T

Will Anderson 5085840a79 Add neuron prod DB backup and tighten actuator surface

- Add hourly restic backup CronJob to neuron-prod namespace
  - Backs up /data/neuron-prod.db to Cloudflare R2 (legion-neuron-backup bucket)
  - Retention: 24 hourly, 7 daily, 4 weekly — <$0.01/month at current DB size
  - ExternalSecret pulls restic password + R2 creds from Vault secret/r2
- Actuator exposure per environment:
  - prod: health,info only / show-details=never (no internals exposed)
  - stage: health,info,metrics,loggers / show-details=always (pre-prod visibility)
  - dev: full (health,info,metrics,env,beans,loggers,mappings) / show-details=always

2026-04-23 21:43:20 -05:00

docs

Fix gitea_domain variable and add VPN/Headscale infrastructure

2026-03-25 08:44:20 -05:00

servers/legion

Add neuron prod DB backup and tighten actuator surface

2026-04-23 21:43:20 -05:00

.gitignore

Initial commit — migrate legion Terraform from infrastructure repo

2026-03-23 07:35:03 -05:00

Agents.md

docs: sync infrastructure docs with actual running state

2026-03-25 15:59:12 -05:00

README.md

fix: gitea runner workingDir, README updates, monitoring domain

2026-03-24 12:55:29 -05:00

README.md

infrastructure

Personal infrastructure-as-code for Legion (k3s home server) and supporting tooling.

Doc	What it covers
`AGENTS.md`	Full reference: machines, secrets, services, domains, namespaces, common operations
`servers/legion/README.md`	What's running on Legion and how deployment works
`servers/legion/RUNBOOK.md`	Disaster recovery — full restore from scratch

Quick start

cd servers/legion
direnv allow
terraform plan
terraform apply

Push to servers/ to deploy app changes via Argo CD.