|
|
93080128fd
|
chore(workplan): mark T06 done (Gitea values → railiance-apps)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
2026-03-27 13:41:21 +01:00 |
|
|
|
afd664b248
|
chore(workplan): mark T05 done — Valkey standalone S3 asset deployed
bitnami/valkey 5.4.9 in platform namespace; gitea-valkey-cluster
subchart decommissioned; Gitea cache/session/queue verified working.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
2026-03-27 10:03:14 +01:00 |
|
|
|
7bff1f211d
|
chore(workplan): mark T04 done — Gitea migrated to cnpg gitea-db
postgresql-ha subchart decommissioned; 4 users, 26 repos verified intact;
NetworkPolicy for default→databases ingress applied.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
2026-03-27 09:12:22 +01:00 |
|
|
|
11a2c37bde
|
chore(workplan): mark T03 and T08 done in WP-0004
T03 (gitea-db cnpg cluster): cluster healthy after adding missing
NetworkPolicies for databases namespace default-deny-all policy.
T08 (deploy-stack docs): docs/deploy-stack.md written last session.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
2026-03-27 02:24:07 +01:00 |
|
|
|
ff59d4e0f8
|
feat(ansible): add swapfile + resource_limits roles; add CoulombCore to inventory
T01: roles/swapfile — idempotent 4GB swapfile, vm.swappiness=10, fstab entry
T02: roles/resource_limits — PAM nproc caps (512/1024), systemd user-1000.slice
memory limits (1500M/512M); templated per-host via host_vars
- inventory/host_vars/CoulombCore.yml — host-specific vars for both roles
- inventory/servers.yaml — add CoulombCore with id_ops SSH key
- inventory_from_yaml.py — load host_vars files into Ansible hostvars
- playbooks/bootstrap.yaml — include swapfile + resource_limits roles
- workplans/WP-0004 — flag T04/T09/T10 needs_human, add CoulombCore-local convergence note
Codifies manual INC-002 hardening. See RAIL-HO-WP-0004-T01/T02.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
2026-03-27 01:49:35 +01:00 |
|
|
|
caa6ae36da
|
feat(workplan): add RAIL-HO-WP-0004 production-readiness workplan
10-task cross-layer workplan covering: Ansible hardening codification (T01-T02),
cnpg platform baseline superseding stale WP-0001 (T03-T05), S2→S5 Gitea boundary
fix (T06), SSH git automation on CoulombCore (T07, done), deploy-stack docs (T08),
state-hub + activity-core migration to cluster (T09-T10).
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
2026-03-27 01:01:47 +01:00 |
|
