100 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
forust	18167e7bc3	ci: validate Renovate manifests with kubeconform	2026-09-14 10:51:40 +02:00
forustandCopilot	592d24ce96	feat(postgres): migrate apps to shared database ... Move Authentik and Netronome to the shared PostgreSQL service after logical dump and restore. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-09-14 10:41:46 +02:00
forust	fe32d0319c	feat(postgres): add shared database deployments	2026-09-14 10:25:45 +02:00
forustandCopilot	24d3686f60	ci: fix formatting and YAML lint scope ... Lint tracked YAML files without scanning generated dependencies. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-09-14 09:30:55 +02:00
forust	b8b3bba264	Merge branch 'feat/renovate'	2026-09-14 09:16:43 +02:00
forustandCopilot	abfbc04067	fix(infra): align monitoring and Gitea database config ... Keep CrowdSec scraping explicit and define Gitea's database name. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-09-14 09:16:01 +02:00
forustandCopilot	23ed72826a	chore(images): pin service image updates ... Replace floating service images with reviewable tags or digests. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-09-14 09:16:01 +02:00
forustandCopilot	7288058df6	feat(renovate): add Gitea update automation ... Run Renovate in Kubernetes to create reviewed image update PRs. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-09-14 09:16:01 +02:00
forust	6715f9e9af	chore(k8s): raise resource limits for glance, edu and crowdsec	2026-09-14 01:29:28 +02:00
forust	ccec1102ef	ci(deploy): helm upgrade kube-prometheus-stack when active	2026-09-14 01:29:24 +02:00
forust	360a6fc5dc	feat(prometheus): add alerting rules and alertmanager config	2026-09-14 01:21:27 +02:00
forust	9a806724af	chore(crowdsec): remove crowdsec bouncer from dns and headscale ingresses	2026-09-14 01:15:55 +02:00
forustandCopilot	ed1ddaad5d	feat(crowdsec): restore web traffic protection ... Protect public Traefik routes with CrowdSec HTTP decisions and restore access logging for web traffic analysis. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-09-12 21:05:12 +02:00
forustandCopilot	726b3ee544	fix(edu): run redis as statefulset ... Keep the existing Redis PVC and data while migrating the edu-master workload from Deployment to StatefulSet. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-09-10 23:35:59 +02:00
forust	13309b26e0	fix: add checkmk agent entrypoint ... update traefik to v3.7.13	2026-09-10 14:52:49 +02:00
forust	eddc256bed	chore: remove esp32/ingress.yaml from main	2026-09-10 12:12:54 +02:00
forust	52f821cbba	Merge branch 'main' of ssh://gitssh.forust.xyz:2221/forust/homelab	2026-09-10 11:47:25 +02:00
forust	0dbc2fff13	Merge branch 'sidetree'	2026-09-10 11:47:25 +02:00
forust	91ec83bc1c	Merge branch 'main' of ssh://gitssh.forust.xyz:2221/forust/homelab	2026-09-10 11:47:20 +02:00
forust	9fec1dae39	Merge branch 'sidetree'	2026-09-10 11:47:15 +02:00
forust	e5626b7b2d	chore: remove untracked README.md	2026-09-10 11:45:00 +02:00
forust	8fb12a2176	chore: remove untracked README.md	2026-09-10 11:44:23 +02:00
forust	fe0c7067b6	Merge branch 'main' of ssh://gitssh.forust.xyz:2221/forust/homelab	2026-09-10 11:42:17 +02:00
forust	d0f0843774	Merge branch 'sidetree'	2026-09-10 11:41:35 +02:00
forust	81a5b207ac	Merge branch 'main' of ssh://gitssh.forust.xyz:2221/forust/homelab	2026-09-10 11:41:31 +02:00
forust	e3d5970ae3	chore: remove untracked README.md	2026-09-10 11:39:20 +02:00
forust	85f05c26cb	feat(edu): activate k8s management for edu-master	2026-09-10 00:55:22 +02:00
