d-bis/Sankofa
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Apply Composer changes: comprehensive API updates, migrations, middleware, and infrastructure improvements

Browse Source 
- Add comprehensive database migrations (001-024) for schema evolution
- Enhance API schema with expanded type definitions and resolvers
- Add new middleware: audit logging, rate limiting, MFA enforcement, security, tenant auth
- Implement new services: AI optimization, billing, blockchain, compliance, marketplace
- Add adapter layer for cloud integrations (Cloudflare, Kubernetes, Proxmox, storage)
- Update Crossplane provider with enhanced VM management capabilities
- Add comprehensive test suite for API endpoints and services
- Update frontend components with improved GraphQL subscriptions and real-time updates
- Enhance security configurations and headers (CSP, CORS, etc.)
- Update documentation and configuration files
- Add new CI/CD workflows and validation scripts
- Implement design system improvements and UI enhancements
This commit is contained in:
defiQUG
2025-12-12 18:01:35 -08:00
parent e01131efaf
commit 9daf1fd378
968 changed files with 160890 additions and 1092 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
cloudflare/tunnel-configs/control-plane.yaml
View File

@@ -6,7 +6,7 @@ credentials-file: /etc/cloudflared/control-plane-tunnel.json
ingress:
# Portal
- hostname: portal.yourdomain.com
- hostname: portal.sankofa.nexus
service: http://portal.portal.svc.cluster.local:80
originRequest:
noHappyEyeballs: true
@@ -16,42 +16,42 @@ ingress:
keepAliveTimeout: 90s
# Rancher
- hostname: rancher.yourdomain.com
- hostname: rancher.sankofa.nexus
service: http://rancher.rancher-system.svc.cluster.local:80
originRequest:
noHappyEyeballs: true
connectTimeout: 30s
# ArgoCD
- hostname: argocd.yourdomain.com
- hostname: argocd.sankofa.nexus
service: http://argocd-server.argocd.svc.cluster.local:80
originRequest:
noHappyEyeballs: true
connectTimeout: 30s
# Grafana
- hostname: grafana.yourdomain.com
- hostname: grafana.sankofa.nexus
service: http://kube-prometheus-stack-grafana.monitoring.svc.cluster.local:80
originRequest:
noHappyEyeballs: true
connectTimeout: 30s
# Vault
- hostname: vault.yourdomain.com
- hostname: vault.sankofa.nexus
service: http://vault.vault.svc.cluster.local:8200
originRequest:
noHappyEyeballs: true
connectTimeout: 30s
# Keycloak
- hostname: keycloak.yourdomain.com
- hostname: keycloak.sankofa.nexus
service: http://keycloak.keycloak.svc.cluster.local:8080
originRequest:
noHappyEyeballs: true
connectTimeout: 30s
# Kubernetes API (restricted)
- hostname: k8s-api.yourdomain.com
- hostname: k8s-api.sankofa.nexus
service: https://kubernetes.default.svc.cluster.local:443
originRequest:
noHappyEyeballs: true

28
cloudflare/tunnel-configs/proxmox-site-1.yaml
View File

@@ -1,4 +1,4 @@
# Cloudflare Tunnel Configuration for Proxmox Site 1 (US-East)
# Cloudflare Tunnel Configuration for Proxmox Site 1 (US San Francisco Valley)
# This tunnel connects Proxmox cluster to Cloudflare
tunnel: proxmox-site-1-tunnel
@@ -6,47 +6,47 @@ credentials-file: /etc/cloudflared/proxmox-site-1-tunnel.json
ingress:
# Proxmox Web UI
- hostname: pve1.yourdomain.com
service: https://pve1.local:8006
- hostname: ml110-01.sankofa.nexus
service: https://192.168.11.10:8006
originRequest:
noHappyEyeballs: true
connectTimeout: 30s
tls:
skipVerify: true
httpHostHeader: pve1.local:8006
httpHostHeader: ML110-01:8006
# Proxmox API
- hostname: pve1-api.yourdomain.com
service: https://pve1.local:8006
- hostname: ml110-01-api.sankofa.nexus
service: https://192.168.11.10:8006
originRequest:
noHappyEyeballs: true
connectTimeout: 30s
tls:
skipVerify: true
httpHostHeader: pve1.local:8006
httpHostHeader: ML110-01:8006
# Proxmox Node 2
- hostname: pve2.yourdomain.com
service: https://pve2.local:8006
- hostname: pve2.sankofa.nexus
service: https://192.168.11.10:8006
originRequest:
noHappyEyeballs: true
connectTimeout: 30s
tls:
skipVerify: true
httpHostHeader: pve2.local:8006
httpHostHeader: pve2.sankofa.nexus:8006
# Proxmox Node 3
- hostname: pve3.yourdomain.com
service: https://pve3.local:8006
- hostname: pve3.sankofa.nexus
service: https://192.168.11.10:8006
originRequest:
noHappyEyeballs: true
connectTimeout: 30s
tls:
skipVerify: true
httpHostHeader: pve3.local:8006
httpHostHeader: pve3.sankofa.nexus:8006
# Prometheus Exporter
- hostname: pve1-metrics.yourdomain.com
- hostname: ml110-01-metrics.sankofa.nexus
service: http://localhost:9221
originRequest:
noHappyEyeballs: true

