100 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
admin	9f7dcc3970	fix(media): add DOMAIN to media.env — was missing, causing blank Traefik hostnames	2026-07-08 21:25:34 -07:00
admin	2b4332896e	fix(ci): verify step fails pipeline on zero running tasks; increase settle time	2026-07-08 21:23:00 -07:00
admin	33f63924fc	feat(postgresql): migrate to Pattern C — Docker secrets for POSTGRES_PASSWORD and PGADMIN_DEFAULT_PASSWORD (_FILE convention)	2026-07-06 23:37:16 -07:00
admin	01469a7138	ci: trigger pipeline for ai stack (litellm-database:main-latest)	2026-07-05 21:50:20 -07:00
admin	2b547de27a	Update README.md	2026-07-05 21:42:27 -07:00
admin	76815f93e4	fix(ai): litellm image litellm-database:main-latest to match running stack	2026-07-05 21:41:49 -07:00
admin	c55eae3f24	ci: update .woodpecker.yml ai provision to Pattern B no-op	2026-07-04 22:35:54 -07:00
admin	db27239e68	ci: add ai.yaml (Pattern B - remove env_file, inline env vars)	2026-07-04 22:35:54 -07:00
admin	eff099eddf	immich: restore yaml default to :-release, version controlled via immich.env	2026-07-02 07:32:38 -07:00
admin	988ad3b573	woodpecker: immich moves to Pattern C - provision immich_db_password + immich_kiosk_basicauth	2026-07-02 07:26:44 -07:00
admin	7421a2406e	immich: Pattern C - DB_PASSWORD to Docker secret, version v3, remove env_file	2026-07-02 07:24:42 -07:00
admin	cbdb2f809a	refactor(security): move to folder-based layout	2026-06-30 23:36:02 -07:00
admin	86b41567c2	refactor(guacamole): move to folder-based layout	2026-06-30 23:36:02 -07:00
admin	eb7d6031f8	refactor(homeassistant): move to folder-based layout	2026-06-30 23:36:01 -07:00
admin	9ff21ff018	refactor(unifi): move to folder-based layout	2026-06-30 23:36:01 -07:00
admin	e40a1b5e00	refactor(meshcentral): move to folder-based layout	2026-06-30 23:36:01 -07:00
admin	b48b3db068	remove vaultwarden.yaml — superseded by vaultwarden/ folder	2026-06-30 23:34:34 -07:00
admin	d05b86af70	remove mealie.yaml — superseded by mealie/ folder	2026-06-30 23:34:32 -07:00
admin	5264e69f60	remove ddm.yaml — superseded by ddm/ folder	2026-06-30 23:34:32 -07:00
admin	86eb59ab79	remove maintenance.yaml — superseded by maintenance/ folder	2026-06-30 23:34:31 -07:00
admin	a6ec9073bc	remove media.yaml — superseded by media/ folder	2026-06-30 23:34:31 -07:00
admin	1511999279	refactor(vaultwarden): move to folder-based layout	2026-06-30 23:34:14 -07:00
admin	26eedf0e3d	refactor(mealie): move to folder-based layout	2026-06-30 23:34:14 -07:00
admin	4d810efa17	refactor(ddm): move to folder-based layout	2026-06-30 23:34:14 -07:00
admin	597d449666	refactor(maintenance): move to folder-based layout	2026-06-30 23:34:13 -07:00
admin	ee2cc8d1eb	refactor(media): move to folder-based layout	2026-06-30 23:34:13 -07:00
admin	493b4e12ac	add immich/hwaccel.transcoding.yml — quicksync transcoding extension	2026-06-30 23:19:18 -07:00
admin	72e46d0388	add immich/hwaccel.ml.yml — openvino ML acceleration extension	2026-06-30 23:19:17 -07:00
admin	7b7f858c02	add immich/immich.yml — folder-based stack, Pattern B	2026-06-30 23:19:17 -07:00
admin	8936daa469	remove hwaccel.transcoding.yml — superseded by immich/ folder	2026-06-30 23:18:40 -07:00
admin	80f37f37ea	remove hwaccel.ml.yml — superseded by immich/ folder	2026-06-30 23:18:40 -07:00
admin	4e5e58a4fc	remove immich.yaml — superseded by immich/ folder	2026-06-30 23:18:39 -07:00
admin	7ee270f58d	refactor(.woodpecker.yml): data-driven folder + flat stack support ... - validate: handles both flat *.yaml and folder-based stacks - provision-secrets: detects stacks from flat files AND changed folder contents - deploy: rsync folder or flat file as appropriate, then stack-deploy.sh - verify: same stack detection logic as deploy - immich, meshcentral, ddm explicitly listed as Pattern B no-op - all existing flat stacks unchanged — zero regression"	2026-06-30 23:18:21 -07:00
