OpeItcLoc03/admin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
637 Commits 1 Branch 0 Tags
134a789a4d718c2e8530aaa59814ceb86fb470d3
Commit Graph

151 Commits

Author SHA1 Message Date
OpeItcLoc03
9b7e9b2aef meta(wiki): log += ingest concepts/deploy-policy-mappa 2026-08-24 19:16:58 +00:00
OpeItcLoc03
8cb45e04a5 meta(wiki): index += concepts/deploy-policy-mappa 2026-08-24 19:16:57 +00:00
OpeItcLoc03
1a5888e59a meta(wiki): ingest concepts/deploy-policy-mappa in OpeItcLoc03/admin 2026-08-24 19:16:57 +00:00
vitya
b2f3e0f9a4 wiki: router — даты инцидента 2026-08-24, заметка про NTP (часы стояли из-за мёртвого DNS) 2026-08-24 09:39:29 +03:00
vitya
606b1e5b6b wiki: openwrt-router DNS — фикс 2026-06-12 (провайдер режет DoH dns.google/cloudflare-dns.com → 1.1.1.1) 2026-08-24 09:22:15 +03:00
vitya
1f0b7f0cc9 meta(handoff): createPickingListPdf деплой 0.11.1 + смоук ✅ оба тенанта — wiki уроки (proxy-server ломает internal render, bookva-api:3000) 2026-08-24 08:45:36 +03:00
vitya
b64887f301 wiki: sched docker-runner урок — config.json naming, docker-формат образов для registry 2.8.3, host-GC нецелесообразен 2026-08-24 07:56:32 +03:00
vitya
c40f2f415c wiki: деплой books-web a448cad — уроки в ранбук (OCI docker save, Portainer PUT sync, sched smoke) 2026-08-24 00:13:05 +03:00
vitya
a7d87faf01 meta(handoff): #1020 закрыта (деплой v0.5.1 + токен), прод-импорт, books yarn.lock — ложная тревога 2026-08-23 23:01:51 +03:00
vitya
171ee2e9e6 feat(mappa-ntfy-monitor): deploy health monitor mappa → ntfy (#1013) 
- /root/mappa-ntfy-monitor/monitor.py (python3 stdlib): GET /health (200 + ok:true + service:mappa), алерт после 3 подряд фейлов раз за эпизод + recovery
- cron */5 в /etc/cron.d/mappa-ntfy-monitor, env 600 (NTFY_* из pass), топик mappa-alerts
- тесты: dry-run OK / негатив 3× → DOWN-алерт / recovery; стек 26 не тронут
- ранбук §Мониторинг живости; источник скрипта в scripts/
 2026-08-23 19:38:11 +03:00
vitya
e3de639161 docs(wiki): mappa-vds-deploy-runbook — деплой/редеплой mappa на VDS (стек 26) 2026-08-23 18:51:59 +03:00
vitya
5be661acfd docs(wiki): sched runtime→file-managed migration concept (#991) + handoff update 2026-08-23 17:09:58 +03:00
vitya
ebf3831c08 docs(wiki): ingest sched-ozon-creds-stub-contract (anti-leak stubs, incident 2026-08-23) 2026-08-23 15:52:28 +03:00
vitya
46c8a0922e meta(wiki): ingest ForgetMeAI free web-chat proxy analysis (concept + raw) + qwen-web task update (browser path through baxia-WAF) 2026-08-22 20:22:00 +03:00
vitya
ff5e778d74 docs(wiki): qwen-web baxia-WAF findings + shared docker-gpu-crash concept (ingest) 2026-08-22 18:41:13 +03:00
vitya
f2930f6e37 docs(tasks): add llm-web-proxy spec (web-LLM provider for pi+Claude Code) + omniroute tuning wiki 2026-08-22 14:01:53 +03:00
vitya
cbd22be2a2 admin: closing ritual — wiki concept fnf-testing-method (+index/log), STATUS.md бухгалтерия r8/r9 2026-08-19 20:28:14 +03:00
vitya
34e6e2c7ab wiki: ingest round-2 outcome — openapi-generator gotchas + sched-admin-client-openapi updated (all F-1..F-5 closed, raw_ops deleted) 2026-08-18 22:49:08 +03:00
vitya
9c5d8f5ae2 chore(wiki): F&F round concept sched-admin-client-openapi + task close 2026-08-18 22:29:30 +03:00
vitya
114db2956f chore(wiki): concept openapi-generator 3.1 gotchas (F&F sched 2026-08-18) 2026-08-18 22:28:37 +03:00
vitya
ec59917956 chore: wiki +2 концепта (nvm-junction isMain gotcha, nvm-windows switch), 4 июльских ⚪-блока флипнуты 🟢, handoff: волна вышла, ретест в след. сессии 2026-08-18 21:22:32 +03:00
vitya
df1a7ef13b docs(wiki): r8 stand updated — items 4-5 (API 52/52, UI 13/13, findings U1/U2) 2026-08-18 19:12:58 +03:00
vitya
dbce833a98 wiki: ingest 2 concepts — sched-fnf-r8-verification-stand + windows-docker-test-harness-gotchas 2026-08-18 18:25:52 +03:00
vitya
cccf63ffe6 docs(runbook): stostayer prod-config mount = truth for prod; node18 ipv4first gotcha; content-api incident 2026-08-16 21:53:44 +03:00
