From 18a7292844b4590573dcb3204660e055aeff9bf4 Mon Sep 17 00:00:00 2001 From: Moritz Graf Date: Sat, 19 Sep 2026 18:19:54 +0200 Subject: [PATCH] fix(dns,k8s): add moritzgraf.de apex A record, modernize ingress, and resolve cluster alerts - terraform: add ovh_domain_zone_record.moritzgraf_domain pointing to cluster IP - k8s/web: modernize Ingress to networking.k8s.io/v1 with traefik class and auto-renew TLS certificate - k8s/backup: set activeDeadlineSeconds and backoffLimit: 3 on gdrive-to-gphotos, clean dead pods - k8s/openclaw: set failedJobsHistoryLimit: 1 on wiki backup cronjob and purge stale failed job - k8s/coder: increase postgresql CPU limit to 500m to eliminate CFS CPU throttling --- k8s/backup/job-gdrive-to-gphotos.yaml | 3 +- k8s/coder/bitnami_postgresql.secret.yaml | Bin 121 -> 241 bytes k8s/openclaw/cronjob-wiki-backup.secret.yaml | Bin 4988 -> 4988 bytes k8s/web/moritzgrafde.yaml | 29 ++- terraform/ovh.tf | 8 + terraform/terraform.tfstate | 24 +- terraform/terraform.tfstate.backup | 255 ++++++++++++++++++- 7 files changed, 303 insertions(+), 16 deletions(-) diff --git a/k8s/backup/job-gdrive-to-gphotos.yaml b/k8s/backup/job-gdrive-to-gphotos.yaml index 9608dfc..bc7fd55 100644 --- a/k8s/backup/job-gdrive-to-gphotos.yaml +++ b/k8s/backup/job-gdrive-to-gphotos.yaml @@ -25,4 +25,5 @@ spec: configMap: name: rclone-gdrive-config restartPolicy: Never - backoffLimit: 100 + activeDeadlineSeconds: 86400 + backoffLimit: 3 diff --git a/k8s/coder/bitnami_postgresql.secret.yaml b/k8s/coder/bitnami_postgresql.secret.yaml index f816832a82cd484e450b8e96880300ae55eaa153..e212c77abe3255e32c630f5151eab83ad41713d1 100644 GIT binary patch literal 241 zcmV zakUuPbB2nigoKFEUVPl_39OIh>yOp#wSi6$dic`);^fiWq2ht{YzvBm?ZImkn%I$`{MZulY=qG*x literal 121 zcmV-<0EYhnM@dveQdv+`0AoI`aaExR!>WPtq`3QfEjpd(GM!8;-{>4Bvr(3B6@q{O z0#i4(O*RIonzljl!