Commit Graph

  • 4b1e8a7cac fix(harbor): correct naming convention and use staging certs Hermes Agent service account 2026-06-04 20:25:25 -05:00
  • 8f190eb188 fix(the-seas): correct Harbor image tags to use v-prefix (v2.15.1) Hermes Agent service account 2026-06-04 20:22:34 -05:00
  • 95ae6919b0 feat(platform): add Harbor container registry (the-seas) deployment Hermes Agent service account 2026-06-04 20:20:51 -05:00
  • 52e97f3a7c chore: Remove Firecrawl deployment - pausing until platform infra is ready Hermes Agent service account 2026-06-04 19:10:47 -05:00
  • 461aa1bc54 fix(firecrawl): correct Docker image registry paths Hermes Agent service account 2026-06-04 17:05:06 -05:00
  • c38461a6e8 docs(firecrawl): Add comprehensive refactoring summary Hermes Agent service account 2026-06-04 16:57:28 -05:00
  • 6bcb6fa93f refactor(firecrawl): Convert to production-ready Helm chart with persistent storage Hermes Agent service account 2026-06-04 16:56:29 -05:00
  • f4181349f8 feat: Deploy Firecrawl (spaceship-earth) to fastpass cluster Hermes Agent service account 2026-06-04 16:40:12 -05:00
  • 9d860367cc honcho: document deriver disabled-by-default and manual start procedure Hermes Agent service account 2026-06-02 10:28:11 -05:00
  • f654c59dd5 honcho: add honcho_deriver_autostart flag (default: false) Hermes Agent service account 2026-06-02 10:26:30 -05:00
  • d22ac5cef2 hermes: dashboard auto-restart after updates (Restart=always) Hermes Agent service account 2026-06-02 08:43:49 -05:00
  • 0fd69e0b90 ticktick: store OAuth2 creds + PSTG project ID in vault Hermes Agent service account 2026-05-31 23:41:57 -05:00
  • e8d87ff092 honcho: rotate vault_honcho_openai_api_key (new project with embeddings access) Hermes Agent service account 2026-05-31 23:02:21 -05:00
  • 23612a38f2 honcho: enable OpenAI embeddings for conclusion vectorisation Hermes Agent service account 2026-05-31 22:29:03 -05:00
  • bd100c15e7 hermes: add hermes-dashboard systemd unit (port 9119, fronted by Traefik) Hermes Agent service account 2026-05-31 21:09:27 -05:00
  • dc5392446c fix(honcho/templates): restore Jinja {{ ... }} markers around secrets JARVIS 2026-05-31 00:14:46 -05:00
  • f8cf139b10 fix(honcho): cover all LLM subsystems, enable flush, disable embeddings JARVIS 2026-05-31 00:10:59 -05:00
  • ac955d327f fix(traefik/honcho): drop {{ ansible_managed }} — file is rsync-raw JARVIS 2026-05-30 23:46:36 -05:00
  • 9e6339037a fix(add_service_route): use FQDN for lightning-lane + add technitium collection JARVIS 2026-05-30 23:43:57 -05:00
  • b647f6afee fix(honcho/deriver): invoke package main (src.deriver) not module file JARVIS 2026-05-30 23:37:33 -05:00
  • aabb3d5009 fix(honcho/deriver): invoke via python -m so src.* imports resolve JARVIS 2026-05-30 23:28:52 -05:00
  • 4ed64ab91c feat(vault): add honcho secrets for lincoln deployment JARVIS 2026-05-30 23:20:41 -05:00
  • f57e0bef02 feat(day0): promote expand_root_lv to a canonical day0 step JARVIS 2026-05-30 23:08:35 -05:00
  • 9ed7466fd8 feat(expand_root_lv): new role to grow root LV to fill VG + resize fs JARVIS 2026-05-30 23:03:10 -05:00
  • 4d7766d1b1 feat(honcho): add role + day1 playbook + traefik route for lincoln JARVIS 2026-05-30 22:41:33 -05:00
