T

Will Anderson 2550786965 Revert CI to host Docker socket, remove buildkitd

BuildKit rootless failed on k3s (mount propagation), privileged mode
fixed that but buildkitd gRPC is incompatible with the Docker REST API
that forgejo-runner needs to manage job containers. Net security change
vs. the original socket approach was zero (privileged ≈ socket access).

Remove buildkitd.yaml entirely. Restore docker-sock hostPath mount on
both runners. Builds work again.

2026-04-26 02:50:27 -05:00

docs

Fix gitea_domain variable and add VPN/Headscale infrastructure

2026-03-25 08:44:20 -05:00

scripts

feat(runpod): add inference pod templates, nginx LB, and provisioner script

2026-04-25 01:20:55 -05:00

servers

Revert CI to host Docker socket, remove buildkitd

2026-04-26 02:50:27 -05:00

.gitignore

feat(observability): wire OpenTelemetry into MCP backend and marketing site

2026-04-24 14:21:34 -05:00

Agents.md

docs: sync infrastructure docs with actual running state

2026-03-25 15:59:12 -05:00

README.md

fix: gitea runner workingDir, README updates, monitoring domain

2026-03-24 12:55:29 -05:00

README.md

infrastructure

Personal infrastructure-as-code for Legion (k3s home server) and supporting tooling.

Doc	What it covers
`AGENTS.md`	Full reference: machines, secrets, services, domains, namespaces, common operations
`servers/legion/README.md`	What's running on Legion and how deployment works
`servers/legion/RUNBOOK.md`	Disaster recovery — full restore from scratch

Quick start

cd servers/legion
direnv allow
terraform plan
terraform apply

Push to servers/ to deploy app changes via Argo CD.