Anton Afanasyeu
a14413e886
fix(cluster0): Gitea cluster proxy, 2FA seed, hub downloads nginx
...
Bind Gitea on all interfaces for cast02/03 proxy, fix stale 2FA lab-seed
approve flow, add /v0/downloads/ and GITEA_UPSTREAM_HOST, and guard nginx
configure against empty templates.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-10 15:36:49 +02:00
Anton Afanasyeu
970de79a90
Sync lab seeds with hub monitor link, 2FA copy, and nginx monitor route.
...
Align cluster0 deploy seeds and apps-port80 vhost for Grafana monitoring path.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-08 14:56:15 +02:00
Anton Afanasyeu
b68dd00527
cluster0: lab verify-email short links via prod s.f0xx.org API
...
Lab MariaDB slugs are not on public s.f0xx.org; outbound mail calls prod
shorten API (internal artc0 + Host header) with API bearer token in secrets.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-23 22:37:55 +02:00
Anton Afanasyeu
560e4e12b2
cluster0: sync lab-seed AuthMailer with inline CID QR for verify email
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-23 21:34:04 +02:00
Anton Afanasyeu
5b16848366
cluster0: fix secrets MAIL_FROM parsing; normalize RFC5322 From in compose
...
load_secrets_lab quotes values safely; compose reads MAIL_FROM via read_secret.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-23 20:14:27 +02:00
Anton Afanasyeu
62ba6aa615
cluster0: compose overlays lab-seed shortener; fix workspace git safe.dir
...
Re-copy ShortLinksRepository from NFS seed after ac-ms-* overlays;
deploy-ac-workspace allows all safe.directory; verify-mail-lab logs short URL.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-23 19:08:42 +02:00
Anton Afanasyeu
529bd61682
cluster0: verify email QR via hosted image URL, not SMTP attachment
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-23 19:01:30 +02:00
Anton Afanasyeu
7a014118a2
cluster0: QR verify email attachment, libqrencode-tools, src=qr analytics
...
ShortLinksRepository mail pack + renderQrPng; cluster APK includes
libqrencode-tools; deploy-ac-url-shortener ensures QR CLI.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-23 18:53:35 +02:00
Anton Afanasyeu
aa55e03fbd
cluster0: auth-email bearer + shorten verify URLs in outbound mail
...
ShortLinksRepository::shortenForOutbound; ensure-auth-email-bearer.sh;
verify-mail-lab sends shortened s.f0xx.org link in verify email body.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-23 18:37:24 +02:00
Anton Afanasyeu
c554dc761d
cluster0: lab seeds, Gitea mirrors, compose mail, verify tooling
...
Freeze lab-seeds backend for COMPOSE_SKIP_MONOLITH; fix Gitea mirror scripts
for 1.25 API; add secrets.lab.env template, verify-mail-lab, LAB_PUBLIC_ORIGIN,
and credentials pointers for mirror token recovery.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-23 17:07:46 +02:00
