coulomb/railiance-infra
0
0
Fork 0
Code Issues Pull Requests Actions Projects Releases Wiki Activity
322 Commits 1 Branch 0 Tags
1400a33fcd77458b6e2d7fe01d465ca6b376d177
Commit Graph

322 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
tegwick
3296161747 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-hosts
 2026-04-21 05:37:41 +02:00
tegwick
c2f868d2fa chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-infra
 2026-04-21 05:23:21 +02:00
tegwick
2e51ed0eae chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-hosts
 2026-04-21 05:23:09 +02:00
tegwick
b7b3acc309 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-infra
 2026-04-21 05:08:45 +02:00
tegwick
9e306161c8 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-hosts
 2026-04-21 05:08:34 +02:00
tegwick
938f100e18 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-infra
 2026-04-21 04:54:11 +02:00
tegwick
44d770065b chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-hosts
 2026-04-21 04:54:02 +02:00
tegwick
b7b2fe3521 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-infra
 2026-04-21 04:39:37 +02:00
tegwick
fd5dc1aca5 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-hosts
 2026-04-21 04:39:29 +02:00
tegwick
22c49c6135 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-infra
 2026-04-21 04:25:04 +02:00
tegwick
a1368302ce chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-hosts
 2026-04-21 04:24:52 +02:00
tegwick
b15eedc4a4 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-infra
 2026-04-21 04:10:27 +02:00
tegwick
b036d10ed9 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-hosts
 2026-04-21 04:10:18 +02:00
tegwick
0bdfdf880f chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-infra
 2026-04-21 03:55:53 +02:00
tegwick
5a95e7dfde chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-hosts
 2026-04-21 03:55:42 +02:00
tegwick
c72ac15f20 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-infra
 2026-04-21 03:41:16 +02:00
tegwick
f2ffbc0d56 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-hosts
 2026-04-21 03:41:05 +02:00
tegwick
e0e0ff5b6e chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-infra
 2026-04-21 03:26:37 +02:00
tegwick
b294518069 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-hosts
 2026-04-21 03:26:28 +02:00
tegwick
3f1234a286 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-infra
 2026-04-21 03:11:58 +02:00
tegwick
57a41f9885 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-hosts
 2026-04-21 03:11:50 +02:00
tegwick
02af1d85c7 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-infra
 2026-04-21 02:57:20 +02:00
tegwick
7e49eb2746 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-hosts
 2026-04-21 02:57:09 +02:00
tegwick
185bed088d chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-infra
 2026-04-21 02:42:42 +02:00
tegwick
25a7f34030 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-hosts
 2026-04-21 02:42:31 +02:00
tegwick
270e11c84e chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-infra
 2026-04-21 02:29:00 +02:00
tegwick
6d9900eb6c chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-hosts
 2026-04-21 02:28:46 +02:00
tegwick
677cdb79df chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-04-21:
  - update .custodian-brief.md for railiance-infra
 2026-04-21 02:15:44 +02:00
tegwick
3f4f03e838 feat(ansible): inject ops-bridge key in base role at bootstrap 
Add ops_bridge_pubkey to group_vars/all.yaml (public key only, safe to
commit) and inject it via ansible.posix.authorized_key in the base role,
immediately after SSH hardening. This ensures ops-bridge tunnel
connectivity is available as soon as SSH infrastructure is up on any
managed host — no manual key provisioning required for new nodes.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-27 23:52:54 +01:00
tegwick
ab92c58bda chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-03-27:
  - update .custodian-brief.md for railiance-hosts
 2026-03-27 13:42:11 +01:00
tegwick
127231bf62 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-03-27:
  - update .custodian-brief.md for railiance-infra
 2026-03-27 13:41:52 +01:00
tegwick
72da7bd151 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-03-27:
  - update .custodian-brief.md for railiance-hosts
 2026-03-27 13:41:46 +01:00
tegwick
93080128fd chore(workplan): mark T06 done (Gitea values → railiance-apps) 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-27 13:41:21 +01:00
tegwick
d722cac4a5 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-03-27:
  - update .custodian-brief.md for railiance-hosts
 2026-03-27 10:03:40 +01:00
tegwick
afd664b248 chore(workplan): mark T05 done — Valkey standalone S3 asset deployed 
bitnami/valkey 5.4.9 in platform namespace; gitea-valkey-cluster
subchart decommissioned; Gitea cache/session/queue verified working.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-27 10:03:14 +01:00
tegwick
28f08b17f3 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-03-27:
  - update .custodian-brief.md for railiance-hosts
 2026-03-27 09:12:50 +01:00
tegwick
26849bd4d6 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-03-27:
  - update .custodian-brief.md for railiance-hosts
 2026-03-27 09:12:40 +01:00
tegwick
dfed454353 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-03-27:
  - update .custodian-brief.md for railiance-infra
 2026-03-27 09:12:39 +01:00
tegwick
bbde20d78d chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-03-27:
  - update .custodian-brief.md for railiance-hosts
 2026-03-27 09:12:31 +01:00
tegwick
7bff1f211d chore(workplan): mark T04 done — Gitea migrated to cnpg gitea-db 
postgresql-ha subchart decommissioned; 4 users, 26 repos verified intact;
NetworkPolicy for default→databases ingress applied.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-27 09:12:22 +01:00
tegwick
2d7e0101bc feat(infra): UFW k3s routing + full deploy runbook 
- base role: allow UFW routing direction (required for k3s flannel
  pod networking to function across nodes)
- docs/deploy-stack.md: full S1→S5 ordered deploy runbook with
  pre-conditions checklist and layer-by-layer steps

