Skip to content

Operations

Day-to-day operational guides for managing cluster services and infrastructure. These guides cover common tasks, troubleshooting, and best practices.

  • Vault — Secret management, policy administration, and Vault operations
  • Cloudflare — DNS management, tunnel configuration, and Access policies
  • HCP Terraform — Terraform Cloud workspaces, state management, and automation
  • Terraform Provider Fork (UniFi) — Our UniFi provider fork: consuming it, releasing to the private registry, the signing key
  • UniFi — The switching fabric: controller access, what tf/unifi manages, DHCP Guard, change history
  • ArgoCD — GitOps deployments, application sync, and webhook configuration
  • Temporal — Workflow orchestration, worker management, and task queues
  • Firewalla Router Migration — Cutover runbook for replacing the Firewalla router with USB /extdata reuse
  • Router Boot Ordering — How Docker and its services are gated on /extdata at boot, and recovery when they don’t start
  • Firewalla Network Configuration — Who owns the router’s network config, where it lives (redis, not a file), how to change it in a transaction, and why the app drops keys it does not model
  • hl-assets Uploader — Uploading to drop.fzymgc.net from the browser, an iOS Shortcut, share.fish or curl, and where each client’s credential lives
  • LiteLLM — Where the LLM proxy’s database credential lives, the order in which it may be changed, and the rotation procedure
  • GitHub Tokens — Personal access token management and rotation procedures
  • RustDesk Clients — Configuring desktop and mobile clients to connect to the self-hosted RustDesk Pro server on the edge node
  • MCP Gateway Clients — Connecting Claude Code and Claude Desktop to the LiteLLM MCP routes on llm.fzymgc.house (engram and kubernetes via Keycloak OAuth/DCR; the rest via virtual key)
  • Renovate — Renovate CE cache PVC maintenance, the corrupt Go toolchain purge procedure, and how its outcome is recorded
  • Incidents & CoEs — Post-incident analysis and corrections of error
Task Guide
Rotate a secret Vault Operations
Update DNS records Cloudflare DNS
Run Terraform HCP Terraform
Execute a workflow Temporal Operations
Check cluster health Temporal Operations
Replace Firewalla router Firewalla Router Migration