vh/esh-pfi-infrastructure
1
0
Fork 0
Code Issues 7 Pull Requests Actions Packages Projects Releases Wiki Activity

Commit Graph

  • 76fdf45925 feat(booth): pin/favorite, multi-select delete, newest-first link board booth-v0.1.8 vh 2026-09-06 02:29:22 -07:00
  • 0336e033b8 fix(dns): repoint irv-ml1.nh3.internal to live Irvine LAN IP over mesh vh 2026-09-06 01:14:25 -07:00
  • ed3810aea2 memory: snapshot — irv-ml1 remote cutover complete + subnet discovery; session follow-ups vh 2026-09-06 01:05:14 -07:00
  • 02cf9d6cfb feat(mesh): irv-ml1 wg0 non-reboot-restorable + Irvine subnet discovery (bidirectional, verified) vh 2026-09-06 01:02:50 -07:00
  • b2c819ed51 docs(nh3-dev): mark SOCKS egress proxy retired (headscale exit nodes) vh 2026-09-06 00:58:36 -07:00
  • be4e7d68c9 feat(mesh): irv-ml1 cutover complete (remote, 5-day-safe) — 3 recovery paths, wg0 dormant, dante retired vh 2026-09-06 00:58:21 -07:00
  • f8eb3606eb feat(mesh): fold irv-ml1 in additively (node 100.64.0.6), wg0 lifeline preserved; wg0 retirement deferred to on-site vh 2026-09-06 00:43:48 -07:00
  • 13aaccf21e memory: snapshot — headscale cutover complete + NASPool rebuild; session open follow-ups vh 2026-09-06 00:29:14 -07:00
  • 1284c18fda docs(mesh): throughput baseline — 761/464 Mb/s vs old 250 IPsec; shared-fiber caveat vh 2026-09-06 00:24:41 -07:00
  • 7ce398f069 feat(mesh): selective masquerade — exit nodes AND site-to-site source preservation both work vh 2026-09-06 00:16:18 -07:00
  • b846a7c870 feat(mesh): advertise exit nodes at all three sites (SNAT re-enabled); usage + tradeoff documented vh 2026-09-06 00:09:43 -07:00
  • 815c283e44 feat(mesh): cutover COMPLETE — all three site-pairs on headscale, Site Magic + IPsec dormant vh 2026-09-06 00:05:18 -07:00
  • df8440e4b8 memory: headscale cutover — IPsec dormant, mesh primary, Site Magic pending operator vh 2026-09-06 00:02:15 -07:00
  • d25c096b6a feat(mesh): cut colo<->NH3 and colo<->ESH onto headscale (IPsec dormant); Site Magic pre-staged for operator UI disable vh 2026-09-06 00:01:43 -07:00
  • e7f8d1f227 docs(mesh): ESH egress whitelisted in crowdsec (temporary, pending static IP) vh 2026-09-05 23:36:11 -07:00
  • e88ec01726 docs(mesh): CrowdSec CGNAT false-ban incident — mesh bypasses it vh 2026-09-05 23:28:36 -07:00
  • 7382fdaa7b docs(mesh): first roaming client (vhlk-mba26) verified vh 2026-09-05 22:58:23 -07:00
  • a8a6f24b56 docs(mesh): return paths on all three gateways, verified; enrolment notes vh 2026-09-05 22:49:54 -07:00
  • 3ef87165df feat(mesh): headscale control plane + three subnet routers provisioned; DNS entries; plan status vh 2026-09-05 22:32:23 -07:00
  • e0759e41a3 ops: infra-ops identity bootstrapped on all four PVE hypervisors; docs updated vh 2026-09-05 21:52:40 -07:00
  • 807bf0315a docs(pfi-pve): NASPool scrub clean vh 2026-09-05 21:49:55 -07:00
  • 1f504ce05a docs(pfi): refresh pfi-pve guest inventory from live state; headscale mesh plan vh 2026-09-05 21:49:47 -07:00
  • 775121ddaf docs(pfi-pve): TrueNAS leftovers removed; storage id pve-truenas → naspool-vmstorage vh 2026-09-05 21:38:15 -07:00
