titan-iac

bstein/titan-iac

Fork 0

Commit Graph

Select branches

Hide Pull Requests

deploy

fea/titan24-gpu

feature/ariadne

feature/atlas-monitoring

feature/atlasbot

feature/bstein-dev-home

feature/ci-gitops

feature/mailu

feature/postgres-migration

feature/sso

feature/sso-hardening

feature/vault-consumption

main

restructure/hybrid-clusters

#1

#10

#11

#2

#3

#4

#5

#6

#7

#8

#9

6b5deb886f comms: use mas proxy for leave job Brad Stein 2026-01-08 04:37:33 -03:00
7860003f15 comms: retry room leave actions Brad Stein 2026-01-08 04:32:05 -03:00
31ca499c04 comms: retry mas token for room cleanup Brad Stein 2026-01-08 04:29:29 -03:00
52df8094f5 comms: rerun bstein room cleanup Brad Stein 2026-01-08 04:26:48 -03:00
97e7c69244 comms: retry atlasbot login Brad Stein 2026-01-08 04:22:21 -03:00
ac7217a32c comms: switch bot auth back to synapse Brad Stein 2026-01-08 04:19:20 -03:00
9172f1e140 comms: enable synapse password login Brad Stein 2026-01-08 04:16:40 -03:00
12ab281528 comms: revert bot auth to mas Brad Stein 2026-01-08 04:11:20 -03:00
bfe623892a comms: bump othrys reset job Brad Stein 2026-01-08 04:07:57 -03:00
99ed78ea7f comms: fix auth env indentation Brad Stein 2026-01-08 04:05:03 -03:00
85dce4f975 comms: use synapse auth for bot jobs Brad Stein 2026-01-08 04:00:27 -03:00
5a23514a30 sso: install kubectl in synapse oidc job Brad Stein 2026-01-08 03:57:35 -03:00
220cc1f31a sso: run synapse oidc job with kubectl Brad Stein 2026-01-08 03:56:18 -03:00
76deb9a160 comms: ensure core secrets and synapse oidc Brad Stein 2026-01-08 03:53:49 -03:00
aa30a34828 comms: restart mas after secret cleanup Brad Stein 2026-01-08 03:46:02 -03:00
d3c3db612d sso: recheck mas encryption bytes Brad Stein 2026-01-08 03:44:54 -03:00
8d1284412f sso: validate mas encryption length Brad Stein 2026-01-08 03:43:06 -03:00
f8d172c5a2 comms: restart mas after secret regen Brad Stein 2026-01-08 03:39:46 -03:00
04817691c6 sso: strip mas secret newlines Brad Stein 2026-01-08 03:38:51 -03:00
c1e74c1001 comms: restart mas after encryption fix Brad Stein 2026-01-08 03:36:33 -03:00
072af083bc sso: fix mas encryption secret Brad Stein 2026-01-08 03:35:40 -03:00
39d8c9e687 comms: restart mas after secret fix Brad Stein 2026-01-08 03:33:14 -03:00
4db5ff68eb comms: let mas db secret be job-owned Brad Stein 2026-01-08 03:31:19 -03:00
bebb87fcf8 comms: restart mas after db sync Brad Stein 2026-01-08 03:28:22 -03:00
4f462b8fa7 comms: verify mas db login Brad Stein 2026-01-08 03:26:14 -03:00
05c2d245b9 comms: ensure mas password is url-safe Brad Stein 2026-01-08 03:23:09 -03:00
e384a9e417 comms: avoid psql vars for mas Brad Stein 2026-01-08 03:20:28 -03:00
898a33d8ee comms: simplify mas db creation Brad Stein 2026-01-08 03:18:03 -03:00
3d2f04d672 comms: fix mas db psql exec Brad Stein 2026-01-08 03:15:25 -03:00
df5a5127f1 comms: add mas db secret stub Brad Stein 2026-01-08 03:12:16 -03:00
8950306c53 comms: keep mas db job logs on failure Brad Stein 2026-01-08 03:09:27 -03:00
e18accc099 comms: allow postgres exec for mas db Brad Stein 2026-01-08 03:06:34 -03:00
