8 Commits

Include renames

Author	SHA1	Message	Date
mrhid6andClaude Opus 5	b209fed4a7	fix(deploy): ADMIN_ORIGIN must list the marketing site too ... /start now posts account signups straight to admin, so the browser sends a cross-origin preflight from vantage.hostxtra.co.uk. With only the console origin in ADMIN_ORIGIN it was refused. The failure mode is worth naming: cors() omits Access-Control-Allow-Origin but still answers the preflight 204, so the browser blocks the request and admin logs nothing. It looks like the endpoint is down when curl says it is fine. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-07-26 14:02:25 +01:00
mrhid6andClaude Opus 5	104f21d0a9	docs: phase 2 configuration and the reaper's containment ... FREE_INSTANCE_REAP_AFTER is set only in docker-compose.site.yml, so a self-hosted deployment can never reap. Admin and server must carry the same value: one names the deletion date in warnings, the other acts on it. Records that admin now has a second control-plane write path, cloudprov, and that deletion lives in the control plane because that is where the knowledge of what an instance is made of belongs. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-07-26 13:48:23 +01:00
mrhid6andClaude Opus 5	85f6d47024	feat(adminsite): image, compose service, image build and docs ... Publishes adminsite on 3004 -- 3000 is web, 3003 is the marketing site since the port shuffle -- and adds the sixth CI image. CLAUDE.md gains both new services. admin/ was never documented there at all: the backend plan's wiring task covered compose and CI but not the file every session actually loads. So this records admin's whole REST surface, its 404-not-403 rule, the three visual identities and, most importantly, that adminsite/ and site/ share one token set with nothing enforcing the match -- the same hazard shape as sitesvc's mirrored slug rules. Also notes that admin's REDIS_ADDR reaches admin only, because the base compose hardcodes redis:6379 for server. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-07-25 21:24:37 +01:00
mrhid6andClaude Opus 5	58c37bf81b	feat(admin): support authenticated Redis, and point at the external server ... Adds REDIS_USERNAME and REDIS_PASSWORD. Both are optional, so an unauthenticated instance still works unchanged. Redis 6+ ACL auth takes both; a legacy requirepass instance takes the password with an empty username, which is what go-redis needs to send single-argument AUTH. Admin now defaults to the external Redis at 10.10.10.2:6379 rather than the compose-local one, and no longer declares depends_on: redis -- it is not starting that container any more. The base stack keeps its own Redis for `server`, which still has no auth support. Also fixes SMTP_PASSWORD in the admin block: it read `$SMTP_PASSWORD:-}` rather than `${SMTP_PASSWORD:-}`, which appended a literal `:-}` to the password and would have failed SMTP auth at the first verification email. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-07-25 19:50:19 +01:00
mrhid6andClaude Opus 5	7e6d7074d6	feat(admin): compose service and image build ... Adds admin to docker-compose.site.yml and a fourth Go image to the build workflow, both following the conventions the other services already use. LICENSE_SIGNING_KEY now appears in exactly one service in exactly one compose file. It must never be added to server, and the self-hosted docker-compose.yml still does not mention admin at all. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-07-25 19:11:52 +01:00
mrhid6	7df79d05f1	fix: Fixes to platform page	2026-07-24 10:13:33 +01:00
mrhid6	3b52bcbeb8	updates	2026-07-24 09:24:03 +01:00
mrhid6	693d59a3e2	feat: Marketing site	2026-07-22 16:50:13 +01:00