 openfox-pilot
|
06713702ff
|
review findings : kit secrets 700/600, find -exec robuste, commentaire convention 03b
|
2026-10-13 22:09:53 +02:00 |
|
|
openfox-pilot
|
431ba70f25
|
secrets photoprism 700/600 (finding verifier) : fix live + 07d chmod
|
2026-10-13 21:51:13 +02:00 |
|
|
openfox-pilot
|
8b97089bfa
|
openfox.folzocorp.fr → 192.168.1.11:10369 (Caddy .27, cert LE, 200 LAN+WAN)
|
2026-10-13 21:33:40 +02:00 |
|
|
openfox-pilot
|
7fab09409c
|
bascule réseau E3/E4 : dnsmasq .27 (ufw 67/68 fix), WAN via Delta (80/443/51820->.27, certs LE OK), edge G9 démonté ; journal E2/E3/E4
|
2026-10-13 21:28:37 +02:00 |
|
 Effi
|
c7385be393
|
mx5: auto-controle interdiction 1 = commande a sortie vide (0 ligne mesurée)
|
2026-10-13 02:43:16 +02:00 |
|
|
Effi
|
f9fde1e622
|
id7: journal de bascule Gitea 4 colonnes en §4.5 (+CLI roles mesuré) ; mx5: S3.3 l.192 'pas un remplacement'
|
2026-10-12 23:22:47 +02:00 |
|
|
Effi
|
9eae93be0b
|
6 criteres retoques: PhotoPrism+garde-fous+WhatsApp+grille 10 requetes+17 questions, salon famille cree (GO), peages perimes
|
2026-10-12 22:42:22 +02:00 |
|
|
Effi
|
aeee208c04
|
docs: cloture 31 criteres cote IA (prouve vs geste humain), README identites, changelog v1.8
|
2026-10-12 21:24:10 +02:00 |
|
|
Effi
|
4f1c267404
|
synapse: 1er compte admin cree, repare (bcrypt+PUT v2) et verifie (login OK, API admin OK) + 27-family-users outille
|
2026-10-12 21:13:43 +02:00 |
|
 OpenFox
|
4a3c460b57
|
dumps logiques 3 bases (gitea rejouabilité prouvée 116 tables) + hub beszel hors-G9 sur J5040 LAN-only
|
2026-10-12 20:35:54 +02:00 |
|
|
OpenFox
|
e27ac1ea90
|
identites: balayage mesure (gitea 2fa=0/4, synapse admin=0), porte de sortie synapse outillee, backup-perimetre + reste-humain
|
2026-10-12 20:16:38 +02:00 |
|
|
OpenFox
|
79197d13cb
|
docs: BACKUP-PERIMETRE, RESTE-HUMAIN (checklist 17 criteres), PHOTOS-DOUBLE-RUN + README (14-firewall)
|
2026-10-12 20:06:12 +02:00 |
|
|
OpenFox
|
67b5b68c18
|
durcissement: ssh+443 LAN-only sur .24/.27, tailscale coupe, couchdb faux positif corrige (auth 401 mesurée)
|
2026-10-12 20:03:03 +02:00 |
|
|
OpenFox
|
70265acddd
|
exposition: grille valider, ufw complet mesure, ssh ouvert WAN sur .24 ET .27, 443 G9 sans regle LAN
|
2026-10-12 19:46:40 +02:00 |
|
|
OpenFox
|
f13fc2472a
|
registry: --check comparait les lignes 1-4, l'horodatage (ligne 9) restait -> fausse derive permanente
|
2026-10-12 19:12:48 +02:00 |
|
|
OpenFox
|
3f3f14302d
|
docs: README (13-diun-notify, compose versionnes) + DOSSIER v1.7 (mesures phase 4.5)
|
2026-10-12 19:09:51 +02:00 |
|
|
OpenFox
|
d61eb0f67b
|
phase 4.5: diun deploye, prisme pose sur J5040, 3 bugs chaine alerte corriges, compose du kit versionnes
|
2026-10-12 19:06:13 +02:00 |
|
|
OpenFox
|
76a348449e
|
phase 4.5: notifications 3/3 relevees, backup+restauration photos prouves, double-run photos mesure, n8n mesure
|
2026-10-12 17:14:44 +02:00 |
|
|
OpenFox
|
3fcfa4459b
|
journal: validation utilisateur L3 (sondes+digest G9) tracee (G11)
|
2026-10-12 16:55:39 +02:00 |
|
|
OpenFox
|
b98fbf76b4
|
phase 4.5: chaine notification verifiee, derive prouvee, runbook execute, procedure git-credentials
|
2026-10-12 16:53:20 +02:00 |
|
|
OpenFox
|
3b162dea50
|
journal: phase 4.5 (sondes installees, notification verifiee, derive prouvee)
|
2026-10-12 16:50:42 +02:00 |
|
|
OpenFox
|
a955bcd4c2
|
registry: endpoints Caddy corriges (cle ip+port, hotes multiples), lib-notify en argv, doc regenere
|
2026-10-12 16:48:29 +02:00 |
|
|
openfox
|
4b26049b8f
|
phase 4.5: registre identites + runbooks + sondes applicatives (cron G9) + G11 + etudes exposition/whatsapp + alignement 08-decommission et S8/S9.2/S11/S14
|
2026-10-12 16:42:41 +02:00 |
|
|
openfox
|
ca64eaaf77
|
registre: 10-registry.sh (genere moitie technique + derive) + REGISTRE-BRIQUES.md (21 conteneurs, 13 constats) + lib-notify.sh (payload JSON)
|
2026-10-12 16:17:34 +02:00 |
|
|
