T

Will Anderson 9e2646701c Grant soma compute permissions for GCE inference nodes

- Add roles/compute.instanceAdmin.v1 for soma SA (provision/terminate GCE VMs)
- Add roles/iam.serviceAccountUser for soma SA (assign SA to inference VMs)
- Add firewall rule: allow TCP 8000 inbound to soma-inference-node tagged VMs
- Add soma-node-secret to Secret Manager (GCE startup script auth)
- Inject SOMA_NODE_SECRET, GCP_PROJECT_ID, GCP_ZONE, SOMA_PUBLIC_URL into
  the soma Cloud Run service via env vars

2026-04-28 10:48:32 -05:00

docs

Fix gitea_domain variable and add VPN/Headscale infrastructure

2026-03-25 08:44:20 -05:00

scripts

feat(runpod): add inference pod templates, nginx LB, and provisioner script

2026-04-25 01:20:55 -05:00

servers

Grant soma compute permissions for GCE inference nodes

2026-04-28 10:48:32 -05:00

.gitignore

feat(observability): wire OpenTelemetry into MCP backend and marketing site

2026-04-24 14:21:34 -05:00

Agents.md

docs: sync infrastructure docs with actual running state

2026-03-25 15:59:12 -05:00

README.md

fix: gitea runner workingDir, README updates, monitoring domain

2026-03-24 12:55:29 -05:00

README.md

infrastructure

Personal infrastructure-as-code for Legion (k3s home server) and supporting tooling.

Doc	What it covers
`AGENTS.md`	Full reference: machines, secrets, services, domains, namespaces, common operations
`servers/legion/README.md`	What's running on Legion and how deployment works
`servers/legion/RUNBOOK.md`	Disaster recovery — full restore from scratch

Quick start

cd servers/legion
direnv allow
terraform plan
terraform apply

Push to servers/ to deploy app changes via Argo CD.