Jinemi/thermograph
4
0
Fork 0
Code Issues 2 Pull requests 9 Projects Releases Packages Wiki Activity Actions

Commit graph

  • 4dcd6775c4 make: add root install/up/down for the local stack dev Emi Griffith 2026-08-01 13:14:32 -0700
  • 1afe6fbaac Merge pull request 'promote: main → release (jinemi registry namespace, Caddy trusted_proxies, CI login fix)' (#159) from main into release release admin_emi 2026-08-01 19:38:48 +0000
  • 880ef395de Merge pull request 'promote: dev → main (doc accuracy pass, runner unit fix)' (#158) from dev into main main admin_emi 2026-08-01 18:58:24 +0000
  • 9f9c436424 Merge pull request 'forgejo: make the desktop runner unit restart-always, fix the vps2 config path' (#157) from feat/forgejo-runners into dev Emi Griffith 2026-08-01 18:52:51 +0000
  • fe844a3193 Merge dev into feat/forgejo-runners (dev moved while #157 was open) Emi Griffith 2026-08-01 11:52:12 -0700
  • 83b074fa9e Merge pull request 'docs: correct file references and the dev reachability claim' (#156) from fix/doc-accuracy into dev admin_emi 2026-08-01 18:51:08 +0000
  • f25466ca76 forgejo: make the desktop runner unit restart-always, fix the vps2 config path Emi Griffith 2026-08-01 11:50:42 -0700
  • af21d8e477 docs: correct file references and the dev reachability claim Emi Griffith 2026-08-01 11:49:28 -0700
  • 955a64a18e Merge pull request 'promote: dev → main (Forgejo on dev.jinemi.com; jinemi registry namespace)' (#152) from dev into main Emi Griffith 2026-08-01 18:27:41 +0000
  • 62ba381d06 Merge pull request 'build-push: drop the empty ${{ }} that silenced the registry login' (#155) from fix/build-push-empty-expression into dev admin_emi 2026-08-01 18:18:45 +0000
  • 5f7075e2cf build-push: drop the empty ${{ }} that silenced the registry login Emi Griffith 2026-08-01 11:17:48 -0700
  • d6553a7a05 build-push: stop a whitespace-tainted REGISTRY_TOKEN failing as "denied" fix/registry-login-whitespace Emi Griffith 2026-08-01 10:16:32 -0700
  • 486a194086 forgejo: record why the runner is on vps2, rather than leaving a contradiction docs/runner-vps2-decision Emi Griffith 2026-08-01 09:59:14 -0700
  • 9e0128bf01 Merge pull request 'registry: move image and repo references to the Jinemi namespace' (#150) from fix/registry-namespace-admin-emi into dev admin_emi 2026-08-01 16:41:22 +0000
  • 73fcb174ef Merge remote-tracking branch 'origin/dev' into fix/registry-namespace-admin-emi Emi Griffith 2026-08-01 09:38:16 -0700
  • 209cce1cb5 Merge pull request 'forgejo: make dev.jinemi.com canonical (ROOT_URL and OAuth callback)' (#151) from feat/forgejo-oauth-jinemi into dev admin_emi 2026-08-01 16:33:16 +0000
  • a83a0b7d32 forgejo: make dev.jinemi.com canonical (ROOT_URL and OAuth callback) Emi Griffith 2026-08-01 09:32:12 -0700
  • 6745f8db27 Merge remote-tracking branch 'origin/dev' into fix/registry-namespace-admin-emi Emi Griffith 2026-08-01 09:31:18 -0700
  • 7fca3556e8 Merge pull request 'forgejo: serve dev.jinemi.com alongside git.thermograph.org' (#148) from feat/forgejo-jinemi-alias into dev admin_emi 2026-08-01 16:28:49 +0000
  • 000a8a1048 Merge dev into feat/forgejo-jinemi-alias (dev moved while #148 was open) Emi Griffith 2026-08-01 09:27:04 -0700
