infrastructure/mw-pfeddersheim-workstation
2
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases Wiki Activity
Files
c67dd74e0b1d85410b167fefc150219664d0c9a7
mw-pfeddersheim-workstation/docs/tech/manual-overrides.md
T
mw cbe24c03df docs: add platform/packages/onlyoffice.docs localhost sites + cert regen to Caddy docs 
- Added platform.localhost (-> localhost:10080) and packages.localhost
  (-> localhost:20080) to stack.md sites table (total now 17)
- Documented onlyoffice.docs.localhost (pre-existing in Caddy config, was undocumented)
- Regenerated mkcert cert with explicit SANs for the 3 new hostnames
  (onlyoffice.docs.localhost is multi-label, not covered by *.localhost wildcard)
- Fixed wildcard note: multi-label hosts require explicit SANs
- Updated manual-overrides with cert regeneration row + site delta
- Updated CHANGELOG with cert regen + site additions
2026-07-12 13:10:21 +02:00

3.7 KiB
Raw Blame History

description, tags, last_updated
description tags last_updated
Documentation of manual system changes that are not managed by Ansible, as required by the project constitution.
manual-overrides
infrastructure
configuration
2026-07-12

Manual System Overrides

This document tracks all persistent system changes implemented manually that are not (yet) managed via Ansible roles.

Principles

  1. Ansible First: Always prefer automation over manual overrides.
  2. Document Everything: Any manual change MUST be recorded here with rationale.
  3. Migrate to Code: Periodically review this list to identify candidates for Ansible migration.

Active Overrides

Date Change Rationale Ansible Status
2026-07-12 Regenerated mkcert cert at /etc/caddy/localhost{,-key}.pem to add explicit SANs for platform.localhost, packages.localhost, and onlyoffice.docs.localhost (the latter was pre-existing in Caddy config but missing from the cert, causing TLS validation failures). Cert now has 19 SANs total, valid until 2028-10-12. onlyoffice.docs.localhost is a multi-label subdomain not covered by *.localhost wildcard. Required explicit SAN. Same as parent Caddy row
2026-07-12 Added platform.localhost (-> localhost:10080) and packages.localhost (-> localhost:20080) to /etc/caddy/conf.d/localhost-dev.conf. Docker port mappings: ~/internal/amicron-platform/docker-compose.override.yml 10080:80, ~/internal/satis/docker-compose.yml nginx 20080:80. Both upstreams are plain HTTP on high ports; Caddy terminates TLS. Also documented onlyoffice.docs.localhost (pre-existing in config, was undocumented). Total sites now 17. Local HTTPS dev for amicron-platform (ERP), satis (Composer package repository), and shared Firebird 3.0.14 database. The three form the local E2E test triangle: platform.localhost (ERP) -> packages.localhost (Satis) -> Firebird (token validation). Mirrors the production platform.auc.de + packages.auc.de + shared Firebird setup. Same as parent Caddy row - candidate for Ansible role when issue #92 resolves
2026-07-06 Caddy reverse-proxy + mkcert TLS at /etc/caddy/ (Caddyfile + conf.d/localhost-dev.conf + localhost{,-key}.pem) Local HTTPS dev for 14 *.localhost sites (mcp, artifacts, onlyoffice, demo.satware.com clone, 10 placeholders). Caddy runs as systemd caddy.service on port 443. NOT managed by this repo - no caddy Ansible role exists. The onlyoffice.localhost site (-> localhost:3847) is emitting context canceled SSE aborts; see docs/learnings/2026-07-06-caddy-onlyoffice-mcp-sse-investigation.md and GitLab issue satware/mcp/onlyoffice#92. Candidate for Ansible role (caddy + mkcert); defer until issue #92 resolves to avoid masking root cause
2026-07-03 Patched remmina-plugin-rdp.so in ~/.config/remmina/plugins/ Remmina 1.4.43 crashes (SIGSEGV) on Wayland when keymap is set in a profile. Built from ~/external/remmina/ fork with NULL check fix. Alt plugin dir loads before system plugin. MR !2757 submitted upstream. See docs/learnings/2026-07-03-remmina-wayland-crash-fix.md. Remove when upstream fix is released and packaged
2026-06-17 Discovered and deleted br_vm_internal bridge (10.10.2.0/24) Externally-created bridge, no NM config file, no VMs attached. Origin unknown — likely ad-hoc nmcli con add or manual brctl session (Jun 10). Traffic-shaping qdisc (htb) suggests prior VM network isolation attempt. Deleted via nmcli con delete + ip link delete. N/A (removed)
2026-04-02 Moved LLM models to /home/mw/models/ (SATA SSD) with symlinks Free root NVMe space (93%→87%, +25G freed) Not yet
Reference in New Issue View Git Blame Copy Permalink