278 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
admin	96783bce8c	chore(renovate): fix config warnings - remove global-only options, disable woodpecker manager	2026-07-18 22:48:22 -07:00
admin	8185fb5842	feat: add woodpecker cron pipeline for renovate (v3 syntax)	2026-07-18 22:05:19 -07:00
admin	fe6c95f54a	feat: add renovate.json configuration	2026-07-18 22:05:01 -07:00
admin	aea8657092	feat: add renovate env example	2026-07-18 22:05:01 -07:00
admin	ac87ea2520	feat: add renovate stack (image update automation)	2026-07-18 22:05:00 -07:00
admin	5a5718a2d3	traefik: fix update order for host-mode/VRRP services (start-first -> stop-first) ... reverse-proxy publishes host-mode ports (80/443/1883/5201/5431) — start-first can never bind while the old task holds the ports, deadlocking every rolling update. keepalived master/backup run VRRP on the host network — concurrent old+new speakers with the same router-id risk VIP flapping. Both now use stop-first (global mode + parallelism=1 + VIP failover keeps ingress up). Stateless helpers (whoami, speedtest, iperf3, certs-dumper) keep start-first. Step 1 of Tier 0/1 pipeline inclusion (prep for removing traefik/woodpecker from the bootstrap manual-deploy guard).	2026-07-16 23:04:00 -07:00
admin	5a24c162cc	fix(pipeline): sync bootstrap stack files before guard, not after	2026-07-16 22:29:36 -07:00
admin	4100daa199	Add bootstrap-tier guard to deploy step (traefik/woodpecker/postgresql skip auto-deploy)	2026-07-16 21:44:53 -07:00
admin	26177f5706	Add update_config/rollback_config start-first rolling deploy; fix depends_on indent bug	2026-07-16 21:44:47 -07:00
admin	beb53ce9ff	Add update_config/rollback_config rolling deploy to all traefik services (start-first, parallelism=1)	2026-07-16 21:44:41 -07:00
AVB	75a009cc29	Merge pull request 'chore: bump litellm-database v1.90.3 → v1.92.0' (#1) from chore/litellm-v1.92.0 into main ... Reviewed-on: #1	2026-07-16 07:19:11 -07:00
admin	6221f5d213	chore: bump litellm-database v1.90.3 -> v1.92.0 ... Latest stable release. Includes Bedrock fixes since 1.90.x (anthropic-beta header forwarding, converse stream handling, STS region decoupling).	2026-07-15 22:00:16 -07:00
admin	bc1f4f288a	fix(security): correct crowdsec-web-ui image typo — thebluffman85 -> theduffman85 ... Image ghcr.io/thebluffman85/crowdsec-web-ui:latest never existed (typo in org name). Correct upstream project is TheDuffman85/crowdsec-web-ui on GitHub. Fixed to ghcr.io/theduffman85/crowdsec-web-ui:latest. Deployed and verified live on docker-2 prior to this commit: - security_crowdsec-web-ui now pulls successfully and is Running - Host(`secure.bryanmail.net`) rule intact, all CROWDSEC_* env vars correct - security_crowdsec unaffected, still running	2026-07-10 15:43:01 -07:00
admin	1876fedfff	feat(postgresql): complete Pattern C migration — remove leftover env_file directives ... Docker secrets (postgresql_password, postgresql_pgadmin_password) already handled POSTGRES_PASSWORD_FILE/PGADMIN_DEFAULT_PASSWORD_FILE. This removes the two remaining `env_file: - postgresql.env` lines (postgresql + pgadmin services) which were redundant and left the stack in a half-migrated hybrid state. Non-secret vars (POSTGRES_USER, PGADMIN_DEFAULT_EMAIL, DATABASUS_HOST, PGADMIN_HOST) continue to be supplied via stack-deploy.sh's envsubst mechanism from postgresql.env at deploy time — no functional change to those values. Deployed and verified live on docker-2 prior to this commit: - postgresql_postgresql: pg_isready OK, all 21 databases intact, psql auth via Docker secret confirmed - postgresql_pgadmin: Host(`dba.bryanmail.net`) rule + PGADMIN_DEFAULT_EMAIL correct - postgresql_databasus: running - All dependent stacks (mealie, vaultwarden, auth, media, homeassistant, guacamole, security) remained healthy throughout, zero reconnect issues	2026-07-10 15:36:15 -07:00
