timothykim
7366f11323
remove kgfamily.com
Deploy nginx / deploy (push) Successful in 4s
2026-04-10 15:53:08 -04:00
timothykim
3678b37133
add kgfamily.com
Deploy kgfamily.com / deploy (push) Successful in 3s
Deploy nginx / deploy (push) Successful in 3s
2026-04-10 15:49:54 -04:00
timothykim
37ad2405b3
remove kgfamily.com
Deploy nginx / deploy (push) Successful in 2s
2026-04-10 15:43:07 -04:00
timothykim
6a0792e1fd
add kgfamily.com
Deploy kgfamily.com / deploy (push) Successful in 3s
Deploy nginx / deploy (push) Successful in 3s
2026-04-10 15:40:02 -04:00
timothykim
1f3ddc8024
suppress expected TLS 1.1 deprecation warning in test
2026-04-10 15:11:18 -04:00
timothykim
514061936b
strip upstream X-Frame-Options from service proxies
Deploy nginx / deploy (push) Successful in 3s
2026-04-10 15:08:59 -04:00
timothykim
5e85de9130
fix deploy race condition and harden security
...
Deploy nginx / deploy (push) Successful in 5s
- reorder app.sh to run cert before commit/push (fixes workflow failure on first run)
- quote $SSH_ORIGINAL_COMMAND in authorized_keys to prevent command injection
- add port validation in service.sh nginx command
- pin host key in deploy-beszel.yml workflow
- fix append vs overwrite for known_hosts in deploy-nginx.yml
2026-04-10 15:00:10 -04:00
timothykim
900900a95b
remove duplicate sub_filter_types text/html
Deploy nginx / deploy (push) Successful in 3s
2026-04-09 17:48:16 -04:00
timothykim
0869be8814
gitignore beszel_agent_data
Deploy beszel / deploy (push) Successful in 3s
2026-04-09 17:46:28 -04:00
timothykim
ba04116fb2
add carolpreschool.com
Deploy nginx / deploy (push) Failing after 2s
Deploy carolpreschool.com / deploy (push) Successful in 3s
2026-04-09 17:40:51 -04:00
timothykim
ff828ecc44
add domain prefix to goatcounter paths
Deploy nginx / deploy (push) Successful in 3s
2026-04-09 17:35:00 -04:00
timothykim
449b763621
add goatcounter tracking to all sites via nginx sub_filter
Deploy nginx / deploy (push) Successful in 4s
2026-04-09 16:54:35 -04:00
timothykim
553b77788d
Merge branch 'goatcounter'
Deploy goatcounter / deploy (push) Successful in 3s
2026-04-09 16:40:16 -04:00
timothykim
f5f08c48ac
adds secret
2026-04-09 16:40:11 -04:00
timothykim
cf92394e3f
update to garage sync
2026-04-09 16:04:35 -04:00
timothykim
a8a3acff84
goat counter
2026-04-09 14:26:17 -04:00
timothykim
ee0c58ad28
adds goatcounter
Deploy goatcounter / deploy (push) Successful in 8s
Deploy nginx / deploy (push) Failing after 1s
2026-04-08 20:23:22 -04:00
timothykim
4b32e358a1
add beszel agent with socket connection and env.keys
Deploy beszel / deploy (push) Successful in 3s
2026-04-08 18:43:50 -04:00
timothykim
79996d02a4
update beszel configuration
Deploy beszel / deploy (push) Successful in 5s
Deploy nginx / deploy (push) Successful in 3s
2026-04-07 21:07:56 -04:00
timothykim
54d6c03bd1
add nginx and cert subcommands to service.sh
2026-04-07 20:59:58 -04:00
timothykim
0656d245d5
remove test workflow
Deploy nginx / deploy (push) Successful in 6s
2026-04-07 20:33:12 -04:00
timothykim
d2b9d0bce9
fix idempotency in app.sh, service.sh and nginx reload in cert handler
2026-04-07 15:56:59 -04:00
timothykim
fcc720ee7b
fix cert handler deleting nginx conf file
2026-03-28 17:48:09 -04:00
timothykim
123af3a269
remove ssl stapling
Deploy nginx / deploy (push) Successful in 4s
Deploy nginx / test (push) Failing after 7s
2026-03-28 17:15:12 -04:00
timothykim
cf26235d70
add hcsuzuki.music
Deploy hcsuzuki.music / deploy (push) Successful in 28s
Deploy nginx / deploy (push) Failing after 4s
Deploy nginx / test (push) Has been skipped
