From 7dbc55b22dc16ace3d763f6e1578a407f573b689 Mon Sep 17 00:00:00 2001 From: b0txec Date: Thu, 20 Aug 2026 20:03:11 +0300 Subject: [PATCH] Record VPS bundle validation results --- docs/README.md | 2 +- docs/VPS_STAGING_PLAN.md | 20 +++++++++++++++----- 2 files changed, 16 insertions(+), 6 deletions(-) diff --git a/docs/README.md b/docs/README.md index 89d72c8..3d82543 100644 --- a/docs/README.md +++ b/docs/README.md @@ -13,7 +13,7 @@ This directory contains the working documentation for the WeatherTool modernizat - Faktiskā symbol placement is automatic after manual image selection and is anchored to each rendered temperature badge. - The first **Ūdens temperatūra** workspace is implemented with manual Latvian-named fields and required 1920×1080 and 3840×1440 exports; visual calibration remains in progress. - Confirmed local Monda Regular/Bold files provide interface and generated-graphic typography; weather symbols use normalized transparent image assets. -- A version-controlled bundle is being prepared for a temporary, isolated VPS user-acceptance deployment built on Rocky and protected by Cloudflare, Nginx, and removable Authelia authentication. VPS directories exist, but no WeatherTool service has been started. +- The version-controlled temporary VPS UAT bundle has passed Compose, Authelia, image-build, container-health, loopback HTTP, and database-port-isolation checks on Rocky. VPS directories exist, but no WeatherTool service has been started. - This is not yet approved or hardened for workplace production. ## Documents diff --git a/docs/VPS_STAGING_PLAN.md b/docs/VPS_STAGING_PLAN.md index 9de4906..a22fa94 100644 --- a/docs/VPS_STAGING_PLAN.md +++ b/docs/VPS_STAGING_PLAN.md @@ -1,6 +1,6 @@ # Temporary VPS staging plan -Status: **Deployment bundle prepared; runtime directories created; services not started** +Status: **Deployment bundle validated on Rocky; VPS runtime directories created; services not started** This document defines the next deployment stage for approximately one month of newsroom-user testing. It records the intended boundary before any VPS changes @@ -163,9 +163,19 @@ must be covered by the origin certificate and proxied through Cloudflare. - official-style Nginx AuthRequest integration snippets; and - a disabled Nginx virtual-host example for the app and auth portal. -The bundle is a template until it passes Compose rendering, Authelia validation, -image build, container health, and private loopback smoke tests. Nginx activation -and public DNS remain later checkpoints. +Validation completed on Rocky on 2026-08-20: + +- Compose model rendered successfully without starting the deployment; +- Authelia `4.39.20` parsed the committed configuration without errors; +- the production image built both frontend and backend successfully; +- all three existing Scala tests passed during the image build; +- the isolated production app and PostgreSQL smoke stack became healthy; +- the app returned HTTP 200 through its loopback-only host binding; and +- PostgreSQL had no host port. + +Nginx syntax/integration validation, full Authelia login testing, artifact +transfer, VPS private startup, certificate installation, and public DNS remain +later checkpoints. Known application constraint: provider clients are constructed during startup even when `ENABLE_SCHEDULED_JOBS=false`. The synthetic UAT Compose file therefore @@ -238,5 +248,5 @@ Proposed temporary-staging minimum: - Deployment account and whether normal releases use public SSH or Tailscale. - Final session and backup-retention values. - Secure operator-side generation and delivery of the shared credential. -- Validation of the prepared production Dockerfile/Compose bundle on Rocky. +- Nginx syntax validation against the VPS include/certificate layout. - Health/readiness behavior suitable for automated release verification.