• Joined on 2026-05-22
Klaus commented on pull request lars/Gebos#23 2026-05-30 00:17:44 +00:00
Infrastructure skeleton — flake, three hosts, Supabase compose, ingester, deploy-rs

Pushed 2dd5ed5 to this branch.

sops-nix

  • sops-nix flake input; sops, age, ssh-to-age in the devShell.
  • .sops.yaml with…
Klaus pushed to klaus/skeleton-infra at lars/Gebos 2026-05-30 00:17:18 +00:00
2dd5ed5877 Add sops-nix secrets + dev defaults so local stack runs with zero setup
Klaus commented on pull request lars/Gebos#23 2026-05-29 23:50:29 +00:00
Infrastructure skeleton — flake, three hosts, Supabase compose, ingester, deploy-rs

Standard answer in the Nix world: sops-nix with age recipients. Maps onto what you described almost exactly.

Shape

  • One file in repo, e.g.…
Klaus commented on pull request lars/Gebos#23 2026-05-29 23:46:45 +00:00
Infrastructure skeleton — flake, three hosts, Supabase compose, ingester, deploy-rs

Three buckets, all referenced from this branch:

1. Gitea Actions secret (CI)

  • DEPLOY_SSH_KEY — ed25519 private key for deploy@{db,app,mqtt-ingest} hosts. Used by `.gitea/workflows/deploy…
Klaus created branch main in lars/klaus-bot 2026-05-28 19:53:38 +00:00
Klaus pushed to main at lars/klaus-bot 2026-05-28 19:53:38 +00:00
0bfe0c314d initial
Klaus commented on issue lars/Gebos#21 2026-05-27 17:23:43 +00:00
Project Setup

Skeleton PR up as #23 (draft).

Studio is bound to 127.0.0.1 on app-host — no public route. Access from your laptop with ssh -L 3000:127.0.0.1:3000 app-host, as agreed.

PR description…

Klaus created pull request lars/Gebos#23 2026-05-27 17:23:36 +00:00
WIP: Infrastructure skeleton — flake, three hosts, Supabase compose, ingester, deploy-rs
Klaus pushed to klaus/skeleton-infra at lars/Gebos 2026-05-27 17:23:07 +00:00
2d57db8182 Add infrastructure skeleton for review (refs #21)
Klaus created branch klaus/skeleton-infra in lars/Gebos 2026-05-27 17:23:07 +00:00
Klaus commented on issue lars/Gebos#21 2026-05-27 17:16:02 +00:00
Project Setup

Locked:

  • PostgREST + /rpc/ is the public REST surface, Huma dropped
  • Caddy (TLS / ACME) → Kong (API gateway, key check, path fan-out) → upstreams
  • Single subdomain: api.ge-bos.de for…
Klaus commented on issue lars/Gebos#21 2026-05-27 17:09:52 +00:00
Project Setup

Good questions — 2 and 3 are worth digging into.

1. Supabase on external db-host — locked

Concretely: in the compose file, remove (or profiles: out) the bundled db service, then…

Klaus commented on issue lars/Gebos#21 2026-05-27 17:02:49 +00:00
Project Setup

Locked in:

  • Single-node HiveMQ CE with persistent sessions on disk
  • Topic-encoded tenancy → tenant_id column on the hypertable, standard RLS (`USING (tenant_id = current_setting('app.tenant_i…
Klaus commented on issue lars/Gebos#21 2026-05-27 16:49:01 +00:00
Project Setup

Good — splitting failure domains across three hosts makes sense. A few things to refine before we commit.

Things I'd push back on or want to confirm

1. HiveMQ CE HA isn't really HA.

Klaus commented on issue lars/Gebos#21 2026-05-27 16:46:53 +00:00
Project Setup

Loud and clear. Ready when you are.

— Klaus

Klaus commented on issue lars/Gebos#21 2026-05-25 20:58:26 +00:00
Project Setup

Happy to ideate before I touch any code. Here's a strawman so we have something concrete to push back on — nothing below is decided.

Proposed shape

One flake.nix at the repo root

Klaus opened issue lars/Gebos#22 2026-05-23 19:19:33 +00:00
Fake Data Generator
Klaus opened issue lars/Gebos#21 2026-05-23 19:19:31 +00:00
Project Setup
Klaus opened issue lars/Gebos#20 2026-05-23 19:19:29 +00:00
UVI-S-15 — Admin-Dashboard mit UVI-Übersicht (Pilot)
Klaus opened issue lars/Gebos#19 2026-05-23 19:19:23 +00:00
UVI-S-14 — Admin-Login (Magic Link)