5ab1ae1e8b
chore(traefik): re-trigger provision-secrets — traefik.env was found missing on disk post-migration
main
Bot2026-09-11 23:17:13 -07:00
afc96a6d37
Merge pull request 'fix(traefik): migrate KEEPALIVED_PASSWORD to Pattern C (manifest-driven), stop committing traefik.env' (#21) from migrate-traefik-keepalived-secret into main
AVB2026-09-11 22:52:35 -07:00
d72a8ebd04
Merge pull request 'fix(git-guard): stash-before-commit when dirty tree is also stale vs origin' (#19) from fix-git-guard-stash-before-commit into main
Bot2026-09-09 13:56:05 -07:00
e357907ee6
fix(git-guard): add unmerged-path guard + concrete remediation syntax for every failure branch
Bot2026-09-09 13:47:14 -07:00
bd69cc85d5
fix(git-guard): stash-before-commit when dirty tree is also stale vs origin
Bot2026-09-09 10:42:21 -07:00
000792f702
ai: persist FlowAgent MSAL token cache via mcpo bind mount (#18)
AVB2026-09-09 08:45:02 -07:00
5a5c8e56a9
Merge pull request 'Fix phantom verify failure: secrets/ is not a stack + errexit-proof verify' (#17) from fix-secrets-folder-stack-detection into main
AVB2026-09-07 22:28:36 -07:00
ded255decc
Upgrade to open-webui:0.11.3
Bot2026-09-02 22:26:15 -07:00
ac091999b4
Merge pull request 'FlowAgent MCP cutover: point ai.yaml's mcpo at flowagent-mcpo image + wire Azure secrets (matched pair)' (#14) from flowagent-ai-cutover into main
Bot2026-09-02 21:43:18 -07:00
a15e0100df
provision-secrets: add flowagent_* case-entry to the ai) stack (matched pair with ai.yaml's mcpo cutover)
flowagent-ai-cutover
Bot2026-09-02 16:53:10 -07:00
bcfb24b16d
ai.yaml: cut mcpo over to the confirmed-working flowagent-mcpo image + wire flowagent Docker secrets (never touches mcpo-critical)
Bot2026-09-02 16:51:31 -07:00
42d31e38e4
git stack: switch provision-secrets to Pattern B .env rewrite (test phase) + add git to bootstrap-tier guard
Bot2026-09-02 00:02:36 -07:00
16a01a9ea5
Merge pull request 'Remove orphaned mcpo/ mirror (migrated to homelab/mcp-config)' (#13) from remove-orphaned-mcpo-mirror into main
AVB2026-08-29 20:57:58 -07:00
10c35138db
Bump traefik-certs-dumper:v2.10.0 to 2.11.4
AVB2026-08-29 13:56:35 -07:00
162700bb4f
Fix: stack-deploy.sh now picks export_raw/export_raw_merged for folder+extras stacks (docker compose config path) vs export/export_merged for single-file stacks, matching envparse.py's dual-escaping fix
admin2026-08-26 23:26:32 -07:00
4af1209565
Fix: second double-interpolation bug in envparse.py - add export_raw/export_raw_merged (no escape_dollar) for the docker-compose-config render path, which already does its own dollar-escaping. Fixes IMMICH_KIOSK_BASICAUTH bcrypt hash corruption.
admin2026-08-26 23:25:46 -07:00
a557d9fb07
Refactor: unify stack-deploy.sh render paths into a single temp-file render step, then run mount-guard.py before docker stack deploy
admin2026-08-26 23:04:11 -07:00
f696efef11
Add: mount-guard.py - pre-deploy bind mount existence + Postgres empty-data heuristic check
admin2026-08-26 23:03:11 -07:00
2e889323ef
Fix: correct immich.env-example paths to match real on-disk data (UPLOAD_LOCATION, BULK_UPLOAD_LOCATION, DB_DATA_LOCATION) after 2026-08-26 incident where generic template paths were wrong
admin2026-08-26 22:51:37 -07:00
b620682a41
Fix: envparse.py strip mode now also drops top-level 'name:' key that docker compose config emits but Swarm's stack deploy schema rejects
admin2026-08-26 22:37:38 -07:00
87a254c902
Fix: envparse.py strip mode now collapses long-form depends_on mapping to Swarm-compatible short-form list
admin2026-08-26 22:35:53 -07:00
efd8caa218
Fix: invoke git-guard.sh via bash explicitly so tracked file mode bit doesn't matter
admin2026-08-26 22:33:21 -07:00
70814970c7
Harden .gitignore: broaden .env exclusion to *.env (with explicit exceptions for global.env and *.env-example templates), ignore stray .bak files
admin2026-08-26 22:32:32 -07:00
32e30f7e8b
Add: call git-guard.sh at top of stack-deploy.sh to enforce sync before deploy
admin2026-08-26 22:31:12 -07:00
ef4bcfcb25
ai: trigger redeploy to apply $$ escaping fix (PR #8) to litellm secrets
admin2026-08-26 21:18:26 -07:00
808483181b
Merge pull request 'fix: exclude deploy/ folder from changed-stack detection' (#9) from fix-exclude-deploy-folder into main
AVB2026-08-26 21:13:40 -07:00
701d1289ea
Merge pull request 'fix: prevent envsubst+Compose double-interpolation from truncating $ secrets' (#8) from fix-dollar-double-interpolation into main
AVB2026-08-26 21:05:37 -07:00
d7fe56f6fe
ai: add doc comment noting secrets are now provisioned via Woodpecker
admin2026-08-25 23:48:47 -07:00
d1986678bc
Merge pull request 'fix(ai): use AI_-prefixed AWS key names in ai) provisioning case' (#7) from fix-ai-aws-var-names into main
AVB2026-08-25 23:45:27 -07:00
6af2633936
fix(ai): write AI_-prefixed AWS key names to ai.env, not plain names
admin2026-08-25 23:42:39 -07:00
27df7cf58f
Merge pull request 'HOTFIX: restore $${VAR} escaping dropped by AI secrets migration rewrite' (#6) from hotfix-dollar-escaping into main
AVB2026-08-25 23:34:08 -07:00
5188aef250
hotfix: restore $${VAR} double-dollar escaping for all secret-backed vars
admin2026-08-25 23:27:47 -07:00
d4797d4b4b
docs: note ai stack secrets in SECRETS.md (trivial commit to force clean pipeline run)
admin2026-08-25 23:19:14 -07:00
7d26f97a1e
Merge pull request 'ai: migrate AWS/LiteLLM/OpenWebUI/OAuth secrets to Woodpecker' (#4) from ai-secrets-migration into main
AVB2026-08-25 23:01:09 -07:00
2959721d3c
ai: migrate AWS/LiteLLM/OpenWebUI/OAuth secrets from ai.env to Woodpecker secrets
admin2026-08-25 22:40:05 -07:00
Bot
AVB
admin