  • ab222133e9 docs(pfi-pve): NASPool rebuilt as raidz2 — runbook log complete, memory entry vh 2026-09-05 21:04:14 -07:00
  • 0df9312832 docs(pfi-pve): NASPool rebuild log — destroyed and recreated as raidz2, restore running vh 2026-09-05 19:01:52 -07:00
  • 1ec4a1a248 docs(pfi-pve): NASPool rebuild log — parked copy verified, at destroy gate vh 2026-09-05 18:46:39 -07:00
  • dbc7f3b471 docs(pfi-pve): NASPool rebuild log — park complete, verification in progress vh 2026-09-05 18:26:05 -07:00
  • 1bc7519a24 docs(pfi-pve): NASPool rebuild runbook — raidz2 hybrid, park on ospool, prune vzdump by omission vh 2026-09-05 16:04:01 -07:00
  • a51af1887e memory: handle retire is reversible — re-declaring revives it, history intact vh 2026-09-05 09:42:13 -07:00
  • 20af94c0a0 deploy(althing): post office to 3.6.0 — handle delete/retire verbs go live vh 2026-09-05 09:40:19 -07:00
  • 6e7e0c5a03 docs: sudo hang fixed, dsh under launchd, post office container left behind vh 2026-09-05 09:06:56 -07:00
  • f44b8aa1cf docs: remote-ssh hangs on a bare sudo — pipe it; record where the dsh update stopped vh 2026-09-05 08:37:56 -07:00
  • f05a6a83f4 memory: address-based reach shipped; my credential-boundary objection was half wrong vh 2026-09-05 08:20:42 -07:00
  • fb4523b225 docs: remote-ssh reaches raw IPs now; record the tenant carve-out vh 2026-09-05 08:20:23 -07:00
  • 93f4c312d9 memory: uv tool --force does not rebuild without --reinstall; althing 3.5.0 out vh 2026-09-05 08:05:21 -07:00
  • 4e18f7a183 memory: laptop backup ruled out deliberately; MCP adoption is gated on ssh_config vh 2026-09-05 08:01:06 -07:00
  • 807446a1cf memory: remote-ssh MCP live and narrow; record the two traps that cost time vh 2026-09-05 07:46:03 -07:00
  • 1f25cdcd19 feat(tooling): register the remote-ssh MCP server and split the SSH guidance vh 2026-09-05 07:45:21 -07:00
  • 169fa357ff memory: SVOS arc fully closed — vault verified clean, no ledger-era items remain vh 2026-09-05 07:31:16 -07:00
  • d1d37f7c60 memory: SVOS arc closed at step 8; fork vh/remote-ssh-mcp recorded vh 2026-09-05 07:30:03 -07:00
  • 4adccf3f88 memory: step 7 corroborated, step 8 held against a relayed authorization vh 2026-09-05 07:25:47 -07:00
  • 3bc7c6986f memory: svos cutover verified; record the cutover-destroys-the-old-key foot-gun vh 2026-09-05 07:20:11 -07:00
  • 85ff740f94 memory: svos key delivery confirmed by ledger-dev; cutover is with the operator vh 2026-09-05 07:07:53 -07:00
  • bcbf92f3d1 memory: svos Heimdall key minted — worldtree-personal, ledger key verified still live vh 2026-09-05 07:05:33 -07:00
  • 49909665b2 memory: svos clone repointed — the ledger redirect now covers only unknown stale clones vh 2026-09-05 06:58:24 -07:00
  • 90941607e7 memory: gitea corviduo/ledger renamed to corviduo/svos; svos Heimdall mint now open vh 2026-09-05 06:57:13 -07:00
  • 784f6eb6dc memory: Ledger→SVOS vault move done — svos/env.sh in, stale ledger/env.sh to trash vh 2026-09-05 06:51:18 -07:00
  • 82158e7e36 memory: snapshot — run 3c gated, run 4 training, DAC revert, GPU rebalance, NAS exposure vh 2026-09-05 06:36:56 -07:00
