100 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Lumpiasty	961dfd5e03	fix security issue of using default auth secret	2026-07-04 22:28:37 +02:00
Lumpiasty	1680761f1f	Merge pull request 'Update Helm release immich to v2' (#352) from renovate/immich-2.x into fresh-start ... Reviewed-on: #352	2026-07-04 20:03:23 +00:00
Lumpiasty	ae5917e7ee	reduce renovate PR churn	2026-07-04 22:00:00 +02:00
Lumpiasty	e3f11537a4	allow ts3 server query raw from internet	2026-06-22 23:54:26 +02:00
Lumpiasty	b336866044	Export ClusterIP services to router via BGP	2026-06-22 15:57:27 +02:00
Lumpiasty	a5464cf7a4	hide IoT WiFi and enable mac filter	2026-06-22 15:19:57 +02:00
Lumpiasty	4034628449	Fast fail connection when WAN failover	2026-06-21 02:38:24 +02:00
Lumpiasty	1e86dc5e2b	Detect GPON blackhole using ping	2026-06-21 02:00:32 +02:00
Lumpiasty	d10c3efe68	increase gitea storage size	2026-06-16 23:25:21 +02:00
Lumpiasty	ae7f58240c	Merge pull request 'Update golang Docker tag to v1.26' (#331) from renovate/golang-1.x into fresh-start ... Reviewed-on: #331	2026-06-15 23:08:36 +00:00
Lumpiasty	9f5d45d515	Merge pull request 'Update renovate/renovate Docker tag to v43.222.1' (#333) from renovate/renovate-renovate-43.x into fresh-start ... Reviewed-on: #333	2026-06-15 23:08:26 +00:00
Lumpiasty	d3cb2a6e65	Decrease logging of CoreDNS	2026-06-16 00:53:56 +02:00
Lumpiasty	679ebb3465	Get rid of NAT64 setup	2026-06-16 00:29:45 +02:00
Lumpiasty	d3a067886e	coredns: fix ENOTFOUND for own zone, enable dns64 for IPv4 clients ... Two Corefile changes: - Add lumpiasty.xyz server block without dns64. Replaces the manual RouterOS static FWD entry (\"bypass nat64\") which returned NOERROR with empty answer instead of relaying NXDOMAIN. Combined with ndots:5 and pod search domains this made getaddrinfo stop at the search-suffixed candidate and fail with ENOTFOUND for valid names (kaneo -> authentik OAuth fetch failures). CoreDNS relays rcodes faithfully; internal zone keeps real AAAA for native IPv6. - Add allow_ipv4 to dns64 (previously uncommitted): without it only queries arriving over IPv6 are synthesized, but all clients reach CoreDNS via RouterOS over IPv4, so translate_all never applied. The RouterOS static FWD entry must be removed after deploying the new image - ansible already declares only the ts.net entry, so a playbook run handles it.	2026-06-13 02:45:30 +02:00
Lumpiasty	33e01376b1	Add NAT64, DNS64 to network	2026-06-13 00:27:43 +02:00
Lumpiasty	374ee146fe	update llama-swap image	2026-06-12 18:17:52 +02:00
Lumpiasty	2380cd16e4	add more gemma 4 26b variants	2026-06-12 18:01:27 +02:00
Lumpiasty	59f32659a1	Merge pull request 'Update renovate/renovate Docker tag to v43.220.0' (#320) from renovate/renovate-renovate-43.x into fresh-start ... Reviewed-on: #320	2026-06-11 21:47:26 +00:00
Lumpiasty	199b14b810	Merge pull request 'Update Helm release openebs to v4.5.0' (#322) from renovate/openebs-4.x into fresh-start ... Reviewed-on: #322	2026-06-11 21:47:07 +00:00
Lumpiasty	fc971e6e6c	Merge pull request 'Update alpine Docker tag to v3.24.0' (#327) from renovate/alpine-3.x into fresh-start ... Reviewed-on: #327	2026-06-11 21:47:00 +00:00
Lumpiasty	aab4bc279c	Merge pull request 'Update ghcr.io/remsky/kokoro-fastapi-cpu Docker tag to v0.5.0' (#324) from renovate/ghcr.io-remsky-kokoro-fastapi-cpu-0.x into fresh-start ... Reviewed-on: #324	2026-06-11 21:46:39 +00:00
