homelab-codex-ws/hosts
oskar 38cb204a64 fix(ollama): declare service on SOLARIA, restrict bind, add cutover runbook
Ollama's service.yaml/docker-compose.yml declared owner_node: solaria but
was never added to hosts/solaria/services.yaml, the manifest deploy-node.sh
actually reads — so it stayed running manually/natively instead of via the
declarative pipeline. Add the missing entry.

Also switch the port publish from 0.0.0.0 to loopback + TAILSCALE_BIND_IP
(same convention as llm-gateway@PIHA), since this is a private service and
llm-gateway@PIHA is the only consumer beyond the host itself.

Live cutover (relocating the existing native model store, disabling the
systemd unit, bringing up the container, verifying bge-m3 embeddings +
GPU use) is documented in docs/infra/ollama-solaria-cutover-2026-07-15.md
but not executed here — no SSH access to SOLARIA from this worktree.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-15 16:09:08 +02:00
..
chelsty-ha feat(hosts): add os_hostname field to all host.yaml files 2026-06-24 22:24:34 +02:00
chelsty-infra feat(hosts): add os_hostname field to all host.yaml files 2026-06-24 22:24:34 +02:00
lustro fix(lustro): mount SSH key at /home/homelab/.ssh for node-agent event shipping 2026-06-11 12:45:55 +02:00
piha fix(node-agent): PIHA — group_add gid 123 (docker) so agent can read /var/run/docker.sock (was PermissionError, agent blind to containers) 2026-07-13 20:02:20 +02:00
saturn fix(capabilities): saturn RAM 16->14 (usable, konwencja free -g) + errata audytu: SATURN arm64->x86_64 2026-07-03 14:58:21 +02:00
solaria fix(ollama): declare service on SOLARIA, restrict bind, add cutover runbook 2026-07-15 16:09:08 +02:00
vps feat(observer): persist SHADOW_LIVENESS_MISMATCH to mounted file — survives container recreate (cutover evidence) 2026-07-15 15:30:44 +02:00