admin/felhom.eu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

REPORT-day2-2026-10-08: the afternoon session
gates / gates (push) Successful in 4m4s
Details

Browse Source 
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
This commit is contained in:
authentik Default Admin
2026-10-08 10:26:29 +02:00
parent d9147b02de
commit b340c7417b
1 changed files with 36 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
REPORT-day2-2026-10-08.md
+36
View File
@@ -0,0 +1,36 @@
# REPORT — 2026-10-08 (afternoon): the morning's four answers built, wger finished, one sheet of decisions
(`REPORT-day2-…` because another session — the website and mailer work — writes in this clone today.)
| Part | Result |
|---|---|
| **A** — Cloudflare as a row | **Done.** R-904 (P4, Security & access, owner operator, DEFERRED — after the first customers). Each fact cites `01`; „TLS ends at the edge" and „flood protection" are NOT written in `01` — said so in the row. |
| **B** — honest FAQ (R-900) | **Done and live** with your yes in chat. Both pages, visible text and structured data (website `b2dce901`). Live read-back: new sentence 2× per page, old line 0×. No other page makes the claim (ASCII search, control „Hetzner"). R-900 closed. |
| **C** — deletion times (R-901) | **Hub: done on main** (`05becb04`), ships tomorrow. **DooPlex job: written and tested, not installed** (`scripts/ep0-copy-gc/`, runbook updated; fail-safe guards added after the commit security review: partial list aborts, one deletion per run, HOLD file). Both times in the privacy draft. R-901 stays open until both are live — see D9. Found: `events` were already pruned at 90 days for everyone; the year bites `notification_log`, which had no deletion at all. Active customers' `notification_log` still has none (noted in the draft). |
| **D** — wger on 9202 (R-762) | **Done.** 9202: 2 workers, anon 246 MiB = 64 % of 384M, 0 kills, 0 restarts over 600 s, login/CSS/photo 200. Catalog `eec9a0d` (CI 1546 success). No ladder step applies (images unchanged — the writer refuses a same-digest re-test; `09` §5.4 renders the catalog template). Drill catalog written and reverted (decision 182). R-762 closed; R-905 opened (283 MB of rebuildable style files in every wger backup). |
| **E** — operator mail for old codes (R-304) | **Done on main**: controller `a40729a` (once a day per box, never the code), hub `5beedcce` (allowlisted, operator-only). Ships tomorrow — the controller needs the hub of the same day. |
| **F** — designs + sheet | **Done.** 8 design files + 1 combined; R-177 and R-298 closed with evidence; R-415 found LOST in the 2026-10-03 triage, re-filed, then FIXED on hub main (R-138 option B: no duplicate, nested or felhom.eu customer domain). Small fixes: R-717's two stale comments; R-298's eject/format button hidden on a backup-target drive. **Not done:** R-79 option A (~2 h, no decision needed — next session), R-554, R-462. |
**Rows: 131 before → 129 after. Opened 3 (R-904, R-415 re-filed, R-905). Closed 5 (R-900, R-177, R-298, R-415, R-762).**
(The brief said 130; the website session's R-903 made it 131 before this session started.)
**Rulings recorded first:** `09` §3 decisions 180–184.
**Waits for tomorrow's releases:**
- **hub:** R-243 alarm (morning), R-901 one-year deletion, R-304 `recovery_older_package`, R-415 domain guard.
- **controller:** morning's R-899 + R-304 honest message; afternoon's R-304 operator mail, R-298 button fix.
- **agent:** morning's R-899 + ring label + R-304 424 (nothing new this afternoon).
- **catalog:** already pushed (wger gunicorn; reaches a box at its next sync — no box runs wger).
- **DooPlex:** the `ep0-copy` removal job — D9.
**Machines:** demo-hp, demo-felhom, Tester 1: read only (two `storage.cfg`/`lsblk` reads by a design helper). 9202: wger
installed and removed through the product; catalog pointer restored (same `controller.yaml` sha256). Bench 9401: stopped,
as found. Hub: read only (three DB copies with `-wal`, each deleted). DooPlex: no change. No release, no deploy, no reboot,
no prune. The website changed only after your yes.
**CI (by head commit):** felhom.eu 1540, 1541, 1542, 1543, 1545 success; controller 1544 success; catalog 1546 success.
One push was refused once by the local hook (a site check caught the website session's half-saved page); re-run green,
pushed normally — no `--no-verify`.
**Decisions:** the sheet D1–D10 in `STATUS.md` („all as picked", or name the numbers you change). Full designs:
`documentation/audits/day-2026-10-08/`.