8 Commits

Include renames

Author	SHA1	Message	Date
ctao	cec8018c18	handoff pass: vendored sveltia bundle, astro pinned ^7.2.10, root README + refreshed deploy runbook, review fixes (coverless card grid, shared NewsCard/lib, real site origin, nginx security headers, linger step, dead config removed, preview.css sync, tsconfig)	2026-09-03 14:56:53 +02:00
ctao	c64528a1d3	cors: full-origin ALLOW_DOMAIN (no SCHEME key in 1.27) + Authorization in allowed headers	2026-07-29 10:47:02 +02:00
ctao	746b015e85	vhost switch: Sveltia backend + Gitea ROOT_URL to https ingress domains, CORS locked to the portal origin	2026-07-29 10:35:26 +02:00
ctao	c0d06f4a17	fix: /admin redirect loses port behind tunnel/proxy (absolute_redirect off, trailing slash in footer link)	2026-07-28 19:24:34 +02:00
ctao	99f5601456	deploy log: OAuth app via API, Sveltia pointed at machine Gitea, editor-cycle latency measured (12s/21s)	2026-07-28 18:35:41 +02:00
ctao	46ec5e2e3c	deploy: npm ci --ignore-scripts (kills postinstall vector + esbuild ETXTBSY race); persistent npm cache; deployment log	2026-07-28 15:39:00 +02:00
ctao	80d886c0cb	deploy: join gitea netns instead of bridge (machine kernel lacks ip_tables for rootless netavark); pin image digests; push-to-create repo	2026-07-28 14:07:44 +02:00
ctaoandClaude Fable 5	ed7a9c01e7	deploy: machine deployment — quadlets (gitea, nginx, isolated build network), poll+build pipeline, runbook ... Reviewed (Opus security review, all findings verified) and tested end-to-end locally: cold build 23s, no-op poll 45ms, incremental rebuild 4s, prune, gitea-down grace, real bridge network with container DNS. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012jWfn3RwPfFGTtBddm36Uy	2026-07-28 13:44:46 +02:00