railiance-platform

Author	SHA1	Message	Date
codex	5ef016be01	Contain backup upload credentials and prepare provider recovery gates All checks were successful CI Smoke / host-smoke (push) Successful in 1s Details CI Smoke / container-smoke (push) Successful in 2s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 19:21:06 +02:00
codex	0349a08e1b	Harden backup credentials and add durable image inventory publication All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 01:53:24 +02:00
tegwick	ca24dc6507	fix(backup): worker-safe paths and python WebDAV upload fallback All checks were successful CI Smoke / host-smoke (push) Successful in 1s Details CI Smoke / container-smoke (push) Successful in 6s Details Default cache to /tmp when HOME is unwritable; allow python3 upload when curl is absent (activity-core worker image).	2026-07-22 20:34:21 +02:00
tegwick	16a93b8e5c	feat(backup): multi-host CNPG Option A CLI for activity-core All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 2s Details Add cnpg-option-a-backup JSON runner, vendored static age, kubectl install helper, and ESO policy path for offsite lane so railiance01 workers can upload without workstation OIDC (RAILIANCE-WP-0016).	2026-07-22 19:50:59 +02:00
tegwick	786d91eeba	Fix default Nextcloud filesdrop WebDAV URL for backup lane. All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 2s Details Derive NC_WEBDAV_URL from token when unset; document filesdrop vs webdav.	2026-07-07 18:05:13 +02:00
tegwick	074e7f8441	Add Forgejo daily backup automation (T04/T09 Option A) All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 3s Details make forgejo-backup runs forgejo dump + pg_dump, age-encrypts, uploads to Nextcloud forgejo/ prefix. Includes dry-run, status, and operator docs.	2026-07-07 17:19:19 +02:00
tegwick	0055e8f3f7	Establish railiance backup credentials in OpenBao (CCR-2026-0004). Some checks are pending CI Smoke / host-smoke (push) Waiting to run Details CI Smoke / container-smoke (push) Waiting to run Details Add workload KV lane for Nextcloud WebDAV token, URL, and age recovery escrow at platform/workloads/railiance/backup/offsite-lane. Apply read policy and OIDC role railiance-backup-workload-kv-read; wire forgejo-backup to load credentials from OpenBao when env is unset.	2026-07-07 17:16:30 +02:00

7 commits