forust	68630eb773	fix(edu): read diary event times directly from DOM, drop 25 AJAX clicks ... _collect_event_times re-clicked every a.event-link and waited ~3s per event for a visible span.data, but the calendar embeds all times in div.event-full-info[data-event-full-info-id] span.data already. The old loop took ~109s for 25 events and collected 0 (original divs stay sf-hidden), effectively hanging /diary. Now a single evaluate reads all times (~3.7s), parsing HH:MM from p.date span.data.	2026-09-10 00:31:04 +02:00
forust	dad9cf2104	feat(edu): parse event times in /diary and drop weekend days ... - fetch each event's time via Playwright (click event-link, read span.data, close fancybox) and render as 'title (HH:MM)' - '08:00' placeholder renders as localized 'unknown' (time_unknown key in ru/uk/en) - diary week view shows Mon-Fri only (title ends at Friday) - diary month view skips Sat/Sun by weekday_idx with name-based fallback - schedule keyboard drops Sat/Sun day buttons	2026-09-10 00:05:56 +02:00
forust	60886e8be2	style(edu): ruff-format webinar-checker/checker.py	2026-09-09 23:47:04 +02:00
forust	4528321225	fix(edu): add TZ to .env.example	2026-09-09 11:46:35 +02:00
forust	b246a3dea1	fix(edu): review findings for checker.py i18n — group chat language via resolve_lang/chat: keys (default uk), weekday normalization with _norm_day + logging, drop dead translation keys, html.escape, single lang lookup, distinct whitelist emoji	2026-09-09 11:44:17 +02:00
forustandassistant	4c59a2d2fe	lang(edu): translate k8s manifest comments to English only ... - restore-seed-job.yaml.example: translate runbook to English - secrets.yaml.example: translate section headers to English - webinar-checker.yaml: translate initContainer dependency-order comments to English Co-authored-by: assistant	2026-09-09 10:46:36 +02:00
forust	fcc7b0d611	ci(deploy): gate redeploy behind manual workflow_dispatch ... removes automatic redeploy on push to main; deploy now runs only on explicit manual trigger	2026-09-06 20:55:40 +02:00
forust	9633fe3a10	style(ci): add trailing newline to deploy workflows	2026-09-06 20:45:30 +02:00
forust	d9f1c8325a	feat(userbot): prereqs at startup, SPA path guard, provision lock ... - ensure_prerequisites runs on startup, not per-request; kube config errors surface as 503 PanelError - serialize provisioning with a lock; drop per-endpoint prereq checks - guard SPA fallback against path traversal (relative_to) - add backend tests for auth flow, k8s service, spa routing; ci comment for legacy userbot deployments	2026-09-06 20:39:12 +02:00
forust	861d89d36a	ci(deploy): split runtime by k8s/active marker ... services marked k8s/active are applied via kubectl; the rest via docker compose. inactive services with k8s/ keep only routing manifests (external Services, EndpointSlices, Ingresses) to reach docker backends. headscale/nextcloud routing moved to k8s/routing/. validations: compose config --quiet + kubectl apply --dry-run=client. namespace manifests applied first. pull_policy:build stacks get build+push before up so the registry image stays fresh.	2026-09-06 20:39:12 +02:00
forust	71cddd6a91	feat(userbot): add Kubernetes control panel ... Manage Telegram instances through Kubernetes with legacy adoption for forust and anna. Build and deploy the panel image alongside the runtime.	2026-09-06 20:39:12 +02:00
forust	30e6f05584	fix(edu_master): satisfy ruff in schedule scraper ... - rename ambiguous loop var, merge nested if (E741, SIM102) - use tempfile.gettempdir() for debug dump (S108) - drop unused total_lessons assignment (F841)	2026-09-06 20:37:18 +02:00
forust	bc8d74fd28	feat(schedule): per-user class picker, parser fixes ... - fix parser: capture tr attrs via finditer, strip HTML comments before cell parse (was leaving '-->' in subject names) - store class choice in redis: user:{id}:schedule_class (private) and chat:{id}:schedule_class (groups, admin-only via /setclass) - /schedule renders day for stored class, /setclass sets it directly - drop teacher emoji, format grade as "N клас"	2026-09-06 16:17:48 +02:00
