Remove committed secrets from tracked templates

Finish Schoolhouse programming submission flow
Add experimental New to You dashboard section
2026-05-16 19:29:54 +00:00 · 2026-05-16 19:13:10 +00:00 · 2026-05-16 16:03:48 +00:00 · 2026-05-16 16:00:41 +00:00 · 2026-05-16 15:54:20 +00:00 · 2026-05-15 21:58:42 +00:00
8 changed files with 15 additions and 15 deletions
--- a/n8n-workflows/01-grafana-alert-ai-gotify-v1.0.json
+++ b/n8n-workflows/01-grafana-alert-ai-gotify-v1.0.json
@@ -49,7 +49,7 @@
            },
            {
              "name": "Authorization",
-              "value": "Bearer sk-a95bd142d43d175b6476ebc862e81aa1f6ef34b1153f839698d07541d2f55308"
+              "value": "Bearer sk-REPLACE_WITH_LITELLM_KEY"
            }
          ]
        },
@@ -360,4 +360,4 @@
    "name": "Version ba3a4eab",
    "description": ""
  }
-}
+}
--- a/n8n-workflows/01-grafana-alert-ai-gotify-v1.1.json
+++ b/n8n-workflows/01-grafana-alert-ai-gotify-v1.1.json
@@ -49,7 +49,7 @@
            },
            {
              "name": "Authorization",
-              "value": "Bearer sk-a95bd142d43d175b6476ebc862e81aa1f6ef34b1153f839698d07541d2f55308"
+              "value": "Bearer sk-REPLACE_WITH_LITELLM_KEY"
            }
          ]
        },
@@ -360,4 +360,4 @@
    "name": "Version ba3a4eab",
    "description": ""
  }
-}
+}
--- a/n8n-workflows/02-rag-ingest-and-query-v1.0.json
+++ b/n8n-workflows/02-rag-ingest-and-query-v1.0.json
@@ -210,7 +210,7 @@
            },
            {
              "name": "Authorization",
-              "value": "Bearer sk-a95bd142d43d175b6476ebc862e81aa1f6ef34b1153f839698d07541d2f55308"
+              "value": "Bearer sk-REPLACE_WITH_LITELLM_KEY"
            }
          ]
        },
@@ -391,4 +391,4 @@
    "name": "Version 832248e5",
    "description": ""
  }
-}
+}
--- a/n8n-workflows/04-whisper-transcription-v1.0.json
+++ b/n8n-workflows/04-whisper-transcription-v1.0.json
@@ -163,7 +163,7 @@
            },
            {
              "name": "Authorization",
-              "value": "Bearer sk-a95bd142d43d175b6476ebc862e81aa1f6ef34b1153f839698d07541d2f55308"
+              "value": "Bearer sk-REPLACE_WITH_LITELLM_KEY"
            }
          ]
        },
@@ -586,4 +586,4 @@
    "name": "Version 20275daf",
    "description": ""
  }
-}
+}
--- a/n8n-workflows/06-web-scrape-summarize-v1.0.json
+++ b/n8n-workflows/06-web-scrape-summarize-v1.0.json
@@ -180,7 +180,7 @@
            },
            {
              "name": "Authorization",
-              "value": "Bearer sk-a95bd142d43d175b6476ebc862e81aa1f6ef34b1153f839698d07541d2f55308"
+              "value": "Bearer sk-REPLACE_WITH_LITELLM_KEY"
            }
          ]
        },
@@ -585,4 +585,4 @@
    "name": "Version 7476f4df",
    "description": ""
  }
-}
+}
--- a/n8n-workflows/07-git-commit-summarizer-v1.0.json
+++ b/n8n-workflows/07-git-commit-summarizer-v1.0.json
@@ -49,7 +49,7 @@
            },
            {
              "name": "Authorization",
-              "value": "Bearer sk-a95bd142d43d175b6476ebc862e81aa1f6ef34b1153f839698d07541d2f55308"
