ac/ac-deploy
1
0
Fork 0
mirror of git://f0xx.org/ac/ac-deploy synced 2026-07-29 06:17:57 +03:00
Code Issues Packages Projects Releases Wiki Activity
60 Commits 1 Branch 0 Tags
e49f13dfbdfdca0db0988c27154e9a05047a6ac8
Commit Graph

14 Commits

Author SHA1 Message Date
Anton Afanasyeu
b8bd0e673c Enable lab media_pipelines in composed config and wire ac-ms-media-transcode. 
Overlay media pipeline PHP/JS/SQL on compose, nginx HLS location, enable
feature in lab config.php, and ensure media storage dirs on BE nodes.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-11 15:27:01 +02:00
Anton Afanasyeu
a411dc5405 feat(cluster0): add Janus SFU deploy script and graph gzip smoke test 
deploy-janus-sfu.sh installs Janus on cast02, writes signaling config, and templates CAST02_IP into nginx; populate gains --phase sfu.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-10 22:12:02 +02:00
Anton Afanasyeu
a14413e886 fix(cluster0): Gitea cluster proxy, 2FA seed, hub downloads nginx 
Bind Gitea on all interfaces for cast02/03 proxy, fix stale 2FA lab-seed
approve flow, add /v0/downloads/ and GITEA_UPSTREAM_HOST, and guard nginx
configure against empty templates.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-10 15:36:49 +02:00
Anton Afanasyeu
c23ad5efdc fix(cluster0): HTTPS redirects behind TLS-terminating FE 
BE nginx used $scheme (http) in Location headers, downgrading browsers from
HTTPS to HTTP despite a valid cert on the FE. Honor X-Forwarded-Proto and
force https for public hostnames in all return/rewrite redirects.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-05 19:17:12 +02:00
Anton Afanasyeu
cf2e6ecb4e fix(cluster0): 2FA nginx routes and extend pending-2FA on poll 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-05 19:12:53 +02:00
Anton Afanasyeu
430457dcd9 fix(cluster0): redirect BE root / to hub over HTTPS 
FE proxies https://apps.f0xx.org/ to cast01 GET /; without this block the
Alpine default_server served the nginx welcome page. Absolute https redirect
avoids http:// in Location when upstream is plain :80.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-05 18:56:40 +02:00
Anton Afanasyeu
36f5cdc003 nginx: add SFU signaling and Janus proxy locations to apps vhost 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-28 23:10:03 +02:00
Anton Afanasyeu
98f4ecc2c5 deploy: favicon, nuevo-player, ac-ms-broadcast, nginx notify/monitor/broadcast 
- favicon.ico (32px) + apple-touch-icon.ico (180px) added to composed backend seed
- layout.php: add <link rel="icon"> and <link rel="apple-touch-icon"> in <head>
- nuevo-player (Video.js + Nuevo licensed plugin) into assets/vendor/nuevo-player/
- THIRD_PARTY_LICENSES.md: add Nuevo Player (commercial) + TipTap (MIT) entries
- apps-port80.conf: full rewrite with all live fixes merged in:
    * map $http_upgrade $connection_upgrade (WebSocket upgrade)
    * 2FA location regex extended: api/two-factor
    * grafana-auth-check internal endpoint + @monitor_login_redirect
    * Grafana proxy (cast04:3000) + Alertmanager proxy (cast04:9093)
    * broadcast admin path /app/androidcast_project/broadcast/ (auth_request gated)
    * notify.f0xx.org server block: public /m/{slug} landing + API
    * favicon.ico at server root
- deploy-ac-broadcast.sh: new app-phase script (DB schema, user, worker, rsync)
- populate_lab_setup.sh: add deploy-ac-broadcast.sh to run_phase_app

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-28 22:55:44 +02:00
Anton Afanasyev
b47f91b1ab Cluster deploy: ac/* only, hub assets, auth routes at project root. 
Remove monolith clone path; add hub deploy, legacy purge, composed-backend
login/logout nginx locations, and full hub asset rsync validation.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-24 22:53:38 +02:00
Anton Afanasyev
76d4797cac cluster: fix url-shortener nginx fastcgi routing for s.f0xx.org 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-24 17:50:43 +02:00
Anton Afanasyev
2f544de974 cluster: nginx vhost for s.f0xx.org on cast01; drop artc0 comment 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-24 17:49:36 +02:00
Anton Afanasyeu
c554dc761d cluster0: lab seeds, Gitea mirrors, compose mail, verify tooling 
Freeze lab-seeds backend for COMPOSE_SKIP_MONOLITH; fix Gitea mirror scripts
for 1.25 API; add secrets.lab.env template, verify-mail-lab, LAB_PUBLIC_ORIGIN,
and credentials pointers for mirror token recovery.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-23 17:07:46 +02:00
Anton Afanasyeu
98f30786b7 cluster0: composed ac backend, /issues/ nginx, postgres semi-prod 
Compose lab PHP from ac-workspace overlay; 301 /crashes/ → /issues/;
verify on issues path; optional native Postgres on cast01.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-23 13:10:35 +02:00
Anton Afanasyeu
7f3e4fea9f initial 2026-06-23 12:21:14 +02:00