployment on port 8002 with separate PVC
2026-04-23 13:34:55 -05:00
43737ce5cb
chore(ci-runner): restore ESO refresh interval to 1h
2026-04-23 13:32:18 -05:00
c8ee5e66ee
fix(ci-runner): use NodePort HTTP URL to bypass Cloudflare gRPC issue
2026-04-23 13:15:16 -05:00
e69052d89e
fix(ci-runner): use external Gitea URL now that REQUIRE_SIGNIN_VIEW is disabled
2026-04-23 12:58:51 -05:00
28fb4e29f4
fix(ci-runner): use internal cluster URL for runner registration (gRPC)
2026-04-23 12:57:11 -05:00
b1898a7a0f
fix(ci-runner): revert to external Gitea URL for git clone compatibility
2026-04-23 12:53:41 -05:00
521079590b
chore(ci-runner): restore ESO refresh interval to 1h
2026-04-23 12:45:34 -05:00
0d9f74f68f
fix(ci-runner): use internal cluster URL for Gitea to bypass Cloudflare Access
2026-04-23 12:45:00 -05:00
415ee9eb68
chore(ci): restore ESO refresh interval to 1h after token sync
2026-04-23 12:33:01 -05:00
b31aad85a7
chore(ci): shorten ESO refresh to 10s to force runner token update
2026-04-23 12:31:11 -05:00
e84c586282
chore(ci): force ESO resync for gitea-runner-secret with fresh registration token
2026-04-23 12:29:58 -05:00
095d874552
Remove docuseal-old temp instance
2026-04-21 18:15:49 -05:00
7ba730324f
Restore HOST env var for Docuseal registration
2026-04-21 18:13:31 -05:00
bfe59cafac
Remove explicit HOST env var, let Traefik Host header handle registration
2026-04-21 18:00:17 -05:00
a5c8e78c1f
Set HOST env var so Docuseal registers correct public hostname
2026-04-21 17:43:15 -05:00
0cbb06660a
Add temporary docuseal-old at sign.neuralplatform.ai for license transfer
2026-04-21 17:33:40 -05:00
8e87077bf0
Move Docuseal to sign.neurontechnologies.ai
2026-04-21 17:24:10 -05:00
e7fda0c9ee
Upgrade Docuseal to Pro image (ee.docuseal.com/lip5viwf/ds-ee)
2026-04-21 16:40:06 -05:00
85e5cca571
Scale down Mudcraft to free memory on Legion
2026-04-21 16:21:10 -05:00
5b739b3217
Add Gmail SMTP config to Docuseal via Vault ExternalSecret
2026-04-21 16:17:50 -05:00
d18dd66f0c
Fix Docuseal crash: remove invalid DATABASE_URL, let it default to SQLite
2026-04-21 14:53:32 -05:00
d40fb8c3f1
Add Docuseal e-signature service at sign.neuralplatform.ai
...
- k8s manifests: Deployment, Service, PVC, Ingress, ExternalSecret
- Argo CD app watching servers/legion/k8s/docuseal
- CF tunnel ingress rule for sign.neuralplatform.ai
- Vault secret at secret/docuseal (secret_key_base seeded)
2026-04-21 14:26:01 -05:00
3b3811942c
Update Legion LAN IP from 192.168.68.77 to 192.168.8.148
...
Static IP assigned on new network segment. Updates:
- variables.tf default legion_ip
- headscale nameserver config
- bootstrap.sh default target
- README/RUNBOOK documentation
- media ingress comment
2026-04-21 10:32:39 -05:00
4b548590ef
config: add NEURON_DATA_DIR and NEURON_CHROMA_URL to neuron-dev configmap
2026-04-17 11:46:10 -05:00
2398049678
ci(neuron-dev): deploy neuron@dev-d7a587e2
2026-04-17 16:07:58 +00:00
313480555d
ci(neuron-dev): deploy neuron@dev-057f5cb8
2026-04-17 15:50:36 +00:00
5c9544246f
fix(neuron-dev): use Recreate strategy to avoid OOM during rolling updates
2026-04-17 10:43:39 -05:00
5c663ab714
ci(neuron-dev): deploy neuron@dev-c370733c
2026-04-17 15:41:57 +00:00
3d9ead25ef
ci(neuron-dev): deploy neuron@dev-4ceb26d0
2026-04-17 15:31:56 +00:00
939e2574d2
fix(neuron): scale stage/prod to 0 replicas and reduce dev memory requests
...
- Stage and prod deployments scaled to 0 — not yet promoted, no need for running pods
- Dev memory requests reduced from 384Mi to 256Mi to allow scheduling on memory-constrained node
2026-04-17 10:18:50 -05:00
bbe3d14037
ci(neuron-dev): deploy neuron@dev-89280b55
2026-04-17 15:13:03 +00:00
203b124f9c
ci(neuron-dev): deploy neuron@dev-
2026-04-17 15:02:29 +00:00
1b8ea63541
feat(neuron): add stage and prod k8s manifests + Argo CD apps
...
Completes the three-env setup (dev was added previously). Each env has
deployments, services, ingress, PVC, ConfigMap, and ExternalSecret pulling
from Vault. Prod has larger resource limits and 10Gi PVC. Vault secret at
secret/neuron-technologies/prod seeded separately.
2026-04-17 09:43:23 -05:00
Neuron CI