Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 0f951281d5 self-heal standalone cert renewal configs on provision main timothykim 2026-06-08 11:35:37 -04:00
• f093a66580 fix e2e tests for garage v2 and uptimerobot v3 api changes timothykim 2026-04-10 16:25:54 -04:00
• f48ad0e21e remove kgfamily.com timothykim 2026-04-10 16:21:58 -04:00
• 1f41f51430 add kgfamily.com timothykim 2026-04-10 16:20:28 -04:00
• 50ee47917c remove kgfamily.com timothykim 2026-04-10 16:17:42 -04:00
• a303e55de6 add kgfamily.com timothykim 2026-04-10 16:14:29 -04:00
• bc41880155 remove kgfamily.com timothykim 2026-04-10 16:08:19 -04:00
• 59f0a367ef add kgfamily.com timothykim 2026-04-10 16:04:54 -04:00
• 7366f11323 remove kgfamily.com timothykim 2026-04-10 15:53:08 -04:00
• 3678b37133 add kgfamily.com timothykim 2026-04-10 15:49:54 -04:00
• 37ad2405b3 remove kgfamily.com timothykim 2026-04-10 15:43:07 -04:00
• 6a0792e1fd add kgfamily.com timothykim 2026-04-10 15:40:02 -04:00
• 1f3ddc8024 suppress expected TLS 1.1 deprecation warning in test timothykim 2026-04-10 15:11:18 -04:00
• 514061936b strip upstream X-Frame-Options from service proxies timothykim 2026-04-10 15:08:59 -04:00
• 5e85de9130 fix deploy race condition and harden security timothykim 2026-04-10 15:00:10 -04:00
• 900900a95b remove duplicate sub_filter_types text/html timothykim 2026-04-09 17:48:16 -04:00
• 0869be8814 gitignore beszel_agent_data timothykim 2026-04-09 17:46:28 -04:00
• ba04116fb2 add carolpreschool.com timothykim 2026-04-09 17:40:51 -04:00
• ff828ecc44 add domain prefix to goatcounter paths timothykim 2026-04-09 17:35:00 -04:00
• 449b763621 add goatcounter tracking to all sites via nginx sub_filter timothykim 2026-04-09 16:54:35 -04:00
• 553b77788d Merge branch 'goatcounter' timothykim 2026-04-09 16:40:16 -04:00
• f5f08c48ac adds secret timothykim 2026-04-09 16:40:11 -04:00
• cf92394e3f update to garage sync timothykim 2026-04-09 16:04:35 -04:00
• a8a3acff84 goat counter timothykim 2026-04-09 14:26:17 -04:00
• ee0c58ad28 adds goatcounter timothykim 2026-04-08 20:23:22 -04:00
• 4b32e358a1 add beszel agent with socket connection and env.keys timothykim 2026-04-08 18:43:50 -04:00
• 79996d02a4 update beszel configuration timothykim 2026-04-07 21:07:56 -04:00
• 54d6c03bd1 add nginx and cert subcommands to service.sh timothykim 2026-04-07 20:59:58 -04:00
• 0656d245d5 remove test workflow timothykim 2026-04-07 20:33:12 -04:00
• d2b9d0bce9 fix idempotency in app.sh, service.sh and nginx reload in cert handler timothykim 2026-04-07 15:56:59 -04:00
• fcc720ee7b fix cert handler deleting nginx conf file timothykim 2026-03-28 17:48:09 -04:00
• 123af3a269 remove ssl stapling timothykim 2026-03-28 17:15:12 -04:00
• cf26235d70 add hcsuzuki.music timothykim 2026-03-28 13:37:49 -04:00
• 111969fa9c e2e test timothykim 2026-03-27 16:19:21 -04:00
• c87f76a78a rename new-service.sh to service.sh with subcommands timothykim 2026-03-27 12:28:32 -04:00
• 313fb4655f updated workflow timothykim 2026-03-26 20:02:09 -04:00
• 81151f90aa update the deploy and new service timothykim 2026-03-26 20:01:06 -04:00
• 78773110fc update beszel compose timothykim 2026-03-26 23:49:41 +00:00
• 8762339713 add beszel timothykim 2026-03-26 19:45:19 -04:00
• 697de3e199 add uptimerobot monitor subcommand to app.sh timothykim 2026-03-26 13:13:41 -04:00
• 43fc8c2e7b remove new-app.sh, update docs to reference app.sh directly timothykim 2026-03-20 20:14:16 -04:00
• 787e747fa4 fix deploy re-exec not forwarding command argument timothykim 2026-03-20 20:10:32 -04:00
• 7b1a888db0 add workflow_dispatch and self-trigger paths to all workflows timothykim 2026-03-20 20:03:11 -04:00
• a37872489c add certbot email, pin git pull to origin main timothykim 2026-03-20 19:57:45 -04:00
• de1d60b1db remove standalone certbot fallback, fail on missing certs timothykim 2026-03-20 19:50:44 -04:00
• c8c79a542a re-exec deploy.sh after git pull to pick up changes timothykim 2026-03-20 17:01:36 -04:00
• b2bb8fa5eb clarify default server block comment timothykim 2026-03-20 16:57:08 -04:00
• 729eadee33 use *.*.conf glob to match only domain conf files for cert issuance timothykim 2026-03-20 16:55:52 -04:00
• 4b39eaaf06 skip default server block in cert issuance, remove ssh debug lines timothykim 2026-03-20 16:53:47 -04:00
• 085b0bdd1b clean up trailing newline in nginx.conf timothykim 2026-03-20 16:51:09 -04:00
• 020e7b2950 retrigger nginx deploy for host key test timothykim 2026-03-20 16:43:54 -04:00
• 9a9df25742 retrigger nginx deploy for host key debug timothykim 2026-03-20 16:41:27 -04:00
