AZ-Intec-GmbH/AZ-NIX-SERVERS
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
57 Commits 2 Branches 0 Tags
1772ab207e44cd41e255394eae3578b73cf5149f
Commit Graph
22 Commits
Author SHA1 Message Date
m3ta-chiron 518671948c fix: public DNS for semaphore container (galaxy AAAA-only via corporate DNS) 2026-08-24 08:16:50 +02:00
m3ta-chiron a245e97136 feat: Semaphore UI on AZ-PRM-1 (AZ-NIX-4ux) 2026-08-24 06:43:28 +02:00
m3ta-chiron 6c9cb7b0e7 fix: atrocore-env ownership for atrocore-db-init (AZ-NIX-ava.2) 
First deploy failed: atrocore-db-init (User=postgres) could not read
/run/agenix/atrocore-env because agenix defaults to root:root:0400.
Follow the pg-cert/pg-key precedent: owner/group postgres, mode 0400.
Podman still reads the env-file and registry token as root (root
bypasses DAC), container pull/run unaffected. Agenix applies
ownership at activation time - no rekey needed. Validated on AZ-PRM-1.
 2026-08-17 14:16:09 +02:00
m3ta-chiron f1481dc256 feat: AtroPIM deployment config for AZ-PRM-1 (AZ-NIX-ava.2) 
- port registry: atrocore = 3058
- oci-container atrocore: Gitea-registry image, 127.0.0.1:3058:80,
  web network, static ip 10.89.0.16, db alias to host pg, env-file
  from agenix, named volume for instance data, registry login via
  token secret
- agenix secrets: atrocore-env (ATRO_DB_*) + atrocore-registry-token,
  age-encrypted to AZ-PRM-1 + user, non-interactive creation
- host postgres 17: idempotent atrocore-db-init oneshot (psql peer,
  secret only at runtime), pg_hba 10.89.0.0/24 scram-sha-256,
  atrocore in 03:10 backup list
- traefik: pim.l.az-gruppe.com -> localhost:3058 (ionos, websecure)
 2026-08-17 13:45:21 +02:00
sascha.koenig 5132a4de2f feat: change zammad domain 2026-08-15 09:33:28 +02:00
m3tam3re e836b23c66 +phishboard 2026-07-16 16:35:58 +02:00
sascha.koenig d58173760d fix: litellm -> grafana 2026-07-13 10:32:34 +02:00
sascha.koenig 8d57aa4bc0 feat: grafana loki 2026-07-10 13:10:58 +02:00
sascha.koenig b800bfe08b use grafana default message for ntfy alerts 2026-07-09 21:17:17 +02:00
sascha.koenig 2e316813f5 render all grafana alert annotations in ntfy 2026-07-09 21:11:03 +02:00
sascha.koenig b8cd1c421c include grafana alert annotations in ntfy messages 2026-07-09 21:04:46 +02:00
sascha.koenig 4c09725317 format grafana ntfy alerts 2026-07-09 20:46:07 +02:00
sascha.koenig 4c69d2476a monitor kestra with prometheus alerts 2026-07-09 20:38:19 +02:00
sascha.koenig 61fe3f4338 feat: prometheus + grafana 2026-07-09 13:25:15 +02:00
sascha.koenig 10b778fa8e + 3dviewer 2026-06-26 09:19:34 +02:00
sascha.koenig 793ae12d24 + excalidraw 2026-06-24 19:45:41 +02:00
m3tam3re 14008a4bc9 fix: encrypt backup sync ssh key correctly 2026-06-20 09:32:19 +02:00
m3tam3re fdb79b8763 feat: mirror cld var backups to prm 2026-06-20 09:10:48 +02:00
sascha.koenig f13b50a161 feat(n8n): enable task runners 2026-06-09 07:09:37 +02:00
sascha.koenig 8aac2a5e48 chore: flake update 2026-05-09 04:42:59 +02:00
sascha.koenig c40da75f66 feat: samba mounts 2026-05-05 09:27:45 +02:00
sascha.koenig c0e781bf00 first commit 2026-05-05 08:30:51 +02:00