Commit graph

4 commits

Author SHA1 Message Date
Natalie
07626ceb47 fix(tf-services): verdaccio storage owned by 10001 (its UID), not 1000
Verdaccio runs as UID 10001; chowning its volume to 1000 caused EACCES on
cache writes → 500 on every uncached proxy fetch (npm installs hung).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-30 02:54:26 -04:00
6dfba051fd feat(tf-services): enable Forgejo built-in git-SSH per instance
SSH_LISTEN_PORT + START_SSH_SERVER per forge (ct 2222 / mc 2223 / quinn 2224),
SSH_DOMAIN = forge.<p>.uvlava.com. The earlier :22 double-bind was a missing
SSH_LISTEN_PORT. Verified: ssh clone works. Matches live.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-30 00:05:27 -04:00
1be4f8ba6b feat(tf-services): reverse-DNS name + Caddy/TLS + ROOT_URLs
Droplet com.uvlava.quinn.artifacts (ignore_changes name+user_data). cloud-init
now provisions Caddy with auto-TLS routing forge/npm/pypi.{ct,mc,quinn}.uvlava.com
to the 3 Forgejo, each with its ROOT_URL. Matches live 134.199.243.61.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-29 23:45:43 -04:00
870bb55174 feat(tf-services): shared services droplet (3 Forgejo + Verdaccio) module
DO droplet (nyc3 s-2vcpu-4gb + swap) running 3 co-located Forgejo (ct/mc/quinn)
+ Verdaccio via docker-compose. HTTP+token (built-in SSH disabled). Provisioned
165.227.191.38; state local (gitignored).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-29 18:20:43 -04:00