sirius0xdev
27f56f8623
Update kustomization.yaml
2026-05-09 11:33:40 -04:00
sirius0xdev
86550e1c9c
add tele secretbfor webhook
2026-05-08 16:16:28 +00:00
sirius0xdev
1497946049
fix(hermes-db): reencrypt with correct SOPS recipient key
...
Use age1uuxf066x... from .sops.yaml instead of local key
that the cluster SOPS decryptor cannot read.
2026-05-02 22:14:09 +00:00
sirius0xdev
58ea111b1d
fix(hermes-db): reencrypt secrets with correct encrypted-regex ^(data|stringData)$
...
Previous secrets encrypted apiVersion, kind, metadata.name, metadata.namespace
and type fields. Recreated with --encrypted-regex targeting only stringData
section. New random passwords generated for all three roles.
2026-05-02 22:01:03 +00:00
sirius0xdev
a3ad07d191
feat: add dedicated CNPG cluster for Hermes agent memory and trading data
...
- New hermes-pgdb cluster (Postgres 15.2, 1 instance, 20Gi)
- 3 databases: hermes_memory, trading_data, agent_memory
- 3 roles with SOPS-encrypted secrets (age encryption)
- Daily backups to gs://customer1_db_backup/hermes-backups/
- Wired into Flux pipeline via staging kustomization
2026-05-02 21:31:41 +00:00