+              "value": "Bearer sk-REPLACE_WITH_LITELLM_KEY"
            }
          ]
        },
@@ -207,4 +207,4 @@
    "name": "Version 61fca126",
    "description": ""
  }
-}
+}
--- a/n8n-workflows/08-class-recording-rag-v1.0.json
+++ b/n8n-workflows/08-class-recording-rag-v1.0.json
@@ -115,7 +115,7 @@
            },
            {
              "name": "Authorization",
-              "value": "Bearer sk-a95bd142d43d175b6476ebc862e81aa1f6ef34b1153f839698d07541d2f55308"
+              "value": "Bearer sk-REPLACE_WITH_LITELLM_KEY"
            }
          ]
        },
@@ -529,4 +529,4 @@
    "name": "Version d64293a7",
    "description": ""
  }
-}
+}
--- a/scripts/setup-secrets-repo.sh
+++ b/scripts/setup-secrets-repo.sh
@@ -8,7 +8,7 @@ set -euo pipefail
 GITEA_HTTP_URL="http://10.5.1.6:3000"            # ← local Gitea HTTP port (check TrueNAS app config)
 GITEA_SSH_PORT="2222"                             # ← Gitea SSH port
 GITEA_USER="fizzlepoof"
-GITEA_TOKEN="aa711a194bd30f6355a0f5d396520d08762483aa"  # ← regenerate with write:repository + write:user scopes
+GITEA_TOKEN=""  # ← set this before use; regenerate with write:repository + write:user scopes
 REPO_NAME="homelab-secrets"
 LOCAL_PATH="/mnt/docker-ssd/docker/secrets"
 KEY_EXPORT_PATH="/root/.git-crypt-secrets.key"   # back this up somewhere safe!
Author	SHA1	Message	Date
Fizzlepoof	ff9e94e95b	Remove committed secrets from tracked templates	2026-05-16 19:29:54 +00:00
Fizzlepoof	e5a100d1a0	Finish Schoolhouse programming submission flow	2026-05-16 19:13:10 +00:00
Fizzlepoof	d31de19227	Add experimental New to You dashboard section	2026-05-16 16:03:48 +00:00
Fizzlepoof	e9fd381ef9	Diversify Doris Dashboard topic selection	2026-05-16 16:00:41 +00:00
Fizzlepoof	ecf44fe65f	Update Schoolhouse and backup docs to live state	2026-05-16 15:54:20 +00:00
Fizzlepoof	383cd41ae7	Add Doris Schoolhouse and clean pending homelab changes	2026-05-15 21:58:42 +00:00
Fizzlepoof	3aad8d037b	Add vault-backed Karakeep API helper	2026-05-15 17:44:30 +00:00
Fizzlepoof	308ac205fb	Fix Karakeep Chrome connectivity on PD	2026-05-15 17:11:34 +00:00
Fizzlepoof	d014925bd1	Update Pi-hole docs for live HA rollout	2026-05-15 17:00:07 +00:00
Fizzlepoof	ade91cc9ab	Harden NOMAD Pi-hole DNS binding	2026-05-15 16:09:03 +00:00
Fizzlepoof	546507e71c	Define NOMAD live services under /opt	2026-05-15 15:49:15 +00:00
Fizzlepoof	ce167138cf	Align NOMAD Pi-hole replica with stack SOP	2026-05-15 15:43:17 +00:00
Fizzlepoof	f3469e35fd	Move Pi-hole backup node from Serenity to NOMAD	2026-05-15 15:37:35 +00:00
Fizzlepoof	66dda26f98	Add Nebula Sync to PD Pi-hole stack	2026-05-15 15:11:50 +00:00
Fizzlepoof	c7baa0054f	Disable Pi-hole NTP on PD	2026-05-15 15:00:37 +00:00
Fizzlepoof	adabd6a847	Fix Pi-hole prepare script replace behavior	2026-05-15 14:37:54 +00:00
Fizzlepoof	03de710d0e	Scaffold PD Pi-hole primary stack	2026-05-15 03:17:56 +00:00
Fizzlepoof	bcd06c61c4	Harden Paperless and school intake n8n workflows	2026-05-15 03:08:03 +00:00