forust	d2d4efb0d7	feat: add schedule scraper for lessons table ... Add /schedule command to scrape edu.edu.vn.ua/lessons/table via Playwright. Inline keyboard flow: pick weekday (with today/tomorrow shortcuts), then pick class. Cache 5h per user. Parse subjects/notes/teachers, multi-lesson cells (hr-separated).	2026-09-06 15:46:41 +02:00
forust	b752bf88bd	feat: add edu_master k8s manifests for k0s migration	2026-09-06 15:00:51 +02:00
forust	587611ca88	chore: remove empty middlewares blocks from k8s ingresses	2026-09-02 12:17:04 +02:00
forust	ace23ad1f9	fix: remove www.xdfnx.cfd from ingress, add Gitea access log config	2026-07-20 11:40:41 +02:00
forust	92aa731e44	deleted crowdsec stack from the repo. will figure something else ... Signed-off-by: mr-forust <vzlomdsisma@gmail.com>	2026-07-19 23:16:14 +02:00
forust	87ca3fd40c	chore: updatet chernuha's pfp, added projects sections for forust.xyz	2026-07-05 02:59:31 +02:00
forust	82bcd30ed8	updated xdfnx's page	2026-07-04 01:01:05 +02:00
forust	620262d98c	ci: fetch full history for change detection after rebase	2026-07-04 00:55:46 +02:00
forust	831f3a46b0	updated xdfnx's page	2026-07-04 00:46:13 +02:00
forust	f7902e74e8	ci: require lint and validate before build	2026-06-30 01:23:53 +02:00
forust	eb8d1b361e	ci: add branch tags to docker builds	2026-06-30 01:20:51 +02:00
forust	6e2cafb206	ci: merge lint validate and docker builds	2026-06-30 01:17:31 +02:00
forust	67b0c0824f	ci: restore docker-based lint and validate jobs	2026-06-30 01:12:23 +02:00
forust	8e72e0a920	ci: run lint and validate tools locally	2026-06-30 00:14:14 +02:00
forust	73a1132beb	Align Traefik Helm log values with chart v41	2026-06-29 23:02:26 +02:00
forust	a128523c24	Fix CrowdSec middleware references in Traefik ingresses	2026-06-29 22:47:21 +02:00
forust	ee881acd0e	refactor: update xdfnx homepage index.html	2026-06-28 11:59:57 +02:00
forust	bacb2f4b9f	fix: correct Traefik rule syntax for local IngressRoutes ... Move parentheses outside Host() calls so that || and && operators are properly grouped in Traefik rule expressions.	2026-06-28 11:59:52 +02:00
forust	91211e7b78	fix: resolve CrowdSec Helm upgrade failure - remove duplicate DISABLE_ONLINE_API env and add metrics config	2026-06-28 11:59:46 +02:00
forust	9b3a7aadb4	fix: resolve pyrogram imports by adding venv and pyright config ... - Create .venv with pyrofork and all dependencies installed - Add pyrightconfig.json at workspace root and in userbot/ - Enable pyright as language server for Python in Zed settings - Update uv.lock with resolved dependency tree	2026-06-21 22:33:04 +02:00
forust	b123621ead	chore: remove github obsolete prod deploy workflow	2026-06-21 22:24:30 +02:00
forust	a2df8504f5	Fix DL3013: pin pip version in webinar-checker Dockerfile	2026-06-21 22:07:44 +02:00
forust	fb43306571	Fix all lint issues: Dockerfiles (DL3015/DL3013/DL4006) + Ruff (173→0 errors) ... Dockerfile fixes: - edu_master/phpsessid-bot: add --no-install-recommends, pin pip versions - edu_master/webinar-checker: pin pip versions with --no-cache-dir - userbot: add SHELL with pipefail for pipe operations Ruff fixes (173 → 0): - W293/W291/W292: whitespace clean via ruff format - N806: camelCase → snake_case (anilist, safone, hearts, flux, etc.) - ARG001/ARG002: prefix unused params with _ - SIM115: use context managers for file I/O - SIM117: combine nested with statements - S608: noqa on SQL f-strings (module name is validated) - E402/N812/N817: import fixes - B023: pass loop variable as argument - I001: auto-sorted imports - syntax: fixed = vs == in dtek_notif/main.py	2026-06-21 22:01:51 +02:00
forust	f424d91405	Tighten lint workflow scope	2026-06-21 21:51:20 +02:00