vitya
cb701214a2 docs(wiki): session close — handoff + ingest pilonuxt restart-vs-redeploy (stack 16 deploy day) 2026-08-16 13:41:34 +03:00
vitya
0582adbb4f wiki: ingest concepts/snolla-smtp-mail-delivery-2026-08 (postmortem SMTP-инцидента + монитор + рецепт деплоя) 2026-08-14 16:07:26 +03:00
vitya
23216c76d6 meta(wiki): FormSubmissions nvarchar coordination closed — op-log decision 2026-08-14 09:20:52 +03:00
vitya
003e71630c meta(wiki): MSSQL FormSubmissions.Content varchar→nvarchar (₽ fix) — op-log 2026-08-14 09:12:58 +03:00
vitya
be54a21316 meta(wiki): inbox-rename audit — .claude-inbox → .agents/inbox clean (op-log record) 2026-08-14 09:08:17 +03:00
vitya
4d3bb2113b meta(wiki): runbook — offline-cache fixed by 5c583f8 (supportedArchitectures), yarn install replenished cache 2026-08-13 12:06:11 +03:00
vitya
79e9ce87e8 fix(inbox): runbook letter path .claude-inbox → .agents/inbox 2026-08-13 12:00:41 +03:00
vitya
5f7d4fdc30 meta(tasks,wiki): stostayer-web 0.3.23 deploy — task done + runbook nuances (offline-build linux-bins, :9000 port, prod tag) 2026-08-13 11:57:47 +03:00
vitya
73b0564d8e wiki(kreknin): автосинк LE-серта git.kreknin.site traefik->nginx (cron 15м) 2026-08-12 19:48:28 +03:00
vitya
c2cb6c0801 wiki(kreknin): LE-серт из traefik acme.json в nginx DSM — из LAN без предупреждений 
Извлечён серт git.kreknin.site (base64 Certificate/Key) из
/volume1/docker/traefik/letsencrypt/acme.json → /usr/local/etc/nginx/ssl_git_kreknin.*,
nginx reverse proxy переведён на него. Из LAN: LE + Gitea 200. DSM-пароль не нужен.
 2026-08-12 19:37:22 +03:00
vitya
514a1e991e wiki(kreknin): reverse proxy git.kreknin.site 443→4443 на DSM nginx — из LAN gitea работает 
443 на NAS занят встроенным nginx DSM (трафик уходил в Synology вместо traefik).
Добавлен server block в server.ReverseProxy.conf (w3conf) + nginx -s reload:
proxy_pass https://127.0.0.1:4443 (TLS-to-traefik! HTTP на 4443 = 404).
Из LAN: DNS-override → 192.168.1.43:443 → nginx → traefik → gitea 200.
Осталось: LE-серт DSM для git.kreknin.site (нужен GUI DSM).
 2026-08-12 19:29:20 +03:00
vitya
88f1bb5fe2 wiki: закрыта gitea-задача на kreknin (DNS-override через RCI, hairpin не чинится) 
- DNS-записи git.kreknin.site/kreknin.site → 192.168.1.43 добавлены через POST /rci/ parse (ip host)
- KeeneticOS 5.1.3 hairpin НЕ чинит (проверено) — DNS-override это решение
- Концепт keenetic-rci-api + ссылка на офиц. CLI-документацию
- Handoff: задача полностью закрыта
 2026-08-12 18:47:04 +03:00
vitya
6844c24b77 wiki(kreknin/keenetic): DNS-override через RCI API решает loopback; концепт keenetic-rci-api 
KeeneticOS 5.1.3: hairpin не работает (проверено после обновления) →
статичные DNS-записи ip host git.kreknin.site/kreknin.site → 192.168.1.43
через POST /rci/ parse. Из LAN всё 200. Правила порт-форвардинга = ip.static (to-host MAC).
 2026-08-12 18:46:28 +03:00
vitya
f8ab0c669b wiki(kreknin): gitea 1.27.1+postgres16 установлен, traefik починен, LE git.kreknin.site live 
Чистая установка gitea+postgres на /volume1 (не SSD), админ kreknin.
Traefik: restart policy unless-stopped (лежал с 07-31, restart был no).
Проброс 80/443→8000/4443 в GUI Keenetic (API Viva закрыт).
NAT loopback сломан — DNS-override git.kreknin.site→192.168.1.43 нужен.
Пароли: pass kreknin/keenetic, pass kreknin/gitea.
 2026-08-12 11:17:17 +03:00
vitya
b01b23f811 meta(kreknin): backups re-enabled + verified after power-cut; rebuild restarted 
- cron restored vds-kzntsv 05:00 + books-vds 06:00; manual runs VERIFIED on kreknin (vds-kzntsv 66G / books-vds 15G, latest->08-10, 7 snaps each)
- books-vds was stale since 08-05 (rsync fails, no alternate trigger); stale ES snapshot daily-2026-08-10 removed
- md3 rebuild restarted from 0 after power-cut (progress not checkpointed); md0/md1 all 4 disks green
- add kreknin_rebuild_mon.sh array monitor (md0/md1/md3 + CRC)

