e69052d89e
fix(ci-runner): use external Gitea URL now that REQUIRE_SIGNIN_VIEW is disabled
2026-04-23 12:58:51 -05:00
28fb4e29f4
fix(ci-runner): use internal cluster URL for runner registration (gRPC)
2026-04-23 12:57:11 -05:00
b1898a7a0f
fix(ci-runner): revert to external Gitea URL for git clone compatibility
2026-04-23 12:53:41 -05:00
521079590b
chore(ci-runner): restore ESO refresh interval to 1h
2026-04-23 12:45:34 -05:00
0d9f74f68f
fix(ci-runner): use internal cluster URL for Gitea to bypass Cloudflare Access
2026-04-23 12:45:00 -05:00
415ee9eb68
chore(ci): restore ESO refresh interval to 1h after token sync
2026-04-23 12:33:01 -05:00
b31aad85a7
chore(ci): shorten ESO refresh to 10s to force runner token update
2026-04-23 12:31:11 -05:00
e84c586282
chore(ci): force ESO resync for gitea-runner-secret with fresh registration token
2026-04-23 12:29:58 -05:00
095d874552
Remove docuseal-old temp instance
2026-04-21 18:15:49 -05:00
7ba730324f
Restore HOST env var for Docuseal registration
2026-04-21 18:13:31 -05:00
bfe59cafac
Remove explicit HOST env var, let Traefik Host header handle registration
2026-04-21 18:00:17 -05:00
a5c8e78c1f
Set HOST env var so Docuseal registers correct public hostname
2026-04-21 17:43:15 -05:00
0cbb06660a
Add temporary docuseal-old at sign.neuralplatform.ai for license transfer
2026-04-21 17:33:40 -05:00
8e87077bf0
Move Docuseal to sign.neurontechnologies.ai
2026-04-21 17:24:10 -05:00
e7fda0c9ee
Upgrade Docuseal to Pro image (ee.docuseal.com/lip5viwf/ds-ee)
2026-04-21 16:40:06 -05:00
85e5cca571
Scale down Mudcraft to free memory on Legion
2026-04-21 16:21:10 -05:00
5b739b3217
Add Gmail SMTP config to Docuseal via Vault ExternalSecret
2026-04-21 16:17:50 -05:00
d18dd66f0c
Fix Docuseal crash: remove invalid DATABASE_URL, let it default to SQLite
2026-04-21 14:53:32 -05:00
d40fb8c3f1
Add Docuseal e-signature service at sign.neuralplatform.ai
...
- k8s manifests: Deployment, Service, PVC, Ingress, ExternalSecret
- Argo CD app watching servers/legion/k8s/docuseal
- CF tunnel ingress rule for sign.neuralplatform.ai
- Vault secret at secret/docuseal (secret_key_base seeded)
2026-04-21 14:26:01 -05:00
3b3811942c
Update Legion LAN IP from 192.168.68.77 to 192.168.8.148
...
Static IP assigned on new network segment. Updates:
- variables.tf default legion_ip
- headscale nameserver config
- bootstrap.sh default target
- README/RUNBOOK documentation
- media ingress comment
2026-04-21 10:32:39 -05:00
4b548590ef
config: add NEURON_DATA_DIR and NEURON_CHROMA_URL to neuron-dev configmap
2026-04-17 11:46:10 -05:00
2398049678
ci(neuron-dev): deploy neuron@dev-d7a587e2
2026-04-17 16:07:58 +00:00
313480555d
ci(neuron-dev): deploy neuron@dev-057f5cb8
2026-04-17 15:50:36 +00:00
5c9544246f
fix(neuron-dev): use Recreate strategy to avoid OOM during rolling updates
2026-04-17 10:43:39 -05:00
5c663ab714
ci(neuron-dev): deploy neuron@dev-c370733c
2026-04-17 15:41:57 +00:00
3d9ead25ef
ci(neuron-dev): deploy neuron@dev-4ceb26d0
2026-04-17 15:31:56 +00:00
939e2574d2
fix(neuron): scale stage/prod to 0 replicas and reduce dev memory requests
...
- Stage and prod deployments scaled to 0 — not yet promoted, no need for running pods
- Dev memory requests reduced from 384Mi to 256Mi to allow scheduling on memory-constrained node
2026-04-17 10:18:50 -05:00
bbe3d14037
ci(neuron-dev): deploy neuron@dev-89280b55
2026-04-17 15:13:03 +00:00
203b124f9c
ci(neuron-dev): deploy neuron@dev-
2026-04-17 15:02:29 +00:00
1b8ea63541
feat(neuron): add stage and prod k8s manifests + Argo CD apps
...
