coulomb/coulomb-social
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Serve the rebuild on app.coulomb.social; defer apex Bubble cutover

Browse source 
Document parallel-host strategy: Railiance on app.*, Bubble remains on
coulomb.social until data and self-registration are ready.
This commit is contained in:
tegwick 2026-08-09 23:20:30 +02:00
parent fe8b96a388
commit f5537d8365
4 changed files with 46 additions and 89 deletions
Download patch file Download diff file Expand all files Collapse all files

3
docs/identity/oidc-client.md
View file

@ -10,7 +10,8 @@ Non-secret registration checklist for NetKingdom IAM Profile issuers.
| client_id | `coulomb-social` |
| client_type | **public** (no client secret; PKCE only) |
| redirect_uri (dev) | `http://127.0.0.1:8008/auth/callback/` · `http://localhost:8008/auth/callback/` |
| redirect_uri (prod) | `https://coulomb.social/auth/callback/` |
| redirect_uri (public app) | `https://app.coulomb.social/auth/callback/` (**live** host while Bubble keeps apex) |
| redirect_uri (apex future) | `https://coulomb.social/auth/callback/` (registered; cutover deferred) |
| scopes | `openid profile email groups` |
| grant | authorization_code |
| wildcard redirects | **forbidden** |

17
docs/identity/smoke.md
View file

@ -90,12 +90,15 @@ Unregistered redirects still fail with `invalid_profile_usage` (T03).
make test
```
## Blockers for production hostname smoke
## Public host (parallel to Bubble)
| Blocker | Detail |
|---------|--------|
| Public DNS | `coulomb.social` → Cloudflare `104.*` (Bubble), not `92.205.62.239` |
| TLS cert | `certificate/coulomb-social-tls` **not Ready**; HTTP-01 challenge gets **404** from public edge (LE never reaches cluster solver) |
| Secure cookies | prod `SESSION_COOKIE_SECURE=True` — need HTTPS after cutover |
**Strategy:** live Railiance app on **`app.coulomb.social`**; apex **`coulomb.social`** stays Bubble until content + self-registration cutover.
See cutover steps in `docs/deploy.md`.
| Check | Detail |
|-------|--------|
| Cluster host | `app.coulomb.social` (Helm + ingress) |
| OIDC redirect | `https://app.coulomb.social/auth/callback/` |
| DNS | operator: `app.coulomb.social` A → `92.205.62.239` |
| Apex | **do not** repoint until Bubble retirement |
See `docs/deploy.md`.