Commit Graph

Select branches

Hide Pull Requests

add-force-emergency-deploy-flags

fix-dollar-double-interpolation

fix-exclude-deploy-folder

fix-git-guard-exec-permission

fix-secrets-folder-stack-detection

flowagent-ai-cutover

flowagent-auth-mount

flowagent-mcp-setup

main

remove-orphaned-mcpo-mirror

secrets-provisioning-v2

secrets-provisioning-v3

#1

#12

#13

#14

#15

#16

#17

#18

#19

#20

#21

#22

#23

#3

#4

#5

#6

#7

#8

#9

Mono Color

• 70e74e5b6e Add auth.yaml — Pattern B migration, no env_file, domain parameterized, secrets in host .env admin 2026-06-27 06:41:19 -07:00
• a5d7e26727 refactor(.woodpecker.yml): move security to no-op provision case (Pattern B), remove unused SECURITY_* env vars from provision step admin 2026-06-27 06:26:35 -07:00
• 5c0f59f00c Add security.yaml — Pattern B migration, no env_file, domain parameterized, secrets in host .env admin 2026-06-27 06:24:07 -07:00
• e7842fda6b refactor(.woodpecker.yml): add guacamole to no-op provision case (Pattern B — secrets in host .env), remove unused guacamole env vars from provision step admin 2026-06-26 23:15:23 -07:00
• 2f1685f5a9 Add guacamole.yaml — Pattern B migration, all secrets/OIDC via host .env vars admin 2026-06-26 23:13:45 -07:00
• d48b64cc9a fix(.woodpecker.yml): add || true to ssh-keyscan — from_secret injection confirmed working (SWARM_MANAGER_IP len=12) admin 2026-06-26 06:59:36 -07:00
• 1a9684067a fix(.woodpecker.yml): migrate from deprecated secrets: list to from_secret syntax (Woodpecker v3 requires environment: VAR: from_secret: name) admin 2026-06-26 06:54:41 -07:00
• e48caa643c debug: add secret env dump step + slim provision-secrets to diagnose SWARM_MANAGER_IP injection admin 2026-06-26 06:47:29 -07:00
• 028bda5e8e ci: trigger fresh pipeline to verify SWARM_MANAGER_IP injection after DB fix admin 2026-06-26 06:29:46 -07:00
• 729065e66b fix(.woodpecker.yml): restore SWARM_MANAGER_IP — root cause was corrupted value '192_168_4_32' in DB (id=88), now fixed to '192.168.4.32' admin 2026-06-26 06:25:18 -07:00
• 369255490b fix(.woodpecker.yml): revert to hardcoded IP — new repo-level secret injection broken in Woodpecker v3 (TODO: investigate) admin 2026-06-25 23:54:30 -07:00
• 16b358cc52 fix(.woodpecker.yml): rename docker_manager_ip -> swarm_manager_ip (avoid DOCKER_ prefix reserved by Docker runtime) admin 2026-06-25 23:36:55 -07:00
• 9dd97a5fcc ci: trigger pipeline to verify DOCKER_MANAGER_IP injection after server restart admin 2026-06-25 23:34:19 -07:00
• cae2e1bc0c fix(.woodpecker.yml): uppercase env var refs match Woodpecker injection (secret docker_manager_ip -> $DOCKER_MANAGER_IP) admin 2026-06-25 23:25:53 -07:00
• 922dd06c9b fix(.woodpecker.yml): use lowercase secret names matching Woodpecker injection convention admin 2026-06-25 23:22:52 -07:00
• dae8e25bda fix(.woodpecker.yml): add DOCKER_MANAGER_IP and WOODPECKER_HOST to step secrets lists admin 2026-06-25 23:17:09 -07:00
• 1096cf5586 refactor(.woodpecker.yml): replace hardcoded 192.168.4.32 with DOCKER_MANAGER_IP and woodpecker URL with WOODPECKER_HOST admin 2026-06-25 23:00:54 -07:00
• 25f9bab3b0 refactor(woodpecker.env.example): replace hardcoded URLs with variable references admin 2026-06-25 22:58:02 -07:00
• 82c3dfb6d1 refactor(git.env.example): parameterize POSTGRES_HOST, POSTGRES_PORT, and GITEA_HOST admin 2026-06-25 22:58:02 -07:00
• 4fe91f001c refactor(git): parameterize Traefik Host() rule and MCP GITEA_HOST via GITEA_HOST variable admin 2026-06-25 22:58:01 -07:00
