 Timothy J. Aveni
|
c8c930966b
|
Improve runtime deployment audit
|
2026-07-11 20:09:03 -07:00 |
|
|
Timothy J. Aveni
|
6f60982fda
|
Fix nix cache AAAA planning
|
2026-07-02 23:06:34 -07:00 |
|
|
Timothy J. Aveni
|
f1a85d2aa2
|
Add private internal DNS for cache
|
2026-07-02 22:22:11 -07:00 |
|
|
Timothy J. Aveni
|
4b1c1da2e2
|
Use direct cache address for first boot
|
2026-07-02 22:14:22 -07:00 |
|
|
Timothy J. Aveni
|
5dbb5f609e
|
Expose early build cache hints
|
2026-07-02 11:22:32 -07:00 |
|
|
Timothy J. Aveni
|
9f991ad394
|
Compose ZFS nix-store module from AMI builder
|
2026-06-30 21:46:06 -07:00 |
|
|
Timothy J. Aveni
|
af817ab8b1
|
Own nix cache signing key on cache host
|
2026-06-30 21:08:52 -07:00 |
|
|
Timothy J. Aveni
|
cfb4eda9ce
|
Update AMI builder timing logs
|
2026-06-30 20:09:27 -07:00 |
|
|
Timothy J. Aveni
|
7bdfcf44a7
|
Update AMI builder auto approve
|
2026-06-30 19:15:06 -07:00 |
|
|
Timothy J. Aveni
|
0481a5789b
|
Update AMI builder module refactor
|
2026-06-30 19:11:32 -07:00 |
|
|
Timothy J. Aveni
|
56073d41d4
|
Update AMI builder switch runner PATH
|
2026-06-30 19:03:05 -07:00 |
|
|
Timothy J. Aveni
|
e358f2cdab
|
Bump AMI builder capacity defaults
|
2026-06-30 07:19:28 -07:00 |
|
|
Timothy J. Aveni
|
58b150ca07
|
Update AMI builder user-data switch
|
2026-06-30 07:14:46 -07:00 |
|
|
Timothy J. Aveni
|
e47991064e
|
Add swap for nix cache hosts
|
2026-06-29 22:44:22 -07:00 |
|
|
Timothy J. Aveni
|
87fe254178
|
Require nix cache metadata by default
|
2026-06-29 22:40:04 -07:00 |
|
|
Timothy J. Aveni
|
ab6aae45fb
|
Handle nix cache bootstrap in central
|
2026-06-29 22:36:31 -07:00 |
|
|
Timothy J. Aveni
|
c17953344b
|
Wire hosts to internal nix cache
|
2026-06-29 21:46:05 -07:00 |
|
|
Timothy J. Aveni
|
b09f7b7080
|
Derive nix cache VPC CIDRs from AWS
|
2026-06-29 21:35:14 -07:00 |
|
|
Timothy J. Aveni
|
8d7ccb1239
|
Add dedicated nix cache service
|
2026-06-29 09:45:08 -07:00 |
|
|
Timothy J. Aveni
|
d758a99b8d
|
Render Nix lists in runtime user data
|
2026-06-28 22:41:48 -07:00 |
|
|
Timothy J. Aveni
|
2783b93882
|
Trust central proxy forwarded headers
|
2026-06-28 22:26:30 -07:00 |
|
|
Timothy J. Aveni
|
3ea6319075
|
Avoid sensitive taint on central app outputs
|
2026-06-28 21:49:16 -07:00 |
|
|
Timothy J. Aveni
|
b651e59d40
|
Use pinned OpenTofu in dev shell
|
2026-06-28 21:44:38 -07:00 |
|
|
Timothy J. Aveni
|
b6ffc25755
|
Stop deploy from reconfiguring central backend
|
2026-06-28 21:36:58 -07:00 |
|
|
Timothy J. Aveni
|
50603b4cc8
|
Collapse runtime persistence to deployment-local persist
|
2026-06-28 21:30:33 -07:00 |
|
|
Timothy J. Aveni
|
c31c89e369
|
