Commit Graph

Select branches

Hide Pull Requests

archive/pre-mk-labs

feature/astro-orbiter-ollama

main

master

monitoring-stack

user-provisioning-update

#1

#2

#3

#4

0.1.2

Mono Color

• dcb764eca7 fix(semaphore): ANSIBLE_ROLES_PATH is relative to repo root not playbook dir Hermes Agent service account 2026-05-29 23:11:29 -05:00
• b6a4ad6816 fix(semaphore): set ANSIBLE_ROLES_PATH in default env Hermes Agent service account 2026-05-29 23:08:42 -05:00
• bbaaf655fa fix(semaphore): become_key=None (wed has passwordless sudo) Hermes Agent service account 2026-05-29 22:57:00 -05:00
• 7228dc6e11 feat(semaphore): wed-ssh as the canonical Semaphore SSH key Hermes Agent service account 2026-05-29 22:51:10 -05:00
• 8953702608 fix(semaphore/configure): build POST bodies via Jinja dict literals Hermes Agent service account 2026-05-29 22:47:13 -05:00
• 0be33cb8db fix(semaphore/configure): use ['keys'] subscript not .keys attribute Hermes Agent service account 2026-05-29 22:45:16 -05:00
• 0f0b5db29b debug: temporarily disable no_log on key creation to see API error Hermes Agent service account 2026-05-29 22:44:48 -05:00
• 009f244739 feat(semaphore): add config-as-code via Semaphore REST API Hermes Agent service account 2026-05-29 22:44:15 -05:00
• 2f87039f17 vault: add jarvis SSH key, gitea deploy key, and Semaphore API token Hermes Agent service account 2026-05-29 22:37:34 -05:00
• 72fa38e928 fix(semaphore): force container restart when Quadlet template changes Hermes Agent service account 2026-05-29 21:53:47 -05:00
• 9e68802090 fix(semaphore): make host-agnostic by omitting SEMAPHORE_WEB_ROOT Hermes Agent service account 2026-05-29 21:52:33 -05:00
• d05cfcf317 fix(semaphore): provide SEMAPHORE_ADMIN_* env vars for non-interactive first boot Hermes Agent service account 2026-05-29 21:38:44 -05:00
• 80f810fb0c feat(semaphore): rewrite role with rootful Podman Quadlet + PostgreSQL Hermes Agent service account 2026-05-29 21:34:22 -05:00
• 9153324795 fix(linux-baseline): correct MOTD padding math Hermes Agent service account 2026-05-29 20:56:38 -05:00
• 91b5817e5f feat(ansible): add linux-baseline role and day0_linux_baseline playbook Hermes Agent service account 2026-05-29 20:40:04 -05:00
• 1dfa7889ab chore(playbooks): switch day0_baseline.yml to new day0-baseline role Hermes Agent service account 2026-05-28 22:06:49 -05:00
• 08d7da0c35 feat(baseline): add clean day0 baseline role (time, packages, hardening) Hermes Agent service account 2026-05-28 21:54:34 -05:00
• 9ebeb42023 fix(semaphore): add SEMAPHORE_DB_SSLMODE=disable for postgres connection Hermes Agent service account 2026-05-28 21:24:14 -05:00
• 075f34b1fb fix(semaphore): make network creation task more reliable Hermes Agent service account 2026-05-28 15:22:45 -05:00
• 210c89c2c7 fix(semaphore): make network creation more robust and earlier in legacy block Hermes Agent service account 2026-05-28 15:20:09 -05:00
• b93a6e50ab feat(semaphore): add optional aggressive storage cleanup for legacy mode Hermes Agent service account 2026-05-28 15:17:54 -05:00
• 85cc1f8c6a fix(semaphore): improve container cleanup and volume reuse in legacy mode Hermes Agent service account 2026-05-28 15:16:07 -05:00
• 8e781b0c54 fix(semaphore): add container cleanup at start of legacy postgres deployment Hermes Agent service account 2026-05-28 15:14:34 -05:00
• d8ad35b8e9 fix(semaphore): add dedicated network for legacy postgres deployment Hermes Agent service account 2026-05-28 15:13:16 -05:00
• a9973d1e0f feat(semaphore): add legacy postgres deployment path using podman_container Hermes Agent service account 2026-05-28 15:07:47 -05:00
• 4113011f63 fixed semaphore template rblundon 2026-05-28 14:51:04 -05:00
• 018782d986 fix(semaphore): remove User/Group from quadlet template Hermes Agent service account 2026-05-28 14:49:37 -05:00