Co-Authored-By: Claude <noreply@anthropic.com>
 2026-08-10 20:13:27 +03:00
vitya
53c2dcced8 meta(kreknin): win10 resolved — Ignore reset paused state, RuTokens re-enumerated to matching addrs 2026-08-10 20:13:27 +03:00
vitya
6f60065991 meta(kreknin): md0/md1 system partitions repaired, disks green 2026-08-10 2026-08-10 20:13:27 +03:00
vitya
9c6ea001e9 meta(kreknin): rebuild md3 started 2026-08-10, cables reseated 2026-08-10 20:13:26 +03:00
vitya
543b10a464 docs(wiki): namespace-consolidation + admin-api-embed concepts 
Документированы два крупнейших изменения сессии 2026-08-04/05:
- Неймспейс-миграция @snollajs→@snolla (17 пакетов, 8 сайтов)
- Admin-api embed в pilonuxt /admin/api, retire стека 25

Co-Authored-By: Claude <noreply@anthropic.com>
 2026-08-05 00:24:42 +03:00
vitya
f49481b80c meta(admin): MinIO split Track A DONE — books-vds minio 2020→2025 (shared + bookva), backup paths updated 
- shared minio (stack 30): mirror 17 buckets → /usr/docker/minio/data-new, Portainer swap, traefik/imgproxy/books apps GREEN
- bookva-minio (stack 49): mirror books (38692 obj) → volume bookva-minio-data-new (docker volume rename unavailable on old daemon)
- backup script (repo + host /opt/stacks/backup/run.sh) repointed to live paths
- runbook Track A progress + gotchas (mc --disable-multipart, sequential mirrors on 3.8G host, CRLF secret)
- handoff for next session (retire old data in 48h, kreknin tomorrow)

Co-Authored-By: Claude <noreply@anthropic.com>
 2026-08-03 17:29:35 +03:00
vitya
1a901b1396 meta(handoff): kreknin rescue session — sdd/VM-volume restore + full rescue to USB + backups paused (→ repair) 
- kreknin Xpenology degraded after compressor dusting (sdb cable lost, md3 degraded, sda/sdc flaky cables)
- sdd/VM-volume (md2, /volume2) restored: DSM Repair + "Convert to read/write", scrub 0 errors
- full rescue 2026-08-02 → USB 2TB btrfs /mnt/rescue (netbackup/*.tar incl. diskstation_1.hbk 430G + 5 user shares)
- daily backups DISABLED (vds-kzntsv 05:00 + books-vds 06:00) — re-enable after repair
- wiki entity kreknin-synology: disk inventory, incident, repair, rescue, plan
- task kreknin-repair-md3-rebuild created (power-off → reseat cables → Repair md3 → re-enable backups)