admin	e760979cb9	refactor(deploy/stack-deploy.sh): add folder-based multi-compose support ... - Detect <stack>/ folder vs flat <stack>.yaml automatically - Main file must be named <stack>.yml or <stack>.yaml inside folder - Extra *.yml/*.yaml files in folder merged via docker compose config - Env file resolved from folder/<stack>.env or flat <stack>.env - Flat path unchanged — zero regression for existing stacks - envsubst applied after compose config merge in folder mode"	2026-06-30 23:12:47 -07:00
admin	4cb29a7fd3	Add ddm.yaml — Device Mapping Manager, Pattern A (no secrets)	2026-06-30 22:58:28 -07:00
admin	ebf2ca8743	refactor(.woodpecker.yml): add immich to no-op provision case (Pattern B — secrets in host .env)	2026-06-28 22:03:43 -07:00
admin	3bc1b4acbf	Add hwaccel.transcoding.yml — hardware-accelerated transcoding config (quicksync active)	2026-06-28 22:02:58 -07:00
admin	f999799462	Add hwaccel.ml.yml — hardware-accelerated ML config (openvino active)	2026-06-28 22:02:57 -07:00
admin	f8f440fcec	Add immich.yaml — Pattern B migration, env_file removed, secrets in host .env	2026-06-28 22:02:56 -07:00
admin	b0dba66349	refactor(.woodpecker.yml): move auth to no-op provision case (Pattern B), remove AUTH_* env vars	2026-06-27 06:43:04 -07:00
admin	70e74e5b6e	Add auth.yaml — Pattern B migration, no env_file, domain parameterized, secrets in host .env	2026-06-27 06:41:19 -07:00
admin	a5d7e26727	refactor(.woodpecker.yml): move security to no-op provision case (Pattern B), remove unused SECURITY_* env vars from provision step	2026-06-27 06:26:35 -07:00
admin	5c0f59f00c	Add security.yaml — Pattern B migration, no env_file, domain parameterized, secrets in host .env	2026-06-27 06:24:07 -07:00
admin	e7842fda6b	refactor(.woodpecker.yml): add guacamole to no-op provision case (Pattern B — secrets in host .env), remove unused guacamole env vars from provision step	2026-06-26 23:15:23 -07:00
admin	2f1685f5a9	Add guacamole.yaml — Pattern B migration, all secrets/OIDC via host .env vars	2026-06-26 23:13:45 -07:00
admin	d48b64cc9a	fix(.woodpecker.yml): add || true to ssh-keyscan — from_secret injection confirmed working (SWARM_MANAGER_IP len=12)	2026-06-26 06:59:36 -07:00
admin	1a9684067a	fix(.woodpecker.yml): migrate from deprecated secrets: list to from_secret syntax (Woodpecker v3 requires environment: VAR: from_secret: name)	2026-06-26 06:54:41 -07:00
admin	e48caa643c	debug: add secret env dump step + slim provision-secrets to diagnose SWARM_MANAGER_IP injection	2026-06-26 06:47:29 -07:00
admin	028bda5e8e	ci: trigger fresh pipeline to verify SWARM_MANAGER_IP injection after DB fix	2026-06-26 06:29:46 -07:00
admin	729065e66b	fix(.woodpecker.yml): restore SWARM_MANAGER_IP — root cause was corrupted value '192_168_4_32' in DB (id=88), now fixed to '192.168.4.32'	2026-06-26 06:25:18 -07:00
admin	369255490b	fix(.woodpecker.yml): revert to hardcoded IP — new repo-level secret injection broken in Woodpecker v3 (TODO: investigate)	2026-06-25 23:54:30 -07:00
admin	16b358cc52	fix(.woodpecker.yml): rename docker_manager_ip -> swarm_manager_ip (avoid DOCKER_ prefix reserved by Docker runtime)	2026-06-25 23:36:55 -07:00
admin	9dd97a5fcc	ci: trigger pipeline to verify DOCKER_MANAGER_IP injection after server restart	2026-06-25 23:34:19 -07:00
admin	cae2e1bc0c	fix(.woodpecker.yml): uppercase env var refs match Woodpecker injection (secret docker_manager_ip -> $DOCKER_MANAGER_IP)	2026-06-25 23:25:53 -07:00
admin	922dd06c9b	fix(.woodpecker.yml): use lowercase secret names matching Woodpecker injection convention	2026-06-25 23:22:52 -07:00
admin	dae8e25bda	fix(.woodpecker.yml): add DOCKER_MANAGER_IP and WOODPECKER_HOST to step secrets lists	2026-06-25 23:17:09 -07:00
admin	1096cf5586	refactor(.woodpecker.yml): replace hardcoded 192.168.4.32 with DOCKER_MANAGER_IP and woodpecker URL with WOODPECKER_HOST	2026-06-25 23:00:54 -07:00
admin	25f9bab3b0	refactor(woodpecker.env.example): replace hardcoded URLs with variable references	2026-06-25 22:58:02 -07:00
