Record VPS bundle validation results

This commit is contained in:
b0txec
2026-08-20 20:03:11 +03:00
parent 674f962298
commit 7dbc55b22d
2 changed files with 16 additions and 6 deletions
+1 -1
View File
@@ -13,7 +13,7 @@ This directory contains the working documentation for the WeatherTool modernizat
- Faktiskā symbol placement is automatic after manual image selection and is anchored to each rendered temperature badge.
- The first **Ūdens temperatūra** workspace is implemented with manual Latvian-named fields and required 1920×1080 and 3840×1440 exports; visual calibration remains in progress.
- Confirmed local Monda Regular/Bold files provide interface and generated-graphic typography; weather symbols use normalized transparent image assets.
- A version-controlled bundle is being prepared for a temporary, isolated VPS user-acceptance deployment built on Rocky and protected by Cloudflare, Nginx, and removable Authelia authentication. VPS directories exist, but no WeatherTool service has been started.
- The version-controlled temporary VPS UAT bundle has passed Compose, Authelia, image-build, container-health, loopback HTTP, and database-port-isolation checks on Rocky. VPS directories exist, but no WeatherTool service has been started.
- This is not yet approved or hardened for workplace production.
## Documents
+15 -5
View File
@@ -1,6 +1,6 @@
# Temporary VPS staging plan
Status: **Deployment bundle prepared; runtime directories created; services not started**
Status: **Deployment bundle validated on Rocky; VPS runtime directories created; services not started**
This document defines the next deployment stage for approximately one month of
newsroom-user testing. It records the intended boundary before any VPS changes
@@ -163,9 +163,19 @@ must be covered by the origin certificate and proxied through Cloudflare.
- official-style Nginx AuthRequest integration snippets; and
- a disabled Nginx virtual-host example for the app and auth portal.
The bundle is a template until it passes Compose rendering, Authelia validation,
image build, container health, and private loopback smoke tests. Nginx activation
and public DNS remain later checkpoints.
Validation completed on Rocky on 2026-08-20:
- Compose model rendered successfully without starting the deployment;
- Authelia `4.39.20` parsed the committed configuration without errors;
- the production image built both frontend and backend successfully;
- all three existing Scala tests passed during the image build;
- the isolated production app and PostgreSQL smoke stack became healthy;
- the app returned HTTP 200 through its loopback-only host binding; and
- PostgreSQL had no host port.
Nginx syntax/integration validation, full Authelia login testing, artifact
transfer, VPS private startup, certificate installation, and public DNS remain
later checkpoints.
Known application constraint: provider clients are constructed during startup
even when `ENABLE_SCHEDULED_JOBS=false`. The synthetic UAT Compose file therefore
@@ -238,5 +248,5 @@ Proposed temporary-staging minimum:
- Deployment account and whether normal releases use public SSH or Tailscale.
- Final session and backup-retention values.
- Secure operator-side generation and delivery of the shared credential.
- Validation of the prepared production Dockerfile/Compose bundle on Rocky.
- Nginx syntax validation against the VPS include/certificate layout.
- Health/readiness behavior suitable for automated release verification.