Hermes Agent
a433be1195
fix: resolve merge conflict in osint-dashboard values.yaml (keep real API config)
2026-05-21 14:17:52 +00:00
sirius0xdev
b957b3c704
Merge pull request #122 from sirius0xdev/refactor/repo-reorganization-plan
...
docs: repository reorganization migration plan
2026-05-21 10:15:06 -04:00
Hermes Agent
3a9a0476d2
docs: add repository reorganization migration plan
...
Audit completed identifying all misplaced items in gcloud-lab.
Plan proposes 6 PRs to move app code to hermes-projects and keep
only K8s manifests and infra config in gcloud-lab.
2026-05-21 13:52:21 +00:00
93754dcdf6
feat: OSINT Dashboard app + Helm templates
...
Add FastAPI backend for real-time geospatial OSINT dashboard:
- Full-text search via PostgreSQL tsvector (parameterized queries)
- Entity tracking, alert management, sentiment analytics
- Data ingestion: RSS feeds, GDELT, USGS earthquakes, social signals
- NATS JetStream consumer for event ingestion
- MinIO document storage integration
- Redis caching layer
- Alembic migrations with PostGIS + TimescaleDB extensions
- Single-page dashboard UI with live polling
- OpenTelemetry distributed tracing
Helm chart with infrastructure:
- CNPG PostgreSQL cluster (PostGIS + TimescaleDB)
- NATS JetStream with persistent streams
- MinIO distributed object storage (3 buckets)
- Redis Sentinel (1 primary + 2 replicas)
- NGINX Ingress with TLS and WebSocket support
- Prometheus + Grafana + Alertmanager monitoring stack
- Network policies with default deny
- ConfigMap, CronJob, Deployment, Service templates
Fixes applied during review:
- SQL injection in search endpoint (parameterized :q binding)
- Dockerfile PYTHONPATH mismatch (/app/app -> /app)
- Hardcoded DB credentials in alembic.ini
- RSS timestamp parsing (feedparser published_parsed -> parsedate_to_datetime)
- Removed dead PGVECTOR import
2026-05-21 13:39:52 +00:00
sirius0xdev
4a01c457ab
Update kustomization.yaml
2026-05-21 09:36:11 -04:00
8255467313
feat: add OSINT Dashboard Kubernetes infrastructure
...
- Helm chart scaffold (Chart.yaml, values.yaml, _helpers.tpl)
- Namespace + RBAC manifests
- PostgreSQL (CNPG, 3 replicas, PostGIS + TimescaleDB)
- NATS JetStream (3 replicas, persistent, custom subjects)
- Redis Sentinel (1 primary + 2 replicas, HA)
- MinIO distributed (4 replicas, bucket init job)
- Gateway API HTTPRoute + cert-manager TLS certificates
- Monitoring stack (Prometheus, Grafana, Alertmanager, exporters)
- NetworkPolicies (default deny + per-component policies)
- GitHub Actions CI/CD pipeline (lint, template, security scan)
- Flux CD staging overlay
2026-05-21 13:25:15 +00:00
sirius0xdev
67e45a4464
Merge pull request #120 from sirius0xdev/feat/trading-platform-manifests
...
feat: add trading-platform K8s manifests for customer1
2026-05-21 09:24:59 -04:00
sirius0xdev
0f1c6bbdf5
Update kustomization.yaml
2026-05-21 09:00:00 -04:00
b0748538c0
feat: add trading-platform K8s manifests for customer1
...
- Scaffold trading-platform under apps/base/customer1/trading-platform/
- Add 4 microservice deployments: data-service, execute-service, news-service, dashboard
- Add ConfigMaps with DB/Kafka/Redis connection configs
- Add HTTPRoutes via Gateway API (external-http-gateway)
- Add NetworkPolicies for inter-service and DB/Kafka/Redis egress
- Add SOPS-encrypted secrets (age key)
- Add Kafka (KRaft) and Redis infrastructure to hermes-db/
- Update root and staging kustomizations
All containers: non-root, readOnlyRootFilesystem, resource limits, health probes
Images: ghcr.io/sirius0xdev/trading-{service}:latest
2026-05-21 04:17:05 +00:00
5e477492e6
feat: add OSINT Dashboard Kubernetes infrastructure
...