  • 09ae954085 fix(semaphore/configure): template vault entry requires type='password' Hermes Agent service account 2026-05-29 23:25:07 -05:00
  • 8fd9fd5b20 fix(semaphore/configure): vault key attaches via vaults[] not vault_key_id Hermes Agent service account 2026-05-29 23:13:49 -05:00
  • dcb764eca7 fix(semaphore): ANSIBLE_ROLES_PATH is relative to repo root not playbook dir Hermes Agent service account 2026-05-29 23:11:29 -05:00
  • b6a4ad6816 fix(semaphore): set ANSIBLE_ROLES_PATH in default env Hermes Agent service account 2026-05-29 23:08:42 -05:00
  • bbaaf655fa fix(semaphore): become_key=None (wed has passwordless sudo) Hermes Agent service account 2026-05-29 22:57:00 -05:00
  • 7228dc6e11 feat(semaphore): wed-ssh as the canonical Semaphore SSH key Hermes Agent service account 2026-05-29 22:51:10 -05:00
  • 8953702608 fix(semaphore/configure): build POST bodies via Jinja dict literals Hermes Agent service account 2026-05-29 22:47:13 -05:00
  • 0be33cb8db fix(semaphore/configure): use ['keys'] subscript not .keys attribute Hermes Agent service account 2026-05-29 22:45:16 -05:00
  • 0f0b5db29b debug: temporarily disable no_log on key creation to see API error Hermes Agent service account 2026-05-29 22:44:48 -05:00
  • 009f244739 feat(semaphore): add config-as-code via Semaphore REST API Hermes Agent service account 2026-05-29 22:44:15 -05:00
  • 2f87039f17 vault: add jarvis SSH key, gitea deploy key, and Semaphore API token Hermes Agent service account 2026-05-29 22:37:34 -05:00
  • 72fa38e928 fix(semaphore): force container restart when Quadlet template changes Hermes Agent service account 2026-05-29 21:53:47 -05:00
  • 9e68802090 fix(semaphore): make host-agnostic by omitting SEMAPHORE_WEB_ROOT Hermes Agent service account 2026-05-29 21:52:33 -05:00
  • d05cfcf317 fix(semaphore): provide SEMAPHORE_ADMIN_* env vars for non-interactive first boot Hermes Agent service account 2026-05-29 21:38:44 -05:00
  • 80f810fb0c feat(semaphore): rewrite role with rootful Podman Quadlet + PostgreSQL Hermes Agent service account 2026-05-29 21:34:22 -05:00
  • 9153324795 fix(linux-baseline): correct MOTD padding math Hermes Agent service account 2026-05-29 20:56:38 -05:00
  • 91b5817e5f feat(ansible): add linux-baseline role and day0_linux_baseline playbook Hermes Agent service account 2026-05-29 20:40:04 -05:00
  • 1dfa7889ab chore(playbooks): switch day0_baseline.yml to new day0-baseline role Hermes Agent service account 2026-05-28 22:06:49 -05:00
  • 08d7da0c35 feat(baseline): add clean day0 baseline role (time, packages, hardening) Hermes Agent service account 2026-05-28 21:54:34 -05:00
  • 9ebeb42023 fix(semaphore): add SEMAPHORE_DB_SSLMODE=disable for postgres connection Hermes Agent service account 2026-05-28 21:24:14 -05:00
  • 075f34b1fb fix(semaphore): make network creation task more reliable Hermes Agent service account 2026-05-28 15:22:45 -05:00
  • 210c89c2c7 fix(semaphore): make network creation more robust and earlier in legacy block Hermes Agent service account 2026-05-28 15:20:09 -05:00
  • b93a6e50ab feat(semaphore): add optional aggressive storage cleanup for legacy mode Hermes Agent service account 2026-05-28 15:17:54 -05:00
  • 85cc1f8c6a fix(semaphore): improve container cleanup and volume reuse in legacy mode Hermes Agent service account 2026-05-28 15:16:07 -05:00