• 3681e8c03e fix(semaphore): make volume creation task more robust Hermes Agent service account 2026-05-28 14:31:06 -05:00
• 8f377e4cf3 fix(semaphore): create named volumes before deploying quadlets Hermes Agent service account 2026-05-28 14:25:18 -05:00
• 419acaa40d fix(semaphore): use systemctl start for quadlet services after daemon-reload Hermes Agent service account 2026-05-28 14:08:53 -05:00
• 42b204bf8a fix(semaphore): make quadlet deployment self-contained with immediate daemon-reload + service start Hermes Agent service account 2026-05-28 14:06:24 -05:00
• 1d7dcb7d82 fix(semaphore): load role defaults in cleanup playbook so variables are defined Hermes Agent service account 2026-05-28 14:02:33 -05:00
• d63ca0b4f9 docs(semaphore): add cleanup playbook reference to deploy playbook Hermes Agent service account 2026-05-28 14:01:00 -05:00
• e9440327aa feat(semaphore): add dedicated cleanup playbook Hermes Agent service account 2026-05-28 10:25:56 -05:00
• dcc7e282c7 feat(semaphore): complete quadlet deployment for PostgreSQL + Semaphore Hermes Agent service account 2026-05-28 10:22:28 -05:00
• 6d5fc7c5c6 fix(semaphore): set data directory permissions to 0777 for rootless compatibility Hermes Agent service account 2026-05-27 22:38:36 -05:00
• 312fdf9986 fix env.j2 rblundon 2026-05-27 22:26:51 -05:00
• 4e0b4fa049 refactor(semaphore): remove unreliable admin user creation from role Hermes Agent service account 2026-05-27 22:20:43 -05:00
• cf7c2a1436 fix(semaphore): clean up admin user creation tasks with proper fallback and force logic Hermes Agent service account 2026-05-27 22:16:34 -05:00
• 3dc6555ad1 fix(semaphore): support vault_semaphore_admin_password as fallback variable name Hermes Agent service account 2026-05-27 22:15:20 -05:00
• 27ff9286b4 feat(semaphore): add semaphore_force_admin_user option Hermes Agent service account 2026-05-27 22:10:32 -05:00
• 6e50461999 docs: add comprehensive Semaphore deployment and setup guide Hermes Agent service account 2026-05-27 21:57:02 -05:00
• 3f1c3a40cf feat(semaphore): add idempotent initial admin user creation Hermes Agent service account 2026-05-27 21:56:36 -05:00
• 0116ec4cc3 fix(dns): improve hostname extraction in add_service_route.yml Hermes Agent service account 2026-05-27 21:39:51 -05:00
• f962d0a6d7 feat(dns): rewrite add_service_route.yml to support multi-host Traefik configs Hermes Agent service account 2026-05-27 21:31:41 -05:00
• dc3c0d7cb1 feat(traefik): add semaphore dynamic config with dual hostnames Hermes Agent service account 2026-05-27 21:24:02 -05:00
• b05f9fad09 fix(semaphore): add :U volume flag for proper rootless UID mapping Hermes Agent service account 2026-05-27 21:17:40 -05:00
• 8650995926 fix(semaphore): adjust BoltDB Path in config.json to parent directory Hermes Agent service account 2026-05-27 21:09:12 -05:00
• e5469d2cb8 fix(semaphore): use semaphore_user for directory ownership + add config.json for BoltDB Hermes Agent service account 2026-05-27 21:07:30 -05:00
• 702698ddcd fix(semaphore): always regenerate systemd unit and use DB_DIALECT Hermes Agent service account 2026-05-27 20:56:47 -05:00
• d233d582d4 fix(semaphore): use SEMAPHORE_DB_DIALECT instead of legacy DB_TYPE Hermes Agent service account 2026-05-27 20:48:41 -05:00
• 3839fac162 fix: run directory ownership task with become: true Hermes Agent service account 2026-05-26 23:04:23 -05:00
• b01dac85da fix: set correct ownership (1000:1000) on semaphore data directories Hermes Agent service account 2026-05-26 23:02:04 -05:00
• 37a49824d0 fix: run podman generate systemd as root Hermes Agent service account 2026-05-26 22:57:53 -05:00
• 0127016ab2 fix: run Semaphore container as root inside container Hermes Agent service account 2026-05-26 22:57:10 -05:00
• e0b6fcb24a fix: use 'latest' as default Semaphore image tag Hermes Agent service account 2026-05-26 22:55:12 -05:00