Fizzlepoof	b76cb1b520	Pin Paperless document stack component versions	2026-05-15 03:08:03 +00:00
Fizzlepoof	7c28149f16	Align Kima Hub stack with live deployment	2026-05-15 03:08:03 +00:00
Fizzlepoof	b8926a3b75	Standardize NOMAD host-run service paths	2026-05-15 03:08:03 +00:00
Fizzlepoof	5f52b2e6cf	Add PD to Serenity backup automation scaffolding	2026-05-15 03:08:03 +00:00
Fizzlepoof	295a22bc1f	Add Doris KitchenOwl recipe importer	2026-05-15 03:03:58 +00:00
Fizzlepoof	5bb519f895	feat(dashboard): rework paperless review actions	2026-05-14 19:43:57 +00:00
Fizzlepoof	c0b3a52074	fix(dashboard): make thumbs-down dismiss a single story	2026-05-14 19:36:47 +00:00
Fizzlepoof	255afad3eb	fix(dashboard): scope thumbs-up to a story and restore refreshes	2026-05-14 19:35:00 +00:00
Fizzlepoof	50ca6361c1	docs(nomad): point to canonical doris dashboard path	2026-05-14 18:16:54 +00:00
Fizzlepoof	4efc8dfbf3	feat(home): import doris dashboard from workspace repo Migrates workspace-only dashboard work from commits 6f0c5cd, c851073, and d04eff3 into the canonical truenas-stacks repo.	2026-05-14 18:14:34 +00:00
Fizzlepoof	e4e48394b8	docs(nomad): capture container ownership and recovery notes	2026-05-14 17:35:24 +00:00
Fizzlepoof	991ed7a6ae	docs(homelab): record pd static ip	2026-05-14 02:25:17 +00:00
Fizzlepoof	8e182b31c7	refactor(n8n): consolidate school paperless enrichment	2026-05-14 02:18:40 +00:00
Fizzlepoof	df70c6cbca	docs(homelab): require secrets sync after env changes	2026-05-14 02:00:25 +00:00
Fizzlepoof	a650c1a56b	fix(n8n): repair school intake upload flow	2026-05-14 01:56:07 +00:00
Fizzlepoof	31223c875d	feat(n8n): add school intake workflow v1.1	2026-05-13 21:32:18 +00:00
Fizzlepoof	8165d7b2a6	docs(n8n): version school intake workflow artifacts	2026-05-13 21:09:43 +00:00
Fizzlepoof	56026cf542	feat(n8n): add school paperless intake pipeline	2026-05-13 20:53:00 +00:00
Fizzlepoof	5584de38e0	fix(n8n): restore paperless webhook compatibility	2026-05-13 20:10:25 +00:00
Fizzlepoof	4d04077f51	docs(gitea): document internal SSH remote Record the working internal Gitea SSH remote as ssh://git@10.5.1.6:2222/<owner>/<repo>.git and replace stale HTTPS/gitea.paccoco.com examples for PD/NOMAD operations. Port 2222 is SSH, while the web UI remains on port 3002.	2026-05-13 17:15:39 +00:00
Fizzlepoof	686de9f543	docs(paperless): document Office ingestion support Document Paperless Tika/Gotenberg sidecars, supported Office/OpenDocument ingestion formats, stack paths, validation/deploy procedure, and verification commands. Updates service inventory and architecture overview so PD docs match the deployed documents stack.	2026-05-13 17:06:52 +00:00
Fizzlepoof	09a29b0b3a	feat(paperless): add Tika and Gotenberg sidecars Enable Paperless Office/OpenDocument ingestion by wiring internal Tika and Gotenberg services into the documents stack. Adds PAPERLESS_TIKA_* environment keys to .env.example and places both sidecars on an internal-only network with resource limits.	2026-05-13 17:06:47 +00:00
