367 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
admin	4fe91f001c	refactor(git): parameterize Traefik Host() rule and MCP GITEA_HOST via GITEA_HOST variable	2026-06-25 22:58:01 -07:00
admin	bb25482df0	refactor(woodpecker): parameterize WOODPECKER_HOST, GITEA_HOST, and DB connection string	2026-06-25 22:58:01 -07:00
admin	39f781e1d0	refactor(vaultwarden): parameterize domain and alt_domain in Traefik rule and commented URL	2026-06-25 22:57:13 -07:00
admin	e376ea74a5	refactor(unifi): replace hardcoded domain in commented rule with ALT_DOMAIN variable	2026-06-25 22:57:13 -07:00
admin	a2f480bdaf	refactor(meshcentral): parameterize HOSTNAME and Traefik Host() rule via MESHCENTRAL_HOST	2026-06-25 22:57:13 -07:00
admin	43329a0caa	refactor(homeassistant): parameterize domain references and frigate cert paths	2026-06-25 22:57:12 -07:00
admin	ad0f8067bc	refactor(maintenance): parameterize all bryanmail.net domain references	2026-06-25 22:55:33 -07:00
admin	a1cf764dc5	refactor(media): parameterize all bryanmail.net domain references	2026-06-25 22:55:33 -07:00
admin	80002d1a48	refactor(mealie): parameterize domain, LDAP, and DB connection values	2026-06-25 22:55:32 -07:00
admin	a23a399ff6	Fix provision-secrets: use printf pipe for vaultwarden secrets (argon2id and URL break inline SSH quoting)	2026-06-25 17:03:19 -07:00
admin	1b45835015	Add vaultwarden.yaml - ADMIN_TOKEN_FILE + DATABASE_URL_FILE via Docker secrets, inline Traefik rule	2026-06-25 16:58:05 -07:00
admin	2b259dec3b	Add homeassistant.yaml + stack-deploy.sh hint for secret not found errors	2026-06-25 16:53:23 -07:00
admin	c6f9d5e455	Fix provision-secrets: scp was using conflicting SSH options causing silent failure	2026-06-25 16:36:21 -07:00
admin	4efe4a96e1	Add mealie.yaml - inline all config, POSTGRES_PASSWORD + LDAP_QUERY_PASSWORD via Docker secrets (_FILE)	2026-06-25 16:33:43 -07:00
admin	5f372d0cf7	mealie: provision Docker secrets and redeploy with _FILE convention	2026-06-25 16:32:04 -07:00
admin	9224f029e4	Add mealie.yaml - remove env_file, inline config, POSTGRES_PASSWORD_FILE + LDAP_QUERY_PASSWORD_FILE via Docker secrets	2026-06-25 16:31:06 -07:00
admin	988acd88ba	demote: move gamma to compose-files-staging (not in prod)	2026-06-22 23:40:46 -07:00
admin	748bb720a5	gamma: remove ports:3000 - conflicts with gitea, Traefik handles routing via overlay	2026-06-22 23:08:45 -07:00
admin	ae47cd55bb	Add gamma.yaml - remove env_file, inline TRAFFIC_HOST, tokens via stack-deploy.sh	2026-06-22 23:07:03 -07:00
admin	8468e900b6	Add unifi.yaml to repo - test new stack-deploy.sh with env file containing special chars	2026-06-22 22:58:30 -07:00
admin	3990ae8535	Add stack-deploy.sh + envparse.py: safe env loading via Python for all stacks	2026-06-22 22:57:51 -07:00
admin	81c97125ef	Fix deploy step: use rsync for safe-deploy.sh upload (no bare scp), clean up pipeline. Test with media.yaml redeploy.	2026-06-22 22:56:54 -07:00
admin	6883a3f688	Fix pipeline: add -i and UserKnownHostsFile=/dev/null to all scp commands for reliable SSH auth in agent containers	2026-06-22 22:53:50 -07:00
admin	ff574aa710	Add safe-deploy.sh: Python-based env parser, handles special chars in .env values safely. Remove legacy shell deploy scripts superseded by pipeline.	2026-06-22 22:51:53 -07:00
admin	67174d6104	Fix pipeline env-file sourcing: use if/then to handle special chars in .env files	2026-06-22 22:44:45 -07:00
admin	a43e0924eb	Remove env_file from meshcentral - inline non-secrets, BACKUPS_PW sourced from host .env at deploy time	2026-06-22 22:41:58 -07:00
admin	b84fae335d	Remove env_file dependencies from media and maintenance stacks - inline all non-secret values directly in compose files	2026-06-21 22:34:45 -07:00
admin	a651848f48	Fix provision-secrets: check for yaml changes before scp to avoid failure on non-stack commits	2026-06-21 22:20:42 -07:00
admin	ed9253fa61	Add provision-secrets step: pipeline now manages all Docker Swarm secrets from Woodpecker store	2026-06-21 22:15:59 -07:00
admin	d8b628cd63	Add woodpecker secrets reference (manual management only)	2026-06-20 23:23:35 -07:00
admin	7aa42042f1	Add vaultwarden secrets reference	2026-06-20 23:23:35 -07:00
admin	858f465263	Add unifi secrets reference (no secrets)	2026-06-20 23:23:34 -07:00
admin	8300381623	Add traefik secrets reference	2026-06-20 23:23:34 -07:00
admin	3f281c74e7	Add security secrets reference	2026-06-20 23:22:46 -07:00
admin	11470d9115	Add productivity secrets reference	2026-06-20 23:22:45 -07:00
admin	62d4883020	Add postgresql secrets reference	2026-06-20 23:22:45 -07:00
admin	d42ecc13cc	Add n8n secrets reference	2026-06-20 23:22:44 -07:00
admin	f03b09e852	Add meshcentral secrets reference	2026-06-20 23:21:51 -07:00
admin	9ac3f3f860	Add mealie secrets reference	2026-06-20 23:21:51 -07:00
admin	da467ceb24	Add media secrets reference (no secrets)	2026-06-20 23:21:50 -07:00
admin	d3edc8e036	Add maintenance secrets reference (no secrets)	2026-06-20 23:21:49 -07:00
admin	34db263958	Add homeassistant secrets reference	2026-06-20 23:21:13 -07:00
admin	cdf1515d81	Add guacamole secrets reference	2026-06-20 23:21:12 -07:00
admin	7d34efd8f3	Add git secrets reference	2026-06-20 23:21:12 -07:00
admin	ff84bd511f	Add gamma secrets reference	2026-06-20 23:21:11 -07:00
admin	b1f225f770	Add entertainment secrets reference	2026-06-20 23:20:25 -07:00
admin	03d108b267	Add auth secrets reference	2026-06-20 23:20:24 -07:00
admin	c20fd7322b	Add ai secrets reference	2026-06-20 23:20:24 -07:00
admin	759e902a78	Add 3dprint secrets reference	2026-06-20 23:20:24 -07:00
admin	8c27099d8c	Add secrets directory README with migration guide and status tracker	2026-06-20 23:19:31 -07:00