c6150d07aa
All checks were successful
PR build (required check) / changes (pull_request) Successful in 7s
secrets-guard / encrypted (pull_request) Successful in 6s
PR build (required check) / validate-observability (pull_request) Has been skipped
PR build (required check) / gate (pull_request) Successful in 1s
shell-lint / shellcheck (pull_request) Successful in 7s
PR build (required check) / build-backend (pull_request) Has been skipped
PR build (required check) / build-frontend (pull_request) Has been skipped
The per-environment gate on the post-deploy city warm and IndexNow ping was added to deploy/stack/deploy-stack.sh but missed here, on the compose path -- which is the one environment where the default is wrong: dev. Standing dev up on vps1 duly warmed city archives against the shared upstream quota and submitted an IndexNow batch advertising http://10.10.0.2:8137, a mesh address no crawler can reach. IndexNow rejected it (site verification), and the warm was rate-limited after six cities, so the damage was small -- but only by luck, and the warm was still running until the container was restarted. Defaults to 1 when unset, so a checkout predating env-topology.sh keeps prod's historical behaviour. |
||
|---|---|---|
| .. | ||
| backup | ||
| db | ||
| forgejo | ||
| migrations | ||
| openmeteo | ||
| secrets | ||
| stack | ||
| swarm | ||
| twa | ||
| Caddyfile.vps1 | ||
| Caddyfile.vps2 | ||
| deploy-dev.sh | ||
| deploy.sh | ||
| env-topology.sh | ||
| migrate-db.py | ||
| POSTGRES-MIGRATION.md | ||
| provision-agent-access.sh | ||
| provision-dev.sh | ||
| provision-mail-supervision.sh | ||
| provision-mail.sh | ||
| provision-secrets.sh | ||
| render-secrets.sh | ||
| RUNBOOK-vps1-vps2-cutover.md | ||
| thermograph-dev.service | ||
| thermograph.env.example | ||
| thermograph.service | ||