Anton Afanasyeu
9edcd44689
deploy: fix load-schemas paths; add 080_sfu_rooms migration
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-28 22:41:22 +02:00
Anton Afanasyeu
3c5233c903
feat(2fa): add cross-device approval routes to composed backend router
...
- New routes: GET/POST /two-factor/approve, GET /api/two-factor/poll
- Nginx regex extended: (login|...|api/two-factor)(/|$)
- lab-seeds views/JS synced from ac-be-auth
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-27 22:49:59 +02:00
Anton Afanasyeu
e4e3cd3462
deps: ac-scripts under deps/; cluster upstream in lab apps.conf seed
...
Move ac-scripts submodule to deps/ac-scripts. FE apps.conf seed proxies to
ac_be_backend (cast01–03) instead of artc0.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-24 17:45:04 +02:00
Anton Afanasyeu
b68dd00527
cluster0: lab verify-email short links via prod s.f0xx.org API
...
Lab MariaDB slugs are not on public s.f0xx.org; outbound mail calls prod
shorten API (internal artc0 + Host header) with API bearer token in secrets.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-23 22:37:55 +02:00
Anton Afanasyeu
560e4e12b2
cluster0: sync lab-seed AuthMailer with inline CID QR for verify email
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-23 21:34:04 +02:00
Anton Afanasyeu
5b16848366
cluster0: fix secrets MAIL_FROM parsing; normalize RFC5322 From in compose
...
load_secrets_lab quotes values safely; compose reads MAIL_FROM via read_secret.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-23 20:14:27 +02:00
Anton Afanasyeu
62ba6aa615
cluster0: compose overlays lab-seed shortener; fix workspace git safe.dir
...
Re-copy ShortLinksRepository from NFS seed after ac-ms-* overlays;
deploy-ac-workspace allows all safe.directory; verify-mail-lab logs short URL.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-23 19:08:42 +02:00
Anton Afanasyeu
529bd61682
cluster0: verify email QR via hosted image URL, not SMTP attachment
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-23 19:01:30 +02:00
Anton Afanasyeu
7a014118a2
cluster0: QR verify email attachment, libqrencode-tools, src=qr analytics
...
ShortLinksRepository mail pack + renderQrPng; cluster APK includes
libqrencode-tools; deploy-ac-url-shortener ensures QR CLI.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-23 18:53:35 +02:00
Anton Afanasyeu
aa55e03fbd
cluster0: auth-email bearer + shorten verify URLs in outbound mail
...
ShortLinksRepository::shortenForOutbound; ensure-auth-email-bearer.sh;
verify-mail-lab sends shortened s.f0xx.org link in verify email body.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-23 18:37:24 +02:00
Anton Afanasyeu
c554dc761d
cluster0: lab seeds, Gitea mirrors, compose mail, verify tooling
...
Freeze lab-seeds backend for COMPOSE_SKIP_MONOLITH; fix Gitea mirror scripts
for 1.25 API; add secrets.lab.env template, verify-mail-lab, LAB_PUBLIC_ORIGIN,
and credentials pointers for mirror token recovery.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-23 17:07:46 +02:00