0250de8636 comms: ensure mas db via postgres exec Brad Stein 2026-01-08 03:04:33 -03:00
72d4766d68 comms: stabilize mas db job Brad Stein 2026-01-08 03:00:19 -03:00
ef064ed2bb comms: bootstrap mas db secret Brad Stein 2026-01-08 02:53:53 -03:00
c8fc1dd10a comms: fix mas db ensure rbac Brad Stein 2026-01-08 02:47:47 -03:00
0e55dbeaa9 comms: ensure mas db secret Brad Stein 2026-01-08 02:45:00 -03:00
b95683da2a comms: restart MAS after secret bootstrap Brad Stein 2026-01-08 02:35:09 -03:00
6e0b3c43bd keycloak: rerun MAS secrets bootstrap Brad Stein 2026-01-08 02:32:31 -03:00
9a544010fb comms: grant MAS secret bootstrap cluster role Brad Stein 2026-01-08 02:31:54 -03:00
9d3b27e567 keycloak: rerun MAS secrets bootstrap Brad Stein 2026-01-08 02:25:55 -03:00
1c9efd6808 comms: allow MAS secrets create Brad Stein 2026-01-08 02:25:19 -03:00
6e7118c14d keycloak: use create for MAS secrets Brad Stein 2026-01-08 02:23:40 -03:00
6c99eb452e keycloak: make MAS secret job idempotent Brad Stein 2026-01-08 02:21:37 -03:00
e9fb11af40 keycloak: allow MAS secret apply read access Brad Stein 2026-01-08 02:19:21 -03:00
afce04b9b2 keycloak: rerun MAS secrets bootstrap Brad Stein 2026-01-08 02:17:04 -03:00
2aea7e3601 keycloak: retry MAS secret bootstrap Brad Stein 2026-01-08 02:12:40 -03:00
05848223eb comms: ensure MAS secrets via keycloak admin job Brad Stein 2026-01-08 02:09:23 -03:00
3aa36e87b8 comms: retry guest rename when MAS restarts Brad Stein 2026-01-08 02:00:52 -03:00
9a76680cc4 comms: track local knowledge markdown Brad Stein 2026-01-08 01:58:17 -03:00
660b49bc5d comms: consolidate stack manifests Brad Stein 2026-01-08 01:55:58 -03:00
d3ac4726e2 comms: rename guests via MAS admin sessions Brad Stein 2026-01-08 00:26:20 -03:00
57e414adc6 comms: rerun synapse admin seeder job Brad Stein 2026-01-08 00:20:55 -03:00
ca49c84086 comms: fix guest randomizer syntax Brad Stein 2026-01-08 00:15:41 -03:00
47f0ff7c01 comms: fix guest rename job with MAS admin sessions Brad Stein 2026-01-08 00:13:40 -03:00
e44ee3ab2d comms: fix guest registration via MAS admin API Brad Stein 2026-01-07 20:02:03 -03:00
70e40b281f comms: issue guest tokens via MAS Brad Stein 2026-01-07 19:51:33 -03:00
cd4b963db4 comms: serve register flows for guest UI Brad Stein 2026-01-07 19:09:13 -03:00
695e1ec322 comms: set guest displayname at registration Brad Stein 2026-01-07 11:23:53 -03:00
c950c32e93 comms: re-enable guest name randomizer Brad Stein 2026-01-07 11:17:33 -03:00
658e434e65 comms: return 405 for GET /register Brad Stein 2026-01-07 11:14:28 -03:00
49ec3d1be8 comms: restart synapse + guest proxy Brad Stein 2026-01-07 10:46:33 -03:00
eb1cb8cb00 comms: move guest register module endpoint Brad Stein 2026-01-07 10:42:11 -03:00
44404aa2f2 comms: restore Element guest registration Brad Stein 2026-01-07 10:34:52 -03:00
949995a8a0 comms: add guest register module scaffolding Brad Stein 2026-01-07 10:25:10 -03:00
c111f773b7 nextcloud: reset storage claims Brad Stein 2026-01-07 10:13:09 -03:00