Co-Authored-By: Claude <noreply@anthropic.com>
 2026-08-03 12:40:51 +03:00
vitya
d82361d16d fix(minio-split): create variant-cache bucket on vds 2025 — sharp gallery-images 500 across all v3 sites 
v3 minio-split перевёл snolla-сайты на minio.vds.kzntsv.site (2025), но variant-cache
bucket не создали там (был на books-vds 2020). snolla sharp-pipeline (variantCache.js
DEFAULT_NAMESPACE=variant-cache, storage.js bucket=storageClient) → NoSuchBucket → 500
на ALL sharp gallery-images всех 6 v3 сайтов с 2026-07-30. v3-gate не поймал: проверял
theme CSS (themes bucket, themeFiles — без sharp), не gallery-image URLs. Заметно на
maljarka portfolio (35 фото). Fix: mc mb vds/variant-cache (пустой, кэш регенерируем).
maljarka portfolio 34/34 → 200 image/webp, tandemmebel logs NoSuchBucket ушли.

- .tasks/STATUS.md + maljarka runbook §Гочи + minio-split-cutover-runbook Track A note
- memory variant-cache-bucket-missing-on-vds-2025

Co-Authored-By: Claude <noreply@anthropic.com>
 2026-07-31 09:20:13 +03:00
vitya
494b101067 feat(maljarka): restore maljarka.tandemmebel.ru as 7th snolla site on VDS (stack 23) 
Сайт потерян при decomm RUVDS 2026-07-21 (.NET MoreThenCms tenant, не был в v3 тираже).
Восстановлен как Node snolla-app 0.43.2 на VDS: victor/maljarka.tandemmebel.ru @7f03d67,
layout.liquid byte-identical рендеру локального .NET-admin (43730B, sha256 match),
siteId A2476738, Reversal тема из MinIO. LE issued. Live smoke GREEN.

- host-stacks/vds-kzntsv/maljarka.compose.yml (source-of-truth, stack 23)
- .wiki/concepts/maljarka-vds-deploy-runbook.md (калька on-snolla runbook)
- .tasks/STATUS.md + .wiki/index.md updated
- тираж snolla теперь 7/7: labtools(17)/emspb(18)/labtools-pro(19)/tandemmebel(20)/kupimknigi(21)/on-snolla(22)/maljarka(23)

Co-Authored-By: Claude <noreply@anthropic.com>
 2026-07-31 06:15:29 +03:00
vitya
18c27ab8f5 meta(handoff): MinIO-split B4 fully closed — gallery preview fixed (MoreThenCms 09cb072d) 
B4 endpoint flip + pre-existing S3-provider KeyNotFoundException bug (gallery preview
ownerId) fixed via drop-in DLL. Preview confirmed live by user. Runbook §B4 + NEXT_SESSION
updated with root cause + fix reference.

Co-Authored-By: Claude <noreply@anthropic.com>
 2026-07-30 19:49:59 +03:00
vitya
84c2d6e981 meta(handoff): MinIO-split B4 DONE — .NET catch-all админ Web.config endpoint → vds minio 
Web.config 6/6 fileStorageClients endpoint minio.kzntsv.site → minio.vds.kzntsv.site
(AWSSDK 1.3.19, us-east-1, forcePathStyle). Pre-flip verify: MINIO_ROOT_USER ==
Web.config accessKey (reuse, no rotation); mc read galleries/assets/themes OK
(B1 mirror live). IIS auto-recycle; https://internal.snolla.com/admin/account/login
200 <title>SNOLLA</title>, login form renders (app boots clean). Asset Manager
preview (authenticated) — user-confirm pending. Backup: Web.config.b4.bak.

Co-Authored-By: Claude <noreply@anthropic.com>
 2026-07-30 19:33:28 +03:00
vitya
1be1ed9ded meta(handoff): B5 Obsidian Remotely Save endpoint DONE — verified flipped to vds minio 
Co-Authored-By: Claude <noreply@anthropic.com>
 2026-07-30 19:27:07 +03:00