  • df409f88b3 registry: move image and repo references to the Jinemi namespace Emi Griffith 2026-07-30 20:53:26 -0700
  • 3993b7552f lb: trust the host Caddy's X-Forwarded-Proto fix/lb-forwarded-proto Emi Griffith 2026-08-01 09:06:11 -0700
  • 75968980f9 openbao: make verify-parity --all host-aware fix/parity-all-host-aware Emi Griffith 2026-08-01 09:18:05 -0700
  • 5b5f28560d gitignore: ignore .claude/settings.local.json Emi Griffith 2026-08-01 09:16:06 -0700
  • b62eb60121 infra-sync: render /etc/centralis.env from the vault feat/sync-centralis-env Emi Griffith 2026-08-01 09:10:34 -0700
  • 396b80cf91 forgejo: serve dev.jinemi.com alongside git.thermograph.org Emi Griffith 2026-08-01 09:01:59 -0700
  • 7b3ea69ef9 secrets: validate CENTRALIS_TEAM at render time, like CENTRALIS_TOKENS feat/centralis-team-validation Emi Griffith 2026-08-01 08:43:21 -0700
  • 7b14b9062c openbao: make the parity gate actually work, and run it nightly fix/openbao-parity-gate Emi Griffith 2026-08-01 08:36:35 -0700
  • 001e6b1365 ci: add an always-on Actions runner on vps2 ops/runner-vps2 Emi Griffith 2026-08-01 07:54:28 -0700
  • 90142cebbf Merge branch 'release' into main chore/downmerge-release-to-main Emi Griffith 2026-08-01 07:29:21 -0700
  • 7e68c07b27 Merge pull request 'promote: dev → main' (#139) from dev into main admin_emi 2026-07-31 05:18:02 +0000
  • 4ae50ff759 Merge pull request 'secrets: make the two-host age key quorum a checked policy' (#137) from feat/age-recovery-quorum into dev admin_emi 2026-07-31 05:14:22 +0000
  • b2077b5294 secrets: make the two-host age key quorum a checked policy feat/age-recovery-quorum Emi Griffith 2026-07-30 20:26:37 -0700
  • b32c7b6b11 Merge pull request 'rotate Contabo S3 credentials' (#138) from fix/rotate-contabo-s3 into dev admin_emi 2026-07-31 05:12:41 +0000
  • 11f1275998 rotate Contabo S3 credentials fix/rotate-contabo-s3 Emi Griffith 2026-07-30 21:24:18 -0700
  • 657e27ba9f openbao: render Centralis from the vault feat/openbao-centralis-renderer Emi Griffith 2026-07-30 19:55:17 -0700
  • 5001269b37 openbao: derive the AppRole credential path per environment fix/openbao-approle-per-env Emi Griffith 2026-07-30 19:49:28 -0700
  • 702bcd920c openbao: fix bootstrap so it completes on 2.6.x fix/openbao-bootstrap-2-6 Emi Griffith 2026-07-30 19:47:22 -0700
  • dbc79351a2 Merge pull request 'promote: dev → main' (#131) from dev into main emi 2026-07-30 18:19:26 +0000
  • 2776a6cdb2 Merge pull request 'openbao: add a dormant OpenBao backend alongside SOPS' (#130) from openbao-backend into dev emi 2026-07-30 18:13:22 +0000
  • 1941b184e5 Merge dev into openbao branch (dev moved when #128 landed) worktree-openbao-migration Emi Griffith 2026-07-30 11:09:45 -0700
  • 8a2c838663 forgejo: restart the db service on a clean exit, not just on failure Emi Griffith 2026-07-29 21:42:01 -0700
  • 7878763b66 forgejo: restart the db service on a clean exit, not just on failure Emi Griffith 2026-07-29 21:42:01 -0700
  • 6bd07d33cb openbao: add a dormant OpenBao backend alongside SOPS Emi Griffith 2026-07-29 21:35:20 -0700
