mirror of
https://github.com/Alkatrazz24/Funk-lab.git
synced 2026-07-08 17:44:42 +02:00
ALI YESILKAYA
224c06041e
- k8s/apps/forgejo : deployment (image forgejo:11, config par env), service, PVC nfs, IngressRoute interne (git.lab.local) + publique (git.funklab.online + middlewares security-headers/ratelimit), Application ArgoCD (ns ai, recurse) - base PostgreSQL `forgejo` sur storage-01 (rôle postgresql) - vault : vault_pg_forgejo_password + vault_forgejo_oauth_client_secret - doc admin/k8s/forgejo.md (archi, OIDC, création du miroir, pièges) + index + CLAUDE.md GitHub reste la source de vérité (pull-mirror lecture seule) — ArgoCD inchangé. Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
96 lines
5.3 KiB
Markdown
96 lines
5.3 KiB
Markdown
# Administration Funk — Index
|
||
|
||
## Navigation rapide
|
||
|
||
| Besoin | Fichier |
|
||
|---|---|
|
||
| Allumer / éteindre le homelab | [ops/cluster.md](ops/cluster.md) |
|
||
| Déployer quelque chose sur k8s | [k8s/argocd.md](k8s/argocd.md) |
|
||
| Débugger l'inférence LLM | [ia/llama_server.md](ia/llama_server.md) · [ia/rocm.md](ia/rocm.md) |
|
||
| Débugger Hermes / ask-agent | [ia/hermes.md](ia/hermes.md) |
|
||
| Assistant vocal (STT / « Jarvis ») | [ia/stt.md](ia/stt.md) · [ia/hermes-voice.md](ia/hermes-voice.md) |
|
||
| RAG / recherche dans la doc | [ia/rag.md](ia/rag.md) |
|
||
| Voir les métriques / alertes | [k8s/monitoring.md](k8s/monitoring.md) |
|
||
| Problème réseau / nftables | [infra/reseau.md](infra/reseau.md) |
|
||
| Problème NFS / stockage | [infra/nfs.md](infra/nfs.md) |
|
||
| Gérer les utilisateurs du portail (créer/révoquer/assigner) | [k8s/auth-portal-admin.md](k8s/auth-portal-admin.md) |
|
||
| Portail consoles / SSO — architecture & pièges | [k8s/auth-portal.md](k8s/auth-portal.md) |
|
||
| Domaine public `funklab.online` + HTTPS (Traefik/Let's Encrypt) | [k8s/public-domain.md](k8s/public-domain.md) |
|
||
| Accès distant VPN (WireGuard, dormant) | [infra/wireguard.md](infra/wireguard.md) |
|
||
| Serveur de jeu Satisfactory | [ops/satisfactory.md](ops/satisfactory.md) |
|
||
| Incident passé | [incidents.md](incidents.md) |
|
||
|
||
---
|
||
|
||
## Guides d'installation (première mise en place)
|
||
|
||
| Guide | Cible |
|
||
|---|---|
|
||
| [install/storage-01.md](install/storage-01.md) | AlmaLinux + RAID5 + Ansible + stack IA complète |
|
||
| [install/gpu-01.md](install/gpu-01.md) | AlmaLinux + ROCm + llama-server (RX 6700XT) |
|
||
| [install/kubernetes.md](install/kubernetes.md) | Talos + MetalLB + Traefik + DNS wildcard + NFS + monitoring |
|
||
|
||
---
|
||
|
||
## ops/ — Opérations quotidiennes
|
||
|
||
| Fichier | Contenu |
|
||
|---|---|
|
||
| [ops/cluster.md](ops/cluster.md) | `funk-start`, `funk-stop`, `funk-status` — démarrage/arrêt cluster complet |
|
||
| [ops/ansible.md](ops/ansible.md) | Commandes Ansible — ping, apply, vault, debug, facts |
|
||
| [ops/systeme.md](ops/systeme.md) | Services systemd, logs, ressources, NetworkManager, dnf |
|
||
| [ops/satisfactory.md](ops/satisfactory.md) | Serveur dédié Satisfactory sur gpu-01 — accès, saves, pièges |
|
||
|
||
---
|
||
|
||
## infra/ — Infrastructure socle
|
||
|
||
| Fichier | Contenu |
|
||
|---|---|
|
||