openfox-pilot
|
2f98c32da1
|
docs clôture : PHASE4 §0.1 PhotoPrism ✅ + §0.5 J5040 E1-E4 ; README 07d ✅ + E aligné ; 10-verify fixes (include restore, chemins)
|
2026-10-12 15:14:11 +02:00 |
|
|
openfox-pilot
|
a5b2909722
|
07d: fixes idempotence snapshots (env restic), compose via sudo (env_file 600 root), health /api/v1/health ; 10-verify: fichier test depuis g9.meta (garanti dans snapshot)
|
2026-10-12 14:17:39 +02:00 |
|
|
openfox-pilot
|
6ee136b35d
|
critère 3 : script test restore photo (10-verify-restore-photo.sh) + décision chiffrement journalisée
|
2026-10-12 12:44:51 +02:00 |
|
 openfox-pilot
|
d4f68cb8f7
|
wireguard: clés serveur+portable générées (600 sur J5040, gitignored)
|
2026-10-11 18:59:32 +02:00 |
|
|
openfox-pilot
|
71f1ec33fd
|
E4 : Caddy OVH sur J5040, 7/7 certs LE via DNS-01, clé OVH renouvelée ; copie parallèle 4 flux
|
2026-10-11 18:27:42 +02:00 |
|
|
openfox-pilot
|
a3a198027d
|
E4: clé OVH NAS expirée (diagnostic API), secrets 600 sur J5040, journal
|
2026-10-11 17:39:42 +02:00 |
|
|
openfox-pilot
|
6516d67d0b
|
compose wireguard (E4, linuxserver épinglé digest)
|
2026-10-11 17:08:51 +02:00 |
|
|
openfox-pilot
|
0b95d24046
|
E2 bascule DNS .27 active (bail G9 renouvelé, filtrage vérifié)
|
2026-10-11 17:07:31 +02:00 |
|
|
openfox-pilot
|
e2dc0176ff
|
E3 préparé : baux statiques Freebox (OCR) -> /srv/dnsmasq/leases, dnsmasq --test OK, 09 corrigé (conf-file retiré)
|
2026-10-11 16:55:20 +02:00 |
|
|
openfox-pilot
|
ffe3f2ac91
|
J5040 E1-E2 + préparation E3/E4 : durcissement .27, AdGuard déployé (config VM migrée), compose adguard/edge-j5040 (Caddy OVH), 09-j5040-dhcp.sh, 07d sans gzip, README/journal alignés
|
2026-10-11 16:38:05 +02:00 |
|
|
Effi
|
e6295cffc2
|
clôture Phase 4 : journal (consolidation + push Gitea + zéro secret vérifié)
|
2026-10-11 14:14:27 +02:00 |
|
|
Effi
|
366c5ca7a7
|
Phase 4 clôture : PHASE4-RECOLLEMENT §0 consolidé (briques/versions/incidents/.25), README (07e + edge + jellyfin T4.5)
|
2026-10-11 14:13:07 +02:00 |
|
|
Effi
|
3716eee1c3
|
T4.7 watchtower : dry-run monitor-only (scanned=2 = edge+watchtower, stateful ignorés), notification alignée generic+http://n8n:5678 (webhook testé 200)
|
2026-10-11 14:09:00 +02:00 |
|
|
Effi
|
b198710876
|
T4.6 edge : Caddy (compose/edge + Caddyfile), 07e-deploy-edge.sh, ufw 443 WAN/80/9980, alignement proxies (nextcloud g9-double-run + vaultwarden TRUSTED_HOSTS), preuve X-Forwarded côté app
|
2026-10-11 14:05:15 +02:00 |
|
|
Effi
|
12093067ae
|
T4.2/T4.5 : healthcheck collabora retiré (image minimale sans sh/curl) + journal (wizard jellyfin, collabora healthy, re-vérifs complètes)
|
2026-10-11 13:42:37 +02:00 |
|
|
Effi
|
f718f65ce0
|
chore: sortir les artefacts playwright-cli du suivi + .gitignore
|
2026-10-11 13:37:02 +02:00 |
|
|
Effi
|
d76f6438c9
|
T4.5 Jellyfin : wizard 10.9 + fix EnableLocalPassword + en-tête X-Emby-Authorization (API), cleanup médiathèques, secret jellyfin-admin documenté (03b)
|
2026-10-11 13:36:41 +02:00 |
|
|
Effi
|
34e0d470c1
|
T4.2 Nextcloud migré (07c) + Collabora: --o:ssl.enable=false (TLS image par défaut)
|
2026-10-11 13:04:34 +02:00 |
|
|
Effi
|
a1864c69e7
|
T4.1 Vaultwarden : import coffre 953 ciphers + 2FA importé + ADMIN_TOKEN argon2 + emergency access activé
|
2026-10-11 08:03:10 +02:00 |
|
|
Effi
|
e7727a6598
|
remove test push file
|
2026-10-11 07:50:08 +02:00 |
|
 g9ops
|
f007f1cf0c
|
test push clone
|
2026-10-11 05:49:29 +00:00 |
|
|
Effi
|
c246427cf5
|
Phase 4 : kit G9 (scripts + compose) + Gitea T4.4 backend Postgres
- compose/gitea : SQLite -> Postgres (source = paquet App Center DSM, gitea_db 13 repos/3 users), image épinglée 1.27.3, push-to-create
- scripts/07a-migrate-gitea.sh : export pg_dump (MVCC, .25 lecture seule) + tar/ssh (sshd DSM refuse rsync/scp) + manifestes sha256
- scripts/03b-secrets.sh : secrets gitea ajoutés
- journal.md : entrées Phase 4
|
2026-10-11 07:45:00 +02:00 |
|