• 6e2ec87ccf debug host key pinning in nginx workflow timothykim 2026-03-20 16:40:37 -04:00
• 77e08f34cf retrigger nginx deploy for host key test timothykim 2026-03-20 16:38:40 -04:00
• 061213bf7e retrigger nginx deploy for host key test timothykim 2026-03-20 16:35:34 -04:00
• 03e45dc6f2 trigger nginx deploy to test host key pinning timothykim 2026-03-20 16:33:15 -04:00
• 16ea39811d document deploy host key variable in readme timothykim 2026-03-20 16:31:54 -04:00
• 7daf7a267b pin ssh host key in all workflows timothykim 2026-03-20 16:31:03 -04:00
• 5abfca19b3 restrict envsubst to expected variables only timothykim 2026-03-20 16:25:23 -04:00
• 9e3996a72b remove security.md from repo, add to gitignore timothykim 2026-03-20 16:17:23 -04:00
• 163aefddee add default server block to drop unknown host headers timothykim 2026-03-20 16:12:06 -04:00
• 3a1ef3a167 fix tls tests to load system ca certificates timothykim 2026-03-20 16:07:32 -04:00
• cce9b5c4c4 add ssl/tls hardening to nginx timothykim 2026-03-20 16:05:41 -04:00
• 2bcf67dcc4 fetch secrets by uuid instead of listing all timothykim 2026-03-20 15:51:43 -04:00
• b19e194c0b remove deploy user from docker group timothykim 2026-03-20 15:38:11 -04:00
• 1a7f823a87 restrict garage admin api to home ip timothykim 2026-03-20 15:33:36 -04:00
• 0ca8394f8a add testing section to readme timothykim 2026-03-20 15:22:58 -04:00
• e767ab3235 test -> tests timothykim 2026-03-20 15:20:29 -04:00
• 50ab425e8f fix test directory path in deploy-nginx workflow timothykim 2026-03-20 15:19:41 -04:00
• b7439b23e3 fix nginx security headers not being applied to https responses timothykim 2026-03-20 15:11:56 -04:00
• 3b41653c04 refactor new-app into app.sh with subcommands timothykim 2026-03-20 14:43:47 -04:00
• eecdf7b002 restructure docs: eliminate duplication across md files timothykim 2026-03-20 11:42:06 -04:00
• be1ad6b456 audit fixes: error handling, docs consistency, bucket idempotency timothykim 2026-03-20 11:28:36 -04:00
• 6b1e78350f document media hosting in readme and usecases timothykim 2026-03-19 22:34:47 -04:00
• 4516ed7bab add media setup instructions to new-app.sh output timothykim 2026-03-19 22:31:02 -04:00
• f9788ff178 fix s3 proxy: forward host header for signature validation timothykim 2026-03-19 21:55:37 -04:00
• da99d102e9 add s3.hantim.net proxy, fix dns ttl to 3600 timothykim 2026-03-19 18:23:39 -04:00
• a421ecc837 add garage admin api with token, expose via garage.hantim.net timothykim 2026-03-19 17:19:03 -04:00
• a64f81f503 upgrade garage to v2.2.0, add /media/ proxy to nginx timothykim 2026-03-19 16:45:22 -04:00
• df179546ae update docs, fix deploy to not restart unchanged services timothykim 2026-03-19 12:39:55 -04:00
• 76d01c66d6 fix deploy: use compose up instead of down+up, fetch secrets individually timothykim 2026-03-19 12:28:49 -04:00
• 82582028a2 fix garage dockerfile: use alpine base with envsubst timothykim 2026-03-19 12:14:38 -04:00
• 3478e05c49 add garage service with env-based secret injection timothykim 2026-03-19 12:13:07 -04:00
• 3a8fb09bcf add .env generation from bws, handle build services in deploy timothykim 2026-03-19 12:11:46 -04:00
• 7e35042b71 add haanmind.net timothykim 2026-03-19 11:23:53 -04:00
• 037b78734f move dev scripts to tools/, migrate to bws, use example.com in docs timothykim 2026-03-19 11:10:14 -04:00
• 5a8d9a8aa0 install bws to /usr/bin instead of /usr/local/bin timothykim 2026-03-18 19:15:44 -04:00
• ef7fe7677c migrate bootstrap.sh from bw to bws, update docs timothykim 2026-03-18 19:04:22 -04:00
• 00ab7d1b8d auto-issue certs on nginx deploy, document one-domain-per-conf convention timothykim 2026-03-18 15:18:11 -04:00
• 46b27e0780 reverse thekims.family redirect: www -> bare domain timothykim 2026-03-18 15:08:51 -04:00
• 63d1d92333 add hcsuzukiviolin.com redirect to hcsuzuki.net timothykim 2026-03-18 15:01:41 -04:00
• 199ed98e7d make new scripts executable timothykim 2026-03-18 14:53:46 -04:00
• 919c5353bc split setup.sh into bootstrap.sh and configure.sh timothykim 2026-03-18 14:51:19 -04:00
• 3b4ff1f291 fix dns record creation in new-app.sh timothykim 2026-03-16 22:38:57 -04:00
• 0ffca0335f add hcsuzuki.net timothykim 2026-03-16 22:26:45 -04:00
• 1a31381bfb update gitignore timothykim 2026-03-16 22:08:51 -04:00
• a45813db35 cache secrets to file, fix spinner animation timothykim 2026-03-16 22:06:47 -04:00
• 423de9c9e8 add thekims.family timothykim 2026-03-16 22:05:46 -04:00
• 164087f82a remove thekims.family timothykim 2026-03-16 22:04:48 -04:00
• 0702059044 add thekims.family timothykim 2026-03-16 22:00:16 -04:00