- Helm chart scaffold (Chart.yaml, values.yaml, _helpers.tpl)
- Namespace + RBAC manifests
- PostgreSQL (CNPG, 3 replicas, PostGIS + TimescaleDB)
- NATS JetStream (3 replicas, persistent, custom subjects)
- Redis Sentinel (1 primary + 2 replicas, HA)
- MinIO distributed (4 replicas, bucket init job)
- Gateway API HTTPRoute + cert-manager TLS certificates
- Monitoring stack (Prometheus, Grafana, Alertmanager, exporters)
- NetworkPolicies (default deny + per-component policies)
- GitHub Actions CI/CD pipeline (lint, template, security scan)
- Flux CD staging overlay
2026-05-21 04:15:55 +00:00
sirius0xdev
a06a105f31
Update kustomization.yaml
2026-05-20 22:18:37 -04:00
sirius0xdev
1a3804294d
Update kustomization.yaml
2026-05-20 22:12:07 -04:00
sirius0xdev
8fa640725c
Update kustomization.yaml
2026-05-20 00:46:46 -04:00
sirius0xdev
4d8311a732
Update kustomization.yaml
2026-05-19 08:11:46 -04:00
sirius0xdev
0d5f095885
Update kustomization.yaml
2026-05-18 21:54:53 -04:00
sirius0xdev
d1dd97f945
Merge pull request #117 from sirius0xdev/feat/trading-platform-k8s
...
feat: add trading platform K8s deployment infrastructure
2026-05-17 19:05:51 -04:00
d079d1239f
feat: add trading platform K8s deployment infrastructure
...
- Add Helm chart with 19 templates (Deployments, Services, Ingress,
ConfigMaps, Secrets, NetworkPolicy, cert-manager)
- Add Dockerfiles for 4 microservices (dashboard, data-service,
execute-service, news-service)
- Add CI/CD workflows (build-test, build-push, deploy)
- Add raw K8s manifests, per-service Helm charts, and deploy scripts
- Add SOPS-encrypted secrets template and config
- Configure deployment to customer1 namespace
- Include infrastructure components: PostgreSQL, Redis, Kafka
2026-05-17 22:15:00 +00:00
sirius0xdev
af4cb3d321
Update rtx6000-vllm.yaml
2026-05-17 16:42:06 -04:00
sirius0xdev
4ba4f08299
Update kustomization.yaml
2026-05-17 14:42:59 -04:00
sirius0xdev
c987ad6132
Update kustomization.yaml
2026-05-17 03:30:39 -04:00
sirius0xdev
1a6dd51076
Update rtx6000-vllm.yaml
2026-05-16 23:11:34 -04:00
sirius0xdev
aa1f5be323
Update rtx6000-vllm.yaml
2026-05-16 23:10:18 -04:00
sirius0xdev
18aa779232
Update rtx6000-vllm.yaml
2026-05-16 23:01:39 -04:00
sirius0xdev
0899aa1b97
Update rtx6000-vllm.yaml
2026-05-16 22:59:03 -04:00
sirius0xdev
3836578bb8
Update rtx6000-vllm.yaml
2026-05-16 22:58:38 -04:00
sirius0xdev
728a2dfe77
Update rtx6000-vllm.yaml
2026-05-16 22:57:54 -04:00
sirius0xdev
e4ce253e80
Update rtx6000-vllm.yaml
2026-05-16 22:35:02 -04:00
sirius0xdev
c12b31a47a
Update kustomization.yaml
2026-05-16 13:31:58 -04:00
sirius0xdev
da0ad4b7b9
Merge pull request #116 from sirius0xdev/feat/siriusdevops-site-deploy
...
feat: deploy siriusdevops.com main site to GKE
2026-05-15 11:02:01 -04:00
65e174a86d
feat: deploy siriusdevops.com main site to GKE
...
