31 Commits

Author	SHA1	Message	Date
timothykim	f093a66580	fix e2e tests for garage v2 and uptimerobot v3 api changes	2026-04-10 16:25:54 -04:00
timothykim	514061936b	strip upstream X-Frame-Options from service proxies	2026-04-10 15:08:59 -04:00
timothykim	449b763621	add goatcounter tracking to all sites via nginx sub_filter	2026-04-09 16:54:35 -04:00
timothykim	54d6c03bd1	add nginx and cert subcommands to service.sh	2026-04-07 20:59:58 -04:00
timothykim	c87f76a78a	rename new-service.sh to service.sh with subcommands	2026-03-27 12:28:32 -04:00
timothykim	697de3e199	add uptimerobot monitor subcommand to app.sh	2026-03-26 13:13:41 -04:00
timothykim	43fc8c2e7b	remove new-app.sh, update docs to reference app.sh directly	2026-03-20 20:14:16 -04:00
timothykim	de1d60b1db	remove standalone certbot fallback, fail on missing certs	2026-03-20 19:50:44 -04:00
timothykim	16ea39811d	document deploy host key variable in readme	2026-03-20 16:31:54 -04:00
timothykim	2bcf67dcc4	fetch secrets by uuid instead of listing all	2026-03-20 15:51:43 -04:00
timothykim	0ca8394f8a	add testing section to readme	2026-03-20 15:22:58 -04:00
timothykim	eecdf7b002	restructure docs: eliminate duplication across md files	2026-03-20 11:42:06 -04:00
timothykim	be1ad6b456	audit fixes: error handling, docs consistency, bucket idempotency	2026-03-20 11:28:36 -04:00
timothykim	6b1e78350f	document media hosting in readme and usecases	2026-03-19 22:34:47 -04:00
timothykim	df179546ae	update docs, fix deploy to not restart unchanged services ... - deploy.sh: use compose up instead of down+up, fetch secrets individually - configure.sh: delegate all service deployment to deploy.sh - docs: add garage cluster init, .env.keys mechanism, update configure.sh description - remove 2>/dev/null from bws calls	2026-03-19 12:39:55 -04:00
timothykim	037b78734f	move dev scripts to tools/, migrate to bws, use example.com in docs ... - Move new-app.sh, new-service.sh, remove-app.sh from scripts/ to tools/ - Migrate new-app.sh and remove-app.sh from bw to bws - Replace real domains with example.com in documentation and help text	2026-03-19 11:10:14 -04:00
timothykim	ef7fe7677c	migrate bootstrap.sh from bw to bws, update docs	2026-03-18 19:04:22 -04:00
timothykim	919c5353bc	split setup.sh into bootstrap.sh and configure.sh ... bootstrap.sh handles first-time setup (manual, Bitwarden). configure.sh handles idempotent config (CI-safe). Add provision workflow, deploy-garage workflow, new-service.sh. Remove git-crypt references and empty .gitattributes.	2026-03-18 14:51:19 -04:00
timothykim	9a950524eb	add cert command to deploy.sh, use deploy user for cert issuance ... - deploy.sh: add cert-<domain> command for zero-downtime SSL issuance - new-app.sh: SSH as deploy user with key from Bitwarden instead of personal user - remove DEPLOY_USER/DEPLOY_HOST env var requirements - update all docs to reflect new flow	2026-03-16 02:05:18 -04:00
timothykim	b51fe596c6	automate new-app.sh: DNS, cert, commit, build, verify ... - resolve server IP from hantim.net instead of env var - create Vultr DNS zone and A records via API - wait for DNS propagation before cert issuance - issue SSL cert via webroot (zero downtime) - auto commit and push hantim-server - trigger initial app build via Gitea API - verify site is live with curl check - update all docs to reflect single-command flow	2026-03-16 01:57:10 -04:00
timothykim	5c38b0631a	replace NPM with vanilla nginx + certbot ... - nginx:alpine replaces nginx-proxy-manager - certbot on host with standalone issuance and auto-renewal - per-site nginx configs in conf.d/ (HTTP->HTTPS, bare->www) - container names use underscores (timothykim_net) - setup.sh: automated cert issuance, dynamic app startup - deploy.sh: nginx -t guard, graceful image-not-found - new-app.sh: Gitea API repo creation, nginx conf generation - add ARCHITECTURE.md, USECASES.md, CLAUDE.md - remove old NPM data/certs from tracking	2026-03-16 00:55:13 -04:00
timothykim	91d549c9ba	rename REGISTRY_TOKEN to CI_REGISTRY_TOKEN	2026-03-15 22:00:37 -04:00
timothykim	b96e94afa6	use vars.DEPLOY_HOST instead of secrets since hostname is not sensitive	2026-03-15 21:49:29 -04:00
timothykim	5dd2343d4a	migrate to hantim org and consolidate deploy secret name ... - Update all references from timothykim/ to hantim/ org - Rename DEPLOY_KEY to DEPLOY_SSH_KEY everywhere - Update README to reference org-level secrets	2026-03-15 21:46:31 -04:00
timothykim	c484109f1c	merge dispatch and deploy into a single deploy.sh ... deploy.sh reads SSH_ORIGINAL_COMMAND directly, validates it, and runs the deploy. No more dispatch indirection.	2026-03-13 17:08:19 -04:00
timothykim	7d5f0920b7	replace per-app deploy scripts with generic deploy.sh ... Dispatch now validates the command format and routes to a single deploy.sh that handles any app. This fixes first-deploy failures for new apps (dispatch no longer needs a static case list) and simplifies new-app.sh (no deploy script or dispatch update needed). Also adds input validation to new-app.sh, set -euo pipefail to deploy scripts, and dnf module reset before nodejs install.	2026-03-13 17:00:59 -04:00
timothykim	e87473e303	use bash to invoke setup.sh since it's not executable after clone	2026-03-13 12:14:00 -04:00
timothykim	34d6ad3e9d	simplify provisioning: setup.sh handles deps and git-crypt unlock ... setup.sh now installs git-crypt, Bitwarden CLI, and fetches the git-crypt key from a Bitwarden secure note. Initial setup is reduced to just installing git, cloning, and running setup.sh.	2026-03-13 12:12:13 -04:00
timothykim	7a5de9be6d	change repo path from /opt to /opt/hantim ... /opt already exists on Linux systems and git clone refuses to clone into a non-empty directory.	2026-03-13 11:52:51 -04:00
timothykim	1220698292	test	2026-03-13 11:41:00 -04:00
timothykim	a3fb085fdb	initial commit	2026-03-12 21:16:59 -04:00