ec0bb42258
All checks were successful
PR build (required check) / changes (pull_request) Successful in 5s
secrets-guard / encrypted (pull_request) Successful in 6s
shell-lint / shellcheck (pull_request) Successful in 6s
PR build (required check) / build-frontend (pull_request) Has been skipped
PR build (required check) / validate-observability (pull_request) Has been skipped
PR build (required check) / build-backend (pull_request) Successful in 43s
PR build (required check) / gate (pull_request) Successful in 2s
Two first-prod-stack-deploy findings: DuckDB extensions install to the invoking user's ~/.duckdb, so the root-time httpfs bake left the uid-10001 lake unable to LOAD it (every /query 500'd); and the stack file never disabled the image healthcheck for the daemon, so Swarm killed the healthy gateway every ~100s (compose already disabled it). Bake now runs as the runtime user; the stack matches compose. Prod mitigated live with --no-healthcheck pending this landing. |
||
|---|---|---|
| .. | ||
| db | ||
| forgejo | ||
| migrations | ||
| openmeteo | ||
| secrets | ||
| stack | ||
| swarm | ||
| twa | ||
| Caddyfile | ||
| deploy-dev.sh | ||
| deploy.sh | ||
| migrate-db.py | ||
| POSTGRES-MIGRATION.md | ||
| provision-agent-access.sh | ||
| provision-dev-lan.sh | ||
| provision-mail.sh | ||
| provision-secrets.sh | ||
| render-secrets.sh | ||
| thermograph-dev.service | ||
| thermograph.env.example | ||
| thermograph.service | ||