>zxIoiu=b*PEHN5yu~a@Ed}Rv8{)NE?akz$WnKQqvkONEv$CO bB&5hwxX+8QskgFK=A1_6Pv!OorTRI25{5fA diff --git a/k8s/openclaw/cronjob-wiki-backup.secret.yaml b/k8s/openclaw/cronjob-wiki-backup.secret.yaml index af091d595bab5d1e21d15a137cc9d4dbf32375f6..ed409902692706295262d8de89e5520a2ab61ff1 100644 GIT binary patch literal 4988 zcmV-?6NBskM@dveQdv+`0I^m_O|SsGmDajkWm7i6cNN=5nerE=(xKfHDf-y!I{#B= zp-3Pm9slnBr|kqIb)}ZPUE}>O-|u_J!uY{ zQCj`(zI3M7GcVAp%Ni;}u~FeN!0uMlFc|A;40Db>p4B;@JHK_#*2&|)3BoFM&p_PK zADVNZeSu@6O=4WVy>P^^-qNQBpu#BKi8obHG#ABWn~n3G<>5^u+Mn z+3Vxcg*WWndi4@w+ED;R9Dht|{rauJBsUwe&>Ao(owUIiXc^)>~oI4kZt}`wDI3x zSC%;w!x;o3oF1|gT}TC-!CB)yJo~SnBhoTtg2#uaoX2325&drC(QoI?=G}Oa{qN89 zB2V}xle{SArU0_)39W1R(wDlw)+jNl&8@Gm374#2K-Y|7`%=GJNUZbKj^m%6KMUBVH2O_NAJq=-c~BIGSw!M!^G|4emfx1{Qhv z<+Gz%%Ai~JFyuXbh8J8@0?$3;@R4=ykxctdyICVh0j8No-E-{iQAJPE52UFs30~W6 znemSvupkq9KtL(p^y)ia*T8R7_8k7&@Lh4kyvL8i6b<$!)B}e~o{-Yl%lUWycEMY~h#r+ImMyo1(24^g*qy1EIsMh<)%|GDbX`?v6G5 zAekyFY^a|c0Y8%5dub|Daj}_XEwW-04p*5hNPNt5<0)sQ8HmX7QDp2bfh^;Xso(tP z*@f}?%%#J!G@l?UQ0bd(-M5!1O0f>md6Z651!T5v{?P}Uu(AF^a_Vi_A+L39TjG#T zOGm?h;pBLbKmZ6A=(FwY3eSj>#DIh#as6R}GtYq;GQ8i^P2L@LWp>a%hktso7yn$p zwM!y*XXvQ0PHpuCl9OT%o#e`TBKaJxcO|zF{@67|h*OcmLXc*tCa-xi*WF}~X|arA z8@fo)1z$JM&8^Y|e(LlcJi%9LeO13{@tQ7K679y zf| zb7SK~FEaqO@!Qd4O=xEXxvg=0|7ro}EmuV^9`~2KSQV@Utc_x?O}zP@2NeN-G4x}_ zva999|8Esc+XLiOK7Or`@|=N76w0{~PV@vS&=PTK`CK{qaA1zm2rMs$iQFwPgW>?& zD6=DPbmG=emq-HB$i&jJw{w?9l~0%(Dz{#i3*0N4ZRs#nj7+i_4}V*>$_Vil4yavB;R4I zce*jXY+aVlB@MRwnp>5l<~!?;jQMi_IcM9GDKP%NLTS24E`h=y>_4VQbp720si*Md zV~1L4`tU~SdjLOLaerX+go-Ebyfp~#>`!;yH^TYhcOMR{ ziQ@RSaclHBk5CexpHCU-@nD zl?GFE6{9)bKZY`W6r_$uY~|k7smQiSm_lhDY?Oz9`s8e}jRo3v$5ftwwXDJ*9i!&* zR>B-+1M?ftYl6LP;Z81s!u_&L^sH&(ic_BP9j5m+asfGy#R8TsU|_7fd5$?=)P^b^ zn*Q;JlS5)~M9xb#Uj9Yonp-Imb+f9yUweS!nsogLeb$lPSd5qeP0I^RDZT3~5el^A zQ@6V5jeGYSK&WlA>#>Ii{pVQcj!u|ATO@A-fvrt%VX?@~|FB~zq_1b#@uxGQ$Y}T% z5!n#lkXli+Dyt0*9CJ0-NHVZaYwFLQwuv|-+0qDfN#H(U6uiJ5Kdue^;oZXxdLC2a z@-o+3X-`N=24SyEqcWV-*lPzqV)fEJKy^%zk{4G3VGckR zluqc(51$FPLNw&Um= z??mUCwuQi45MOHDR_|E$Pjei)uIE4>G|~s1~?pbk)g^1_w{o?T|>y z-cZGKYU$wxeTcj-TAgJ&}MfDf9o>6ZgYE!K1GduCHnXXj;OPGrD-R;S;wZ;F#J?y_-RB(0M(D z{r3Nc4rJ*cb*8PlY{JEF@iZjEl;ZMH)VpS^t+-AtETSu)zgOM=5qgz;&_Z@1KW!