f1def110de
Revert to Overseerr — Seerr permission issue on existing config volume
2026-04-10 23:38:04 -05:00
cdf801b380
Switch to Seerr image, add media stack README
2026-04-10 23:28:51 -05:00
e616f7298a
Add FlareSolverr for Cloudflare-protected indexers (1337x, EZTV)
2026-04-10 23:19:38 -05:00
6a9da6d900
Fix media app: use internal Gitea URL for Argo CD
2026-04-10 22:50:51 -05:00
ba99111753
Add media stack: Plex, Radarr, Sonarr, Prowlarr, qBittorrent, Bazarr, Overseerr
...
- Namespace: media (created via Terraform)
- Storage: hostPath PV at /media on Legion (movies, tv/shows, tv/anime, downloads)
- VPN: gluetun sidecar with ProtonVPN WireGuard (US-TX#253), all torrent traffic tunneled
- Radarr: movie automation with /media/movies root
- Sonarr: TV/anime automation with /media/tv/{shows,anime} roots
- Prowlarr: indexer aggregator (YTS, 1337x, Nyaa for anime)
- qBittorrent: torrent client, network namespaced behind gluetun VPN
- Bazarr: automatic subtitle downloads (connects to Radarr + Sonarr)
- Overseerr: family request portal at watch.nook.family
- Plex: media server at plex.nook.family
2026-04-10 22:50:13 -05:00
8c40075b81
fix: use custom WordPress image with wp-cli pre-installed
...
Adds a Dockerfile extending wordpress:latest to include wp-cli at
/usr/local/bin/wp. Required for sync-whitepapers.py to manage content
via kubectl exec without manual installation after each pod restart.
2026-04-09 00:09:00 -05:00
a283f1148f
Fix Memos port: set MEMOS_PORT=5230 explicitly
2026-04-08 15:57:12 -05:00
78c1c9750f
Add Memos journaling app at journal.neuralplatform.ai
2026-04-08 15:46:10 -05:00
54b2abf767
chore(neuron): deploy d97b23808e953dccf35d784c47ca003d74bcda61
2026-04-06 14:01:48 +00:00
937e138f7d
chore(neuron): deploy d3d72a5adbdddfd6c18ae674c921469d410dc7da
2026-04-06 13:44:50 +00:00
55f4eab6ae
chore(neuron): deploy bf185a6b19bfce25a3c67d4d13fa4e39b6fc6685
2026-04-06 13:38:05 +00:00
3ba1bf5c08
fix: neuron probes — use tcpSocket, /mcp returns 406 on plain GET
2026-04-06 04:17:11 -05:00
c138982fcf
fix: neuron health probes — /health 404, use /mcp endpoint
2026-04-06 04:14:51 -05:00
49b5604860
chore(neuron): deploy 2476e1167826cf320375143c09e94852b4330114
2026-04-06 07:54:36 +00:00
92d3f8adea
rename: newsletter.harmonic-framework.com → campaigns.harmonic-framework.com
2026-04-04 19:10:42 -05:00
bd7c906c05
fix: remove legacy admin_username/password env vars from listmonk config
2026-04-04 19:01:35 -05:00
58eea3b686
fix: remove destructive initContainer, use one-time Argo CD hook Job for schema install
2026-04-04 18:57:36 -05:00
0b8eb4264a
fix: bind listmonk to 0.0.0.0:9000 so k8s service can route traffic
2026-04-04 18:49:41 -05:00
e788fd48fd
fix: listmonk init container command — override entrypoint, drop nonexistent --idempotent flag
2026-04-04 18:46:09 -05:00
bf40bd7f15
feat: add Listmonk newsletter platform on Legion k3s
...
- Namespace, ExternalSecrets (Vault), DB init job, deployment, service, PVC, ingress
- Routes newsletter.harmonic-framework.com via existing Cloudflare tunnel
- Uses shared platform postgres with dedicated listmonk DB/user
- Credentials stored at secret/data/listmonk in Vault
2026-04-04 18:43:44 -05:00
eefaeafcfc
fix(adguard): remove split-horizon DNS rewrites
...
Split-horizon breaks VPN/LAN hybrid scenarios. Let all clients use
public DNS (Cloudflare proxy IPs) and route via CF tunnel. Works
everywhere, no network-topology-dependent DNS required.
2026-04-04 11:06:38 -05:00
f50d14ccdc
fix(adguard): use Tailscale IP for split-horizon DNS rewrites
...
LAN IP 192.168.68.77 unreachable over Tailscale VPN. 100.64.0.1 works
for both LAN (Tailscale installed) and remote VPN clients. Also adds
*.neuralplatform.dev which was missing from the configmap.
2026-04-04 10:59:33 -05:00
c66bfc2a85
fix(redpanda): use nodePort 30094 (30093 already allocated)
2026-04-04 10:37:40 -05:00
e325539c67
fix(redpanda): remove unsupported --set flags, add external listener on 9093
...
