OpeItcLoc03/admin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
302 Commits 1 Branch 0 Tags
55a873731f58b2b4f0bdda1a1f6a398d170d219d
Commit Graph

168 Commits

Author SHA1 Message Date
vitya
fd8bb13e75 resilience(roadmap): workshop pass 1 — close design-task; file top-3 impl-tasks 
- close [resilience-roadmap-design] 🟢 — roadmap expanded via interactive workshop
  with user (per-service RTO/RPO matrix for 10 services, CMS backup 2-phase plan,
  IIS migration track, 4 secondary topics documented as recommendations)
- file 3 impl-tasks ⚪ ready (spawned by roadmap-design):
  - cms-stopgap-backup-daily — Phase 1, plug RPO=∞ via daily rsync to kreknin
  - mssql-minio-migration-to-vds — Phase 2 enabler, achieves RPO 1h target
  - windows-hosting-vendor-research — design-task for IIS migration off home host
- unblock [admin-infra-project-review] 🔵 → ⚪ (last blocker cleared)
- expand .wiki/concepts/future-resilient-architecture-goals.md with §Workshop pass 1
  (canonical) above original §Pre-workshop placeholder (historical)

Key user-decisions zafiksirovany in workshop:
- CMS RTO 4h / RPO 1h (not 1h/15min — overkill for one-person infra)
- MSSQL+MinIO migrate to VDS (not Windows-side managed hosting)
- MSSQL Always-On AG rejected — log shipping every 60min sufficient
- IIS long-term dies with snolla-on-node; transitional via managed Windows host
- Cloud off-site = Yandex Object Storage when needed (kreknin already off-site)
- Monitoring = Uptime Kuma on VDS, high-priority among not-filed

Acceptance per spec (user confirmed plan + concrete impl-tasks top-3 + doc committed) — met.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-21 16:25:04 +03:00
vitya
d20a9d41e4 tasks: close secrets-manager-adopt 🟢 (etap-2 secret-management complete) 
Pass-based encrypted-at-rest secret store live:
- gpg key RSA 4096 (fpr 0CB0B019...4FE3F59E), no expiration
- pass v1.7.4 at ~/.local/bin/pass (manual clone)
- 5 entries: interns/ollama-cloud-api-key, gitea/admin-token,
  vds-kzntsv/full-env, kreknin/full-env, snolla-smtp/full-env
- gpg-agent: pinentry-w32 + 30-day cache TTL
- Wrapper ~/.local/bin/interns-mcp-launcher.sh — pass show → env →
  exec python -m interns_mcp.server
- ~/.claude.json mcpServers.interns swapped to wrapper bash invocation
- Cross-machine: OpeItcLoc03/password-store-private (private), 7 commits
- Plaintext ~/.config/projects-secrets/ cleaned (5 secret files removed;
  README rewritten as pass-pattern marker)

Acceptance: all 4 spec criteria met.

Open follow-ups:
- meeting-room dirty WIP (etap-1 edit unstaged) — user decision needed
- setup-interns SKILL v0.5.0 — migrate phase 5/6 to pass+wrapper
- New endpoints — pattern documented in projects-secrets/README.md

Closes secrets-manager-adopt (admin agenda E.3); secrets-out-of-common
+ secrets-manager-adopt chain (E.1 → E.3) fully shipped this session.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-21 14:55:32 +03:00
vitya
7493e07b34 tasks: close secrets-out-of-common 🟢; promote secrets-manager-adopt 🔴 
Etap-1 (secrets-out-of-common) done: 9 files migrated to
~/.config/projects-secrets/ (outside any git tree); interns-mcp
+ meeting-room consumers updated to env-override pattern;
setup-interns / using-interns skills updated + version-bumped;
safety filter ALWAYS_ASK_PATTERNS extended with **/projects-secrets/**.
.common/secrets/ removed entirely. Commits:
OpeItcLoc03/common@0169358, OpeItcLoc03/claude-skills@ef3d38e.

