-
c95a975f97
Recover interrupted Docker policy changes and validate fleet bootstrap pins
main
codex/explicit-node-actions
deytenit
2026-11-07 18:33:04 +03:00
-
d69ae202f6
Remove the image build and consolidate operational code under scripts
deytenit
2026-11-07 18:17:29 +03:00
-
5f2d0b221f
Bootstrap private node checkouts and operator access from the workstation
deytenit
2026-11-07 17:57:12 +03:00
-
c8d4d7568a
Apply platform SSH policies through a recoverable port handover
deytenit
2026-11-07 17:32:40 +03:00
-
e452c981aa
Split host setup into explicit entity actions
deytenit
2026-11-07 17:15:49 +03:00
-
d83bad9d34
chore: preserve laptop work before checkout migration [skip ci]
codex/laptop-20261106/apex-apex.ermnvldmr.com/work
Codex
2026-11-06 21:28:27 +03:00
-
9d733a8f5d
fix: allow non-Compose commits on Docker-free hosts [skip ci]
deytenit
2026-11-06 00:40:05 +03:00
-
00d19c3008
fix: synchronize node main directly without capture CI [skip ci]
deytenit
2026-11-06 00:17:54 +03:00
-
bbeeffcb24
Use Gitea repository guidance and retain Alloy security regression check [skip ci]
Codex
2026-11-05 23:48:51 +03:00
-
ed7689b9b0
Preserve golden-image provisioning cleanup [skip ci]
Codex
2026-11-05 23:45:25 +03:00
-
-
faefd15490
Merge deployed native Alloy and backup recovery changes [skip ci]
Codex
2026-11-05 23:44:46 +03:00
-
-
e37f28ad65
fix(ci): preserve vendored action module boundaries [skip ci]
Codex
2026-11-05 23:21:31 +03:00
-
cbeec6551c
ci: migrate workflows and dependencies to Gitea
Codex
2026-11-05 23:02:12 +03:00
-
339b2b94d6
Deliver tested native Alloy and backup recovery sources
Codex
2026-11-05 02:14:18 +03:00
-
c9518e9c11
Add native Alloy configuration for isolated Icarus deployment
Codex
2026-11-05 02:01:31 +03:00
-
7ad4473e93
refactor(provisioning): remove manual SSH bootstrap workflow
deytenit
2026-11-04 23:20:47 +03:00
-
-
-
f9091d116a
chore(ci): update static S3 fallback region to auto for Cloudflare R2
deytenit
2026-10-29 23:54:24 +03:00
-
0881013357
docs(apex): keep public guidance and examples deployment-neutral
2026.10.1
deytenit
2026-10-26 12:53:58 +03:00
-
995ea9bdf9
fix(apex): preserve environments and restore secure standalone operations
deytenit
2026-10-26 12:26:09 +03:00
-
-
6463bad5ee
feat(engine): de-slop commons, harden security, add targeted compose and env bridge
2026.10.0
deytenit
2026-10-26 00:03:33 +03:00
-
f044304ef8
fix(readiness): refresh dependency health outside request path
deytenit
2026-10-11 23:38:40 +03:00
-
2ba0b8bd39
fix(readiness): accept concurrent browser asset probes
deytenit
2026-10-11 21:43:53 +03:00
-
517b0a0d4f
docs(failover): align probe deadline with deployed worker
deytenit
2026-10-11 21:33:38 +03:00
-
e4308a2dd4
fix(readiness): allow measured native probe execution time
deytenit
2026-10-11 21:30:14 +03:00
-
31938681dc
feat(failover): route multiple hostnames through one Worker
deytenit
2026-10-11 20:36:50 +03:00
-
30760bb4f8
feat(replication): support application health and controlled two-node recovery
deytenit
2026-10-11 20:30:08 +03:00
-
2a09eac23b
feat(replication): add authenticated readiness adapter
deytenit
2026-10-11 16:26:20 +03:00
-
458ad5f930
fix(backup): pin verified hook failure release
deytenit
2026-10-11 16:05:40 +03:00
-
dabfd8dbc8
feat: add free-tier composition origin failover asset
deytenit
2026-10-11 02:25:37 +03:00
-
3e26df259f
fix: check running images with Docker Buildx
deytenit
2026-10-11 02:18:46 +03:00
-
fe86e55f4a
feat: apply node timezone before scheduled jobs
deytenit
2026-10-11 02:07:13 +03:00
-
99ff1f1433
fix: share Happ generation and correct protocol labels
deytenit
2026-10-11 01:49:44 +03:00
-
65fef9a6b0
fix: support current Traefik ACME certificate export
deytenit
2026-10-11 01:23:21 +03:00
-
4106af4474
fix: preserve new tier permissions under restrictive umask
deytenit
2026-10-10 21:33:51 +03:00
-
5753d18440
fix: restore native security state across enrollment failures
deytenit
2026-10-10 21:12:57 +03:00
-
6be21acde1
feat: initialize Debian nodes through shared provisioning
deytenit
2026-10-10 20:32:12 +03:00
-
cbf3991147
fix: stabilize alloy config
deytenit
2026-10-04 15:36:12 +03:00
-
a9436ec385
feat: Harden allow on resources
deytenit
2026-09-27 22:42:56 +03:00
-
0748ab43a0
feat: Add memory retention policies for apt and systemd-journal
deytenit
2026-09-27 21:41:02 +03:00
-
48840c3022
chore(compositions/apex): bump core service image tags to latest minor/patch
deytenit
2026-09-27 19:10:06 +03:00
-
c94745b7e7
feat(skills): add update-compositions skill and registry query reference
deytenit