}rr()G0M2B#Pnpy~-Az+mxt0%-Hqmv2xR+AN^;5z?$rT zJQ1rV_c69Ru2{Wb0v_dJKk&!Fx@wj>^V)%3q&A!T(&$0LqCq*b_~oXKBB_Nl7Irvo zOrZPa>$oN6Nl0NDouRE`^n%YQ1{_Aky&=YP6lk+60>mdBsL?rt+kb5Y;o(~PW~DhO z^(>W}GjwHX3V^Y@c16D*vU$z938D|{!dhiKnX$_ax?7|=O^JuGD>bE{pi>leLvhWT?bE04X^2=+1?MP!c-uhB zI3;PW;RX9sbDtQ~7($&)S~wwX^QF092u-6uR`{kiJ3>kFNwF4aRM^%9B-?)4@NS)& zQ{RoO_6Q(pGpY#OO=4_PR&)97Al_GykQEweF@VF8bizuSPxE~l&87CS3pTEXjpXe` zTGa|1i{o>a8U^yVVmXxshAGouk20CuH4M$EP;tr(+U0Q83e<(YUB>Dn;ix2Iu8^;V zLQa5YUpJUZkT-fJKN4M{J?{y-WgDWmHyOy*%ixQ#-o-F#LI_X*k0NlZ&EH_6XE5&c z?2menSjy$zYIE(=m*pAl?GJ`T5ug76&HX~3d44#)4QH%YDm%=GI{ zH4bWuRbIC{rb&9h@)~wUJdP$Sg(>qf=$G`M*5znpjiHi_J$}n-G_hj6iquNh9~MOH zAUE)OJm?*tjy!Dc%3~A zZD@kb`-E&C6H~~%5nQ0kI*%${by;QtV0(DIVbDa?P$S>4xTD?|R~lh6%zFmC>x{rS zv$q-F>q{_y$fYtHmAD7dI^){%D1l{2LF&Q6Nos`*Yy?SgmKe2}8|>xg*}QMmKB2IBN-}0{7|S$?d;_A5oY=cg zRjOQxKl9e9@!6_5!PM(ez$5gzE=D2bzvs*}$)A@_Ux~+M9G<9AEP@+#gCZWdy#x_* z%OsGlm<@fOKcwx2W7_l__lC#**jF-k^dRDJ2F&wUu86X$sL3;PP})5ADaDGgjTT{K zSe`T?>+;S{?hLvLu-TE{W4EZ0rO44eodV(aLSO;Zdj=cUT~M}#S6JN14Ds3TKDe5a zZtVU{7wSmmMD~n4lVf1s-_S{_3%kq3&Hq9eMK;{cCPgfJ%1U7kO$I;)Bie6dHT%+6 zJ`^%?9qeHr%}8C8HWF3~fmkTU8}7p9w=7dT1E;$jLykQSZ^{`$|Pg!)<_AC zfZH4`5Og@v_TgH*8(iYsBxWo2_FHSW53GBZ*!PRK97jt3Dr4|Z^}Ynt%eRer*;akB z{AOo}Mkrx`IAP^> z=T{1?1J~my!T965!fhQ1jQ3y1shlka$jLt*s^Mg52R7nIIpNC#8!;QHlJ^mx(L}%+ zv^gz+$7QCw+P~+oZvip_uq{l<#vv?PCBa*tH(M`H6f!fkRd2?6nd@nW(Du^q^Y_AH!hIrT?*e**yC{DtC+x)z z#e9Qb(&a@;UbRewm8oI+6*Hq>m6MsCs9|BLWkA5*X|IdrH?f>yH#lWtO{BHPz$qfx zv%&Uqt8AdzW?m%qZ0IiVc^77v$?RxmtmZst3{LO1FWmFh)bQ4m;BV4dKX%UX6epdxm!$UP; zQqFnK!K)x=w=qMufD>)Lr~=F3O|!R_w+S#^&~=|Q)QT*sRG+Kz7bY-$qt$kh?URfK-V_jc(28Y%hh GaL{w{HQUet literal 4988 zcmV-?6NBskM@dveQdv+`0M#(!1gRFp&gjXrLjgg=km&O5tQ3P>p6;$)-Hn~5iUZVH zfm40ZFB8BEPs7{$2{N^OvE45&jY#le9jui_qpqvNtTMt(g=grDWrD~b#T}Kq_vT4$ z>@euo^*x-P%DJA|>9y_sLM_F_D$sWT&o%6muR{Q`Wh$833#ij@xv66JWt}%MjsoIG zh%Xa0h{j?