  • 8e781b0c54 fix(semaphore): add container cleanup at start of legacy postgres deployment Hermes Agent service account 2026-05-28 15:14:34 -05:00
  • d8ad35b8e9 fix(semaphore): add dedicated network for legacy postgres deployment Hermes Agent service account 2026-05-28 15:13:16 -05:00
  • a9973d1e0f feat(semaphore): add legacy postgres deployment path using podman_container Hermes Agent service account 2026-05-28 15:07:47 -05:00
  • 4113011f63 fixed semaphore template Ryan Blundon 2026-05-28 14:51:04 -05:00
  • 018782d986 fix(semaphore): remove User/Group from quadlet template Hermes Agent service account 2026-05-28 14:49:37 -05:00
  • 3681e8c03e fix(semaphore): make volume creation task more robust Hermes Agent service account 2026-05-28 14:31:06 -05:00
  • 8f377e4cf3 fix(semaphore): create named volumes before deploying quadlets Hermes Agent service account 2026-05-28 14:25:18 -05:00
  • 419acaa40d fix(semaphore): use systemctl start for quadlet services after daemon-reload Hermes Agent service account 2026-05-28 14:08:53 -05:00
  • 42b204bf8a fix(semaphore): make quadlet deployment self-contained with immediate daemon-reload + service start Hermes Agent service account 2026-05-28 14:06:24 -05:00
  • 1d7dcb7d82 fix(semaphore): load role defaults in cleanup playbook so variables are defined Hermes Agent service account 2026-05-28 14:02:33 -05:00
  • d63ca0b4f9 docs(semaphore): add cleanup playbook reference to deploy playbook Hermes Agent service account 2026-05-28 14:01:00 -05:00
  • e9440327aa feat(semaphore): add dedicated cleanup playbook Hermes Agent service account 2026-05-28 10:25:56 -05:00
  • dcc7e282c7 feat(semaphore): complete quadlet deployment for PostgreSQL + Semaphore Hermes Agent service account 2026-05-28 10:22:28 -05:00
  • 6d5fc7c5c6 fix(semaphore): set data directory permissions to 0777 for rootless compatibility Hermes Agent service account 2026-05-27 22:38:36 -05:00
  • 312fdf9986 fix env.j2 Ryan Blundon 2026-05-27 22:26:51 -05:00
  • 4e0b4fa049 refactor(semaphore): remove unreliable admin user creation from role Hermes Agent service account 2026-05-27 22:20:43 -05:00
  • cf7c2a1436 fix(semaphore): clean up admin user creation tasks with proper fallback and force logic Hermes Agent service account 2026-05-27 22:16:34 -05:00
  • 3dc6555ad1 fix(semaphore): support vault_semaphore_admin_password as fallback variable name Hermes Agent service account 2026-05-27 22:15:20 -05:00
  • 27ff9286b4 feat(semaphore): add semaphore_force_admin_user option Hermes Agent service account 2026-05-27 22:10:32 -05:00
  • 6e50461999 docs: add comprehensive Semaphore deployment and setup guide Hermes Agent service account 2026-05-27 21:57:02 -05:00
  • 3f1c3a40cf feat(semaphore): add idempotent initial admin user creation Hermes Agent service account 2026-05-27 21:56:36 -05:00
  • 0116ec4cc3 fix(dns): improve hostname extraction in add_service_route.yml Hermes Agent service account 2026-05-27 21:39:51 -05:00
  • f962d0a6d7 feat(dns): rewrite add_service_route.yml to support multi-host Traefik configs Hermes Agent service account 2026-05-27 21:31:41 -05:00
  • dc3c0d7cb1 feat(traefik): add semaphore dynamic config with dual hostnames Hermes Agent service account 2026-05-27 21:24:02 -05:00
  • b05f9fad09 fix(semaphore): add :U volume flag for proper rootless UID mapping Hermes Agent service account 2026-05-27 21:17:40 -05:00