Lumpiasty	7f6439d64a	switch gemma 4 quant, add mtp and nothink variants	2026-06-11 21:06:12 +02:00
Lumpiasty	8860f6782e	add converting proxy to parakeet	2026-06-10 20:46:17 +02:00
Lumpiasty	f863a0a496	use parakeet.cpp instead of whisper	2026-06-10 20:08:14 +02:00
Lumpiasty	cd514c71b6	oauth auto redirect and allowed role in openwebui	2026-06-04 18:03:00 +02:00
Lumpiasty	32a483c711	update outdated readme sections	2026-06-04 17:24:17 +02:00
Lumpiasty	0426f86719	Merge pull request 'Update renovate/renovate Docker tag to v43.210.2' (#314) from renovate/renovate-renovate-43.x into fresh-start ... Reviewed-on: #314	2026-06-04 14:40:48 +00:00
Lumpiasty	da365501e9	Merge pull request 'Update Helm release open-webui to v14.8.0' (#315) from renovate/open-webui-14.x into fresh-start ... Reviewed-on: #315	2026-06-04 14:40:42 +00:00
Lumpiasty	9dfa780354	add missing apps to readme	2026-06-03 02:27:41 +02:00
Lumpiasty	b1c616a20f	add application guidelines for LLMs	2026-06-03 02:08:52 +02:00
Lumpiasty	fa32fdfd28	add missing patch to Makefile	2026-06-03 01:35:01 +02:00
Lumpiasty	1b66a8c230	Change Tailscale distribution ... gitea.lumpiasty.xyz/Lumpiasty/tailscale-mikrotik allows us to move tailscale to internal flash	2026-06-02 17:29:22 +02:00
Lumpiasty	af4a7fee48	go back to official llama-swap image	2026-05-31 16:23:50 +02:00
Lumpiasty	6546676dd6	add llama-swap optimizations recommended by claude	2026-05-31 05:18:47 +02:00
Lumpiasty	353155f7ad	Enable DMA transfer queue on llama-swap	2026-05-31 04:25:08 +02:00
Lumpiasty	172fbb1ded	Test updated base-image llama-swap	2026-05-31 03:15:44 +02:00
Lumpiasty	62f6baf948	hairpin nat cluster	2026-05-31 03:14:46 +02:00
Lumpiasty	5aa898e166	add privileged access to woodpecker pods	2026-05-29 01:04:27 +02:00
Lumpiasty	c874776e6e	allow woodpecker to publish docker images	2026-05-29 00:46:17 +02:00
Lumpiasty	1b4c393834	Merge pull request 'Update renovate/renovate Docker tag to v43.197.0' (#302) from renovate/renovate-renovate-43.x into fresh-start ... Reviewed-on: #302	2026-05-28 17:19:56 +00:00
Lumpiasty	cd0e92379f	Merge pull request 'Update ghcr.io/remsky/kokoro-fastapi-cpu Docker tag to v0.4.0' (#306) from renovate/ghcr.io-remsky-kokoro-fastapi-cpu-0.x into fresh-start ... Reviewed-on: #306	2026-05-28 17:19:47 +00:00
Lumpiasty	5b026593ce	lte failover	2026-05-27 23:40:33 +02:00
Lumpiasty	754c8952bc	enable amdgpu runtime power management	2026-05-27 01:34:19 +02:00
Lumpiasty	779bc3a071	add network documentation	2026-05-27 01:33:39 +02:00
Lumpiasty	fc58a6507b	disable mlock	2026-05-24 19:16:24 +02:00
Lumpiasty	6096b7019d	fix path to llama-server binary	2026-05-23 09:32:11 +02:00
Lumpiasty	9e0d57e50b	Merge pull request 'Update Helm release authentik to v2026.5.0' (#299) from renovate/authentik-2026.x into fresh-start ... Reviewed-on: #299	2026-05-22 15:17:37 +00:00
Lumpiasty	780cda9eb6	Merge pull request 'Update renovate/renovate Docker tag to v43.194.0' (#300) from renovate/renovate-renovate-43.x into fresh-start ... Reviewed-on: #300	2026-05-22 15:17:32 +00:00
Lumpiasty	201e402c14	Merge pull request 'Update dependency fluxcd/flux2 to v2.8.8' (#301) from renovate/fluxcd-flux2-2.x into fresh-start ... Reviewed-on: #301	2026-05-22 14:56:35 +00:00
Lumpiasty	c6be85c029	use smaller renovate image	2026-05-22 16:40:33 +02:00
