moments

grenade/moments

Fork 0

Commit Graph

Author	SHA1	Message	Date
rob thijssen	110b523fd0	chore(deploy): add manifest, systemd units, nginx config, deploy.sh Wires up the prod deployment per architecture-doc conventions: - api → nikola.kosherinata.internal, loopback bind 127.0.0.1:42424 (less-common port, registered with SELinux as http_port_t). - worker → frootmig.kosherinata.internal, no listening port. - web (static ui/dist + nginx server_name rob.tn) → nikola, with /api/* reverse-proxied to the loopback API. - db → existing magrathea cluster via mTLS, hostname-baked DATABASE_URL rendered into /etc/moments/{api,worker}.env at deploy time. Cert rotation: step-ca renews host certs every 24h; .path units watch /etc/pki/tls/misc/<host>.pem and trigger systemctl restart of the relevant service. Both binaries hold cert state in rustls and read once at startup, so restart is the right reload semantics. deploy.sh contract matches the architecture doc: positional env arg, component list (or `all` / `default`), --dry-run support. Renders config templates from `pass`, rsyncs over ssh+sudo, runs sysusers / restorecon / semanage / systemctl / nginx -t idempotently. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-03 20:17:17 +03:00
rob thijssen	6775309043	chore: scaffold moments workspace Cargo workspace with five crates per architecture conventions: - moments-entities: Source enum, Event, EventQuery, SourceSummary - moments-core: EventReader / EventWriter ports - moments-data: PgStore (sqlx postgres adapter) + 0001_init.sql - moments-api: axum binary; /v1/{healthz,events,sources} - moments-worker: skeleton; pollers land in step 2 Sources committed-to for ingestion: github, gitea, hg, bugzilla. Workstation events explicitly retired (not deferred). Build + clippy clean. sqlx queries use the runtime API for now; will switch to compile-time-checked macros + .sqlx offline cache once magrathea has the moments_{ro,rw} roles and database created. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-03 17:47:06 +03:00

Author

SHA1

Message

Date

rob thijssen

110b523fd0

chore(deploy): add manifest, systemd units, nginx config, deploy.sh

Wires up the prod deployment per architecture-doc conventions:

- api → nikola.kosherinata.internal, loopback bind 127.0.0.1:42424
  (less-common port, registered with SELinux as http_port_t).
- worker → frootmig.kosherinata.internal, no listening port.
- web (static ui/dist + nginx server_name rob.tn) → nikola, with
  /api/* reverse-proxied to the loopback API.
- db → existing magrathea cluster via mTLS, hostname-baked DATABASE_URL
  rendered into /etc/moments/{api,worker}.env at deploy time.

Cert rotation: step-ca renews host certs every 24h; .path units watch
/etc/pki/tls/misc/<host>.pem and trigger systemctl restart of the
relevant service. Both binaries hold cert state in rustls and read
once at startup, so restart is the right reload semantics.

deploy.sh contract matches the architecture doc: positional env arg,
component list (or `all` / `default`), --dry-run support. Renders
config templates from `pass`, rsyncs over ssh+sudo, runs sysusers /
restorecon / semanage / systemctl / nginx -t idempotently.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-03 20:17:17 +03:00

rob thijssen

6775309043

chore: scaffold moments workspace

Cargo workspace with five crates per architecture conventions:

- moments-entities: Source enum, Event, EventQuery, SourceSummary
- moments-core:     EventReader / EventWriter ports
- moments-data:     PgStore (sqlx postgres adapter) + 0001_init.sql
- moments-api:      axum binary; /v1/{healthz,events,sources}
- moments-worker:   skeleton; pollers land in step 2

Sources committed-to for ingestion: github, gitea, hg, bugzilla.
Workstation events explicitly retired (not deferred).

Build + clippy clean. sqlx queries use the runtime API for now;
will switch to compile-time-checked macros + .sqlx offline cache
once magrathea has the moments_{ro,rw} roles and database created.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-03 17:47:06 +03:00

2 Commits