0 Fork 0

Files

T

jakman85andClaude Opus 4.8 3df5071bd1 Codify host firewall + Gitea bootstrap as IaC (hands-off rebuild)

Per operator: the firewalld rule (VM->host:3000 for the Flux<-Gitea source) must be
IaC, not a manual command (R-ENV-01, R-PLAT-04).
- infra/ansible/playbooks/host-prereqs.yml: idempotent firewalld open on the libvirt
  zone (localhost play, become; no extra collection).
- bootstrap/gitea/bootstrap-gitea.sh: now fully automates admin + public repo + push
  (was manual instructions) — idempotent; creds stay 0600 on host, never committed.
Applying host-prereqs still needs host sudo (I lack non-interactive sudo); with
passwordless become a destroy/rebuild is fully unattended.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

2026-08-16 14:52:08 -05:00

flux

Phase 1 (author-only): Flux + SOPS bootstrap + interface wiring (T-1.4)

2026-08-16 01:21:01 -05:00

gitea

Codify host firewall + Gitea bootstrap as IaC (hands-off rebuild)

2026-08-16 14:52:08 -05:00

sops

Phase 1 (author-only): Flux + SOPS bootstrap + interface wiring (T-1.4)

2026-08-16 01:21:01 -05:00

README.md

Scope Phase 1: dev/test cluster bring-up on local KVM

2026-08-16 00:48:48 -05:00

README.md

bootstrap/ — Flux + SOPS age-key bootstrap (Phase 1 T-1.4)

sops/: age key generation + Flux SOPS decryption wiring (private key NEVER committed). flux/: flux bootstrap config pointing at clusters/dev. Spec: ADR-0004, ADR-0007.