Lumpiasty	ea288712a8	fix flux updating in renovate	2026-05-22 16:31:42 +02:00
Lumpiasty	80de417a70	Merge pull request 'Update renovate/renovate Docker tag to v43.191.2' (#294) from renovate/renovate-renovate-43.x into fresh-start ... Reviewed-on: #294	2026-05-22 14:09:20 +00:00
Lumpiasty	f4f7bb8bab	Merge pull request 'Update Helm release open-webui to v14.6.0' (#293) from renovate/open-webui-14.x into fresh-start ... Reviewed-on: #293	2026-05-22 14:09:13 +00:00
Lumpiasty	ad80b5703f	pin version of kaneo image (default is latest)	2026-05-22 03:51:34 +02:00
Lumpiasty	8f41e43340	Add Github token to renovate cron	2026-05-22 03:37:08 +02:00
Lumpiasty	c161da3657	add mlock and disable mmap in llama-server	2026-05-21 23:18:05 +02:00
Lumpiasty	fc2c15d154	move whisper to gpu	2026-05-21 22:02:34 +02:00
Lumpiasty	02b3ec13b4	switch kokoro to remsky/Kokoro-FastAPI	2026-05-21 21:55:34 +02:00
Lumpiasty	989732e1b5	move kokoro to separate deployment	2026-05-21 21:34:33 +02:00
Lumpiasty	ab438be629	fix tts model path	2026-05-21 21:11:29 +02:00
Lumpiasty	4556ca3c08	add ffmpeg for whisper	2026-05-21 20:58:56 +02:00
Lumpiasty	611f9f3886	add tts and sst to llama-swap and openwebui	2026-05-21 20:43:54 +02:00
Lumpiasty	a2d27c5eee	fix llama-swap auto update	2026-05-21 19:40:03 +02:00
Lumpiasty	4f74cdd092	Merge pull request 'Update Helm release openbao to v0.28.2' (#280) from renovate/openbao-0.x into fresh-start ... Reviewed-on: #280	2026-05-20 18:24:38 +00:00
Lumpiasty	313cd039e3	Merge pull request 'Update renovate/renovate Docker tag to v43.186.1' (#281) from renovate/renovate-renovate-43.x into fresh-start ... Reviewed-on: #281	2026-05-20 18:24:11 +00:00
Lumpiasty	cae91f992e	Merge pull request 'Update Helm release gitea to v12.6.0' (#284) from renovate/gitea-12.x into fresh-start ... Reviewed-on: #284	2026-05-20 18:24:02 +00:00
Lumpiasty	cfa3df6d1a	increase llama models PVC from 300Gi to 400Gi	2026-05-20 19:49:25 +02:00
Lumpiasty	c82f60e90a	switch text encoder to ponpoke/flux2-klein-4b-uncensored-text-encoder Q4_K_M	2026-05-20 17:50:06 +02:00
Lumpiasty	b41342be01	switch image model to FLUX.2-klein-4B (Apache 2.0, 4-step, unified gen+edit)	2026-05-20 16:49:30 +02:00
Lumpiasty	25a7b6c242	remove dns from mgmt interface on dlink	2026-05-20 01:43:17 +02:00
Lumpiasty	d3434a4102	remove unused qwen nothink chat template	2026-05-20 01:38:24 +02:00
Lumpiasty	4748ba3f73	enable image editing in openwebui via sd-server /v1/images/edits	2026-05-20 01:29:18 +02:00
Lumpiasty	de2822fee1	switch llama-swap to unified-vulkan image with FLUX.1-dev image generation ... - Update deployment to unified-vulkan-2026-05-19 (includes llama-server, sd-server, whisper-server in one image) - Fix binary paths: /app/llama-server -> llama-server (now on PATH) - Migrate groups -> matrix to allow FLUX to evict the always-on 0.8B model when image generation is requested - Add FLUX.1-dev Q4_K_S model via sd-server - Configure OpenWebUI image generation to use llama-swap sd-server - Update renovate versioning regex to treat all unified-vulkan date tags as patch updates for automerge	2026-05-20 01:11:57 +02:00
Lumpiasty	55ac337a63	enable MTP on MTP models	2026-05-18 20:31:57 +02:00
Lumpiasty	c3e5931c50	Merge pull request 'Update ghcr.io/mostlygeek/llama-swap Docker tag to v216' (#289) from renovate/ghcr.io-mostlygeek-llama-swap-216.x into fresh-start ... Reviewed-on: #289	2026-05-18 18:00:04 +00:00