26
cloudflare/tunnel-configs/proxmox-site-2.yaml
View File

@@ -6,47 +6,47 @@ credentials-file: /etc/cloudflared/proxmox-site-2-tunnel.json
ingress:
# Proxmox Web UI
- hostname: pve4.yourdomain.com
service: https://pve4.local:8006
- hostname: r630-01.sankofa.nexus
service: https://192.168.11.11:8006
originRequest:
noHappyEyeballs: true
connectTimeout: 30s
tls:
skipVerify: true
httpHostHeader: pve4.local:8006
httpHostHeader: R630-01:8006
# Proxmox API
- hostname: pve4-api.yourdomain.com
service: https://pve4.local:8006
- hostname: r630-01-api.sankofa.nexus
service: https://192.168.11.11:8006
originRequest:
noHappyEyeballs: true
connectTimeout: 30s
tls:
skipVerify: true
httpHostHeader: pve4.local:8006
httpHostHeader: R630-01:8006
# Proxmox Node 2
- hostname: pve5.yourdomain.com
service: https://pve5.local:8006
- hostname: pve5.sankofa.nexus
service: https://192.168.11.11:8006
originRequest:
noHappyEyeballs: true
connectTimeout: 30s
tls:
skipVerify: true
httpHostHeader: pve5.local:8006
httpHostHeader: pve5.sankofa.nexus:8006
# Proxmox Node 3
- hostname: pve6.yourdomain.com
service: https://pve6.local:8006
- hostname: pve6.sankofa.nexus
service: https://192.168.11.11:8006
originRequest:
noHappyEyeballs: true
connectTimeout: 30s
tls:
skipVerify: true
httpHostHeader: pve6.local:8006
httpHostHeader: pve6.sankofa.nexus:8006
# Prometheus Exporter
- hostname: pve4-metrics.yourdomain.com
- hostname: r630-01-metrics.sankofa.nexus
service: http://localhost:9221
originRequest:
noHappyEyeballs: true

20
cloudflare/tunnel-configs/proxmox-site-3.yaml
View File

@@ -6,37 +6,37 @@ credentials-file: /etc/cloudflared/proxmox-site-3-tunnel.json
ingress:
# Proxmox Web UI
- hostname: pve7.yourdomain.com
service: https://pve7.local:8006
- hostname: r630-01.sankofa.nexus
service: https://192.168.11.11:8006
originRequest:
noHappyEyeballs: true
connectTimeout: 30s
tls:
skipVerify: true
httpHostHeader: pve7.local:8006
httpHostHeader: R630-01:8006
# Proxmox API
- hostname: pve7-api.yourdomain.com
service: https://pve7.local:8006
- hostname: r630-01-api.sankofa.nexus
service: https://192.168.11.11:8006
originRequest:
noHappyEyeballs: true
connectTimeout: 30s
tls:
skipVerify: true
httpHostHeader: pve7.local:8006
httpHostHeader: R630-01:8006
# Proxmox Node 2
- hostname: pve8.yourdomain.com
service: https://pve8.local:8006
- hostname: pve8.sankofa.nexus
service: https://192.168.11.11:8006
originRequest:
noHappyEyeballs: true
connectTimeout: 30s
tls:
skipVerify: true
httpHostHeader: pve8.local:8006
httpHostHeader: pve8.sankofa.nexus:8006
# Prometheus Exporter
- hostname: pve7-metrics.yourdomain.com
- hostname: r630-01-metrics.sankofa.nexus
service: http://localhost:9221
originRequest:
noHappyEyeballs: true