timothykim
4b39eaaf06
skip default server block in cert issuance, remove ssh debug lines
2026-03-20 16:53:47 -04:00
timothykim
2bcf67dcc4
fetch secrets by uuid instead of listing all
2026-03-20 15:51:43 -04:00
timothykim
be1ad6b456
audit fixes: error handling, docs consistency, bucket idempotency
Provision server / provision (push) Successful in 12s
2026-03-20 11:28:36 -04:00
timothykim
76d01c66d6
fix deploy: use compose up instead of down+up, fetch secrets individually
...
Provision server / provision (push) Successful in 11s
- docker compose up -d --remove-orphans instead of down then up
- configure.sh delegates all service deployment to deploy.sh
- deploy.sh generates .env from bws before starting services
- remove 2>/dev/null from bws calls so errors are visible
2026-03-19 12:28:49 -04:00
timothykim
3a8fb09bcf
add .env generation from bws, handle build services in deploy
...
Provision server / provision (push) Successful in 6s
- configure.sh generates .env files from .env.keys + bws
- deploy.sh detects build: services and runs docker compose build
- new-service.sh prints .env.keys instructions
- clean up .gitignore
2026-03-19 12:11:46 -04:00
timothykim
00ab7d1b8d
auto-issue certs on nginx deploy, document one-domain-per-conf convention
2026-03-18 15:18:11 -04:00
timothykim
919c5353bc
split setup.sh into bootstrap.sh and configure.sh
...
Provision server / provision (push) Failing after 2s
bootstrap.sh handles first-time setup (manual, Bitwarden).
configure.sh handles idempotent config (CI-safe).
Add provision workflow, deploy-garage workflow, new-service.sh.
Remove git-crypt references and empty .gitattributes.
2026-03-18 14:51:19 -04:00
timothykim
0493910966
deploy: clean up old containers before starting new ones
2026-03-16 21:43:01 -04:00
timothykim
7df77db7b3
fix new-app: retry build trigger, clean up temp nginx conf, add remove-app script
2026-03-16 21:07:34 -04:00
timothykim
9a950524eb
add cert command to deploy.sh, use deploy user for cert issuance
...
- deploy.sh: add cert-<domain> command for zero-downtime SSL issuance
- new-app.sh: SSH as deploy user with key from Bitwarden instead of personal user
- remove DEPLOY_USER/DEPLOY_HOST env var requirements
- update all docs to reflect new flow
2026-03-16 02:05:18 -04:00
timothykim
5c38b0631a
replace NPM with vanilla nginx + certbot
...
Deploy nginx / deploy (push) Failing after 3s
Deploy timothykim.net / deploy (push) Successful in 3s
- nginx:alpine replaces nginx-proxy-manager
- certbot on host with standalone issuance and auto-renewal
- per-site nginx configs in conf.d/ (HTTP->HTTPS, bare->www)
- container names use underscores (timothykim_net)
- setup.sh: automated cert issuance, dynamic app startup
- deploy.sh: nginx -t guard, graceful image-not-found
- new-app.sh: Gitea API repo creation, nginx conf generation
- add ARCHITECTURE.md, USECASES.md, CLAUDE.md
- remove old NPM data/certs from tracking
2026-03-16 00:55:13 -04:00
timothykim
c484109f1c
merge dispatch and deploy into a single deploy.sh
...
deploy.sh reads SSH_ORIGINAL_COMMAND directly, validates it, and
runs the deploy. No more dispatch indirection.
2026-03-13 17:08:19 -04:00
timothykim
7d5f0920b7
replace per-app deploy scripts with generic deploy.sh
...
Dispatch now validates the command format and routes to a single
deploy.sh that handles any app. This fixes first-deploy failures
for new apps (dispatch no longer needs a static case list) and
simplifies new-app.sh (no deploy script or dispatch update needed).
Also adds input validation to new-app.sh, set -euo pipefail to
deploy scripts, and dnf module reset before nodejs install.
2026-03-13 17:00:59 -04:00
timothykim