 openfox-pilot
|
6ee136b35d
|
critère 3 : script test restore photo (10-verify-restore-photo.sh) + décision chiffrement journalisée
|
2026-10-12 12:44:51 +02:00 |
|
 openfox-pilot
|
d4f68cb8f7
|
wireguard: clés serveur+portable générées (600 sur J5040, gitignored)
|
2026-10-11 18:59:32 +02:00 |
|
|
openfox-pilot
|
71f1ec33fd
|
E4 : Caddy OVH sur J5040, 7/7 certs LE via DNS-01, clé OVH renouvelée ; copie parallèle 4 flux
|
2026-10-11 18:27:42 +02:00 |
|
|
openfox-pilot
|
a3a198027d
|
E4: clé OVH NAS expirée (diagnostic API), secrets 600 sur J5040, journal
|
2026-10-11 17:39:42 +02:00 |
|
|
openfox-pilot
|
6516d67d0b
|
compose wireguard (E4, linuxserver épinglé digest)
|
2026-10-11 17:08:51 +02:00 |
|
|
openfox-pilot
|
0b95d24046
|
E2 bascule DNS .27 active (bail G9 renouvelé, filtrage vérifié)
|
2026-10-11 17:07:31 +02:00 |
|
|
openfox-pilot
|
e2dc0176ff
|
E3 préparé : baux statiques Freebox (OCR) -> /srv/dnsmasq/leases, dnsmasq --test OK, 09 corrigé (conf-file retiré)
|
2026-10-11 16:55:20 +02:00 |
|
|
openfox-pilot
|
ffe3f2ac91
|
J5040 E1-E2 + préparation E3/E4 : durcissement .27, AdGuard déployé (config VM migrée), compose adguard/edge-j5040 (Caddy OVH), 09-j5040-dhcp.sh, 07d sans gzip, README/journal alignés
|
2026-10-11 16:38:05 +02:00 |
|
 Effi
|
e6295cffc2
|
clôture Phase 4 : journal (consolidation + push Gitea + zéro secret vérifié)
|
2026-10-11 14:14:27 +02:00 |
|
|
Effi
|
366c5ca7a7
|
Phase 4 clôture : PHASE4-RECOLLEMENT §0 consolidé (briques/versions/incidents/.25), README (07e + edge + jellyfin T4.5)
|
2026-10-11 14:13:07 +02:00 |
|
|
Effi
|
3716eee1c3
|
T4.7 watchtower : dry-run monitor-only (scanned=2 = edge+watchtower, stateful ignorés), notification alignée generic+http://n8n:5678 (webhook testé 200)
|
2026-10-11 14:09:00 +02:00 |
|
|
Effi
|
b198710876
|
T4.6 edge : Caddy (compose/edge + Caddyfile), 07e-deploy-edge.sh, ufw 443 WAN/80/9980, alignement proxies (nextcloud g9-double-run + vaultwarden TRUSTED_HOSTS), preuve X-Forwarded côté app
|
2026-10-11 14:05:15 +02:00 |
|
|
Effi
|
12093067ae
|
T4.2/T4.5 : healthcheck collabora retiré (image minimale sans sh/curl) + journal (wizard jellyfin, collabora healthy, re-vérifs complètes)
|
2026-10-11 13:42:37 +02:00 |
|
|
Effi
|
f718f65ce0
|
chore: sortir les artefacts playwright-cli du suivi + .gitignore
|
2026-10-11 13:37:02 +02:00 |
|
|
Effi
|
d76f6438c9
|
T4.5 Jellyfin : wizard 10.9 + fix EnableLocalPassword + en-tête X-Emby-Authorization (API), cleanup médiathèques, secret jellyfin-admin documenté (03b)
|
2026-10-11 13:36:41 +02:00 |
|
|
Effi
|
34e0d470c1
|
T4.2 Nextcloud migré (07c) + Collabora: --o:ssl.enable=false (TLS image par défaut)
|
2026-10-11 13:04:34 +02:00 |
|
|
Effi
|
a1864c69e7
|
T4.1 Vaultwarden : import coffre 953 ciphers + 2FA importé + ADMIN_TOKEN argon2 + emergency access activé
|
2026-10-11 08:03:10 +02:00 |
|
|
Effi
|
e7727a6598
|
remove test push file
|
2026-10-11 07:50:08 +02:00 |
|
 g9ops
|
f007f1cf0c
|
test push clone
|
2026-10-11 05:49:29 +00:00 |
|
|
Effi
|
c246427cf5
|
Phase 4 : kit G9 (scripts + compose) + Gitea T4.4 backend Postgres
- compose/gitea : SQLite -> Postgres (source = paquet App Center DSM, gitea_db 13 repos/3 users), image épinglée 1.27.3, push-to-create
- scripts/07a-migrate-gitea.sh : export pg_dump (MVCC, .25 lecture seule) + tar/ssh (sshd DSM refuse rsync/scp) + manifestes sha256
- scripts/03b-secrets.sh : secrets gitea ajoutés
- journal.md : entrées Phase 4
|
2026-10-11 07:45:00 +02:00 |
|