steve
3800b34a2b
CI / Test (rest) (pull_request) Successful in 29s
CI / Lint (pull_request) Successful in 32s
CI / Build (windows/amd64) (pull_request) Successful in 22s
CI / Test (store) (pull_request) Successful in 1m22s
CI / Test (server-http) (pull_request) Successful in 1m30s
CI / Build (linux/amd64) (pull_request) Successful in 22s
CI / Build (linux/arm64) (pull_request) Successful in 41s
Smoothes the rough edges that came up exercising a live deployment.
First-run bootstrap UI: /bootstrap renders a username + password form
that uses the in-memory token directly (operator no longer copies it
out of the log); /login redirects there while bootstrap is available.
Agent reliability: failJob synthetic envelopes so command.run early
returns no longer hang the server-side job; runtime probe of restic
restore --help drives --no-ownership instead of version sniffing
(0.18.x had it removed). Server unit re-shaped: ProtectSystem=full
plus ReadWritePaths=/etc/restic-manager, no ProtectHome — restore
can now write anywhere a user might want.
Restore wizard: default target is /root/rm-restore/<job-id>/ with
clearer help text. Re-init confirm input uses .field (was .input,
which doesn't exist — text was invisible).
NS-01 host delete: store DeleteHost, admin-band /hosts/{id}/delete
with hostname-confirm danger zone, audit, FK cascade, live WS close.
NS-02 enrollment-token recovery: outstanding-tokens panel on
/hosts/new, regenerate (preserves attachments) and revoke handlers
+ audit, store-level ListOutstandingEnrollmentTokens and
DeleteEnrollmentToken.
NS-03 repo init / probe surface: migration 0020 adds
hosts.repo_status + repo_status_error; WS handler projects every
init job's outcome onto the host row (idempotent already-initialised
collapses to ready); creds-save resets status and dispatches a fresh
probe; /hosts/{id}/repo/probe retry endpoint with banner.
NS-04 dashboard live + sort + filter: query-string filter
(q/status/repo_status/tag/sort/dir), 5s htmx live poll mirroring the
alerts pattern with a localStorage live toggle, sortable column
headers, filter row + clear.
Alerts page: ack'd-by line resolves user_id ULID to username.
Compose.yaml ignored — host-specific.
44 lines
879 B
Plaintext
44 lines
879 B
Plaintext
# Build output
|
|
/bin/
|
|
/dist/
|
|
|
|
# Local data / runtime state
|
|
/data/
|
|
/certs/
|
|
*.db
|
|
*.db-journal
|
|
*.db-wal
|
|
*.db-shm
|
|
|
|
# Editor / OS
|
|
.DS_Store
|
|
.idea/
|
|
.vscode/
|
|
*.swp
|
|
*.swo
|
|
|
|
# Coverage
|
|
coverage.out
|
|
coverage.html
|
|
|
|
# Local environment overrides
|
|
.env
|
|
.env.local
|
|
*.local
|
|
|
|
# Local docker-compose for the dev/test bench. Has host-specific IPs,
|
|
# hostnames, and ports — never committed; the canonical reference
|
|
# deployment lives in deploy/.
|
|
/compose.yaml
|
|
/compose.override.yaml
|
|
|
|
# Local diagnostic helpers (never shipped). Go's build tooling already
|
|
# skips paths beginning with _ or ., but ignore explicitly so nothing
|
|
# checked in here can leak into a release tarball.
|
|
/_diag/
|
|
|
|
# Dev-only one-shot binaries (cmd/_*) — never shipped. Go's build
|
|
# tooling already skips paths starting with _, but ignore explicitly
|
|
# so an accidental `git add cmd/.` can't sneak them into a release.
|
|
/cmd/_*/
|