8 Commits

Include renames

Author	SHA1	Message	Date
mrhid6	ee1f9f3b32	refactor: consume vantage-shared as an external private module ... shared/ is extracted to gitea.hostxtra.co.uk/vantage/vantage-shared and pinned at v0.1.0 by server, agent, admin, sitesvc and vantagectl. The replace directives and the ./shared entry in go.work are gone. Every Go build now needs a credential for the private module: CI writes a netrc per job from REGISTRY_USER + RELEASE_TOKEN and sets GOPRIVATE, and the four Go Dockerfiles take it as a BuildKit secret rather than a build arg, which would survive in the builder layer's history. RELEASE_TOKEN needs read access to the vantage org. admin, sitesvc and vantagectl now build from their own directory; only server still needs the repository root, for default_steps/. The rebuild triggers in server-deploy.yml lose their shared/ patterns, since a service now moves when its own go.mod pin does.	2026-09-08 07:42:58 +00:00
mrhid6	3bf80a117b	refactor: rename shared module to gitea.hostxtra.co.uk/vantage/vantage-shared	2026-09-08 07:34:53 +00:00
mrhid6	b28a2263bb	fix: read KEY_ENCRYPTION_KEY in archive-only verify; never leave a partial archive	2026-09-07 14:45:36 +00:00
mrhid6	884fd189fb	fix: Report the real reason verify falls back to archive-only checks ... resolveGlobals can fail for two distinct reasons — no MongoDB URI, or no resolvable database name — and verify.go was printing a hardcoded no-URI note regardless of which one occurred, misleading an operator whose URI was fine but whose database name could not be resolved.	2026-09-07 14:11:58 +00:00
mrhid6	e08cc2f928	feat: Build and publish vantagectl ... The scratch runtime stage copies an explicit /tmp: restore extracts an archive there before verifying it, and a scratch image has none. shared/ now fans out to four Go images rather than three.	2026-09-07 14:09:00 +00:00
mrhid6	3ce963b0cd	feat: Add the vantagectl restore and verify subcommands ... --force requires a typed database name on a terminal and --confirm-db without one, so a copy-pasted restore command carries its intended target and cannot destroy a different database. Also silences cobra's own error print (root.go) so a failure is reported once by main.go instead of twice, and pins the Changed()-based env fallback in resolveGlobals with a test for an explicitly empty --db.	2026-09-07 14:04:25 +00:00
mrhid6	461a79277d	feat: Add the vantagectl backup and inspect subcommands ... Progress output goes to stderr so --out - stays a clean pipe into restic, age or aws s3 cp. Archive names carry no colon, because these get copied onto Windows shares.	2026-09-07 13:57:04 +00:00
mrhid6	d9f7fa6993	feat: Add the vantagectl module and its cobra root ... Its own module rather than a package under shared, so cobra and pflag stay out of the module graphs of server, admin and sitesvc, which never use them.	2026-09-07 13:45:20 +00:00