Commit Graph

1927 Commits

Author SHA1 Message Date
a4c3721413 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-infra
2026-04-21 06:07:00 +02:00
beb7187716 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-hosts
2026-04-21 06:06:49 +02:00
6a53ecbebe chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-infra
2026-04-21 05:52:27 +02:00
560bd8d813 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-hosts
2026-04-21 05:52:19 +02:00
32c6bce153 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-infra
2026-04-21 05:37:52 +02:00
3296161747 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-hosts
2026-04-21 05:37:41 +02:00
c2f868d2fa chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-infra
2026-04-21 05:23:21 +02:00
2e51ed0eae chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-hosts
2026-04-21 05:23:09 +02:00
b7b3acc309 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-infra
2026-04-21 05:08:45 +02:00
9e306161c8 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-hosts
2026-04-21 05:08:34 +02:00
938f100e18 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-infra
2026-04-21 04:54:11 +02:00
44d770065b chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-hosts
2026-04-21 04:54:02 +02:00
b7b2fe3521 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-infra
2026-04-21 04:39:37 +02:00
fd5dc1aca5 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-hosts
2026-04-21 04:39:29 +02:00
22c49c6135 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-infra
2026-04-21 04:25:04 +02:00
a1368302ce chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-hosts
2026-04-21 04:24:52 +02:00
b15eedc4a4 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-infra
2026-04-21 04:10:27 +02:00
b036d10ed9 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-hosts
2026-04-21 04:10:18 +02:00
0bdfdf880f chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-infra
2026-04-21 03:55:53 +02:00
5a95e7dfde chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-hosts
2026-04-21 03:55:42 +02:00
c72ac15f20 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-infra
2026-04-21 03:41:16 +02:00
f2ffbc0d56 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-hosts
2026-04-21 03:41:05 +02:00
e0e0ff5b6e chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-infra
2026-04-21 03:26:37 +02:00
b294518069 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-hosts
2026-04-21 03:26:28 +02:00
3f1234a286 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-infra
2026-04-21 03:11:58 +02:00
57a41f9885 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-hosts
2026-04-21 03:11:50 +02:00
02af1d85c7 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-infra
2026-04-21 02:57:20 +02:00
7e49eb2746 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-hosts
2026-04-21 02:57:09 +02:00
185bed088d chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-infra
2026-04-21 02:42:42 +02:00
25a7f34030 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-hosts
2026-04-21 02:42:31 +02:00
270e11c84e chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-infra
2026-04-21 02:29:00 +02:00
6d9900eb6c chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-hosts
2026-04-21 02:28:46 +02:00
677cdb79df chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-infra
2026-04-21 02:15:44 +02:00
3f4f03e838 feat(ansible): inject ops-bridge key in base role at bootstrap
Add ops_bridge_pubkey to group_vars/all.yaml (public key only, safe to
commit) and inject it via ansible.posix.authorized_key in the base role,
immediately after SSH hardening. This ensures ops-bridge tunnel
connectivity is available as soon as SSH infrastructure is up on any
managed host — no manual key provisioning required for new nodes.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-27 23:52:54 +01:00
ab92c58bda chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-03-27:
  - update .custodian-brief.md for railiance-hosts
2026-03-27 13:42:11 +01:00
127231bf62 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-03-27:
  - update .custodian-brief.md for railiance-infra
2026-03-27 13:41:52 +01:00
72da7bd151 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-03-27:
  - update .custodian-brief.md for railiance-hosts
2026-03-27 13:41:46 +01:00
93080128fd chore(workplan): mark T06 done (Gitea values → railiance-apps)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-27 13:41:21 +01:00
d722cac4a5 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-03-27:
  - update .custodian-brief.md for railiance-hosts
2026-03-27 10:03:40 +01:00
afd664b248 chore(workplan): mark T05 done — Valkey standalone S3 asset deployed
bitnami/valkey 5.4.9 in platform namespace; gitea-valkey-cluster
subchart decommissioned; Gitea cache/session/queue verified working.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-27 10:03:14 +01:00
28f08b17f3 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-03-27:
  - update .custodian-brief.md for railiance-hosts
2026-03-27 09:12:50 +01:00
26849bd4d6 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-03-27:
  - update .custodian-brief.md for railiance-hosts
2026-03-27 09:12:40 +01:00
dfed454353 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-03-27:
  - update .custodian-brief.md for railiance-infra
2026-03-27 09:12:39 +01:00
bbde20d78d chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-03-27:
  - update .custodian-brief.md for railiance-hosts
2026-03-27 09:12:31 +01:00
7bff1f211d chore(workplan): mark T04 done — Gitea migrated to cnpg gitea-db
postgresql-ha subchart decommissioned; 4 users, 26 repos verified intact;
NetworkPolicy for default→databases ingress applied.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-27 09:12:22 +01:00
2d7e0101bc feat(infra): UFW k3s routing + full deploy runbook
- base role: allow UFW routing direction (required for k3s flannel
  pod networking to function across nodes)
- docs/deploy-stack.md: full S1→S5 ordered deploy runbook with
  pre-conditions checklist and layer-by-layer steps

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-27 02:28:51 +01:00
aa822164b5 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-03-27:
  - update .custodian-brief.md for railiance-hosts
2026-03-27 02:24:47 +01:00
74f7c72dbb chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-03-27:
  - update .custodian-brief.md for railiance-infra
2026-03-27 02:24:32 +01:00
13443ee2d5 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-03-27:
  - update .custodian-brief.md for railiance-hosts
2026-03-27 02:24:27 +01:00
11a2c37bde chore(workplan): mark T03 and T08 done in WP-0004
T03 (gitea-db cnpg cluster): cluster healthy after adding missing
NetworkPolicies for databases namespace default-deny-all policy.
T08 (deploy-stack docs): docs/deploy-stack.md written last session.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-27 02:24:07 +01:00