From d441c13293b1df2093f3af83e035f59cbffe7d87 Mon Sep 17 00:00:00 2001 From: Sam Rolfe Date: Sat, 8 Aug 2026 07:41:45 +1000 Subject: [PATCH] deploy-admin: admin live on .13:3031 (3030=Langfuse), Caddy -> 3031, firewall 3031 pending --- openspec/changes/deploy-admin/tasks.md | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/openspec/changes/deploy-admin/tasks.md b/openspec/changes/deploy-admin/tasks.md index 869129e..c8153e5 100644 --- a/openspec/changes/deploy-admin/tasks.md +++ b/openspec/changes/deploy-admin/tasks.md @@ -1,19 +1,19 @@ ## 1. Transfer & Build -- [ ] 1.1 rsync `admin/Dockerfile`, `admin/docker-compose.yml`, `admin/app/` (exclude vendor, node_modules, .env, storage/logs) → `sam@192.168.20.13:/home/sam/Docker/Containers/wherewoof-admin/` -- [ ] 1.2 On .13: `docker compose build` (php:8.3 image) + `composer install` via container +- [x] 1.1 rsync `admin/Dockerfile`, `admin/docker-compose.yml`, `admin/app/` (exclude vendor, node_modules, .env, storage/logs) → `sam@192.168.20.13:/home/sam/Docker/Containers/wherewoof-admin/` +- [x] 1.2 On .13: `docker compose build` (php:8.3 image) + `composer install` via container ## 2. Configure & Run -- [ ] 2.1 Write `.env` on .13 (DB 192.168.20.13:5434, APP_KEY generated, SESSION_DRIVER=file); add `restart: unless-stopped` to compose -- [ ] 2.2 `docker compose up -d` → verify `localhost:3030` on .13 returns 200 (login page) +- [x] 2.1 Write `.env` on .13 (DB 192.168.20.13:5434, APP_KEY generated, SESSION_DRIVER=file); add `restart: unless-stopped` to compose +- [x] 2.2 `docker compose up -d` → verify `localhost:3030` on .13 returns 200 (login page) ## 3. Caddy / Firewall -- [ ] 3.1 User: open port 3030 on .13 NixOS firewall (networking.firewall.allowedTCPPorts = [3030]) -- [ ] 3.2 Verify `admin.where-woof.com` via .35 Caddy once DNS propagates (cert issuance retries automatically) +- [ ] 3.1 User: open port 3031 on .13 NixOS firewall (3030 = Langfuse; admin now on 3031) +- [x] 3.2 Caddy block updated to .13:3031, Host-header test 200 (public cert pending DNS+firewall) ## 4. Verification -- [ ] 4.1 Smoke: admin login on .13 works (shared DB admin user); resources render -- [ ] 4.2 `openspec validate deploy-admin`; commit +- [x] 4.1 Smoke: admin login on .13 works (shared DB admin user); resources render +- [x] 4.2 `openspec validate deploy-admin`; commit