bot/WeatherTool
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Record VPS bundle validation results

Browse Source
This commit is contained in:
b0txec
2026-08-20 20:03:11 +03:00
parent 674f962298
commit 7dbc55b22d
2 changed files with 16 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/README.md
+1 -1
View File
@@ -13,7 +13,7 @@ This directory contains the working documentation for the WeatherTool modernizat
- Faktiskā symbol placement is automatic after manual image selection and is anchored to each rendered temperature badge. - Faktiskā symbol placement is automatic after manual image selection and is anchored to each rendered temperature badge.
- The first **Ūdens temperatūra** workspace is implemented with manual Latvian-named fields and required 1920×1080 and 3840×1440 exports; visual calibration remains in progress. - The first **Ūdens temperatūra** workspace is implemented with manual Latvian-named fields and required 1920×1080 and 3840×1440 exports; visual calibration remains in progress.
- Confirmed local Monda Regular/Bold files provide interface and generated-graphic typography; weather symbols use normalized transparent image assets. - Confirmed local Monda Regular/Bold files provide interface and generated-graphic typography; weather symbols use normalized transparent image assets.
- A version-controlled bundle is being prepared for a temporary, isolated VPS user-acceptance deployment built on Rocky and protected by Cloudflare, Nginx, and removable Authelia authentication. VPS directories exist, but no WeatherTool service has been started. - The version-controlled temporary VPS UAT bundle has passed Compose, Authelia, image-build, container-health, loopback HTTP, and database-port-isolation checks on Rocky. VPS directories exist, but no WeatherTool service has been started.
- This is not yet approved or hardened for workplace production. - This is not yet approved or hardened for workplace production.
## Documents ## Documents
docs/VPS_STAGING_PLAN.md
+15 -5
View File
@@ -1,6 +1,6 @@
# Temporary VPS staging plan # Temporary VPS staging plan
Status: **Deployment bundle prepared; runtime directories created; services not started** Status: **Deployment bundle validated on Rocky; VPS runtime directories created; services not started**
This document defines the next deployment stage for approximately one month of This document defines the next deployment stage for approximately one month of
newsroom-user testing. It records the intended boundary before any VPS changes newsroom-user testing. It records the intended boundary before any VPS changes
@@ -163,9 +163,19 @@ must be covered by the origin certificate and proxied through Cloudflare.
- official-style Nginx AuthRequest integration snippets; and - official-style Nginx AuthRequest integration snippets; and
- a disabled Nginx virtual-host example for the app and auth portal. - a disabled Nginx virtual-host example for the app and auth portal.
The bundle is a template until it passes Compose rendering, Authelia validation, Validation completed on Rocky on 2026-08-20:
image build, container health, and private loopback smoke tests. Nginx activation
and public DNS remain later checkpoints. - Compose model rendered successfully without starting the deployment;
- Authelia `4.39.20` parsed the committed configuration without errors;
- the production image built both frontend and backend successfully;
- all three existing Scala tests passed during the image build;
- the isolated production app and PostgreSQL smoke stack became healthy;
- the app returned HTTP 200 through its loopback-only host binding; and
- PostgreSQL had no host port.
Nginx syntax/integration validation, full Authelia login testing, artifact
transfer, VPS private startup, certificate installation, and public DNS remain
later checkpoints.
Known application constraint: provider clients are constructed during startup Known application constraint: provider clients are constructed during startup
even when `ENABLE_SCHEDULED_JOBS=false`. The synthetic UAT Compose file therefore even when `ENABLE_SCHEDULED_JOBS=false`. The synthetic UAT Compose file therefore
@@ -238,5 +248,5 @@ Proposed temporary-staging minimum:
- Deployment account and whether normal releases use public SSH or Tailscale. - Deployment account and whether normal releases use public SSH or Tailscale.
- Final session and backup-retention values. - Final session and backup-retention values.
- Secure operator-side generation and delivery of the shared credential. - Secure operator-side generation and delivery of the shared credential.
- Validation of the prepared production Dockerfile/Compose bundle on Rocky. - Nginx syntax validation against the VPS include/certificate layout.
- Health/readiness behavior suitable for automated release verification. - Health/readiness behavior suitable for automated release verification.