• e7d9a8fec5 fix: use containers.podman collection instead of community.general Hermes Agent service account 2026-05-26 22:53:57 -05:00
• 1a9addc537 feat: use community.general collection + requirements.yml for semaphore Hermes Agent service account 2026-05-26 22:51:59 -05:00
• 401f25b1c4 fix: use raw podman commands (no external collections required) Hermes Agent service account 2026-05-26 22:50:55 -05:00
• ece522074e fix: switch semaphore role to podman_container + generate systemd (more reliable) Hermes Agent service account 2026-05-26 22:50:18 -05:00
• c30c0074f1 fix: separate daemon-reload from service start in semaphore role Hermes Agent service account 2026-05-26 22:49:38 -05:00
• fa51dc2c4d fix: correct Quadlet service startup in semaphore role Hermes Agent service account 2026-05-26 22:48:55 -05:00
• c1810fde8a fix: replace semaphore role with new Podman + Quadlet version Hermes Agent service account 2026-05-26 22:46:46 -05:00
• a781ef8b14 update inventory rblundon 2026-05-26 22:44:48 -05:00
• 92b2a9d609 refactor: consolidate all roles into ansible/roles/ and update ansible.cfg Hermes Agent service account 2026-05-26 22:22:08 -05:00
• 9250b0f193 chore: remove defunct hermes directory Hermes Agent service account 2026-05-26 14:42:45 -05:00
• 24869f47ee deply hermes VM rblundon 2026-05-26 11:48:23 -05:00
• bb5a57e909 remove jarvis deployment rblundon 2026-05-25 21:16:52 -05:00
• 9f3d81729d fix(jarvis): run as root for NFS compat, add namespace PSA baseline label rblundon 2026-05-25 20:43:03 -05:00
• 064d3e8b3d fix(jarvis): move runAsNonRoot to container level, allow init container to run as root for chown rblundon 2026-05-25 20:39:39 -05:00
• ef7e3c61ed fix(jarvis): add init container to fix PVC ownership for UID 10000 rblundon 2026-05-25 20:37:01 -05:00
• 64951e1e5e fix(jarvis): use args not command for hermes entrypoint rblundon 2026-05-25 20:35:32 -05:00
• 58931732f7 fix(jarvis): correct hermes entrypoint command rblundon 2026-05-25 20:31:46 -05:00
• be8e50d590 deploy hermes feature/astro-orbiter-ollama rblundon 2026-05-25 20:21:24 -05:00
• e309acd67d fix typo rblundon 2026-05-24 21:15:08 -05:00
• 4e7f14ea5a additional service name changes rblundon 2026-05-24 21:12:10 -05:00
• b79f0505b7 update pbs to timekeeper rblundon 2026-05-24 19:46:19 -05:00
• 045ac85353 update glance configmap rblundon 2026-05-24 19:43:13 -05:00
• 60af4304b6 fix url rblundon 2026-05-24 18:35:52 -05:00
• 96e946ac09 change to https rblundon 2026-05-24 18:33:16 -05:00
• 6584ed9dc4 added glance dashboard rblundon 2026-05-24 17:04:49 -05:00
• 3017c27910 fix port rblundon 2026-05-19 23:03:49 -05:00
• c25c2a25ad update referencegrant rblundon 2026-05-19 22:41:41 -05:00
• 0476e489d4 more rblundon 2026-05-19 22:35:05 -05:00
• bf0d7a20a7 update gateway rblundon 2026-05-19 22:31:22 -05:00
• ed0091cd05 adjust session duration rblundon 2026-05-19 22:25:00 -05:00
• 402f93ab38 add ingnore rblundon 2026-05-19 22:16:31 -05:00
• 8944da8c99 folder rename rblundon 2026-05-19 22:06:48 -05:00
• d671700466 deploy headlamp rblundon 2026-05-19 22:00:34 -05:00
• 562e102a9b enable metrics rblundon 2026-05-19 21:34:46 -05:00
• f4c60d7560 add grafana dashboards rblundon 2026-05-19 21:12:54 -05:00
• 0dae8327eb update prometheus scrape rblundon 2026-05-18 22:57:07 -05:00
• 39b7b91f45 update snmp exporter rblundon 2026-05-18 22:32:13 -05:00
• a7f77514d6 additional monitoring scrapes rblundon 2026-05-18 22:28:14 -05:00
• b45dcea4c3 update gateway spec rblundon 2026-05-18 22:01:18 -05:00
• 2ed70b4964 Deploy monitoring stack rblundon 2026-05-18 21:42:32 -05:00
• dbf0b18f07 authentik for argo rblundon 2026-05-18 19:43:21 -05:00
• 1cfc9b5f5d align gateway spec rblundon 2026-05-18 19:28:50 -05:00
• c8f75bef8a fix referencegrant rblundon 2026-05-18 19:25:41 -05:00
• fc171b48e9 deploy gateway rblundon 2026-05-18 19:11:42 -05:00