infra

web host: duplicate nginx server blocks for jfraeys.com / www.jfraeys.com

#293 opened 2026-10-19 17:56:59 -04:00 by jfraeys 0 / 2

Protect the coaching site admin: real domain, per-site Authelia portal, optional 2FA

#292 opened 2026-10-19 17:56:07 -04:00 by jfraeys 0 / 5

Tool versions report 2026-10

#286 opened 2026-10-19 10:06:48 -04:00 by jfraeys

services disk filled to 100% (2026-10-18): follow-ups, incl. revisit the CI cache reset

#285 opened 2026-10-18 21:35:22 -04:00 by jfraeys 1 / 12

access: tailnet ACL, Headscale login and admin tools behind Authelia (tracking PRs #246-#250)

3

#251 opened 2026-10-16 19:06:49 -04:00 by jfraeys

headscale DNS: decide names, certificates and cutover behavior for tailnet aliases

2

#242 opened 2026-10-16 17:14:45 -04:00 by jfraeys

headscale: dns.extra_records from a role variable (tailnet aliases)

#241 opened 2026-10-16 17:14:44 -04:00 by jfraeys

web: coach-site backup.service has never produced a backup (systemd % specifiers); no failed-unit alert

#240 opened 2026-10-16 17:12:28 -04:00 by jfraeys

terraform state: backup, dedicated bucket, second copy on OVH, encryption

4

#220 opened 2026-10-16 11:40:30 -04:00 by jfraeys

research: private DNS for dev/homelab names (tailnet now, homelab later)

2

#213 opened 2026-10-15 23:32:19 -04:00 by jfraeys

Cleanup pass: stale references, duplicated helpers, legacy code, root docs

1

#204 opened 2026-10-15 18:53:51 -04:00 by jfraeys 0 / 16

Migrate production compute from Linode to OVH (starting with services)

12

#187 opened 2026-10-15 13:08:39 -04:00 by jfraeys 1 / 8

Operator tooling: automation candidates and scripts/ organization (2026-10-14 survey)

1

#153 opened 2026-10-14 12:43:36 -04:00 by jfraeys 0 / 7

Roadmap: remaining infra and secrets work (tracker)

3

#122 opened 2026-10-13 14:25:54 -04:00 by jfraeys

Infra backlog: capacity, CI verification, alerts, older loose ends

4

#121 opened 2026-10-13 14:25:44 -04:00 by jfraeys 7 / 26

Retire Ansible Vault (last step, after P7/P8/R)

1

#120 opened 2026-10-13 14:25:43 -04:00 by jfraeys 0 / 9

R: close exposed-credential remediation (operator machine)

1

#119 opened 2026-10-13 14:25:43 -04:00 by jfraeys 0 / 7

P7: project secrets keys and drills (forge-agent, app-skeleton)

1

#118 opened 2026-10-13 14:25:42 -04:00 by jfraeys 2 / 9

P8: close rotation hygiene (rotation drill, manifest triage)

5

#117 opened 2026-10-13 14:25:41 -04:00 by jfraeys 2 / 9

Next: immediate steps (merge, deploy, verify) after the 2026-10-13 session

5

#116 opened 2026-10-13 14:25:41 -04:00 by jfraeys 21 / 33