Fizzlepoof	5fd46b20ca	feat: add paperless intake triage workflow	2026-05-13 03:38:31 +00:00
Fizzlepoof	33d0666a3e	docs: expand SECRETS_MANAGEMENT with full runbook and sync workflow	2026-05-12 08:30:12 -05:00
Fizzlepoof	4d5fa8f4a0	fix: sync-envs-to-secrets depth 3, fix ((copied++)) set -e bug	2026-05-12 08:22:40 -05:00
Fizzlepoof	c31656bca2	feat: add sync-envs-to-secrets.sh script	2026-05-12 08:20:00 -05:00
fizzlepoof	3c108b8a85	Merge branch 'main' of gitea.paccoco.com:fizzlepoof/truenas-stacks	2026-05-12 08:17:06 -05:00
Fizzlepoof	ae83086b06	feat: add git-crypt secrets repo setup and docs - scripts/setup-secrets-repo.sh: replace dpkg-deb install with Docker method - dev/docker-compose.yaml: add git-crypt-init service (profile: setup) - docs/operations/SECRETS_MANAGEMENT.md: document git-crypt encrypted repo, unlock procedure, rebuild runbook, and TrueNAS install methods	2026-05-12 08:15:50 -05:00
Fizzlepoof	4acc202c49	feat: add git-crypt secrets repo setup and docs - scripts/setup-secrets-repo.sh: replace dpkg-deb install with Docker method - dev/docker-compose.yaml: add git-crypt-init service (profile: setup) - docs/operations/SECRETS_MANAGEMENT.md: document git-crypt encrypted repo, unlock procedure, rebuild runbook, and TrueNAS install methods	2026-05-12 08:06:31 -05:00
fizzlepoof	c30f5cc4f6	Merge branch 'main' of github.com:Paccoco/truenas-stacks # Conflicts: # rocinante/docker-compose.yaml # rocinante/watcher/watch.py	2026-05-10 09:57:48 -05:00
fizzlepoof	22d2d75f6a	Local homelab changes	2026-05-10 09:56:29 -05:00
Paccoco	2048a07abf	Add OpenClaw to AI stack	2026-05-10 09:52:48 -05:00
Paccoco	bdc81cbc2e	fix: chunk size limit + keep MP3s + Respond Accepted fix; add rocinante stack - Chunk Text: word-level fallback for sentences > 600 chars - watch.py: keep MP3 after transcription - Respond Accepted: remove cross-node reference - rocinante/: Whisper CUDA + watcher stack for RTX 4090 transcription	2026-05-09 21:10:23 -05:00
Paccoco	31edbf1970	workflow 08: v1.1 fixes + docs update - 08-class-recording-rag-v1.1.json: Whisper URL → 10.5.1.16:8786, model → faster-distil-whisper-small.en, auth headers → env vars, inputDataFieldName fix, Paperless response format text - PLAUSIBLEDENABILITY.md: remove Whisper from GPU list (moved to N.O.M.A.D.) - n8n-workflows/README.md: fix class recordings path to /mnt/tank, correct workflow 08 trigger (webhook, not folder watcher), add curl upload example and docker-compose setup instructions	2026-05-09 19:07:27 -05:00
Paccoco	2ee549d843	Workflow 16 NFS Watchdog v1.2 working; fix mount points, container names, sudo path	2026-05-09 16:04:44 -05:00
Paccoco	8736b52a6b	Test git webhook trigger	2026-05-09 15:24:56 -05:00
Paccoco	d388aa3e90	Add workflow 01 v1.4; update README env var docs and TODO	2026-05-09 15:21:11 -05:00
Paccoco	7383458b0b	Workflow 01 v1.4 tested and working; update docs, TODO, and automation compose	2026-05-09 15:16:30 -05:00
Paccoco	71401d4128	Version all workflows at v1.0	2026-05-09 13:51:58 -05:00