| [infra/reseau.md](infra/reseau.md) | nftables, IP forwarding, routage, NAT, debug |
|
||
| [infra/nfs.md](infra/nfs.md) | NFS + RAID5 — exports, montages, automount, ajout de partages |
|
||
| [infra/dnsmasq.md](infra/dnsmasq.md) | DNS local `lab.local` — résolution, logs, ajout d'entrées |
|
||
| [infra/ssh.md](infra/ssh.md) | Connexions SSH — alias, jump host, transfert de fichiers |
|
||
| [infra/email.md](infra/email.md) | Postfix relay — SMTP sortant via Gmail (App Password) |
|
||
| [infra/wireguard.md](infra/wireguard.md) | VPN WireGuard sur s01 — accès distant (dormant : pas de redirection Freebox) |
|
||
|
||
---
|
||
|
||
## k8s/ — Cluster Kubernetes
|
||
|
||
| Fichier | Contenu |
|
||
|---|---|
|
||
| [k8s/talos.md](k8s/talos.md) | Talos Linux — talhelper, nœuds, upgrades, backup etcd |
|
||
| [k8s/argocd.md](k8s/argocd.md) | ArgoCD GitOps — App of Apps, déploiement, dépannage |
|
||
| [k8s/monitoring.md](k8s/monitoring.md) | Grafana · Prometheus · AlertManager — métriques, dashboards, alertes |
|
||
| [k8s/n8n.md](k8s/n8n.md) | n8n — automatisation, workflows actifs, credentials |
|
||
| [k8s/open-webui.md](k8s/open-webui.md) | Open WebUI — chat web, backend LiteLLM |
|
||
| [k8s/ghostfolio.md](k8s/ghostfolio.md) | Ghostfolio — suivi de portefeuille (PostgreSQL s01 + Redis) |
|
||
| [k8s/forgejo.md](k8s/forgejo.md) | Forgejo — Git self-host, miroir de GitHub (git.funklab.online, SSO) |
|
||
| [k8s/auth-portal.md](k8s/auth-portal.md) | Authentik + Guacamole — architecture, déploiement, accès Internet, pièges |
|
||
| [k8s/auth-portal-admin.md](k8s/auth-portal-admin.md) | Portail — administration : utilisateurs, machines, apps du hub, révocation |
|
||
| [k8s/public-domain.md](k8s/public-domain.md) | Domaine public `funklab.online` — HTTPS Let's Encrypt, apps exposées, ajout d'app |
|
||
| [k8s/k9s.md](k8s/k9s.md) | k9s — TUI de gestion du cluster |
|
||
|
||
---
|
||
|
||
## ia/ — Stack IA Funk
|
||
|
||
| Fichier | Contenu |
|
||
|---|---|
|
||
| [ia/llama_server.md](ia/llama_server.md) | llama-server — 4 instances (GPU + 2× CPU + embeddings :1238), métriques, build, modèles |
|
||
| [ia/rocm.md](ia/rocm.md) | GPU RX 6700XT — ROCm, `HSA_OVERRIDE_GFX_VERSION`, debug |
|
||
| [ia/litellm.md](ia/litellm.md) | LiteLLM Proxy — routage Qwen local + Claude API, config, validation |
|
||
| [ia/hermes.md](ia/hermes.md) | Hermes Agent + ask-agent — profils, skills, SOUL.md, délégation |
|
||
| [ia/hermes-souls.md](ia/hermes-souls.md) | Prompts système (souls) par profil Hermes |
|
||
| [ia/hermes-auto-improve.md](ia/hermes-auto-improve.md) | Worker d'analyse quotidienne de la doc par Hermes (trigger :9095) |
|
||
| [ia/hermes-voice.md](ia/hermes-voice.md) | Client vocal Hermes (CLI : faster-whisper + Piper + wake word) |
|
||
| [ia/stt.md](ia/stt.md) | STT — assistant vocal « Jarvis » (client `stt` + STT-server in-cluster + mémoire) |
|
||
| [ia/rag.md](ia/rag.md) | RAG — `rag-query`/`rag-ingest`, Qdrant `funk-docs`, embeddings |
|
||
| [ia/alertmanager-webhook.md](ia/alertmanager-webhook.md) | Pont AlertManager → ask-agent (analyse LLM des alertes) |
|
||
|
||
---
|
||
|
||
## incidents.md
|
||
|
||
[incidents.md](incidents.md) — historique des incidents avec causes, résolutions et fixes permanents.
|