Add siriusdevops-site manifests:
- Deployment + ClusterIP Service (nginx:alpine, port 80)
- HTTPRoute for siriusdevops.com via external-http-gateway
- Kustomization overlay wiring
2026-05-15 14:56:10 +00:00
sirius0xdev
fe8d43b33a
Merge pull request #115 from sirius0xdev/docs/readme-may2026-rewrite
...
docs: A100 → RTX 6000 Pro, remove OpenClaw references
2026-05-15 10:31:39 -04:00
df5507747e
docs: A100 → RTX 6000 Pro, remove OpenClaw references
2026-05-15 14:25:36 +00:00
sirius0xdev
1895279f1a
Merge pull request #114 from sirius0xdev/docs/readme-may2026-rewrite
...
docs: comprehensive README rewrite — all recent projects
2026-05-15 10:11:35 -04:00
sirius0xdev
0bba6d6f2b
Merge pull request #113 from sirius0xdev/fix/security-audit-critical-may2026
...
fix: security audit fixes — SOPS encrypt secrets + admin auth + email enum
2026-05-14 22:15:59 -04:00
334be37781
fix: add real Telegram bot_token and chat_id
2026-05-15 02:10:47 +00:00
31fcd59a5f
fix: SOPS-encrypt waitlist secrets with age key
...
- DB password: random 48-char hex string
- admin_api_key: random 32-char hex string
- Telegram bot_token/chat_id still CHANGEME — fill before deploying
2026-05-15 01:36:06 +00:00
dbe562b6c2
docs: comprehensive README rewrite — all recent projects
...
- Add AgentForge multi-tenant AI agent workspace with dual-tier vLLM
- Add Multi-Profile AI Agent Team with automated audit-to-fix pipeline
- Add Gateway API / HTTPRoute routing architecture
- Add Waitlist API (FastAPI + asyncpg + idempotent signups)
- Add CNPG Database Fleet with isolated per-domain clusters
- Add Local Business Web Deployment Pipeline
- Update AI/ML table: Ollama/Gemma2 → vLLM/Qwen 3.6 27B Abliterated
- Update GPU pools: add A100 80GB SPOT deep thinker tier
- Update container images: siriussec/* → ghcr.io/sirius0xdev/*
- Expand architecture diagram with new namespaces and sec-ops
- Expand security section with automated auditing, NetworkPolicy, rate limiting
- Remove PineScript note and outdated ollama/siriussec references
- Add TOC entry for cost optimization
2026-05-15 00:31:18 +00:00
ac994f144a
fix: container hardening + NetworkPolicy for waitlist-api
...
- deployment.yaml: securityContext (runAsNonRoot, readOnlyRootFilesystem, drop ALL caps)
- network-policy.yaml: egress only to CNPG PG (5432) + api.telegram.org (443)
- kustomization.yaml: register new NetworkPolicy resource
- waitlist-telegram-secret: add admin_api_key field
2026-05-15 00:00:58 +00:00
sirius0xdev
36b1d637f1
feat: add siriusdevops CNPG cluster + waitlist API K8s manifests ( #112 )
...
- New CNPG PostgreSQL cluster (siriusdevops-pgdb) in customer1 namespace
- Single-instance, 20Gi storage, GCS backups to siriusdevops-backups/
- Waitlist database definition (waitlist-db.yaml)
- Scheduled backup manifest
- Waitlist API deployment, service, HTTPRoute, and Telegram secret placeholder
- Kustomization wiring for both siriusdevops-db and waitlist-api
2026-05-14 19:24:33 -04:00
sirius0xdev
e3b56d397d
Update deployment.yaml
2026-05-12 22:42:41 -04:00
sirius0xdev
9beb9c4887
Update deployment.yaml
2026-05-12 22:40:46 -04:00
sirius0xdev
228f4d5f0e
add version to webui
2026-05-11 13:23:43 +00:00
sirius0xdev
00aabcb305
fix health
2026-05-11 03:47:22 +00:00
sirius0xdev
33a60cb10f
health check change
2026-05-11 03:44:15 +00:00
sirius0xdev
db7e1a00b1
change health check
2026-05-11 03:41:05 +00:00
sirius0xdev
c25d69d63c
fix route
2026-05-11 03:00:14 +00:00
sirius0xdev
77494515d6
edit health check
2026-05-11 02:59:02 +00:00
sirius0xdev
94828b871f
edit health check
2026-05-11 02:55:46 +00:00
sirius0xdev
0fb9e93a14
healthcheck
2026-05-11 02:45:22 +00:00
sirius0xdev
f173f4b84e
edit config map
2026-05-11 02:02:47 +00:00
