6 Commits

Include renames

Author	SHA1	Message	Date
Lucas WintherandClaude Opus 5.5	35b1378080	Add stackctl for running stacks by hand on a host ... One shared script installed into /srv/stacks on every host, with per-host groups in server/<host>/stack-groups. Tested in check.sh. Also two new common mistakes in the adding-a-stack skill. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-03 17:49:12 +02:00
Lucas WintherandClaude Opus 5.5	be0b90b879	Cache the CI toolchain in a shared action ... ci/toolchain installs the pinned tools, collections and rsync from cache for both GitHub and Gitea; GitLab caches pip downloads. shellcheck now finds scripts rather than globbing, which broke when a glob matched nothing. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-09-30 15:16:58 +02:00
Lucas WintherandClaude Opus 5.5	665ac7d52f	Render stack secrets from OpenBao in compose_stack ... stack_secrets reads KV v2 on the target host and writes the stack's .env at 0600, failing loudly on a sealed vault, a bad token, a missing field or an unsafe value. Adds an example OpenBao stack on app and moves webapp onto it; metrics keeps a hand-placed .env. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-09-30 15:15:04 +02:00
Lucas WintherandClaude Opus 5.5	792f7cde48	Add the host bootstrap: deploy user, key, docker access, stack root ... bootstrap.yml prepares a host as an admin via -u; new-deploy-key.sh makes the key pair and refuses to write inside the repo. CI deploys refuse the bootstrap playbook, since the dispatch API ignores the dropdown. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-09-30 15:07:31 +02:00
Lucas WintherandClaude Opus 5.5	78b227f32d	Add a start flag, and let --check survive a first deploy ... -e start=false (mode sync in CI) lands the payload and starts nothing, for migrations. A check run on a never-deployed stack now skips Compose with a note instead of failing on the missing directory. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-09-30 15:04:56 +02:00
Lucas WintherandClaude Opus 5	a0e56c96b7	Add the GitHub Actions workflows ... A lint gate on every push, a manual deploy form, and a connectivity workflow for when a deploy hangs instead of failing. Nothing deploys on a push: merging changes what would be deployed, a person still decides when. The stack name and pull policy reach a shell command, so they are validated through env: rather than interpolated into a run: block. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-09-16 03:58:09 +02:00