376cbf6d70 comms: mint guest sessions via MAS Brad Stein 2026-01-07 10:12:37 -03:00
7ba578ed21 comms: restore Synapse guest join Brad Stein 2026-01-07 09:54:41 -03:00
4a55b39b0d comms: add Synapse guest appservice secret job Brad Stein 2026-01-07 09:49:08 -03:00
9bb90053a1 nextcloud: persist web root in pvc Brad Stein 2026-01-07 09:40:25 -03:00
a711c450d3 comms: implement MAS-backed guest register Brad Stein 2026-01-07 09:36:45 -03:00
1bcb9baba2 comms: ensure seeder is Synapse admin Brad Stein 2026-01-07 09:31:46 -03:00
9d5ba6adfe nextcloud: preserve config merge and stop db reset Brad Stein 2026-01-07 09:20:22 -03:00
ff395f7cf2 comms: restore Matrix guest join Brad Stein 2026-01-07 09:17:45 -03:00
6850f7b2fc nextcloud: avoid forcing installed flag Brad Stein 2026-01-07 09:14:20 -03:00
c928b7805c nextcloud: install oidc app from release tarball Brad Stein 2026-01-07 09:02:22 -03:00
77ce04c562 nextcloud: reset external app config and force reinstall Brad Stein 2026-01-07 08:58:50 -03:00
59b719da54 nextcloud: install oidc login via app store Brad Stein 2026-01-07 08:51:07 -03:00
52295538a0 nextcloud: fix db reset command Brad Stein 2026-01-07 08:46:57 -03:00
3db0661a48 nextcloud: reset storage mounts and restore office Brad Stein 2026-01-07 08:43:45 -03:00
cb7429a6a1 nextcloud: stabilize install guardrails Brad Stein 2026-01-07 04:49:55 -03:00
5a92e99c8d nextcloud-mail-sync: align data mount Brad Stein 2026-01-07 04:43:13 -03:00
7506919394 nextcloud: align app/data mounts Brad Stein 2026-01-07 04:41:00 -03:00
46c0a4e290 nextcloud: restore single data volume mount Brad Stein 2026-01-07 03:52:14 -03:00
da81946771 nextcloud: rebind user data pvc to restore data Brad Stein 2026-01-07 03:43:57 -03:00
428c2b5435 nextcloud: restore app and user-data volumes Brad Stein 2026-01-07 03:39:59 -03:00
ef0dfab20c mailu: harden postfix relay restrictions Brad Stein 2026-01-07 02:47:12 -03:00
8749d8a884 nextcloud: rebind data pvc to prior volume Brad Stein 2026-01-07 01:10:24 -03:00
58bc646621 nextcloud: allow OIDC auto user creation Brad Stein 2026-01-07 00:12:21 -03:00
16dc0e16f1 nextcloud: enforce OIDC-only config Brad Stein 2026-01-07 00:03:57 -03:00
9d9aa5b64b nextcloud: force OIDC login Brad Stein 2026-01-06 23:54:33 -03:00
2d6883eb67 nextcloud: restore mimetype defaults for external app Brad Stein 2026-01-06 22:16:51 -03:00
a15a2ce923 nextcloud: reinstall custom apps with compatible mail Brad Stein 2026-01-06 22:09:16 -03:00
f1e94717ed nextcloud: pin mail/external app versions for 29 Brad Stein 2026-01-06 22:03:01 -03:00
99e56fe1b4 nextcloud: register custom apps path Brad Stein 2026-01-06 21:51:19 -03:00
93b219e571 nextcloud: pin app download URLs Brad Stein 2026-01-06 21:43:36 -03:00
7a7433f824 nextcloud: install oidc/mail/external apps from releases Brad Stein 2026-01-06 21:39:55 -03:00
5fe584cc5f nextcloud: ensure oidc/mail/external apps installed Brad Stein 2026-01-06 21:35:31 -03:00
39d57613db nextcloud: remove db reset job Brad Stein 2026-01-06 21:27:06 -03:00
36552e425f nextcloud: fix su command quoting Brad Stein 2026-01-06 21:24:36 -03:00