13dd92c95b
docs(provisioning): automated dry-run converge model
...
Update the provisioning design/tracking doc for the Phase 1 converge
automation: push-to-main fanout serialized via `needs:` (mirrors
otelcollector), currently dry-run-only with the apply gated/disabled
until the dry runs are proven green. Resolve the "Existing hosts"
open question.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-06-24 17:08:21 +02:00
a00711d460
Setup provisioning docs and plans
2026-06-22 15:43:38 +02:00
0d704fb3e3
Shared homes documentation
2026-06-22 15:31:50 +02:00
28eca1e6a1
Update vulnerability scanning docs
2026-06-22 15:12:21 +02:00
amacocian
61f94d072e
TSG setup
2026-06-13 18:24:59 +02:00
amacocian
3b0d9a681a
Setup docs index
2026-06-13 17:44:41 +02:00
amacocian
06aaa15f2a
copilot-instructions and move directives out of public docs
2026-06-13 17:35:38 +02:00
amacocian
17b42e0f73
Rework documentation
2026-06-13 17:26:49 +02:00
amacocian
71913c5bc9
Update sherlock
2026-05-24 21:45:12 +02:00
amacocian
8c9a15b175
Setup automatic login for deploy
2026-05-24 12:01:30 +02:00
9042cb143b
docs(automation): note docker-buildx-plugin as build-host prerequisite
...
DOCKER_BUILDKIT=1 in the build workflow only works if the host has
the buildx CLI plugin installed. Bare docker-ce sometimes ships
without it (Debian/Ubuntu separate packaging). Document the install
so future hosts onboarding to be build targets don't hit the same
'BuildKit is enabled but the buildx component is missing' error.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-05-22 14:42:18 +02:00
27e13d92a3
Adjust build pipeline
2026-05-22 13:34:17 +02:00
eda07b9c30
Image building steps
2026-05-22 12:54:43 +02:00
amacocian
549daae675
Setup nitter instance
2026-05-18 11:15:29 +02:00
amacocian
31117ed229
Docs on vulnerability scanning
2026-05-13 18:46:18 +02:00
amacocian
54886ff237
Auto-provision stacks
2026-05-13 15:14:13 +02:00
amacocian
e70cbd3473
Remove sssd blocker for docker and shadow charlie group
2026-05-13 01:19:45 +02:00
amacocian
e1d4f17b70
Update roadmap
2026-05-13 00:13:43 +02:00
d615872325
Cleanup docs after migration has finished
2026-05-06 18:10:33 +02:00
amacocian
d91e18ddfb
onboarding: add sys-gitea-runner docker login step + 4th PAT
2026-05-05 17:40:04 +02:00
amacocian
b6e6570697
SSH-into-host docs sweep (runners, automation, strategy, conventions, secrets, cert-issuer)
2026-05-05 16:37:53 +02:00
amacocian
47af17df37
Switch deploy-stack to SSH-into-host model; add charlie-ssh composite actions
2026-05-05 16:18:41 +02:00
amacocian
a1b7b7dd28
Single-label runs-on; document Gitea quirks
2026-05-05 14:12:45 +02:00
amacocian
20edbaef0b
Shareable actions setup and docs
...
Co-authored-by: Copilot <copilot@github.com >
2026-05-05 12:40:42 +02:00
d9408e96ec
Setup base for SOPS
...
Co-authored-by: Copilot <copilot@github.com >
2026-05-04 19:02:54 +02:00
3d742a5024
Update docs with certificate issuance and One trust
2026-05-04 18:14:42 +02:00
amacocian
9a8c3c79a5
Roadmap adjusted to reflect the current state of the project and future plans.
2026-05-03 21:34:49 +02:00
amacocian
fb617cc48a
Tier 5 mid: portainer/portainer-agent/otelcollector done; watchtower retired
2026-05-03 20:56:08 +02:00
amacocian
edcc934177
Roadmap: onboard miquella to LDAP + ssh CA for gssh access
2026-05-03 20:47:57 +02:00
amacocian
bd16db7e1d
Roadmap: per-host git identity, per-repo perms via LDAP service accounts
2026-05-03 20:45:18 +02:00
amacocian
0e33c66fe7
Document docker-compose.<host>.yml fallback for list-replacement deltas
2026-05-03 20:22:41 +02:00
amacocian
e3325d5332
Add shared-stack pattern (envs/+overrides/) to strategy
2026-05-03 20:01:59 +02:00
amacocian
7d4dc6a637
End of Tier 4: 19 stacks migrated; refresh inventory/repos/roadmap
2026-05-03 19:46:31 +02:00
amacocian
88ba6f853a
Reorg plan: stacks/+data/ layout, drop upstream+overrides, add layout/reorg docs
2026-05-03 13:50:13 +02:00
amacocian
615575b087
Initial scaffold: docs, inventory, strategy, migration recipes
2026-05-03 13:31:05 +02:00
Alexandru Macocian
amacocian