• bb25482df0 refactor(woodpecker): parameterize WOODPECKER_HOST, GITEA_HOST, and DB connection string admin 2026-06-25 22:58:01 -07:00
• 39f781e1d0 refactor(vaultwarden): parameterize domain and alt_domain in Traefik rule and commented URL admin 2026-06-25 22:57:13 -07:00
• e376ea74a5 refactor(unifi): replace hardcoded domain in commented rule with ALT_DOMAIN variable admin 2026-06-25 22:57:13 -07:00
• a2f480bdaf refactor(meshcentral): parameterize HOSTNAME and Traefik Host() rule via MESHCENTRAL_HOST admin 2026-06-25 22:57:13 -07:00
• 43329a0caa refactor(homeassistant): parameterize domain references and frigate cert paths admin 2026-06-25 22:57:12 -07:00
• ad0f8067bc refactor(maintenance): parameterize all bryanmail.net domain references admin 2026-06-25 22:55:33 -07:00
• a1cf764dc5 refactor(media): parameterize all bryanmail.net domain references admin 2026-06-25 22:55:33 -07:00
• 80002d1a48 refactor(mealie): parameterize domain, LDAP, and DB connection values admin 2026-06-25 22:55:32 -07:00
• a23a399ff6 Fix provision-secrets: use printf pipe for vaultwarden secrets (argon2id and URL break inline SSH quoting) admin 2026-06-25 17:03:19 -07:00
• 1b45835015 Add vaultwarden.yaml - ADMIN_TOKEN_FILE + DATABASE_URL_FILE via Docker secrets, inline Traefik rule admin 2026-06-25 16:58:05 -07:00
• 2b259dec3b Add homeassistant.yaml + stack-deploy.sh hint for secret not found errors admin 2026-06-25 16:53:23 -07:00
• c6f9d5e455 Fix provision-secrets: scp was using conflicting SSH options causing silent failure admin 2026-06-25 16:36:21 -07:00
• 4efe4a96e1 Add mealie.yaml - inline all config, POSTGRES_PASSWORD + LDAP_QUERY_PASSWORD via Docker secrets (_FILE) admin 2026-06-25 16:33:43 -07:00
• 5f372d0cf7 mealie: provision Docker secrets and redeploy with _FILE convention admin 2026-06-25 16:32:04 -07:00
• 9224f029e4 Add mealie.yaml - remove env_file, inline config, POSTGRES_PASSWORD_FILE + LDAP_QUERY_PASSWORD_FILE via Docker secrets admin 2026-06-25 16:31:06 -07:00
• 988acd88ba demote: move gamma to compose-files-staging (not in prod) admin 2026-06-22 23:40:46 -07:00
• 748bb720a5 gamma: remove ports:3000 - conflicts with gitea, Traefik handles routing via overlay admin 2026-06-22 23:08:45 -07:00
• ae47cd55bb Add gamma.yaml - remove env_file, inline TRAFFIC_HOST, tokens via stack-deploy.sh admin 2026-06-22 23:07:03 -07:00
• 8468e900b6 Add unifi.yaml to repo - test new stack-deploy.sh with env file containing special chars admin 2026-06-22 22:58:30 -07:00
• 3990ae8535 Add stack-deploy.sh + envparse.py: safe env loading via Python for all stacks admin 2026-06-22 22:57:51 -07:00
• 81c97125ef Fix deploy step: use rsync for safe-deploy.sh upload (no bare scp), clean up pipeline. Test with media.yaml redeploy. admin 2026-06-22 22:56:54 -07:00
• 6883a3f688 Fix pipeline: add -i and UserKnownHostsFile=/dev/null to all scp commands for reliable SSH auth in agent containers admin 2026-06-22 22:53:50 -07:00
• ff574aa710 Add safe-deploy.sh: Python-based env parser, handles special chars in .env values safely. Remove legacy shell deploy scripts superseded by pipeline. admin 2026-06-22 22:51:53 -07:00
• 67174d6104 Fix pipeline env-file sourcing: use if/then to handle special chars in .env files admin 2026-06-22 22:44:45 -07:00
• a43e0924eb Remove env_file from meshcentral - inline non-secrets, BACKUPS_PW sourced from host .env at deploy time admin 2026-06-22 22:41:58 -07:00
• b84fae335d Remove env_file dependencies from media and maintenance stacks - inline all non-secret values directly in compose files admin 2026-06-21 22:34:45 -07:00
