feat: add tools role (Outline wiki) + 3-server architecture
deploy.yml #32 -Commit
05bcbab858
pushed by
jack
infra: add visual-tools and visual-mon servers, fix inventory
deploy.yml #31 -Commit
85a5857a5f
pushed by
jack
feat: extend fail2ban with Forgejo SSH and Traefik HTTP jails
deploy.yml #30 -Commit
321e1c4daa
pushed by
jack
feat: wildcard TLS via Cloudflare DNS-01 + real-IP forwarding
deploy.yml #29 -Commit
c2f9a0c21c
pushed by
jack
revert: switch back to HTTP-01 until Cloudflare NS propagation
deploy.yml #28 -Commit
f183fe485f
pushed by
jack
feat: wildcard TLS certificate *.csrx.ru via Cloudflare DNS-01
deploy.yml #27 -Commit
0496e9ab61
pushed by
jack
fix: allow Docker bridge networks through UFW for runner + add unattended-upgrades
deploy.yml #26 -Commit
5befd48a50
pushed by
jack
feat: Cloudflare DNS-01 ACME + Docker hardening + sysctl
deploy.yml #25 -Commit
fccbd1a45a
pushed by
jack
feat: Cloudflare integration — real IP forwarding + firewall lockdown
deploy.yml #24 -Commit
e935c897c6
pushed by
jack
fix: correct invalid PromQL in ContainerHighMemory alert rule
deploy.yml #23 -Commit
1f03022086
pushed by
jack
feat: add uptime-kuma pull, logrotate deploy task, logrotate package
deploy.yml #21 -Commit
a344998405
pushed by
jack
feat: configure Telegram alerting in AlertManager
deploy.yml #19 -Commit
a42ff4afc7
pushed by
jack
feat: add monitoring stack (Prometheus + Grafana + cAdvisor + Node Exporter)
deploy.yml #17 -Commit
972a76db4c
pushed by
jack
docs: add infrastructure plan and Claude agent guide
deploy.yml #16 -Commit
9e4ac718d9
pushed by
jack
fix: add plane-admin, plane-space and configure instance URLs
deploy.yml #15 -Commit
efbbc3cac5
pushed by
jack
fix: update plane backend for new stable image requirements
deploy.yml #14 -Commit
66c03ffc04
pushed by
jack
fix: update plane-web for nginx-based stable image
deploy.yml #13 -Commit
679d3ed010
pushed by
jack
fix: commit encrypted vault file so CI can decrypt it
deploy.yml #12 -Commit
6afd298730
pushed by
jack
ci: trigger deploy (CI key now authorized on server)
deploy.yml #11 -Commit
2eba9b451e
pushed by
jack
ci: fix ansible-galaxy --quiet flag (not supported)
deploy.yml #10 -Commit
48f34e3e93
pushed by
jack
ci: fix syntax-check vault password, update CI deploy key
deploy.yml #9 -Commit
9bfb702322
pushed by
jack
ci: test with re-registered runner (https://git.csrx.ru)
deploy.yml #8 -Commit
43a870954a
pushed by
jack
Fix act_runner: use public Forgejo URL for job container access
deploy.yml #6 -Commit
6a2c38b4bf
pushed by
jack
Fix CI workflow: remove container directive, use runner image directly
deploy.yml #5 -Commit
6580e42f53
pushed by
jack