forust	88a8f2987f	Unify workflow job naming	2026-06-21 21:46:22 +02:00
forust	17027b232b	Rename workflows to yaml	2026-06-21 21:45:16 +02:00
forust	6ecbbb39b4	Fix yamllint workflow invocation	2026-06-21 21:40:11 +02:00
forust	175cbc8860	Fix validation workflows for self-hosted runner	2026-06-21 21:37:30 +02:00
forust	6363d050b0	Add YAML validation workflows	2026-06-21 21:27:31 +02:00
forust	c855764bc6	feat: add vaultwarden deployment config (compose + k8s)	2026-06-21 01:02:09 +02:00
forust	7d92b85e21	Merge commit '4355f451d4b4288d43468e08cad1f377e511f98a'	2026-06-19 23:23:28 +02:00
forust	9364392bc0	Merge commit '3eaef5dc90b716cc0fa391cbe2394be56d5f6041' as 'userbot'	2026-06-19 23:20:23 +02:00
forust	4355f451d4	Merge commit '3eaef5dc90b716cc0fa391cbe2394be56d5f6041' as 'userbot'	2026-06-19 23:20:23 +02:00
forust	3eaef5dc90	Squashed 'userbot/' content from commit 7fb0a0e ... git-subtree-dir: userbot git-subtree-split: 7fb0a0e179	2026-06-19 23:20:23 +02:00
forust	69ffd3682e	refactor: userbot to subtree	2026-06-19 23:20:13 +02:00
forust	1930600c40	Revert "refactor: extract userbot to standalone repo, add as git submodule" ... This reverts commit 3c383db9a7.	2026-06-19 23:11:27 +02:00
forust	d74a705d53	chore(k8s): rewritten ingressroute to include headplane AND headscale-admin ui ... new routes groupping style	2026-06-19 23:02:22 +02:00
forust	3c383db9a7	refactor: extract userbot to standalone repo, add as git submodule ... userbot now lives at ssh://git@gitssh.forust.xyz:2221/forust/userbot.git and is included in homelab as a submodule at userbot/	2026-06-19 15:39:00 +02:00
forust	7fb0a0e179	chore: batch lint fixes across userbot and edu_master ... - S113: Add timeout=10 to all requests calls (74 fixes) - E722: Replace bare except: with except Exception: - B904: Replace redundant re-raise with bare raise - E402: Add noqa for intentional late imports after import_library() - S102/S307/S310/S311/S603/S605/S606/S607/S108: Add noqa for intentional usage - F601: Fix duplicate dict key in unsplash.py - N802: Rename ReplyCheck -> reply_check with backward compat alias - N813: Rename bs -> BS in icons.py - B007/B020: Rename loop var _j in animations.py - SIM102: Collapse nested if in autofwd.py - SIM113: Use enumerate() in calculator.py - A002: Add noqa for builtin shadowing in admlist.py - F811: Add noqa for cohere redefinition - edu_master: Fix ARG001, S108, S110, SIM117, apply --unsafe-fixes - Add modules_list.txt with full module inventory	2026-06-19 15:36:25 +02:00
forust	227e5fda27	chore: batch lint fixes across userbot and edu_master ... - S113: Add timeout=10 to all requests calls (74 fixes) - E722: Replace bare except: with except Exception: - B904: Replace redundant re-raise with bare raise - E402: Add noqa for intentional late imports after import_library() - S102/S307/S310/S311/S603/S605/S606/S607/S108: Add noqa for intentional usage - F601: Fix duplicate dict key in unsplash.py - N802: Rename ReplyCheck -> reply_check with backward compat alias - N813: Rename bs -> BS in icons.py - B007/B020: Rename loop var _j in animations.py - SIM102: Collapse nested if in autofwd.py - SIM113: Use enumerate() in calculator.py - A002: Add noqa for builtin shadowing in admlist.py - F811: Add noqa for cohere redefinition - edu_master: Fix ARG001, S108, S110, SIM117, apply --unsafe-fixes - Add modules_list.txt with full module inventory	2026-06-19 15:36:25 +02:00
forust	20bce5b31c	fix(userbot): add missing safone.py imports, apply ruff --unsafe-fixes ... - Add missing aiohttp, PIL, BytesIO imports to safone.py (F821 runtime bugs) - Apply ruff --unsafe-fixes (27 fixes): ternary operators, .get() patterns, contextlib.suppress, enumerate(), collapsible if/else, remove .keys()	2026-06-19 15:27:12 +02:00
