1
0
mirror of git://f0xx.org/ac/ac-deploy synced 2026-07-29 06:17:57 +03:00
Commit Graph

16 Commits

Author SHA1 Message Date
Anton Afanasyeu
c073309d8c Lab seeds: iodine tunnel domain default iod.airie.me.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-12 19:46:05 +02:00
Anton Afanasyeu
e49f13dfbd Lab seeds: heartbeat GET compat, iodine RA sessions, UI hints.
Sync composed-backend sources for legacy device self-test 405 fix and iodine remote access.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-12 19:44:37 +02:00
Anton Afanasyeu
ab9b4ecae2 Use QrBrandedRenderer for lab-seed short-link QR PNG generation.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-12 14:21:14 +02:00
Anton Afanasyeu
465efa8d98 feat(deploy): lab-seeds sync, msmtp nginx-readable secret, hub downloads
Signed-off-by: Anton Afanasyeu <a.afanasieff@gmail.com>
2026-07-12 13:53:38 +02:00
Anton Afanasyeu
b8bd0e673c Enable lab media_pipelines in composed config and wire ac-ms-media-transcode.
Overlay media pipeline PHP/JS/SQL on compose, nginx HLS location, enable
feature in lab config.php, and ensure media storage dirs on BE nodes.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-11 15:27:01 +02:00
Anton Afanasyeu
54174e7497 fix(cluster0): wire 2FA redirects, heartbeat session touch, TOTP reset script
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-11 14:48:27 +02:00
Anton Afanasyeu
a14413e886 fix(cluster0): Gitea cluster proxy, 2FA seed, hub downloads nginx
Bind Gitea on all interfaces for cast02/03 proxy, fix stale 2FA lab-seed
approve flow, add /v0/downloads/ and GITEA_UPSTREAM_HOST, and guard nginx
configure against empty templates.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-10 15:36:49 +02:00
Anton Afanasyeu
970de79a90 Sync lab seeds with hub monitor link, 2FA copy, and nginx monitor route.
Align cluster0 deploy seeds and apps-port80 vhost for Grafana monitoring path.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-08 14:56:15 +02:00
Anton Afanasyeu
b68dd00527 cluster0: lab verify-email short links via prod s.f0xx.org API
Lab MariaDB slugs are not on public s.f0xx.org; outbound mail calls prod
shorten API (internal artc0 + Host header) with API bearer token in secrets.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-23 22:37:55 +02:00
Anton Afanasyeu
560e4e12b2 cluster0: sync lab-seed AuthMailer with inline CID QR for verify email
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-23 21:34:04 +02:00
Anton Afanasyeu
5b16848366 cluster0: fix secrets MAIL_FROM parsing; normalize RFC5322 From in compose
load_secrets_lab quotes values safely; compose reads MAIL_FROM via read_secret.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-23 20:14:27 +02:00
Anton Afanasyeu
62ba6aa615 cluster0: compose overlays lab-seed shortener; fix workspace git safe.dir
Re-copy ShortLinksRepository from NFS seed after ac-ms-* overlays;
deploy-ac-workspace allows all safe.directory; verify-mail-lab logs short URL.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-23 19:08:42 +02:00
Anton Afanasyeu
529bd61682 cluster0: verify email QR via hosted image URL, not SMTP attachment
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-23 19:01:30 +02:00
Anton Afanasyeu
7a014118a2 cluster0: QR verify email attachment, libqrencode-tools, src=qr analytics
ShortLinksRepository mail pack + renderQrPng; cluster APK includes
libqrencode-tools; deploy-ac-url-shortener ensures QR CLI.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-23 18:53:35 +02:00
Anton Afanasyeu
aa55e03fbd cluster0: auth-email bearer + shorten verify URLs in outbound mail
ShortLinksRepository::shortenForOutbound; ensure-auth-email-bearer.sh;
verify-mail-lab sends shortened s.f0xx.org link in verify email body.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-23 18:37:24 +02:00
Anton Afanasyeu
c554dc761d cluster0: lab seeds, Gitea mirrors, compose mail, verify tooling
Freeze lab-seeds backend for COMPOSE_SKIP_MONOLITH; fix Gitea mirror scripts
for 1.25 API; add secrets.lab.env template, verify-mail-lab, LAB_PUBLIC_ORIGIN,
and credentials pointers for mirror token recovery.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-23 17:07:46 +02:00