  • 5237efa299 feat(litellm): expose run 3c as trial for operator hand-testing vh 2026-09-04 14:48:01 -07:00
  • 054c098777 fix(esh): revert the forced 10G — the link was flaking hard, operator called it vh 2026-09-04 14:41:02 -07:00
  • 514ce7acc8 docs(esh): record the held DAC decision — forced 10G stays until the weekend cable swap vh 2026-09-04 10:52:58 -07:00
  • b9988a7bef fix(esh): force 10G on the ESH-Media uplink DAC — it was negotiating 1G vh 2026-09-04 10:06:50 -07:00
  • 0bbdaf9083 fix(esh): correct the SLZB-MR1U MAC framing — derived ESP32 address, not fragile vh 2026-09-04 09:57:02 -07:00
  • fed29be04e feat(esh): move SLZB-MR1U Zigbee coordinator to the IoT VLAN for Home Assistant vh 2026-09-04 09:50:31 -07:00
  • dae77ee118 feat(pfi-gx10): stage ERP-seat SFT run 3c — verified, not launched vh 2026-09-03 22:46:28 -07:00
  • 43135a2768 memory: snapshot — searxng move, gx10 rack networking, mac fleet provisioning vh 2026-09-03 22:22:11 -07:00
  • a95717e810 feat(gx10): rack networking — VLAN 50 via DHCP reservation, wired only vh 2026-09-03 15:59:09 -07:00
  • 0f748ea54e feat(searxng): move to nh3-docker, update, and expose as an MCP tool vh 2026-09-03 14:07:06 -07:00
  • d4aa59a199 fix(backup): enable fleecing so a slow target cannot stall a guest vh 2026-09-02 22:33:12 -07:00
  • bd9692c433 docs(incident): nh3-dev IO stall was a stalled backup, not the disk vh 2026-09-02 21:37:25 -07:00
  • 6ca455a15f feat(scripts): provision-mac-dsh.sh — one script for a Mac, end to end vh 2026-09-02 17:49:42 -07:00
  • 926fc2fb7a feat(litellm): map reasoning_effort high/max -> xhigh for gen-reasoning vh 2026-09-02 15:43:22 -07:00
  • e9605df6ff docs(althing): the fast outage probe never touched the timeout it claimed to test vh 2026-09-02 10:36:49 -07:00
  • 87a1cff6de docs(althing): retract the "bare shell" claim — it was never verified vh 2026-09-02 10:14:08 -07:00
  • 1ac1efca87 refactor(statusline): delegate the althing segment to althing-statusline vh 2026-09-02 10:11:39 -07:00
  • 6d52fc7302 docs(althing): operator ruling — leave pre-deploy seats on their old channel vh 2026-09-02 09:52:36 -07:00
  • 405b3574d2 docs(althing): the measured case for cc — a pane poke lands in prompt history, cc does not vh 2026-09-02 09:33:17 -07:00
  • ee9872f214 memory: sixth althing deploy surface — crossSessionInbound, outside the repo vh 2026-09-02 09:31:29 -07:00
  • af5582c96d docs(althing): a sixth deploy surface, and it lives outside the repo vh 2026-09-02 09:30:48 -07:00
  • 2575242e87 docs(gitea-runner): state that a runs-on label list is AND, not fallback vh 2026-09-02 09:26:19 -07:00
  • e5cbb5485b memory: vastblue org created — org scope is the binding that was expensive to retrofit vh 2026-09-02 09:25:06 -07:00
  • 26706f58ca memory: statusline bell measured a mechanism; two copies now exist vh 2026-09-02 09:14:51 -07:00
  • 5e0c23b0b5 fix(statusline): ask the post office if this seat is reachable, not a lock file vh 2026-09-02 09:14:06 -07:00
  • 1935e48456 memory: althing 3.3.0 deployed — cc channel, and the plugin-cache false green vh 2026-09-02 09:08:16 -07:00