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-27 02:28:51 +01:00
tegwick
aa822164b5 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-03-27:
  - update .custodian-brief.md for railiance-hosts
 2026-03-27 02:24:47 +01:00
tegwick
74f7c72dbb chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-03-27:
  - update .custodian-brief.md for railiance-infra
 2026-03-27 02:24:32 +01:00
tegwick
13443ee2d5 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-03-27:
  - update .custodian-brief.md for railiance-hosts
 2026-03-27 02:24:27 +01:00
tegwick
11a2c37bde chore(workplan): mark T03 and T08 done in WP-0004 
T03 (gitea-db cnpg cluster): cluster healthy after adding missing
NetworkPolicies for databases namespace default-deny-all policy.
T08 (deploy-stack docs): docs/deploy-stack.md written last session.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-27 02:24:07 +01:00
tegwick
a787a8acb0 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-03-27:
  - update .custodian-brief.md for railiance-hosts
 2026-03-27 02:20:53 +01:00
tegwick
8c08b4b806 fix(custodian-agent): dedicated playbook, correct working dir 
- ansible/playbooks/custodian-agent.yaml: minimal playbook with only
  the custodian_agent role — avoids loading base/sops_agent/etc when
  all we need is key injection
- Makefile: use custodian-agent.yaml in provision targets; remove
  --tags workaround (was fragile; standalone playbook is correct)

Manual invocation (from CoulombCore):
  cd ~/railiance-infra/ansible
  ansible-playbook playbooks/custodian-agent.yaml -u tegwick --limit Railiance01

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-27 02:20:33 +01:00
tegwick
087f5da57b chore: add .venv to .gitignore 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-27 01:53:58 +01:00
tegwick
ff59d4e0f8 feat(ansible): add swapfile + resource_limits roles; add CoulombCore to inventory 
T01: roles/swapfile — idempotent 4GB swapfile, vm.swappiness=10, fstab entry
T02: roles/resource_limits — PAM nproc caps (512/1024), systemd user-1000.slice
     memory limits (1500M/512M); templated per-host via host_vars
- inventory/host_vars/CoulombCore.yml — host-specific vars for both roles
- inventory/servers.yaml — add CoulombCore with id_ops SSH key
- inventory_from_yaml.py — load host_vars files into Ansible hostvars
- playbooks/bootstrap.yaml — include swapfile + resource_limits roles
- workplans/WP-0004 — flag T04/T09/T10 needs_human, add CoulombCore-local convergence note

Codifies manual INC-002 hardening. See RAIL-HO-WP-0004-T01/T02.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-27 01:49:35 +01:00
tegwick
e10789bdd2 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-03-27:
  - update .custodian-brief.md for railiance-hosts
 2026-03-27 01:26:01 +01:00