• a651848f48 Fix provision-secrets: check for yaml changes before scp to avoid failure on non-stack commits admin 2026-06-21 22:20:42 -07:00
• ed9253fa61 Add provision-secrets step: pipeline now manages all Docker Swarm secrets from Woodpecker store admin 2026-06-21 22:15:59 -07:00
• d8b628cd63 Add woodpecker secrets reference (manual management only) admin 2026-06-20 23:23:35 -07:00
• 7aa42042f1 Add vaultwarden secrets reference admin 2026-06-20 23:23:35 -07:00
• 858f465263 Add unifi secrets reference (no secrets) admin 2026-06-20 23:23:34 -07:00
• 8300381623 Add traefik secrets reference admin 2026-06-20 23:23:34 -07:00
• 3f281c74e7 Add security secrets reference admin 2026-06-20 23:22:46 -07:00
• 11470d9115 Add productivity secrets reference admin 2026-06-20 23:22:45 -07:00
• 62d4883020 Add postgresql secrets reference admin 2026-06-20 23:22:45 -07:00
• d42ecc13cc Add n8n secrets reference admin 2026-06-20 23:22:44 -07:00
• f03b09e852 Add meshcentral secrets reference admin 2026-06-20 23:21:51 -07:00
• 9ac3f3f860 Add mealie secrets reference admin 2026-06-20 23:21:51 -07:00
• da467ceb24 Add media secrets reference (no secrets) admin 2026-06-20 23:21:50 -07:00
• d3edc8e036 Add maintenance secrets reference (no secrets) admin 2026-06-20 23:21:49 -07:00
• 34db263958 Add homeassistant secrets reference admin 2026-06-20 23:21:13 -07:00
• cdf1515d81 Add guacamole secrets reference admin 2026-06-20 23:21:12 -07:00
• 7d34efd8f3 Add git secrets reference admin 2026-06-20 23:21:12 -07:00
• ff84bd511f Add gamma secrets reference admin 2026-06-20 23:21:11 -07:00
• b1f225f770 Add entertainment secrets reference admin 2026-06-20 23:20:25 -07:00
• 03d108b267 Add auth secrets reference admin 2026-06-20 23:20:24 -07:00
• c20fd7322b Add ai secrets reference admin 2026-06-20 23:20:24 -07:00
• 759e902a78 Add 3dprint secrets reference admin 2026-06-20 23:20:24 -07:00
• 8c27099d8c Add secrets directory README with migration guide and status tracker admin 2026-06-20 23:19:31 -07:00
• d314069ca9 Add create-secrets.sh helper for Docker Swarm secret provisioning admin 2026-06-20 23:18:57 -07:00
• 57761aa96f Fix pipeline: use CI_COMMIT_CHANGED_FILES, --no-interpolate validation, deploy only changed stacks admin 2026-06-20 22:50:35 -07:00
• a38c652a61 Add media.yaml and deploy script root 2026-06-20 22:43:09 -07:00
• a4d7a7069f Add media deployment script admin 2026-06-20 22:39:13 -07:00
• 4a762e4322 Add media.yaml configuration admin 2026-06-20 22:39:12 -07:00
• f9978f64f4 Fix YAML parsing error in notify steps - use printf for JSON payload admin 2026-06-20 22:23:45 -07:00
• 5413331fc2 Add Woodpecker CI/CD pipeline for Docker Swarm auto-deploy admin 2026-06-20 22:20:57 -07:00
• 3144964222 Add Woodpecker setup script admin 2026-06-20 21:07:23 -07:00
• 2297077893 Add Woodpecker environment configuration template admin 2026-06-20 21:07:23 -07:00
• 7bc5c3a2d7 Add Woodpecker CI/CD server and agents compose file admin 2026-06-20 21:07:22 -07:00
• 29a6ad81a5 Add Gitea environment configuration example admin 2026-06-18 23:42:40 -07:00
• 0e87c29c22 Add .gitignore to prevent committing secrets admin 2026-06-18 23:42:33 -07:00
• 524c77757c Add secrets documentation admin 2026-06-18 23:42:32 -07:00
• e14799cc51 Add Woodpecker CI/CD pipeline configuration admin 2026-06-18 23:42:32 -07:00
• d31055c0be Add Gitea deployment script admin 2026-06-18 23:42:32 -07:00
• 8ba5bd495b Add Gitea compose file admin 2026-06-18 23:42:31 -07:00
• f118fc08ba Initial commit admin 2026-06-18 23:42:07 -07:00