Completes the three-env setup (dev was added previously). Each env has
deployments, services, ingress, PVC, ConfigMap, and ExternalSecret pulling
from Vault. Prod has larger resource limits and 10Gi PVC. Vault secret at
secret/neuron-technologies/prod seeded separately.
2026-04-17 09:43:23 -05:00
912e129e0d
feat(neuron-dev): add k8s manifests and Argo CD app for neuron-technologies dev environment
2026-04-17 08:46:47 -05:00
6046b6ca3e
Increase harmonic-wordpress MySQL memory limit to 1Gi for prod sync imports
2026-04-17 06:53:53 -05:00
d1493f9ecd
Wire Radarr/Sonarr/Jellyfin into fornax coordinator
...
Add service URLs as env vars and pull API keys from Vault via ESO.
The coordinator now has everything it needs to call catalog providers
on torrent delete/complete events.
2026-04-16 19:40:02 -05:00
d7205ca1d1
feat(fornax): add CF Access JWT and RBAC env vars to coordinator deployment
2026-04-16 16:22:09 -05:00
e567cbaef4
restart fornax-coordinator — pull #31 image (magnet name fix)
2026-04-15 22:44:24 -05:00
c4b57e2e7e
restart fornax-coordinator for magnet name extraction fix
2026-04-15 22:32:51 -05:00
6830e97c93
restart fornax-coordinator to pull new image with multer fix
2026-04-15 22:22:50 -05:00
d6237da906
restart fornax-coordinator to pick up multer multipart fix
2026-04-15 22:05:04 -05:00
a1f2ba86aa
chore: restart coordinator to pick up /media/downloads save path fix
2026-04-15 21:07:43 -05:00
b38c4d7a11
chore: restart coordinator to pick up pre-seeded categories fix
2026-04-15 20:44:59 -05:00
3f4646e92c
chore: restart coordinator to pick up torrents/categories fix
2026-04-15 20:34:38 -05:00
0d126cfaaf
chore: restart coordinator to pick up /app/preferences fix
2026-04-15 20:24:46 -05:00
9c961b963c
chore: restart fornax-coordinator to pick up webapiVersion fix + UI redesign
2026-04-15 20:13:18 -05:00
3a09f2fab5
Bump coordinator restartedAt to pull new image after CI deploy
2026-04-15 19:54:47 -05:00
450aa8341d
Bump coordinator restartedAt to pick up /app/version plain-text fix
2026-04-15 19:39:40 -05:00
185a36e05b
Restart fornax coordinator and UI — retry UI + worker health fix
2026-04-15 19:13:07 -05:00
c0d95d2ef0
Restart fornax-coordinator to pick up new qBittorrent accessor image
2026-04-15 18:15:33 -05:00
5a50e2bb63
Fix NAT-PMP struct format and renewal interval
...
ProtonVPN returns 16-byte success responses (last field is uint32 lifetime,
not uint16). The previous !BBHIHHH format expected 14 bytes causing unpack
failure. Fixed to !BBHIHHI (16 bytes).
ProtonVPN grants 60s leases; request 60s and renew every 45s instead of
sleeping 240s which let leases expire between renewals.
2026-04-15 17:34:00 -05:00
8a43279164
Switch fornax workers to custom WireGuard provider with correct server keys
...
The protonvpn provider mode uses gluetun's embedded server database which
doesn't contain US-TX#253 or US-TX#34. Our WireGuard keys are registered
for specific ProtonVPN servers, so connecting to other servers (US-TX#179,
US-TX#220) results in successful WireGuard handshake but ProtonVPN drops all
internet-bound traffic.
Fix: use VPN_SERVICE_PROVIDER=custom to directly configure the correct server
peer public key and endpoint IP for each worker. ExternalSecrets updated to
also pull public_key and endpoint_ip from Vault.
- tx253: endpoint=95.173.217.29, peer=mngiSxBpH7GU24nnWdBEcnhDnCPn2jq5+ZP3zwPwISA=
- tx34: endpoint=146.70.58.130, peer=wqJcz4akzVFxx35aJ5B7G/IJ9qsRvpcGNub3rLHcqXo=
2026-04-15 03:21:26 -05:00
8a111a13b9
Add UPDATER_PERIOD to download fresh ProtonVPN server list
...
Will refresh gluetun's embedded server list from ProtonVPN API.
Need to extract public key for US-TX#253 (95.173.217.29) which
is not in gluetun's embedded database but should be in the live list.
2026-04-15 03:08:06 -05:00
Will Anderson