  • 94de933cab Merge pull request 'promote: dev → main (sign in with Google; shared OAuth engine)' (#127) from dev into main emi 2026-07-27 01:00:41 +0000
  • deb039ee24 accounts: sign in with Google, on a shared provider-agnostic OAuth engine (#122) emi 2026-07-27 00:56:43 +0000
  • 81135c1be5 accounts: sign in with Google, on a shared provider-agnostic OAuth engine Emi Griffith 2026-07-26 12:06:56 -0700
  • 1d4defefb9 BRANCHING: the escape hatch, now that apply_to_admins binds the owner too Emi Griffith 2026-07-26 15:05:26 -0700
  • 890cb4a764 docs: the orchestrator runbook and the module map Emi Griffith 2026-07-26 12:53:33 -0700
  • ad4d2da120 promote: dev → main emi 2026-07-26 19:52:21 +0000
  • 0617a3b067 db: raise max_connections to 200, cap work_mem at 64MB, trim async pool overflow (#124) emi 2026-07-26 19:48:50 +0000
  • 2a5cc53a4f tests: assert the pool budget fits max_connections instead of pinning overflow emi 2026-07-26 19:47:14 +0000
  • 2dcfd2aa69 accounts: trim async pool max_overflow 5 -> 2 emi 2026-07-26 19:44:11 +0000
  • 707abe033e db: raise max_connections to 200, cap work_mem at 64MB, trim async pool overflow emi 2026-07-26 19:43:26 +0000
  • beb5fa5259 bookmarks: don't fabricate a local save when the server rejects it (#121) emi 2026-07-26 18:51:02 +0000
  • 2a4f516798 frontend: load bookmarks-ui.js from the Go SSR home template too (#120) emi 2026-07-26 18:49:42 +0000
  • 3ec72ca75b bookmarks: don't fabricate a local save when the server rejects it (#121) emi 2026-07-26 18:51:02 +0000
  • b57e280ad6 frontend: load bookmarks-ui.js from the Go SSR home template too (#120) emi 2026-07-26 18:49:42 +0000
  • 88403320f1 bookmarks: don't fabricate a local save when the server rejects it emi 2026-07-26 18:48:34 +0000
  • 41cf11afad bookmarks: don't fabricate a local save when the server rejects it emi 2026-07-26 18:48:32 +0000
  • a316adadc4 frontend: load bookmarks-ui.js from the Go SSR home template too emi 2026-07-26 18:48:13 +0000
  • 4f21e47750 Merge pull request 'promote: dev → main (location bookmarks)' (#119) from dev into main emi 2026-07-26 18:46:01 +0000
  • 9f2bbf8da7 bookmarks: map + account UI for saved locations feat/location-bookmarks-ui emi 2026-07-26 18:39:34 +0000
  • d257558201 bookmarks: map + account UI for saved locations emi 2026-07-26 18:39:32 +0000
  • 17ddae5284 bookmarks: map + account UI for saved locations emi 2026-07-26 18:39:31 +0000
  • d53b152dde bookmarks: map + account UI for saved locations emi 2026-07-26 18:39:28 +0000
  • 1c6ecc2a6f bookmarks: map + account UI for saved locations feat/location-bookmarks emi 2026-07-26 18:36:43 +0000
  • 17cc14b48b bookmarks: map + account UI for saved locations emi 2026-07-26 18:36:39 +0000
  • d6ead56971 bookmarks: map + account UI for saved locations emi 2026-07-26 18:36:34 +0000
  • 4e1c4a4197 bookmarks: map + account UI for saved locations emi 2026-07-26 18:36:31 +0000
  • 41858f3e4b bookmarks: account-synced saved locations API emi 2026-07-26 18:27:45 +0000
  • 58e3a8d625 bookmarks: account-synced saved locations API emi 2026-07-26 18:27:44 +0000
  • 53fd5d9225 bookmarks: account-synced saved locations API emi 2026-07-26 18:27:43 +0000
  • 3fafd67600 bookmarks: account-synced saved locations API emi 2026-07-26 18:27:41 +0000
