Operations
Day-to-day operational guides for managing cluster services and infrastructure. These guides cover common tasks, troubleshooting, and best practices.
In This Section
Section titled “In This Section”- Vault — Secret management, policy administration, and Vault operations
- Cloudflare — DNS management, tunnel configuration, and Access policies
- HCP Terraform — Terraform Cloud workspaces, state management, and automation
- Terraform Provider Fork (UniFi) — Our UniFi provider fork: consuming it, releasing to the private registry, the signing key
- UniFi — The switching fabric: controller access, what
tf/unifimanages, DHCP Guard, change history - ArgoCD — GitOps deployments, application sync, and webhook configuration
- Temporal — Workflow orchestration, worker management, and task queues
- Firewalla Router Migration — Cutover runbook for replacing the Firewalla router with USB /extdata reuse
- Router Boot Ordering — How Docker and its services are gated on /extdata at boot, and recovery when they don’t start
- Firewalla Network Configuration — Who owns the router’s network config, where it lives (redis, not a file), how to change it in a transaction, and why the app drops keys it does not model
- hl-assets Uploader — Uploading to
drop.fzymgc.netfrom the browser, an iOS Shortcut,share.fishorcurl, and where each client’s credential lives - LiteLLM — Where the LLM proxy’s database credential lives, the order in which it may be changed, and the rotation procedure
- GitHub Tokens — Personal access token management and rotation procedures
- RustDesk Clients — Configuring desktop and mobile clients to connect to the self-hosted RustDesk Pro server on the edge node
- MCP Gateway Clients — Connecting Claude Code and Claude Desktop to the LiteLLM MCP routes on llm.fzymgc.house (engram and kubernetes via Keycloak OAuth/DCR; the rest via virtual key)
- Renovate — Renovate CE cache PVC maintenance, the corrupt Go toolchain purge procedure, and how its outcome is recorded
- Incidents & CoEs — Post-incident analysis and corrections of error
Common Operations
Section titled “Common Operations”| Task | Guide |
|---|---|
| Rotate a secret | Vault Operations |
| Update DNS records | Cloudflare DNS |
| Run Terraform | HCP Terraform |
| Execute a workflow | Temporal Operations |
| Check cluster health | Temporal Operations |
| Replace Firewalla router | Firewalla Router Migration |