forust	70d7855f06	fix(userbot): add missing safone.py imports, apply ruff --unsafe-fixes ... - Add missing aiohttp, PIL, BytesIO imports to safone.py (F821 runtime bugs) - Apply ruff --unsafe-fixes (27 fixes): ternary operators, .get() patterns, contextlib.suppress, enumerate(), collapsible if/else, remove .keys()	2026-06-19 15:27:12 +02:00
forust	c905bbd039	chore(userbot): optimize Dockerfile with multi-stage build and static ffmpeg ... - Multi-stage build: pip deps built in separate stage - Static ffmpeg binary instead of apt package (avoid 200+ deps) - Keep only git, mediainfo, wget via apt	2026-06-19 14:56:37 +02:00
forust	fc83176522	chore(userbot): optimize Dockerfile with multi-stage build and static ffmpeg ... - Multi-stage build: pip deps built in separate stage - Static ffmpeg binary instead of apt package (avoid 200+ deps) - Keep only git, mediainfo, wget via apt	2026-06-19 14:56:37 +02:00
forust	7ba6bc44f2	chore(userbot): apply ruff check --fix and ruff format ... - ruff check --fix: 210 auto-fixed errors (import sorting, trailing whitespace, unused imports, f-string fixups, deprecated annotations) - ruff format: 104 files reformatted to consistent style - 268 non-auto-fixable issues remain (S113 requests timeout, etc.)	2026-06-19 12:19:01 +02:00
forust	0506aaaac8	chore(userbot): apply ruff check --fix and ruff format ... - ruff check --fix: 210 auto-fixed errors (import sorting, trailing whitespace, unused imports, f-string fixups, deprecated annotations) - ruff format: 104 files reformatted to consistent style - 268 non-auto-fixable issues remain (S113 requests timeout, etc.)	2026-06-19 12:19:01 +02:00
forust	bd9724da69	Revert "chore: switch yaml formatter to prettier, disable yaml-language-server validation (yamllint covers it)" ... This reverts commit 3bad433f1a.	2026-06-19 12:15:14 +02:00
forust	3bad433f1a	chore: switch yaml formatter to prettier, disable yaml-language-server validation (yamllint covers it)	2026-06-19 12:11:58 +02:00
forust	2bd7a5176f	Revert "chore: disable yaml-language-server formatting (handled by prettier), set yamlVersion 1.2" ... This reverts commit a9ff01261b.	2026-06-19 12:08:42 +02:00
forust	a9ff01261b	chore: disable yaml-language-server formatting (handled by prettier), set yamlVersion 1.2	2026-06-19 12:06:16 +02:00
forust	95cec59263	chore(userbot): apply prettier formatting across manifests	2026-06-19 12:03:13 +02:00
forust	1362ebc3c2	chore(userbot): apply prettier formatting across manifests	2026-06-19 12:03:13 +02:00
forust	2de6131ba7	chore: apply prettier formatting across compose files and configs	2026-06-19 12:03:11 +02:00
forust	1762962f32	chore(k8s): fix indentation in ingress manifests (3-space -> 2-space)	2026-06-19 12:03:02 +02:00
forust	7fb9e46c05	chore: remove singleQuote from prettier config to preserve original quotes	2026-06-19 12:02:59 +02:00
forust	b33488342a	chore: add truthy allowed-values to yamllint config	2026-06-19 12:01:11 +02:00
forust	d53b14b1de	chore: apply yaml lint fixes across compose files ... - Fix trailing whitespace in compose files - Add missing final newlines (EOF) - Fix indentation in dockmon (3-space -> 2-space) and glance monitor.yml - Align comments consistently	2026-06-19 11:57:14 +02:00
forust	a6a6d933da	chore: add linter configs (editorconfig, hadolint, markdownlint, prettier, yamllint, ruff, zed)	2026-06-19 11:57:04 +02:00
forust	0803f3efff	chore(k8s): returned to Host || Host standart instead of regexp. ... Yaml lint (yamllint)	2026-06-18 21:02:40 +02:00
forust	ec0420962b	hotfix: update headscale config for v0.29.0 breaking changes ... - ephemeral_node_inactivity_timeout → node.ephemeral.inactivity_timeout - randomize_client_port → randomizeClientPort in policy file	2026-06-18 14:26:58 +02:00