`A}xZMf;K_BQ$1xLU(I)L)>rkIUz4`Q0pOEhmBXY;^J1QLbzs|@+3Ro{ z_{Q3V+qw;kyG8Tp(u84QkW?AZ`tjWaqnwJgH5u{QSPJ@xGQuJ>ty}J~FqiZJkvF8GjJ-`BH3)_2>2~m}q6>UX zA9|w3DE(d#TQqj|L7S4gJ|p=(B8l#ciFwHNT%?WQcve0XickfkQu>I6~Ok z%-3k#h|d1LuWpemEzKE};|&s57xv!$dw}`yMpcU3z_P9uqmLK$0t`)+;gB;-?I%$1 zrmu6y1q~wJKLl52Rd%hkpNLSIElH=5ghW{NwYFS4{6pd$xD_Jb>>~MTeN{{q4QWx< zv<|@kQk#{iK3{9jL6^pg^DBuQuAN?mHX}pffiZTLR$?)oy}H*my*o?YtR5P z2y;XKD{Kk&3Xha4^;s1|vRr^TGRgJUBr=@DogB=$sb3OK10+^)ophM>z`ux&zk#T) zz^|U4=TdmYQ&rc{V#7Rm@~4^9P>^Qc-(^!HlfeJmlppC#a?o7H7A=nt^L&BZSQ^Ff zB`)lZ)S)xd9rxZvh)e~;6KM-)c^<`nu8%DhM9Cdc>LO{&s1o{QDuMP++{fs`E4HuA z8Y*Fujx@y>B=2v_7N>0J1Lf|16Q4{ClKrWs9G#Os+{pS;q7wlI_k7$@Zz)x zP;)=j?pz4e{^xfWtcKQ8Mw0Q3nf~wHW1I*6YyKF}(5IUko4IceIv2;H^w90!&7sTy zSAS)a%+x{kcGG-Y`e(I*R}sOknj^qp$X9^>iKZ`*9!?I7^8S}uFb6qLrf31GZqa{S zytvCPSX7z!{H>UwOuh1VX#18rs6_!_*PFA@xUh=N?HT*{`ng$Z`7I{LvQWj7@iC9Vq97CEhB-x zoHPaeq2Ii!p4Ur@@2W_c;HYmm8HG0yJ>!rno|^dO=jZ0e!Ks||0r?uVvpT8#20%)xlfN$e6AC zl;dYd+A|7)uV@v1bt9y^nYfD8qHjJKB@Ou^{Qt%?Erxt;;7K6)*sBl}l%j#x3-__d zRqbmAcT%?wr-AQSFwEDFx&vph*SYPQbnWRdB)O^hgwfrovx!Y}6Qi}Oi3)^xhd~{8 zTDteU%kaN>*7|*vKI@}p!zNK@>xHs`rk_YFpjq&waFQ6dL&qu}y~GL07&HnoX*zWH z_cUYI^0uGZLCt_-nV2q)+St@p7V1=EryZg+ z5$N9w2mpOO{lMjwDg}}OmrHjMOH)4RYrQt0%6v$jnI0gzY2D8`I)fa$PSr-xxQ~Ae zgku+;6jcMI0*e?j`t*OOeK5{&VA=bv-GeF4Z1y8>7}{o14Rem}y2hhuO?{b!=;lEh z=JdH7ch-(&u$dI!pAOE*tZ)6luF~!efT?zAQh(iX45(B>$x+uLcD}2!@Bly@?cdSX z*D5ECUKtqS>d`}rrsdfagz@&&;y$5dGU*yo_YcQ2*hG@P(>7ekB)uUqU>kehHJ85B z>G5uXl4kZMGLDPT2c}td ze{kNr*1?B_`?x`^Yzfx`swjoJJtm_Ogby`DNARI3GAkWiz{-s7wnzs5&I6y~5v}z??xv$x)=0 zYUe!BaOOd7+{_-X>H62WL`T8sMQrAgaAXAH(Wi6{uboMcKgOeVbXt6Xv^h|ikRXB~ z{xLg&);jBsSW9pOyDo{G^VUZIpqo;JIK(0VOO0B$^Zh@H4=ZK?1xp=NHAG7Wg-=|* zWqiN>2F^)aB!G8VkWg($pZG+gP*Mjz^PPv^iTt>^?Gs6lA`aBr@mJ#d$l^&t#NKM| znLpdq?T>g=aqAYNyVdA<;n_jj$j9elMRI=*J6B-VxwF1Xy|cqyO;1UwTA|y!547;0 z{MtrebiIzcOk|+>crF;W=QczqKp_;bpn$lNoY>~8U;&s^%`&?B5#wroetS^ucos%t zu3s&w6#}}@uE4xY8`o!b#!