2026-03-28 13:37:49 -04:00
timothykim
111969fa9c
e2e test
2026-03-27 16:19:21 -04:00
timothykim
c87f76a78a
rename new-service.sh to service.sh with subcommands
2026-03-27 12:28:32 -04:00
timothykim
313fb4655f
updated workflow
Deploy beszel / deploy (push) Successful in 4s
2026-03-26 20:02:09 -04:00
timothykim
81151f90aa
update the deploy and new service
2026-03-26 20:01:06 -04:00
timothykim
78773110fc
update beszel compose
2026-03-26 23:49:41 +00:00
timothykim
8762339713
add beszel
2026-03-26 19:45:19 -04:00
timothykim
697de3e199
add uptimerobot monitor subcommand to app.sh
2026-03-26 13:13:41 -04:00
timothykim
43fc8c2e7b
remove new-app.sh, update docs to reference app.sh directly
2026-03-20 20:14:16 -04:00
timothykim
787e747fa4
fix deploy re-exec not forwarding command argument
2026-03-20 20:10:32 -04:00
timothykim
7b1a888db0
add workflow_dispatch and self-trigger paths to all workflows
Deploy haanmind.net / deploy (push) Failing after 1s
Deploy hantim.net / deploy (push) Failing after 1s
Deploy hcsuzuki.net / deploy (push) Failing after 1s
Deploy nginx / deploy (push) Failing after 1s
Deploy nginx / test (push) Has been skipped
Deploy thekims.family / deploy (push) Failing after 1s
Deploy timothykim.net / deploy (push) Failing after 1s
Provision server / provision (push) Successful in 11s
Deploy garage / deploy (push) Successful in 5s
2026-03-20 20:03:11 -04:00
timothykim
a37872489c
add certbot email, pin git pull to origin main
2026-03-20 19:57:45 -04:00
timothykim
de1d60b1db
remove standalone certbot fallback, fail on missing certs
2026-03-20 19:50:44 -04:00
timothykim
c8c79a542a
re-exec deploy.sh after git pull to pick up changes
Deploy nginx / deploy (push) Successful in 3s
Deploy nginx / test (push) Successful in 7s
2026-03-20 17:01:36 -04:00
timothykim
b2bb8fa5eb
clarify default server block comment
Deploy nginx / deploy (push) Successful in 4s
Deploy nginx / test (push) Successful in 8s
2026-03-20 16:57:08 -04:00
timothykim
729eadee33
use *.*.conf glob to match only domain conf files for cert issuance
2026-03-20 16:55:52 -04:00
timothykim
4b39eaaf06
skip default server block in cert issuance, remove ssh debug lines
2026-03-20 16:53:47 -04:00
timothykim
085b0bdd1b
clean up trailing newline in nginx.conf
Deploy nginx / deploy (push) Failing after 4s
Deploy nginx / test (push) Has been skipped
2026-03-20 16:51:09 -04:00
timothykim
020e7b2950
retrigger nginx deploy for host key test
Deploy nginx / deploy (push) Failing after 5s
Deploy nginx / test (push) Has been skipped
2026-03-20 16:43:54 -04:00
timothykim
9a9df25742
retrigger nginx deploy for host key debug
Deploy nginx / deploy (push) Failing after 0s
Deploy nginx / test (push) Has been skipped
2026-03-20 16:41:27 -04:00
timothykim
6e2ec87ccf
debug host key pinning in nginx workflow
2026-03-20 16:40:37 -04:00
timothykim
77e08f34cf
retrigger nginx deploy for host key test
Deploy nginx / deploy (push) Failing after 0s
Deploy nginx / test (push) Has been skipped
2026-03-20 16:38:40 -04:00
timothykim
061213bf7e
retrigger nginx deploy for host key test
Deploy nginx / deploy (push) Failing after 0s
Deploy nginx / test (push) Has been skipped
2026-03-20 16:35:34 -04:00
timothykim
03e45dc6f2
trigger nginx deploy to test host key pinning
Deploy nginx / deploy (push) Failing after 0s
Deploy nginx / test (push) Has been skipped
2026-03-20 16:33:15 -04:00
timothykim
16ea39811d
document deploy host key variable in readme
2026-03-20 16:31:54 -04:00
timothykim
7daf7a267b
pin ssh host key in all workflows
2026-03-20 16:31:03 -04:00
timothykim