Repository navigation

dev2: fleet kit to move Railway sites onto dev2 and deploy them on merge - #103

Merged

ralyodio merged 49 commits into

masterfrom

ops/dev2-fleet-kit

Sep 25, 2026

Merged

dev2: fleet kit to move Railway sites onto dev2 and deploy them on merge#103
ralyodio merged 49 commits into
masterfrom
ops/dev2-fleet-kit

Commits on Sep 25, 2026
- dev2: fleet kit to move Railway sites onto dev2 and deploy them on merge
  
  ralyodio
  and
  claude
  committed
  1081b26
- dev2: README for the fleet kit
  
  ralyodio
  and
  claude
  committed
  971cbc7
- dev2-site: clone private repos over ssh with a read-only deploy key; show deploy stderr
  
  ralyodio
  and
  claude
  committed
  840334c
- dev2-site: write remote files via temp + mv
  
  ralyodio
  and
  claude
  committed
  e194cad
- dev2-site: per-site self-hosted Supabase (stack, pull, load, storage, cutover) + proxied gateway hosts
  
  ralyodio
  and
  claude
  committed
  56ee9c5
- dev2: README for the Supabase second pass and private repos
  
  ralyodio
  and
  claude
  committed
  599e60d
- dev2-site: public verify waits out resolver caches
  
  ralyodio
  and
  claude
  committed
  177fc38
- dev2-site firewall: allow every Docker address pool on the data ports
  
  ralyodio
  and
  claude
  committed
  b918330
- dev2-site: https clone for public repos; deploy key only when private
  
  ralyodio
  and
  claude
  committed
  15bb4fd
- dev2-site: quote BUILD_SERVICES; sslmode=no-verify for node-postgres apps
  
  ralyodio
  and
  claude
  committed
  f095e20
- dev2-site verify: fail on connection failures in recent logs
  
  ralyodio
  and
  claude
  committed
  888ac34
- dev2-site vhost: large_client_header_buffers at server level
  
  ralyodio
  and
  claude
  committed
  5175bd8
- dev2-site supabase-cutover: tolerate projects without pg_cron; no-verify db url
  
  ralyodio
  and
  claude
  committed
  3362aab
- dev2-site: reload PostgREST schema cache after load; world-readable checkouts
  
  ralyodio
  and
  claude
  committed
  bada534
- dev2-site: sslmode=require&uselibpqcompat=true, the form both Bun.SQL and node-postgres accept
  
  ralyodio
  and
  claude
  committed
  433bc66
- dev2-site: explicit 10.200.<n>.0/24 subnet per site (Docker pools exhausted)
  
  ralyodio
  and
  claude
  committed
  21e9b59
- dev2-site: sslmode per driver (no-verify for node-postgres repos, require otherwise)
  
  ralyodio
  and
  claude
  committed
  c0a8867
- dev2-site: public build-time variables reach the build; nixpacks on Node 22
  
  ralyodio
  and
  claude
  committed
  f3db2a3
- deploy-app.sh: export public build vars by parsing app.env, not sourcing it
  
  ralyodio
  and
  claude
  committed
  a6123d5
- deploy-app.sh: recreate the stack when the network subnet changes (stale embedded DNS)
  
  ralyodio
  and
  claude
  committed
  f5fd1f9
- dev2-site verify: require the vhost to exist
  
  ralyodio
  and
  claude
  committed
  945c1e7
- sites.d: media2markdown.com repo override
  
  ralyodio
  and
  claude
  committed
  492849d
- deploy-app.sh: recreate the stack when a sibling service name fails to resolve
  
  ralyodio
  and
  claude
  committed
  3bd9688
- dev2-site: db copy from plain postgres images; DNS self-check parses services only; opensocial.chat override
  
  ralyodio
  and
  claude
  committed
  9b5cbbf
- dev2-site scaffold: pass NIXPACKS_NODE_VERSION through --env, rewrite nodejs_18, --regen
  
  ralyodio
  and
  claude
  committed
  2b84381
- dev2-site scaffold: honour RAILWAY_DOCKERFILE_PATH and RAILPACK_*/NIXPACKS_* command variables
  
  ralyodio
  and
  claude
  committed
  2086bee
- dev2-site scaffold: pin corepack 0.36 in nixpacks Dockerfiles
  
  ralyodio
  and
  claude
  committed
  0ce1b24
- dev2-site cert: remove Railway's _acme-challenge CNAMEs before DNS-01
  
  ralyodio
  and
  claude
  committed
  6b21850
- sites.d: meshhook.com on Node 24
  
  ralyodio
  and
  claude
  committed
  7182d5b
- dev2-site: image-only sites (stock image + Railway start command, no clone/build); openaccess + openmcp overrides
  
  ralyodio
  and
  claude
  committed
  3d0e644
- sites.d: mynaposter.com with its API companion on api.mynaposter.com
  
  ralyodio
  and
  claude
  committed
  5aab1f6
- dev2-site scaffold: per-site start_command feeds nixpacks; mynaposter commands
  
  ralyodio
  and
  claude
  committed
  287d968
- deploy-app.sh: REPO optional for image-only sites
  
  ralyodio
  and
  claude
  committed
  4b6f543
- dev2-site: a wildcard covers its one-label subdomains in the certificate order
  
  ralyodio
  and
  claude
  committed
  b1a1537
- dev2-site cert: reuse a certificate issued in the last day
  
  ralyodio
  and
  claude
  committed
  fc6f772
- dev2: README for firewall, box-tune, image-only sites, companion ports
  
  ralyodio
  and
  claude
  committed
  0c29994
- dev2-site: db-create for Turso/Supabase second passes; Turso variables re-pointed once a database exists
  
  ralyodio
  and
  claude
  committed
  fdee8ed
- dev2-site: DEV2_JUMP / DEV2_PROBE for when the provider blocks this box
  
  ralyodio
  and
  claude
  committed
  32b6319
- dev2-site volumes: per-file, resumable, chunked copy (Railway's ssh drops long streams)
  
  ralyodio
  and
  claude
  committed
  00aed0c
- dev2: keep credentials out of sites.d, which is committed and public
  ralyodio
  committed
  96b223e
- dev2-site provision: inside port from the Dockerfile HEALTHCHECK/EXPOSE when Railway set none
  
  ralyodio
  and
  claude
  committed
  7e0ecc7
- dev2-site deploy: default to the default branch once the scaffold PR is merged
  
  ralyodio
  and
  claude
  committed
  69d8bb3
- dev2-site verify: probe wildcards through a sample label
  
  ralyodio
  and
  claude
  committed
  dae6486
- dev2-site: HTTP-01 certificates and manual DNS for zones not at Porkbun
  
  ralyodio
  and
  claude
  committed
  e0bc53d
- dev2-site: nixpacks images get the start command as one bash -c string
  
  ralyodio
  and
  claude
  committed
  49fec2d
- sites.d: app.moshcode.sh runs the pwa server, not the CLI
  
  ralyodio
  and
  claude
  committed
  f1a6b11
- dev2-site: env_remove for settings a ported app refuses; README for the Turso second pass
  
  ralyodio
  and
  claude
  committed
  2c657e6
- dev2-site db: copy the database the app's URL names, not the instance default
  
  ralyodio
  and
  claude
  committed
  20bdde8
- dev2-site db: companions' variables may name the database
  
  ralyodio
  and
  claude
  committed
  e75d446

Commits

Commits on Sep 25, 2026