2026-09-27 17:54:47 +03:00
-
5672e5d65c
fix(alloy): enable docker_only in cadvisor exporter
deytenit
2026-09-27 17:35:47 +03:00
-
78ab580e6f
fix(cloud-init): defer ssh deploy key write in master template
deytenit
2026-09-13 15:42:38 +03:00
-
7b4e40dba5
fix(configure): gracefully handle missing ufw dirs and skip redundant apt calls
deytenit
2026-09-13 15:39:23 +03:00
-
6123c3f6b4
feat: add Debian 13 golden image Packer pipeline and cloud-init bootstrap
deytenit
2026-08-30 17:19:37 +03:00
-
b72b961968
fix: forward host proxy env vars and network to dclint container
deytenit
2026-08-09 01:09:18 +03:00
-
64d9138a8f
fix: keep notification credentials out of process arguments
deytenit
2026-08-02 15:07:52 +03:00
-
6daabae415
fix: mount containerd socket into alloy for cadvisor per-container stats
deytenit
2026-07-12 03:03:17 +03:00
-
0a585cc061
fix: run alloy in the host cgroup namespace (cgroup: host)
deytenit
2026-07-12 02:52:43 +03:00
-
9bc97f196f
feat: scrape CrowdSec agent metrics through Alloy
deytenit
2026-07-11 22:37:38 +03:00
-
e3749577d1
docs: rewrite README with a friendly what/why/how structure
deytenit
2026-07-11 19:47:37 +03:00
-
94082ad9be
chore: genericize deployment-specific defaults for public release
deytenit
2026-07-11 17:29:41 +03:00
-
fc11217a90
chore: relicense to BSD 2-Clause; note AI-assisted contributions in README
deytenit
2026-07-11 17:21:35 +03:00
-
477c0eb5d1
fix: set alloy container hostname to APEX_NODE_HOST
deytenit
2026-07-11 16:49:56 +03:00
-
bd973d783d
refactor: make engine domain-agnostic — identity from node.env, no hardcoded domain
v0.4.3
deytenit
2026-07-08 09:32:20 +03:00
-
53d3bedca6
feat: add resticontainer backup labels for traefik/adguard/xray
v0.4.2
deytenit
2026-07-07 21:38:25 +03:00
-
c100db57fe
fix: mount /srv in resticontainer so absolute tierN symlinks resolve
v0.4.1
deytenit
2026-07-07 21:15:15 +03:00
-
07a53b9b2f
feat: migrate to resticontainer with label-driven per-service backup
v0.4.0
deytenit
2026-07-07 20:31:47 +03:00
-
b41fc6097f
refactor: replace loki store with Grafana Alloy push agent
v0.3.0
deytenit
2026-07-06 14:29:21 +03:00
-
334ca196e0
feat: add .apex-root-owned opt-out for root-owned tier compositions
deytenit
2026-07-06 10:39:04 +03:00
-
0b42ab1bfc
docs: link published documentation in README
deytenit
2026-07-05 12:40:17 +03:00
-
ce93f879e7
refactor: gate xray behind profile, expose loki via basicauth, move happ generator to daedalus
v0.2.0
deytenit
2026-07-05 12:16:51 +03:00
-
1bc448961a
fix: update sync/repository rebase target from trunk to main
v0.1.2
deytenit
2026-07-05 12:04:24 +03:00
-
c5b61a3294
fix: exclude commons/ from dclint --fix to prevent submodule dirtying
v0.1.1
deytenit
2026-07-05 11:20:25 +03:00
-
6aaef35780
fix: resolve 17 confirmed bash-parity drifts from port review
v0.1.0
deytenit
2026-07-05 10:50:40 +03:00
-
ad47b73928
docs: add PARITY map and mark engine readiness gate as green
deytenit
2026-07-04 21:31:05 +03:00
-
d97311a652
feat: add shared base core compose with env-parameterized restic tier mounts
deytenit
2026-07-04 21:30:25 +03:00
-
ec54ab592f
feat: port utils actions (extract-traefik-certs, generate-happ-subscriptions, lint-docker-compose)
deytenit
2026-07-04 21:29:17 +03:00
-
b9c80b0212
feat: port tiers actions (link, chown, useradd)
deytenit
2026-07-04 21:28:28 +03:00
-
f7fc0eb697
feat: port sync and backup/run actions
deytenit
2026-07-04 21:27:39 +03:00
-
05469332e8
feat: port configure actions (base, ufw, crowdsec, cron, systemd, routing)
deytenit
2026-07-04 21:26:56 +03:00
-
63c4b6c7eb
feat: add apex launcher, test runner, and cli smoke test
deytenit
2026-07-04 21:25:59 +03:00
-
83e6bcfe31
feat: add engine cli (discover/dispatch/help, hostname identity)
deytenit
2026-07-04 21:25:59 +03:00
-
496ed01ede
feat: add engine context module (ctx assembly, tier vars, commons wrap)
deytenit
2026-07-04 21:25:14 +03:00
-
9ad3c93644
feat: add engine lib modules (ufw, crowdsec, systemd, notify)
deytenit
2026-07-04 21:24:44 +03:00
-
72eec40ef3
feat: port engine lib modules (log, sys, tpl, host)
deytenit
2026-07-04 21:23:48 +03:00
-
12eac9772b
feat: add engine overlay module (resolve/discover, ast scan, tombstone)
deytenit
2026-07-04 21:21:58 +03:00
-
cc004f99f8
feat: add engine identity module (FQDN resolution via node.env, hostname fallback)
deytenit
2026-07-04 21:21:14 +03:00
-
f96c53add9
feat: add engine descriptor module (Meta/Arg/Flag/Opt/Rest, argparse)
deytenit
2026-07-04 21:20:28 +03:00
-
e9c7e13848
feat: scaffold apex commons project (assets, source, hooks, docs)
deytenit
2026-07-04 21:19:28 +03:00