Lumpiasty	5397749a73	Merge pull request 'Update ghcr.io/mostlygeek/llama-swap Docker tag to v214-vulkan-b9174' (#288) from renovate/ghcr.io-mostlygeek-llama-swap-214.x into fresh-start ... Reviewed-on: #288	2026-05-18 17:57:20 +00:00
Lumpiasty	f3ad488bc8	add MTP version of Qwen3.6-35B	2026-05-18 19:42:48 +02:00
Lumpiasty	a59c0e7c4f	Merge pull request 'Update ghcr.io/mostlygeek/llama-swap Docker tag to v214' (#286) from renovate/ghcr.io-mostlygeek-llama-swap-214.x into fresh-start ... Reviewed-on: #286	2026-05-17 12:45:22 +00:00
Lumpiasty	2d69cc6569	fix(ansible): resolve LTE failover data-plane bug on BroadMobi BM806C ... The embedded BroadMobi BM806C modem (Qualcomm MDM9225, firmware M1.2.0_E1.0.1_A1.1.8) in the D-Link DWR-921 C1 has two independent firmware bugs that together break the QMI data plane: 1. Modem accepts 802.3 framing but its 802.3 path is buggy — downlink frames never reach the host kernel. raw-ip framing works. 2. qmish calls uqmi --start-network --apn <foo>, which triggers FS#1363: the modem establishes a phantom bearer that gets IP addresses but has no working data path. Using --start-network --profile <N> (referencing a pre-configured NVRAM profile with the same APN) works correctly. Fixes applied: - qmish patches (3x community.openwrt.lineinfile): * Replace --set-data-format 802.3 with raw-ip * Replace --wda-set-data-format 802.3 with raw-ip * Bracket raw_ip sysfs write with ip link down/up (kernel rejects write with -EBUSY when wwan0 is already up) - Modem NVRAM: create/modify profile 2 (internetipv6, ipv6) for the IPv6 APN — profile 1 is already managed by qmish's --modify-profile - UCI wwan: add profile=1 and v6profile=2 so qmish uses --start-network --profile instead of --apn on both the v4 and v6 legs - Firewall: add wwan zone (input REJECT, output ACCEPT, forward REJECT) and Allow-ICMPv6-wwan rule - main.yml: reorder — packages (including usb-modeswitch) now run before wwan setup, so the modem is out of EDL mode when wwan.yml queries it for profile creation See docs/wwan-bm806c-qmi-workaround.md for the full diagnosis (what we ruled out, how we confirmed, manual setup steps, component versions, future upstreaming).	2026-05-16 21:20:26 +02:00
Lumpiasty	92447996fc	feat(ansible): migrate OpenWrt package management from opkg to apk ... OpenWrt 25.12+ uses apk instead of opkg. The community.openwrt.apk module is only available in the unreleased 1.4.0 (git main), so requirements.yml now installs the collection from git. - requirements.yml: install community.openwrt from git main branch (comment explains why — apk module not yet in a Galaxy release) - packages.yml: switch from community.openwrt.opkg to apk, use join filter to pass all packages at once instead of looping	2026-05-16 21:20:24 +02:00
Lumpiasty	dd559ade43	feat(ansible): Enable WLAN LED on dlink	2026-05-16 21:20:20 +02:00
Lumpiasty	7db9b7e9e9	enable modem in dlink	2026-05-14 01:34:36 +02:00
Lumpiasty	90fc72f18c	docs(ansible): add missing instruction	2026-05-14 01:16:44 +02:00
Lumpiasty	9c8f075fb1	feat(ansible): add internet access for dlink	2026-05-14 01:15:54 +02:00
Lumpiasty	28e220d1b7	refactor(ansible): deduplicate dlink-init playbook	2026-05-13 22:40:40 +02:00
