4.5 KiB
Repo plan — Charlie/*
See inventory.md for the canonical state. Migration recipe: migration.md. Reusable workflows + actions consumed by every stack repo live in this repo's .gitea/ — see automation.md.
Done
Tier 1 — pilot (Day 1)
Tier 2 — our code (Day 1)
caddy, gssh, directoryadmin, mediacompose
Tier 3 — pinned upstream + stateful (Day 1)
ldap, authentik, bookstack, monica, miniflux, planka, audiobookshelf, gitea
Tier 4 — was upstream-cloned, collapsed to canonical (Day 1)
mealie, paperless-ngx, victoriametrics, searxng, invidious
Tier 5 — long tail (Day 1–2)
portainer, portainer-agent (shared, 4 hosts), otelcollector (shared, 3 hosts — malenia deferred)
Post-migration infra (May 4, 2026)
cert-issuer — step-ca on morgott, replaces the per-host SSH CA mount that gssh used to need. cert-syncer — active bridge from step-ca to /mnt/nas/ca/; renews managed server certs (today: ldap.lan) and keeps trust artefacts fresh. cert-watch — sidecar image that lives next to a consumer of a cert-syncer-managed cert and restarts it on change. Design: cert-issuer.md.
Decommissioned
watchtower — retired without replacement (May 3, 2026). Diun-based image-update flow planned (see roadmap Phase 3).
Planned (new infra)
| # | Repo | Owner | Notes |
|---|---|---|---|
| 1 | runners |
morgott + melina | Gitea Actions runners. Design: runners.md. Prereq for the SOPS rollout. |
Pending — Tier 5 long tail
| # | Repo | Owner | Notes |
|---|---|---|---|
| 1 | shell |
— (no docker) | clone target: /usr/local/share/charlie-shell/ |
| 2 | first-time-setup |
— (docs) | bootstrap docs / scripts. Live recipe (preserved from wiki): onboarding.md. Will become a standalone repo once the step-ca migration settles. |
| 3 | server-mgmt-utils |
morgott | mostly dead. Extract temp/storage scripts to otelcollector/scripts/ or new host-scripts repo, then archive the original. |
| ? | plist |
TBD | classify before deciding |
Build pipelines (deferred)
Once runners are up, replace "build on laptop" with workflows on:
amacocian/Gssh→ pushgssh:latestamacocian/DirectoryAdmin→ pushdirectoryadmin:latestamacocian/monica(4.x) → pushmonica:4.xamacocian/invidious(oidc-support) → pushinvidious:oidc-supportamacocian/gitea-runner→ pushgitea-runner:<act_runner-version>(chicken-and-egg — runners build their own image once they exist; until then, manualdocker build && pushon the laptop)