admin	82c3dfb6d1	refactor(git.env.example): parameterize POSTGRES_HOST, POSTGRES_PORT, and GITEA_HOST	2026-06-25 22:58:02 -07:00
admin	4fe91f001c	refactor(git): parameterize Traefik Host() rule and MCP GITEA_HOST via GITEA_HOST variable	2026-06-25 22:58:01 -07:00
admin	bb25482df0	refactor(woodpecker): parameterize WOODPECKER_HOST, GITEA_HOST, and DB connection string	2026-06-25 22:58:01 -07:00
admin	39f781e1d0	refactor(vaultwarden): parameterize domain and alt_domain in Traefik rule and commented URL	2026-06-25 22:57:13 -07:00
admin	e376ea74a5	refactor(unifi): replace hardcoded domain in commented rule with ALT_DOMAIN variable	2026-06-25 22:57:13 -07:00
admin	a2f480bdaf	refactor(meshcentral): parameterize HOSTNAME and Traefik Host() rule via MESHCENTRAL_HOST	2026-06-25 22:57:13 -07:00
admin	43329a0caa	refactor(homeassistant): parameterize domain references and frigate cert paths	2026-06-25 22:57:12 -07:00
admin	ad0f8067bc	refactor(maintenance): parameterize all bryanmail.net domain references	2026-06-25 22:55:33 -07:00
admin	a1cf764dc5	refactor(media): parameterize all bryanmail.net domain references	2026-06-25 22:55:33 -07:00
admin	80002d1a48	refactor(mealie): parameterize domain, LDAP, and DB connection values	2026-06-25 22:55:32 -07:00
admin	d8b628cd63	Add woodpecker secrets reference (manual management only)	2026-06-20 23:23:35 -07:00
admin	7aa42042f1	Add vaultwarden secrets reference	2026-06-20 23:23:35 -07:00
admin	858f465263	Add unifi secrets reference (no secrets)	2026-06-20 23:23:34 -07:00
admin	8300381623	Add traefik secrets reference	2026-06-20 23:23:34 -07:00
admin	3f281c74e7	Add security secrets reference	2026-06-20 23:22:46 -07:00
admin	11470d9115	Add productivity secrets reference	2026-06-20 23:22:45 -07:00
admin	62d4883020	Add postgresql secrets reference	2026-06-20 23:22:45 -07:00
admin	d42ecc13cc	Add n8n secrets reference	2026-06-20 23:22:44 -07:00
admin	f03b09e852	Add meshcentral secrets reference	2026-06-20 23:21:51 -07:00
admin	9ac3f3f860	Add mealie secrets reference	2026-06-20 23:21:51 -07:00
admin	da467ceb24	Add media secrets reference (no secrets)	2026-06-20 23:21:50 -07:00
admin	d3edc8e036	Add maintenance secrets reference (no secrets)	2026-06-20 23:21:49 -07:00
admin	34db263958	Add homeassistant secrets reference	2026-06-20 23:21:13 -07:00
admin	cdf1515d81	Add guacamole secrets reference	2026-06-20 23:21:12 -07:00
admin	7d34efd8f3	Add git secrets reference	2026-06-20 23:21:12 -07:00
admin	ff84bd511f	Add gamma secrets reference	2026-06-20 23:21:11 -07:00
admin	b1f225f770	Add entertainment secrets reference	2026-06-20 23:20:25 -07:00
admin	03d108b267	Add auth secrets reference	2026-06-20 23:20:24 -07:00
admin	c20fd7322b	Add ai secrets reference	2026-06-20 23:20:24 -07:00
admin	759e902a78	Add 3dprint secrets reference	2026-06-20 23:20:24 -07:00
admin	8c27099d8c	Add secrets directory README with migration guide and status tracker	2026-06-20 23:19:31 -07:00
admin	d314069ca9	Add create-secrets.sh helper for Docker Swarm secret provisioning	2026-06-20 23:18:57 -07:00
admin	a4d7a7069f	Add media deployment script	2026-06-20 22:39:13 -07:00
admin	4a762e4322	Add media.yaml configuration	2026-06-20 22:39:12 -07:00
admin	3144964222	Add Woodpecker setup script	2026-06-20 21:07:23 -07:00
admin	2297077893	Add Woodpecker environment configuration template	2026-06-20 21:07:23 -07:00
admin	7bc5c3a2d7	Add Woodpecker CI/CD server and agents compose file	2026-06-20 21:07:22 -07:00
admin	29a6ad81a5	Add Gitea environment configuration example	2026-06-18 23:42:40 -07:00
admin	0e87c29c22	Add .gitignore to prevent committing secrets	2026-06-18 23:42:33 -07:00
admin	524c77757c	Add secrets documentation	2026-06-18 23:42:32 -07:00
admin	e14799cc51	Add Woodpecker CI/CD pipeline configuration	2026-06-18 23:42:32 -07:00
admin	d31055c0be	Add Gitea deployment script	2026-06-18 23:42:32 -07:00