Research-Stack/4-Infrastructure/k3s-flake/manifests
Brandon Schneider a031a73dfe fix(infra): standardize k3s cluster — Traefik, ingress, architecture docs, Ray GPU workers
Architecture alignment:
- Rewrite k3s-server.nix from aspirational role=server to actual role=agent
  (cupfox is the real control-plane at 100.110.163.82:6443)
- Update flake.nix: correct serverAddr for all nodes, annotate dead nodes,
  fix hostname from nixos-laptop to nixos
- Update join-agent.sh default SERVER to cupfox
- Document actual vs intended architecture in comments

Ingress:
- Add rs-apps-books Ingress for audiobookshelf (/apps/books → media ns)
- Add strip-apps-books middleware for prefix stripping
- Create ray-ingress.yaml for Ray dashboard at /server/ray

Ray:
- Fix raycluster.yaml: enable dashboard, mount /dev/dri on gpu-workers
- Point gpu-workers to qfox-1 (was neon-64gb)
- Remove nvidia.com/gpu resource dependency (use /dev/dri via Mesa)

Security:
- Move OPENID_CLIENT_SECRET from plaintext to K8s Secret ref
- Update manifest to use valueFrom.secretKeyRef

Cleanup:
- Remove 53 committed test PNG screenshots from git tracking
- Remove auth-state.json from git tracking
- Add *.png, *.json to tests/.gitignore

Build: no build needed
2026-05-31 23:13:04 -05:00
..
actual-budget refactor(rds): consolidate 14 psycopg2 connect patterns into shared rds_connect module 2026-05-26 15:09:34 -05:00
authentik feat(k3s-server): Traefik NodePort + host Caddy pass-through (internal-only) 2026-05-26 21:03:54 -05:00
control-plane fix(infra): resolve k3s services startup issues and update ingress configuration 2026-05-27 17:39:00 -05:00
credential-server fix(infra): resolve k3s services startup issues and update ingress configuration 2026-05-27 17:39:00 -05:00
heimdall Expand devcontainer with full Python stack, add MCP servers (Notion/AWS), strengthen Lean theorems 2026-05-19 01:52:14 -05:00
hermes feat(k3s-server): Traefik NodePort + host Caddy pass-through (internal-only) 2026-05-26 21:03:54 -05:00
homarr WIP: accumulated changes 2026-05-25 16:24:21 -05:00
homer feat(k3s-server): Traefik NodePort + host Caddy pass-through (internal-only) 2026-05-26 21:03:54 -05:00
ingress fix(infra): standardize k3s cluster — Traefik, ingress, architecture docs, Ray GPU workers 2026-05-31 23:13:04 -05:00
mail WIP: accumulated changes 2026-05-25 16:24:21 -05:00
media fix(infra): standardize k3s cluster — Traefik, ingress, architecture docs, Ray GPU workers 2026-05-31 23:13:04 -05:00
pulse-receiver Expand devcontainer with full Python stack, add MCP servers (Notion/AWS), strengthen Lean theorems 2026-05-19 01:52:14 -05:00
uptime-kuma Expand devcontainer with full Python stack, add MCP servers (Notion/AWS), strengthen Lean theorems 2026-05-19 01:52:14 -05:00
vaultwarden WIP: accumulated changes 2026-05-25 16:24:21 -05:00
kustomization.yaml feat(k3s-server): Traefik NodePort + host Caddy pass-through (internal-only) 2026-05-26 21:03:54 -05:00
namespace.yaml Expand devcontainer with full Python stack, add MCP servers (Notion/AWS), strengthen Lean theorems 2026-05-19 01:52:14 -05:00