ac/ac-deploy
1
0
Fork 0
mirror of git://f0xx.org/ac/ac-deploy synced 2026-07-29 08:59:30 +03:00
Code Issues Packages Projects Releases Wiki Activity
58 Commits 1 Branch 0 Tags
b3901e395572936d0b0dc1e6f0662cdeae8c2a2c
Commit Graph

16 Commits

Author SHA1 Message Date
Anton Afanasyeu
465efa8d98 feat(deploy): lab-seeds sync, msmtp nginx-readable secret, hub downloads 
Signed-off-by: Anton Afanasyeu <a.afanasieff@gmail.com>
 2026-07-12 13:53:38 +02:00
Anton Afanasyeu
ca28a7b97d fix(cluster0): QR 2FA one-tap approve; default public origin apps.f0xx.org 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-11 17:33:43 +02:00
Anton Afanasyeu
2a8d76fdc4 Fix ac-ms-media-transcode seed when workspace checkout is empty stub. 
Prefer /mnt/repos/ac/ac-ms-media-transcode copy when workspace tree lacks
bin/run.sh and pirate_drift.png.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-11 15:30:26 +02:00
Anton Afanasyeu
a44954e108 Ensure ac-ms-media-transcode is cloned on lab nodes during compose. 
Fallback git clone when workspace submodule is missing; include repo in
deploy-ac-workspace compose submodule list.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-11 15:28:00 +02:00
Anton Afanasyeu
b8bd0e673c Enable lab media_pipelines in composed config and wire ac-ms-media-transcode. 
Overlay media pipeline PHP/JS/SQL on compose, nginx HLS location, enable
feature in lab config.php, and ensure media storage dirs on BE nodes.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-11 15:27:01 +02:00
Anton Afanasyeu
56a6cd785d fix(cluster0): preserve issues layout overlay and validate rsync deploy 
Compose ac-be-issues views last so tickets/graphs stubs no longer overwrite
the canonical nav shell (monitor link). validate-ac-repos accepts /mnt/repos/ac
lab checkout and unset url-shortener origin.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-05 18:28:46 +02:00
Anton Afanasyeu
4e885056e0 compose: builder config, two_factor.js sync, cluster bootstrap support 2026-07-05 16:57:37 +02:00
Anton Afanasyev
4d2db29b8b Lab cluster: deploy WG/RSSH on cast01 + compose remote_access from secrets. 
Add deploy-remote-access-lab.sh, wire WG/RSSH into compose-lab-backend.php,
and run RA deploy during populate app phase on primary.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-24 22:57:28 +02:00
Anton Afanasyev
b47f91b1ab Cluster deploy: ac/* only, hub assets, auth routes at project root. 
Remove monolith clone path; add hub deploy, legacy purge, composed-backend
login/logout nginx locations, and full hub asset rsync validation.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-24 22:53:38 +02:00
Anton Afanasyeu
b68dd00527 cluster0: lab verify-email short links via prod s.f0xx.org API 
Lab MariaDB slugs are not on public s.f0xx.org; outbound mail calls prod
shorten API (internal artc0 + Host header) with API bearer token in secrets.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-23 22:37:55 +02:00
Anton Afanasyeu
5b16848366 cluster0: fix secrets MAIL_FROM parsing; normalize RFC5322 From in compose 
load_secrets_lab quotes values safely; compose reads MAIL_FROM via read_secret.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-23 20:14:27 +02:00
Anton Afanasyeu
62ba6aa615 cluster0: compose overlays lab-seed shortener; fix workspace git safe.dir 
Re-copy ShortLinksRepository from NFS seed after ac-ms-* overlays;
deploy-ac-workspace allows all safe.directory; verify-mail-lab logs short URL.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-23 19:08:42 +02:00
Anton Afanasyeu
aa55e03fbd cluster0: auth-email bearer + shorten verify URLs in outbound mail 
ShortLinksRepository::shortenForOutbound; ensure-auth-email-bearer.sh;
verify-mail-lab sends shortened s.f0xx.org link in verify email body.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-23 18:37:24 +02:00
Anton Afanasyeu
3d66edb405 cluster0: Gmail mail relay (msmtp + PHP SMTP), lab cron 
Mirror alpine-be msmtp for CLI; compose uses Gmail SMTP for php-fpm.
Safe secrets.lab.env parser; deploy-mailrelay, install-lab-cron, verify-mail-lab.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-23 18:24:10 +02:00
Anton Afanasyeu
c554dc761d cluster0: lab seeds, Gitea mirrors, compose mail, verify tooling 
Freeze lab-seeds backend for COMPOSE_SKIP_MONOLITH; fix Gitea mirror scripts
for 1.25 API; add secrets.lab.env template, verify-mail-lab, LAB_PUBLIC_ORIGIN,
and credentials pointers for mirror token recovery.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-23 17:07:46 +02:00
Anton Afanasyeu
98f30786b7 cluster0: composed ac backend, /issues/ nginx, postgres semi-prod 
Compose lab PHP from ac-workspace overlay; 301 /crashes/ → /issues/;
verify on issues path; optional native Postgres on cast01.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-23 13:10:35 +02:00