13 Commits
Author SHA1 Message Date
Bill b6b03bcb0a sops: standardize recovery recipient on age1ethpg (retire orphaned age1usp4) 2026-09-07 18:31:28 -04:00
Bill a7e276cc7e SOPS: require multi-recipient standard (bill + owning host + recovery); retire sole-admin key 2026-09-07 17:54:41 -04:00
Bill a4d0dcee23 Improve SOPS documentation with better patterns and troubleshooting
- Update path_regex to match input files during encryption
- Update encrypted_regex to match fields containing patterns (not just ending)
- Add table of common field patterns matched by encrypted_regex
- Update Makefile with proper --output-type yaml/dotenv flags
- Add troubleshooting section for common SOPS errors
2026-08-29 15:13:58 -04:00
Bill 352a17694e feat: require one ZFS dataset per stack for appdata (snapshot isolation)
Enforce per-stack ZFS datasets so a single stack can be snapshotted/
rolled back/restored independently. Adds REQUIRED Appdata Storage section
with rationale, verification (df -T), rationalization table, non-ZFS
fallback, and optional DB recordsize tuning; makes 'zfs create' step 1
of Creating a New Project.
2026-06-27 17:01:26 -04:00
Bill d571e56b05 Add deploying updates from merged PRs section
Document workflow for pulling and redeploying stacks after merging
Renovate bot PRs, including override file handling and verification.
2026-04-11 13:48:18 -04:00
Bill cf42d644f1 Add environment variable isolation convention
Prohibit env_file directives to prevent environment contamination.
Services should explicitly declare only the variables they need.
2026-02-02 09:21:49 -05:00
Bill 3f5ca7c0dd Simplify SOPS workflow to fix decrypt/encrypt issues
- Use path_regex: ".*" to avoid "no matching creation rules" errors
- Add --input-type dotenv flag to decrypt command (required for dotenv files)
- Remove SOURCE/TARGET parameters for simpler parameter-free workflow
- Add edit target for direct encrypted file editing
- Update documentation to copy-to-root workflow pattern
2026-02-01 19:59:19 -05:00
Bill 0bb36511bf Switch to encrypted_regex approach (preserves comments) 2026-01-05 14:43:56 -05:00
Bill 53f691df84 Add SOPS secret management documentation 2026-01-05 01:18:00 -05:00
BillandClaude Opus 4.5 f607d5d106 Add Git repository management documentation
- .gitignore configuration for docker-compose projects
- Secret scrubbing guidelines for environment files
- Repository creation workflow using git-gitea skill
- Updated directory structure to include .gitignore and env.example

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2025-12-30 22:01:17 -05:00
BillandClaude Opus 4.5 60900e46ce Add new project creation guidelines
Document that only the current host environment should be created
when setting up a new project, unless other hosts are explicitly
requested.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2025-12-30 20:10:19 -05:00
BillandClaude Opus 4.5 3c1ed0a78b Use pinned version tags, remove SHA256 digests
SHA256 digests are managed automatically by Renovate bot.
Images should use pinned version tags (never `latest`).

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2025-12-30 16:50:32 -05:00
BillandClaude Opus 4.5 e769526b13 Initial commit: docker-compose-config skill
Add skill for Docker Compose configuration management with:
- Multi-host environment structure with per-hostname overrides
- External volume mount patterns with env variable substitution
- Reverse proxy network configuration for SWAG integration
- Reference docs for examples and network topology

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2025-12-30 16:39:42 -05:00