Open follow-up: meeting-room config.py edit unstaged due to pre-existing
dirty state (UU conflict + 13 staged files not authored by this session).

Etap-2 (secrets-manager-adopt) starts now — gpg + pass install,
key gen, migrate plaintext to encrypted, cross-machine via private Gitea.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-21 14:24:11 +03:00
vitya
2c486860ec chore: close verify-migration with findings F1-F3 (migration structurally complete) 
Findings (not migration-blocking — verification surface issues):
- F1: tasks_aggregate filter quirk for OpeItcLoc03/* (cache content correct)
- F2: knowledge_search scope ≠ project wikis (spec acceptance criteria 3-4 mis-scoped)
- F3: git log --follow does not bridge subtree-merge graft (workaround documented)

Migration chain done: 4 admin-side + 3 morecms-side commits + 2 pushes.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-21 14:02:39 +03:00
vitya
47ae0dccc6 chore: close morecms-cleanup-and-breadcrumb; unblock verify-migration → active 
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-21 14:00:38 +03:00
vitya
14ee2ef85a chore: close admin-subtree-import-and-cleanup; unblock morecms-cleanup + resilience-roadmap-design 
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-21 13:55:31 +03:00
vitya
c55cb11948 tasks: merge imported MoreThenCms task history with admin live agenda 
- 7 admin per-task files moved from .tasks-imported/ to .tasks/ (renames)
- NEXT-SESSION-PROMPT.md (iis-migration session handoff) kept as sibling
- .tasks-imported/STATUS.md removed (content merged into admin STATUS.md)
- admin STATUS.md gains 'Imported from MoreThenCms' section with all 7 admin
  done tasks verbatim. 4 CMS-domain task blocks excluded (stay in MoreThenCms):
  cms-admin-assets-root-folders-seed, cms-port-leak-fix,
  traefik-maljarka-502-bug, cms-maljarka-https-mode-bug-fix
- morecms-subtree-split marked done (acceptance: 4 split branches exist with
  per-file history)
- admin-subtree-import-and-cleanup marked active (in-progress this session)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-21 13:51:48 +03:00
vitya
d558ccfaed chore: mark admin-infra-project-pointers done, unblock morecms-subtree-split 
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-21 13:37:10 +03:00
OpeItcLoc03
40009b1b80 meta(tasks): create [admin-infra-project-review] in OpeItcLoc03/admin 2026-05-21 10:25:44 +00:00
OpeItcLoc03
3bcabfa3cc meta(tasks): create [secrets-manager-adopt] in OpeItcLoc03/admin 2026-05-21 10:25:15 +00:00
OpeItcLoc03
7363064d82 meta(tasks): create [secrets-out-of-common] in OpeItcLoc03/admin 2026-05-21 10:24:49 +00:00
OpeItcLoc03
8464d302a4 meta(tasks): create [resilience-roadmap-design] in OpeItcLoc03/admin 2026-05-21 10:24:25 +00:00
OpeItcLoc03
6a3361a583 meta(tasks): create [verify-migration] in OpeItcLoc03/admin 2026-05-21 10:23:55 +00:00
OpeItcLoc03
0c7c5f6236 meta(tasks): create [morecms-cleanup-and-breadcrumb] in OpeItcLoc03/admin 2026-05-21 10:23:38 +00:00
OpeItcLoc03
a009132367 meta(tasks): create [admin-subtree-import-and-cleanup] in OpeItcLoc03/admin 2026-05-21 10:23:15 +00:00
OpeItcLoc03
be8cb07ac7 meta(tasks): create [morecms-subtree-split] in OpeItcLoc03/admin 2026-05-21 10:22:51 +00:00
OpeItcLoc03
7aae45cdf0 meta(tasks): create [admin-infra-project-pointers] in OpeItcLoc03/admin 2026-05-21 10:22:00 +00:00
vitya
34e779e002 bootstrap: admin project skeleton (CLAUDE.md, .wiki/, .tasks/) 2026-05-21 13:17:45 +03:00