  • 8650995926 fix(semaphore): adjust BoltDB Path in config.json to parent directory Hermes Agent service account 2026-05-27 21:09:12 -05:00
  • e5469d2cb8 fix(semaphore): use semaphore_user for directory ownership + add config.json for BoltDB Hermes Agent service account 2026-05-27 21:07:30 -05:00
  • 702698ddcd fix(semaphore): always regenerate systemd unit and use DB_DIALECT Hermes Agent service account 2026-05-27 20:56:47 -05:00
  • d233d582d4 fix(semaphore): use SEMAPHORE_DB_DIALECT instead of legacy DB_TYPE Hermes Agent service account 2026-05-27 20:48:41 -05:00
  • 3839fac162 fix: run directory ownership task with become: true Hermes Agent service account 2026-05-26 23:04:23 -05:00
  • b01dac85da fix: set correct ownership (1000:1000) on semaphore data directories Hermes Agent service account 2026-05-26 23:02:04 -05:00
  • 37a49824d0 fix: run podman generate systemd as root Hermes Agent service account 2026-05-26 22:57:53 -05:00
  • 0127016ab2 fix: run Semaphore container as root inside container Hermes Agent service account 2026-05-26 22:57:10 -05:00
  • e0b6fcb24a fix: use 'latest' as default Semaphore image tag Hermes Agent service account 2026-05-26 22:55:12 -05:00
  • e7d9a8fec5 fix: use containers.podman collection instead of community.general Hermes Agent service account 2026-05-26 22:53:57 -05:00
  • 1a9addc537 feat: use community.general collection + requirements.yml for semaphore Hermes Agent service account 2026-05-26 22:51:59 -05:00
  • 401f25b1c4 fix: use raw podman commands (no external collections required) Hermes Agent service account 2026-05-26 22:50:55 -05:00
  • ece522074e fix: switch semaphore role to podman_container + generate systemd (more reliable) Hermes Agent service account 2026-05-26 22:50:18 -05:00
  • c30c0074f1 fix: separate daemon-reload from service start in semaphore role Hermes Agent service account 2026-05-26 22:49:38 -05:00
  • fa51dc2c4d fix: correct Quadlet service startup in semaphore role Hermes Agent service account 2026-05-26 22:48:55 -05:00
  • c1810fde8a fix: replace semaphore role with new Podman + Quadlet version Hermes Agent service account 2026-05-26 22:46:46 -05:00
  • a781ef8b14 update inventory Ryan Blundon 2026-05-26 22:44:48 -05:00
  • 92b2a9d609 refactor: consolidate all roles into ansible/roles/ and update ansible.cfg Hermes Agent service account 2026-05-26 22:22:08 -05:00
  • 9250b0f193 chore: remove defunct hermes directory Hermes Agent service account 2026-05-26 14:42:45 -05:00
  • 24869f47ee deply hermes VM Ryan Blundon 2026-05-26 11:48:23 -05:00
  • bb5a57e909 remove jarvis deployment Ryan Blundon 2026-05-25 21:16:52 -05:00
  • 9f3d81729d fix(jarvis): run as root for NFS compat, add namespace PSA baseline label Ryan Blundon 2026-05-25 20:43:03 -05:00
  • 064d3e8b3d fix(jarvis): move runAsNonRoot to container level, allow init container to run as root for chown Ryan Blundon 2026-05-25 20:39:39 -05:00
  • ef7e3c61ed fix(jarvis): add init container to fix PVC ownership for UID 10000 Ryan Blundon 2026-05-25 20:37:01 -05:00
  • 64951e1e5e fix(jarvis): use args not command for hermes entrypoint Ryan Blundon 2026-05-25 20:35:32 -05:00
  • 58931732f7 fix(jarvis): correct hermes entrypoint command Ryan Blundon 2026-05-25 20:31:46 -05:00