  • 1147e14b79 fix(deploy-althing): diff plugin CONTENT, and document the cc channel vh 2026-09-02 09:07:21 -07:00
  • 91e2b67074 docs(gitea-runner): commit the capability probe as a re-runnable instrument vh 2026-09-02 08:58:45 -07:00
  • 89ffab69df docs(gitea-runner): record measured job capabilities, incl. root-equivalent docker access vh 2026-09-02 08:57:25 -07:00
  • a4a529dd76 docs(runbook): assert waiter identity, not liveness, in the reachability audit vh 2026-09-02 08:34:43 -07:00
  • 7d0d991fcd memory: pin the GX10 baseline's final figures vh 2026-09-02 01:23:50 -07:00
  • e39106bd03 memory: snapshot — session stand-down; GX10 baselined, althing at 3.2.4 vh 2026-09-02 01:23:19 -07:00
  • b039aa19e8 memory: reframe the GX10 work as what it was — a baseline and a tooling check vh 2026-09-02 01:20:26 -07:00
  • dce261335e memory: run 3c goes to the GX10 — I priced the failure in the wrong units vh 2026-09-02 01:17:49 -07:00
  • 5a24d77f12 memory: run-3c probe answered — 79.3 s/it, and it reverses the plan on file vh 2026-09-02 01:16:20 -07:00
  • 84349d7a0e docs(althing): check the hook list, not the version string vh 2026-09-02 01:13:01 -07:00
  • 167a30a916 memory: althing deploy is one command now, and eshpfi owns the plugin hop vh 2026-09-02 01:05:48 -07:00
  • d0882fb830 feat(althing): four-surface deploy script + runbook vh 2026-09-02 01:04:32 -07:00
  • 87f74f1fee memory: althing deploy is four surfaces, and the plugin CLI existed all along vh 2026-09-02 00:48:18 -07:00
  • 83217553bb memory: retract the stale-lock claim; the plugin gap ate the SessionStart hook vh 2026-09-02 00:43:56 -07:00
  • 5563b77867 fix(pfi-gx10): install python3-dev — Triton JIT-compiles C at first use vh 2026-09-02 00:36:16 -07:00
  • f870dbcbbb memory: snapshot — run-3c probe in flight; ana-ml2 baseline reduced from its log vh 2026-09-01 23:46:43 -07:00
  • c0e352a47b fix(elway): probe NOPASSWD with sudo -n true, never sudo -n -v vh 2026-09-01 23:37:42 -07:00
  • 0b48517909 feat(pfi-gx10): privileged-half outfit playbook (sudo, CUDA toolkit, container toolkit) vh 2026-09-01 23:23:50 -07:00
  • fad1db96a0 memory: snapshot — GX10 outfitted userspace; bare metal ruled; CUDA works on sm_121 vh 2026-09-01 23:18:14 -07:00
  • 18fde5902e memory: snapshot — GX10 liveness confirmed; racking is not a prerequisite vh 2026-09-01 23:11:21 -07:00
  • 4c39ef08e2 memory: snapshot — never arm a waiter on a pane-routed seat vh 2026-09-01 23:08:36 -07:00
  • f099caa238 memory: snapshot — H3 encoder pin resolved; my question had the direction backwards vh 2026-09-01 23:05:19 -07:00
  • 12006d287a memory: snapshot — althing 3.2.2 deployed; discover-pid was a bug, not an unknown vh 2026-09-01 22:52:35 -07:00
  • f0d30f7a0f memory: snapshot — 3.2.1 outcome; the unguardable seats split, and one has a fix vh 2026-09-01 22:44:51 -07:00
  • 1c7bd40c9c memory: snapshot — althing 3.2.1 deployed; guard 4 cannot cover two of five seats vh 2026-09-01 22:42:54 -07:00
  • 28dd516be1 memory: snapshot — 3.2.0 migration complete, and a miss of my own worth keeping vh 2026-09-01 22:28:13 -07:00