Brandon Schneider
51664eb060
docs(infra): plan — mesh networking layers over Ray
...
Architectural plan for Tailscale mesh + Ray + VCN + compute surfaces.
5-layer stack:
1. Tailscale connects everything (WireGuard, DERP relay)
2. Ray schedules work across the mesh
3. VCN compresses data (50x bandwidth reduction)
4. FrameDispatcher routes by tag
5. Compute surfaces execute (GPU/CPU/Ethernet/framebuffer/MCU)
Key insight: every device in the Tailscale mesh is a potential
compute node. Framebuffer and Ethernet surfaces turn devices
that "cant run Ray" into compute participants.
4 phases:
1. Ray over Tailscale (mostly done)
2. Multi-tier scheduling (probe done, placement pending)
3. Framebuffer + Ethernet integration (host-side pending)
4. Edge devices (ESP32, 1-Wire sensors)
2026-05-30 20:03:57 -05:00
Brandon Schneider
4df6997b51
docs(kube): update infra docs, RayCluster manifest with nightly GPU images
...
- infrastructure-status.md: rewrite with current cluster topology (cupfox control-plane,
neon-64gb/racknerd/steamdeck workers), RayCluster status, Garage storage,
Caddy edge, open issues
- k3s-cluster-setup.md: fix steamdeck hardware specs (8 vCPU, 14.5 GB RAM)
- raycluster.yaml: upgrade to rayproject/ray:nightly-py313-gpu (multi-arch amd64+arm64),
add gpu-workers group targeting neon-64gb, add arm64-workers for neon-64gb CPU
- README.md: update build job count (3460 → 3313, verified)
Build: lake build Compiler 3313 jobs, 0 errors
2026-05-30 16:23:13 -05:00
Brandon Schneider
e5fb0a5f4d
chore: commit accumulated working tree changes
...
Lean: update Semantics modules, add new numerics/physics data files
Hardware: update FPGA bitstreams (tangnano9k_uart_loopback)
Infra: k3s-flake tests, netcup-vps configuration, VCN compute substrate
Docs: ARCHITECTURE, specs, citation updates
2026-05-30 00:10:02 -05:00
Brandon Schneider
69e5b31c4f
docs(infra): add Ollama inference serving to k3s-cluster-setup
...
Add inference serving section documenting:
- Ollama host-level deployment on Neon-64GB (bypasses KServe RAM limits)
- Caddy reverse proxy on racknerd (:8443 → 100.64.19.78:11434)
- Troubleshooting: autosave.json stale config, passt port interception
- curl/wget verification commands
Fixes 502 Bad Gateway from Caddy (--resume loading stale autosave.json).
2026-05-30 00:02:49 -05:00
Brandon Schneider
073a70eb86
WIP: accumulated changes
2026-05-25 16:24:21 -05:00
Brandon Schneider
d2167c5b05
infra(vps): document BraidRouter mesh with nixos-laptop node
...
- Add BraidRouter section to vps-proxmox-status.md
- Document compute nodes: vps-local, qfox-1 (offline), nixos-laptop
- Document socat proxy (port 11435) for tailnet routing from LXC 100
- Update next steps with pending infrastructure tasks
Generated with [Devin](https://cli.devin.ai/docs )
Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
2026-05-20 18:56:15 -05:00
Brandon Schneider
cf0d588291
infra(vps): deploy Authentik, credential vault, age-sops, PQC, ARR plan
...
- LXC 100: Authentik 2025.4 with PostgreSQL 16 + Redis
- LXC 100: Credential vault HTTP service on port 9100 (PG-backed)
- VPS: Caddy reverse proxy with Let's Encrypt DNS-01 for researchstack.info,
auth.researchstack.info, vault.researchstack.info
- VPS: Post-quantum SSH (mlkem768x25519-sha256) in sshd_config
- Repo: age-sops secret management enabled
- Encrypt: .env, restic.env, credentials.json, appflowy.env,
tailscale-auth.key, porkbun.env, API KEYS/*.txt
- Add .sops.yaml at repo root and update k3s-flake/.sops.yaml
- Porkbun DNS: update A records to 46.232.249.226, add vault/auth subdomains
- Tailscale: auth key added to credential server (RackNerd microVM)
- Docs: PQC posture, VPS status, Authentik setup guide, ARR stack plan
Generated with [Devin](https://cli.devin.ai/docs )
Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
2026-05-20 18:00:11 -05:00