admin	fc1c808041	chore(guacamole): remove DOMAIN - provided by global.env	2026-07-10 15:31:30 -07:00
admin	6f571ae877	chore(mealie): remove DOMAIN - provided by global.env	2026-07-10 15:31:29 -07:00
admin	ee7034c4e7	chore(security): remove DOMAIN - provided by global.env	2026-07-10 15:31:29 -07:00
admin	e41149f0ab	chore(vaultwarden): remove DOMAIN+ALT_DOMAIN - provided by global.env	2026-07-10 15:31:28 -07:00
admin	30dc3d0f22	chore(homeassistant): remove DOMAIN - provided by global.env	2026-07-10 15:31:28 -07:00
admin	6587c62d80	chore(maintenance): remove DOMAIN - provided by global.env	2026-07-10 15:31:27 -07:00
admin	2ac4a73ae7	chore(traefik): remove DOMAIN - provided by global.env	2026-07-10 15:31:27 -07:00
admin	09e97b1572	chore(media): remove DOMAIN - provided by global.env	2026-07-10 15:31:26 -07:00
admin	8884e9c0ff	fix(global.env): ALT_DOMAIN=whooshh.net	2026-07-10 15:31:26 -07:00
AVB	e1e5811c80	Update .woodpecker.yml	2026-07-10 00:05:05 -07:00
AVB	852a879503	Update .woodpecker.yml	2026-07-09 23:58:37 -07:00
admin	2b6e937b57	feat(stack-deploy): load global.env as base, stack env overrides on top	2026-07-08 21:29:15 -07:00
admin	b664e9d41d	feat(envparse): add merge mode for global+stack env layering	2026-07-08 21:29:13 -07:00
admin	78fe8092ad	feat(deploy): add global.env for shared vars (DOMAIN, DOMAIN_NAME, ALT_DOMAIN)	2026-07-08 21:29:12 -07:00
admin	9f7dcc3970	fix(media): add DOMAIN to media.env — was missing, causing blank Traefik hostnames	2026-07-08 21:25:34 -07:00
admin	2b4332896e	fix(ci): verify step fails pipeline on zero running tasks; increase settle time	2026-07-08 21:23:00 -07:00
AVB	2201bbd28b	Update media/media.yaml	2026-07-08 20:44:18 -07:00
AVB	4269351298	Update media/media.yaml	2026-07-08 20:43:45 -07:00
AVB	2005afc9fa	Delete security.yaml	2026-07-08 16:44:53 -07:00
AVB	497f047fbc	Delete meshcentral.yaml	2026-07-08 16:44:44 -07:00
AVB	45daf212e3	Delete homeassistant.yaml	2026-07-08 16:44:15 -07:00
AVB	e2722686a0	Delete guacamole.yaml	2026-07-08 16:41:49 -07:00
AVB	d84e6d4278	Update media/media.yaml	2026-07-08 16:22:31 -07:00
AVB	cdd5dba417	Update .woodpecker.yml	2026-07-07 16:49:00 -07:00
AVB	9ef023ce30	Update media/media.yaml	2026-07-07 16:48:47 -07:00
AVB	91ff460e4d	Update media/media.yaml	2026-07-07 16:47:33 -07:00
AVB	2053d6a84b	Update .woodpecker.yml	2026-07-07 16:47:12 -07:00
AVB	235d989e29	Update media/media.yaml	2026-07-07 16:40:24 -07:00
AVB	500c9aa756	Update media/media.yaml	2026-07-07 16:38:50 -07:00
AVB	5268e0628b	Update media/media.yaml	2026-07-07 16:37:24 -07:00
AVB	fef93fa4ef	Update media/media.yaml	2026-07-07 16:29:15 -07:00
AVB	1469aec607	Update ai.yaml	2026-07-07 08:28:46 -07:00
AVB	9925fef595	Update ai.yaml ... Super fiscal # after litellm to cause rebuild.	2026-07-07 08:28:28 -07:00
AVB	5f017a68bd	Update ai.yaml	2026-07-07 08:11:34 -07:00
admin	33f63924fc	feat(postgresql): migrate to Pattern C — Docker secrets for POSTGRES_PASSWORD and PGADMIN_DEFAULT_PASSWORD (_FILE convention)	2026-07-06 23:37:16 -07:00
AVB	1969c69c5f	Update ai.yaml	2026-07-06 21:04:13 -07:00