Lumpiasty	38f0aa699f	feat(ansible): add IoT VLAN 5 (192.168.5.0/24, szafa wifi) ... MikroTik: add vlan5 interface, bridge VLAN entry (ether3 tagged), IP 192.168.5.1/24, IPv6 from-pool, DHCP pool/server/network, firewall rules allowing IoT internet-only (IPv4 and IPv6), DNS input from vlan5. OpenWrt: add switch VLAN 5 (WAN+CPU tagged), br-iot bridge on eth0.5, iot interface, iot firewall zone (forward ACCEPT, input REJECT). Also remove ensure_order from all non-firewall api_modify tasks as RouterOS does not support move on those paths.	2026-05-13 22:28:04 +02:00
Lumpiasty	120547b1b8	feat(ansible): add OpenWrt dlink AP configuration ... Add community.openwrt collection, dlink host to inventory, openwrt role with system/network/firewall tasks, and two playbooks: dlink-init.yml for one-time bootstrap from factory IP, and openwrt.yml for ongoing idempotent configuration. Network: MGMT untagged + LAN (vlan2) tagged on WAN port trunk to MikroTik ether3. Firewall zones replace factory WAN/LAN with mgmt (input ACCEPT) and lan (forward ACCEPT, AP mode).	2026-05-13 21:08:55 +02:00
Lumpiasty	17db139125	refactor(ansible): move RouterOS config into a role ... Move flat tasks/ and vars/routeros-secrets.yml into roles/routeros/ with a main.yml that imports the domain task files in order. Update playbooks/routeros.yml to use the role instead of importing tasks directly.	2026-05-13 20:57:13 +02:00
Lumpiasty	05c01933d7	Merge pull request 'Update renovate/renovate Docker tag to v43.176.3' (#275) from renovate/renovate-renovate-43.x into fresh-start ... Reviewed-on: #275	2026-05-12 21:10:30 +00:00
Lumpiasty	ca07480811	Merge pull request 'Update Helm release woodpecker to v3.6.2' (#274) from renovate/woodpecker-3.x into fresh-start ... Reviewed-on: #274	2026-05-12 21:10:23 +00:00
Lumpiasty	59952c2c55	Merge pull request 'Update ghcr.io/mostlygeek/llama-swap Docker tag to v211-vulkan-b9102' (#271) from renovate/ghcr.io-mostlygeek-llama-swap-211.x into fresh-start ... Reviewed-on: #271	2026-05-12 21:10:16 +00:00
Lumpiasty	3c67750046	Merge pull request 'Update Helm release woodpecker to v3.6.0' (#268) from renovate/woodpecker-3.x into fresh-start ... Reviewed-on: #268	2026-05-12 20:50:13 +00:00
Lumpiasty	ae766dd3c1	Merge pull request 'Update Helm release open-webui to v14.5.0' (#267) from renovate/open-webui-14.x into fresh-start ... Reviewed-on: #267	2026-05-12 20:49:52 +00:00
Lumpiasty	90fcfcc482	Merge pull request 'Update renovate/renovate Docker tag to v43.173.5' (#269) from renovate/renovate-renovate-43.x into fresh-start ... Reviewed-on: #269	2026-05-12 20:48:57 +00:00
Lumpiasty	c53a95c275	Merge pull request 'Update Helm release vault-secrets-operator to v1.4.0' (#259) from renovate/vault-secrets-operator-1.x into fresh-start ... Reviewed-on: #259	2026-05-11 17:36:34 +00:00
Lumpiasty	7a5246505b	Merge pull request 'Update renovate/renovate Docker tag to v43.170.20' (#257) from renovate/renovate-renovate-43.x into fresh-start ... Reviewed-on: #257	2026-05-11 17:36:29 +00:00
Lumpiasty	cad76992bd	Merge pull request 'Update Helm release open-webui to v14.4.0' (#263) from renovate/open-webui-14.x into fresh-start ... Reviewed-on: #263	2026-05-11 17:36:17 +00:00
Lumpiasty	d86ad3d257	Remove opencode from devenv	2026-05-05 22:37:31 +02:00
Lumpiasty	1afc458bc5	disable guest and account creation in kaneo	2026-05-05 21:04:18 +02:00
Lumpiasty	39e5e9a8ad	update kaneo to support extraEnv	2026-05-05 20:56:33 +02:00