-y8t0(@Fd2iSxJQ$|kcOrLiV^qT2#UN##9qAtK(GEaP z#}@qNB&g2o0$yR-NY6wmV{&nO6cHljv z3ERe8C!EJ~n_O)JLOAgtDtbAhebs!Nf%jl6U2Kxxt`^3lsf=7H>Na@l)I`??S2FAa zRc%aer=TCnx#f{@=#QGV37gCRvAGDiZq$Ay`2_Q+cu)p(SaeTWBK%Zpra(nZMW|z{HgU|qsh#Ru z(rrT9UtrSYURqVX`X(%Iyj}!d7nNrJm%Ww$kmotkjx1swQyZ~^qm&V*#1=Rrga7eh$ED)O!Wp{j02PH_ z4iRnBknMos5jeo#aJ1|5@h@?CQ8b?i2f%+x!7R3Q%UA-s&{kCCXEs_*e8gc;-#FxW~HXW>maLhPM79=>w#A_}Yc2+o9yjFz5oScSv#CY+p<@Bi?&k26CBi8;(9O=LGX_(oK zyw(_oq0_$aE+GWXqGF^lEqumL+{PcL+oA3)JB|9^`rUmXOcO{QvCkCDM3LhZ#neO_ zcyZUeovxIC<;j$`c0b4=plo^5q=5CrLGCuwi%Od71nkX-HwM!3Tgq(*oA^SpKZjhx z9$91LfyD}pt88ZGxhuUphHr|NoKn=~X4!7;mM#?Hbr4Fr_4sC4&xoWGmL&#`dA2i_ zmU`|$fS2k{a-)N4O@36yK^+7{^p6C7)EtuFd z*ME!v&vCIyImZSpU4$Wc3N7K>jDc+#m^Ax#t~}egyV&&sJdxy{^CRK<3H}^C>Yt!< zkrR5T=U5LHgbn;2kFc$4EJp6w+d?NhJ6Fb6j~Ab}UZA2Z)DMw75!nkjoNu)Biiw1AUrci74TIXDuWSvzef9`XJ`hs1{M|| z*#BSa*&7`6Ib& zs<6Q+oOYhSBQ6PSE|KMzL;-Lx1MU3K;m>6Vk{r=%dMDO3?+LHq>+>sLq9cJaD-nlg z4w>*DG8!&~M+SSwUI89=jrWe$mYU@g=+e)<HPVP{b3SYZ!9gTz$ zPLsUybUoxn4;AKTA2YVf@zWFLP_Jw+lK5>K>_!6|&PJdw@RPITt<8ac@3KVC1KBc) z@^l_R*Ds1pSQ`IWeF(im%_09_-u?yDt# z28k1f2R5rNF&>E;#n~kGcfNL#Z>y{`#rf()O}=+xOA<<}k{GI9H7I*!{2a)Ls0??V zQ$V=Me}>!JEWEfz-r}jHGD!oEh*to3>`ekJQypAuU=R=*SEE!Ud&9EcNV@r@xgWRs zZzASz4#pyfp)^X&4$6XBY)VodWma%6t3~eX5h|#(CK11O*XPBR1jGwdeaVA94t`Q|+FkE;k3V3a>a-8~@$xQ(Uu#ItuUErxtxaDXQy zwf?x%qF}uv4ndK;cox+^0AFO$4PC0T*A<=Dj6r6+k`Rd+>sE|iqPoP(XwjJ8@IjyKMkeMFsIdW_ zC1#&kG2aeHI4~VG+iMSF*+X~72pa>1iQHVLIDEB$dYYnNUWwV%9Nw|QR*j|fmz)~n zrJHUC)Lh=i5#}<8T5P8R!W1>p;G}LB$Zr%7$-d~N&GJBzYB7~iU6>xp$jlAmK>4cD zB5*6$cAQbDE&~DehZjMz7kkTQ?!bjxxCC_F7LVNB7{~ya@8#KPsXv<2idP?}aYham zV!eQE?Rp}yNH5yS7w*I)0M{+^xDoX4=!=eMh)9r1Px)xf$!UQ271K{AUo(>nSOuPZ ziNU-uc&g%_yLVv(d47Z zvr1K9m4_m~<5NkoX)!IIrW*uUHaCHEvV;@`GD?ONrePyY#23o5yPq$WdGJ|PuXW~fgvA8iIOJ7 zOn!{olyU2Z?P-)JP#SOB9{riMSNMR813>E>uAEqw>Gm=;xQAvZ2 z6#((9c2X$fJa@X;M`n_@$Ff;C1ajX{>fw{XzXZWcEMV`b(J6?qMi1QBDaP>d&cNDL zVt!pwU$YzVcf`^b9M=BspO-D(#W_HM@foEP@rHUDSmD|@{^U8rud*2zJzIr1Yy!149;b3JGP{@9`Rh^_PmyhBY7b$lb|;mZM}G$z+)7`i9U&d@{H#-+bg2E{6D=-Y7Ja z?+$;_6E2I@;ZAu*FdDH${Oin7R;8ruhWb