  • 67284dfe2e bookmarks: account-synced saved locations API emi 2026-07-26 18:27:40 +0000
  • efcf32defc Merge pull request 'promote: dev → main (sign in with Discord)' (#116) from dev into main emi 2026-07-26 18:22:03 +0000
  • 8572c4aa6d accounts: sign in with Discord, sharing the existing link callback (#115) emi 2026-07-26 18:16:55 +0000
  • 8b70a87555 accounts: sign in with Discord, sharing the existing link callback Emi Griffith 2026-07-26 10:43:17 -0700
  • c1ab9410d3 Merge pull request 'promote: dev → main' (#114) from dev into main emi 2026-07-26 08:29:19 +0000
  • 801c767115 dev: leave /healthz outside the basic-auth boundary (#113) emi 2026-07-26 08:28:18 +0000
  • 492f64a581 dev: leave /healthz outside the basic-auth boundary Emi Griffith 2026-07-26 01:25:07 -0700
  • c86489b207 Merge pull request 'promote: dev → main (dev behind basic auth at dev.thermograph.org)' (#112) from dev into main emi 2026-07-26 08:06:32 +0000
  • 4122f4353b dev: serve at dev.thermograph.org behind basic auth, bound to loopback (#111) emi 2026-07-26 07:49:43 +0000
  • fed307e75c dev: serve at dev.thermograph.org behind basic auth, bound to loopback Emi Griffith 2026-07-26 00:45:58 -0700
  • e6d9b36742 Merge pull request 'promote: dev → main (cutover fixes: sync-dev guard, owner-db hardening, post-deploy gate)' (#110) from dev into main emi 2026-07-26 07:29:33 +0000
  • 64986189e1 deploy.sh: honour TG_POST_DEPLOY on the compose path too (#109) emi 2026-07-26 07:28:43 +0000
  • c6150d07aa deploy.sh: honour TG_POST_DEPLOY on the compose path too Emi Griffith 2026-07-26 00:25:47 -0700
  • 5c41ee4dad provision-env-db: revoke PUBLIC connect on the owner database too (#108) emi 2026-07-26 07:17:20 +0000
  • 24b7ef4c86 runbook: chown the new Caddy log before reloading Emi Griffith 2026-07-26 00:16:36 -0700
  • 1aeea6bdc5 provision-env-db: revoke PUBLIC connect on the OWNER database too Emi Griffith 2026-07-26 00:12:25 -0700
  • d5357d0670 Merge pull request 'promote: dev → main (vps1/vps2 estate split)' (#106) from dev into main emi 2026-07-26 07:07:28 +0000
  • 7583258509 infra-sync: refuse to render dev's vault onto a host that is not dev (#107) emi 2026-07-26 07:05:09 +0000
  • e393a7a111 infra-sync: refuse to render dev's vault onto a host that is not dev Emi Griffith 2026-07-26 00:04:25 -0700
  • d138f00a20 infra: split the estate into vps1/vps2 — beta joins prod, dev gets a home (#103) emi 2026-07-26 06:56:38 +0000
  • 4d6ce5b70b Merge pull request 'promote: dev → main (Weekly UTC-today date fix)' (#105) from dev into main emi 2026-07-26 06:22:09 +0000
  • 5b7e30dad9 fix(frontend): Weekly view must always send an explicit date to /grade emi 2026-07-26 06:20:19 +0000
  • 2d45af8d3a test: correct the regression guard's docstring about the test surface emi 2026-07-26 06:19:18 +0000
  • ab4ba54575 fix(frontend): keep the /cell prefetch seeding the dated grade URL emi 2026-07-26 06:18:37 +0000
  • 44b02d985a fix(frontend): Weekly view must always send an explicit date to /grade emi 2026-07-26 06:17:26 +0000
  • 1a7f92be66 fix(frontend): Weekly view must always send an explicit date to /grade emi 2026-07-26 06:17:25 +0000