Accept Terraform ECDSA proxy signing keys
|
2026-06-28 21:10:17 -07:00 |
|
|
Timothy J. Aveni
|
390cd1e182
|
Reconfigure central backend only when needed
|
2026-06-28 21:08:35 -07:00 |
|
|
Timothy J. Aveni
|
bfc9a172d9
|
Avoid interleaving AMI lookup with prompts
|
2026-06-28 21:07:22 -07:00 |
|
|
Timothy J. Aveni
|
7c89c2ff41
|
Initialize central backend from deploy wrapper
|
2026-06-28 21:04:22 -07:00 |
|
|
Timothy J. Aveni
|
7c87f26418
|
Report central output lookup failures
|
2026-06-28 21:02:40 -07:00 |
|
|
Timothy J. Aveni
|
0bfc9aa934
|
Use standalone central proxy security group rules
|
2026-06-28 20:19:24 -07:00 |
|
|
Timothy J. Aveni
|
6e57673404
|
Add central proxy registration
|
2026-06-28 19:37:47 -07:00 |
|
|
Timothy J. Aveni
|
b97cde14af
|
Persist central app-server Caddy state
|
2026-06-28 18:39:39 -07:00 |
|
|
Timothy J. Aveni
|
1fc506a7c5
|
Force-disable SSH on central app-server
|
2026-06-28 18:28:40 -07:00 |
|
|
Timothy J. Aveni
|
f8530bf8ac
|
Export expected central user-data host
|
2026-06-28 18:05:50 -07:00 |
|
|
Timothy J. Aveni
|
2c255259a4
|
Output central app-server SSM target
|
2026-06-28 18:04:05 -07:00 |
|
|
Timothy J. Aveni
|
d4b1d181af
|
Read central AMI from SSM artifact parameter
|
2026-06-28 17:42:11 -07:00 |
|
|
Timothy J. Aveni
|
929a08d9ad
|
Let central services share runtime AMI input
|
2026-06-28 17:19:06 -07:00 |
|
|
Timothy J. Aveni
|
156c5f0cc4
|
Fix central backend config generation
|
2026-06-28 15:35:51 -07:00 |
|
|
Timothy J. Aveni
|
e8084aa019
|
Add central backend init helper
|
2026-06-28 15:33:02 -07:00 |
|
|
Timothy J. Aveni
|
460ed952cc
|
Make central state bucket explicit
|
2026-06-28 15:26:29 -07:00 |
|
|
Timothy J. Aveni
|
3fb210a23c
|
Add central app-server infrastructure skeleton
|
2026-06-28 13:27:58 -07:00 |
|
|
Timothy J. Aveni
|
03265dad02
|
Prefetch AMI candidates during deploy prompts
|
2026-06-28 12:05:44 -07:00 |
|
|
Timothy J. Aveni
|
d3b95c3283
|
Validate deploy tfvars before prompting
|
2026-06-28 12:02:34 -07:00 |
|
|
Timothy J. Aveni
|
73fc97edff
|
Enforce qx-deploy variable ownership
|
2026-06-28 12:00:19 -07:00 |
|
|
Timothy J. Aveni
|
15745128cf
|
Use explicit deploy vars for runtime apply
|
2026-06-28 11:47:54 -07:00 |
|
|
Timothy J. Aveni
|
3dd7a0ed6b
|
Stabilize deploy tfvars for saved plans
|
2026-06-28 11:43:43 -07:00 |
|
|
Timothy J. Aveni
|
767801bfc8
|
Make qx-deploy domain override stale tfvars
|
2026-06-28 11:37:52 -07:00 |
|
|
Timothy J. Aveni
|
164943c401
|
Improve deploy interactive prompts
|
2026-06-28 11:34:03 -07:00 |
|
|
Timothy J. Aveni
|
408d114be7
|
Add explicit AMI selection for deploys
|
2026-06-28 11:28:19 -07:00 |
|