Newer Redpanda versions removed --set CLI flags. Also adds dual listener:
- INTERNAL://9092 for in-cluster services (ClusterIP)
- EXTERNAL://9093 for Tailscale access from Mac (NodePort 30093 → 100.64.0.1:30093)
2026-04-04 10:33:14 -05:00
6b546b6168
ci: bump runner pod to pick up valid_volumes config change
2026-04-04 10:27:06 -05:00
2a5c3fb0ec
feat: add Redpanda Console at redpanda.neuralplatform.ai
2026-04-04 10:25:16 -05:00
f3898d4c8e
ci: allow /var/run/docker.sock as valid volume for Docker builds
2026-04-04 10:24:37 -05:00
82ed0eb10b
feat: add Redpanda and wp-deploy-coordinator to Legion
...
- Redpanda single-node StatefulSet in platform namespace
- wp-coordinator deployment consuming wp.deploy topic
- RBAC for coordinator to exec into harmonic-wordpress pods
- R2 credentials via ExternalSecret (no SSH key needed on coordinator)
- Sites config as ConfigMap — add new WP sites without code changes
2026-04-04 10:18:09 -05:00
6a9db2094e
feat: add harmonic-wordpress dev environment on Legion
...
- Add harmonic-wordpress namespace
- WordPress + MySQL deployment with PVCs and ExternalSecrets
- Ingress for dev.harmonic-framework.com via Traefik + cert-manager
- Argo CD Application watching k8s/harmonic-wordpress/
- Add public Gitea repo credential for git.neuralplatform.ai
2026-04-04 09:47:41 -05:00
fb0284d72a
fix(mudcraft): revert to 32x32 reference texture
2026-04-01 03:55:13 -05:00
2195f8d8d9
fix(mudcraft): proper flat Minecraft sword sprite, update SHA1
2026-04-01 03:53:02 -05:00
d6fa31dcd2
fix(mudcraft): revert to original sword texture orientation
2026-04-01 03:34:30 -05:00
5f685768ec
deploy(mudcraft-plugin): update plugin image to ce051316ceda4e06ebea931a7c4b16fd9f0f6887
2026-04-01 08:27:21 +00:00
7e2feb54b2
fix(mudcraft): flip sword texture, update resource pack SHA1
2026-04-01 03:24:07 -05:00
632fadcf5b
deploy(mudcraft-plugin): update plugin image to 557648d146015319524dbd322d622f9fff1c41c0
2026-04-01 08:16:12 +00:00
3db342d292
fix(mudcraft): resource pack SHA1 — 32x32 texture
2026-04-01 03:03:59 -05:00
d79329d9be
deploy(mudcraft-plugin): update plugin image to 9450f20bb0b71193cecef218ed0763c8cd0d688c
2026-04-01 07:55:38 +00:00
58e9f9c1fe
fix(mudcraft): update resource pack SHA1 and pack_format 75 for 1.21.11
2026-04-01 02:41:36 -05:00
aee009f98d
deploy(mudcraft-plugin): update plugin image to e98661c9e1168f6d767017791e6f6fca8b35787c
2026-04-01 07:24:38 +00:00
e3b9395805
feat(mudcraft): configure resource pack and R2 public hosting
...
Upload stormrift resource pack to mudcraft-assets R2 bucket with public
r2.dev URL. Add RESOURCE_PACK, RESOURCE_PACK_SHA1, and RESOURCE_PACK_ENFORCE
to server configmap so clients download the pack on join.
2026-04-01 02:07:39 -05:00
4cb9fc6427
deploy(mudcraft-plugin): update plugin image to d6122cddfa46484b57c4da4dde611629e05a9081
2026-04-01 06:39:16 +00:00
2f544ed79e
deploy(mudcraft-plugin): update plugin image to 5515ae0812f5191384047a78eb5ed308d975e6a2
2026-04-01 06:27:40 +00:00
0c9f14a92d
deploy(mudcraft-core): update image to 159b48c4e5c49c46e090400decac659f0fc6f2da
2026-04-01 06:10:01 +00:00
954834acb1
deploy(mudcraft-core): update image to a238572acf9a22032c1c9662759cec5b86dda67d
2026-04-01 05:49:40 +00:00
fdcc443e92
deploy(mudcraft-core): update image to 68685eed1e401ccd15925ac6000edc8a102ca5d3
2026-04-01 05:21:51 +00:00
67347bdcdf
feat(mudcraft): add registry pull secret and imagePullSecrets to deployment
2026-04-01 00:10:06 -05:00
1e06463529
deploy(mudcraft-core): update image to 3c5445c55d4e2afe2b4a5e6e4f4ce23e5e3bf374
2026-04-01 05:06:55 +00:00
04c65ec908
feat(mudcraft): add mudcraft-core deployment, service, secrets, ingress; fix voicechat domain to play.mudcraft.org
2026-03-31 22:46:09 -05:00
33bf2c7819
feat(mudcraft): add full base permissions to mortal tier
...
Mortals now have voice chat, EssentialsX basics (msg, home, spawn,
warp), and friends system permissions by default.
2026-03-29 21:59:48 -05:00
b0f2b7533f
fix(mudcraft): grant voicechat permissions to mortal tier
2026-03-29 21:59:30 -05:00
Will Anderson