-
06713702ff
review findings : kit secrets 700/600, find -exec robuste, commentaire convention 03b
master
openfox-pilot
2026-10-13 22:09:53 +02:00
-
431ba70f25
secrets photoprism 700/600 (finding verifier) : fix live + 07d chmod
openfox-pilot
2026-10-13 21:51:13 +02:00
-
8b97089bfa
openfox.folzocorp.fr → 192.168.1.11:10369 (Caddy .27, cert LE, 200 LAN+WAN)
openfox-pilot
2026-10-13 21:33:40 +02:00
-
7fab09409c
bascule réseau E3/E4 : dnsmasq .27 (ufw 67/68 fix), WAN via Delta (80/443/51820->.27, certs LE OK), edge G9 démonté ; journal E2/E3/E4
openfox-pilot
2026-10-13 21:28:37 +02:00
-
c7385be393
mx5: auto-controle interdiction 1 = commande a sortie vide (0 ligne mesurée)
Effi
2026-10-13 02:43:16 +02:00
-
f9fde1e622
id7: journal de bascule Gitea 4 colonnes en §4.5 (+CLI roles mesuré) ; mx5: S3.3 l.192 'pas un remplacement'
Effi
2026-10-12 23:22:47 +02:00
-
9eae93be0b
6 criteres retoques: PhotoPrism+garde-fous+WhatsApp+grille 10 requetes+17 questions, salon famille cree (GO), peages perimes
Effi
2026-10-12 22:42:22 +02:00
-
aeee208c04
docs: cloture 31 criteres cote IA (prouve vs geste humain), README identites, changelog v1.8
Effi
2026-10-12 21:24:10 +02:00
-
4f1c267404
synapse: 1er compte admin cree, repare (bcrypt+PUT v2) et verifie (login OK, API admin OK) + 27-family-users outille
Effi
2026-10-12 21:13:43 +02:00
-
4a3c460b57
dumps logiques 3 bases (gitea rejouabilité prouvée 116 tables) + hub beszel hors-G9 sur J5040 LAN-only
OpenFox
2026-10-12 20:35:54 +02:00
-
e27ac1ea90
identites: balayage mesure (gitea 2fa=0/4, synapse admin=0), porte de sortie synapse outillee, backup-perimetre + reste-humain
OpenFox
2026-10-12 20:16:38 +02:00
-
79197d13cb
docs: BACKUP-PERIMETRE, RESTE-HUMAIN (checklist 17 criteres), PHOTOS-DOUBLE-RUN + README (14-firewall)
OpenFox
2026-10-12 20:06:12 +02:00
-
67b5b68c18
durcissement: ssh+443 LAN-only sur .24/.27, tailscale coupe, couchdb faux positif corrige (auth 401 mesurée)
OpenFox
2026-10-12 20:03:03 +02:00
-
70265acddd
exposition: grille valider, ufw complet mesure, ssh ouvert WAN sur .24 ET .27, 443 G9 sans regle LAN
OpenFox
2026-10-12 19:46:40 +02:00
-
f13fc2472a
registry: --check comparait les lignes 1-4, l'horodatage (ligne 9) restait -> fausse derive permanente
OpenFox
2026-10-12 19:12:48 +02:00
-
3f3f14302d
docs: README (13-diun-notify, compose versionnes) + DOSSIER v1.7 (mesures phase 4.5)
OpenFox
2026-10-12 19:09:51 +02:00
-
d61eb0f67b
phase 4.5: diun deploye, prisme pose sur J5040, 3 bugs chaine alerte corriges, compose du kit versionnes
OpenFox
2026-10-12 19:06:13 +02:00
-
76a348449e
phase 4.5: notifications 3/3 relevees, backup+restauration photos prouves, double-run photos mesure, n8n mesure
OpenFox
2026-10-12 17:14:44 +02:00
-
3fcfa4459b
journal: validation utilisateur L3 (sondes+digest G9) tracee (G11)
OpenFox
2026-10-12 16:55:39 +02:00
-
b98fbf76b4
phase 4.5: chaine notification verifiee, derive prouvee, runbook execute, procedure git-credentials
OpenFox
2026-10-12 16:53:20 +02:00
-
3b162dea50
journal: phase 4.5 (sondes installees, notification verifiee, derive prouvee)
OpenFox
2026-10-12 16:50:42 +02:00
-
a955bcd4c2
registry: endpoints Caddy corriges (cle ip+port, hotes multiples), lib-notify en argv, doc regenere
OpenFox
2026-10-12 16:48:29 +02:00
-
4b26049b8f
phase 4.5: registre identites + runbooks + sondes applicatives (cron G9) + G11 + etudes exposition/whatsapp + alignement 08-decommission et S8/S9.2/S11/S14
openfox
2026-10-12 16:42:41 +02:00
-
ca64eaaf77
registre: 10-registry.sh (genere moitie technique + derive) + REGISTRE-BRIQUES.md (21 conteneurs, 13 constats) + lib-notify.sh (payload JSON)
openfox
2026-10-12 16:17:34 +02:00
-
2f98c32da1
docs clôture : PHASE4 §0.1 PhotoPrism ✅ + §0.5 J5040 E1-E4 ; README 07d ✅ + E aligné ; 10-verify fixes (include restore, chemins)
openfox-pilot
2026-10-12 15:14:11 +02:00
-
a5b2909722
07d: fixes idempotence snapshots (env restic), compose via sudo (env_file 600 root), health /api/v1/health ; 10-verify: fichier test depuis g9.meta (garanti dans snapshot)
openfox-pilot
2026-10-12 14:17:39 +02:00
-
6ee136b35d
critère 3 : script test restore photo (10-verify-restore-photo.sh) + décision chiffrement journalisée
openfox-pilot
2026-10-12 12:44:51 +02:00
-
d4f68cb8f7
wireguard: clés serveur+portable générées (600 sur J5040, gitignored)
openfox-pilot
2026-10-11 18:59:32 +02:00
-
71f1ec33fd
E4 : Caddy OVH sur J5040, 7/7 certs LE via DNS-01, clé OVH renouvelée ; copie parallèle 4 flux
openfox-pilot
2026-10-11 18:27:42 +02:00
-
a3a198027d
E4: clé OVH NAS expirée (diagnostic API), secrets 600 sur J5040, journal
openfox-pilot
2026-10-11 17:39:42 +02:00
-
6516d67d0b
compose wireguard (E4, linuxserver épinglé digest)
openfox-pilot
2026-10-11 17:08:51 +02:00
-
0b95d24046
E2 bascule DNS .27 active (bail G9 renouvelé, filtrage vérifié)
openfox-pilot
2026-10-11 17:07:31 +02:00
-
e2dc0176ff
E3 préparé : baux statiques Freebox (OCR) -> /srv/dnsmasq/leases, dnsmasq --test OK, 09 corrigé (conf-file retiré)
openfox-pilot
2026-10-11 16:55:20 +02:00
-
ffe3f2ac91
J5040 E1-E2 + préparation E3/E4 : durcissement .27, AdGuard déployé (config VM migrée), compose adguard/edge-j5040 (Caddy OVH), 09-j5040-dhcp.sh, 07d sans gzip, README/journal alignés
openfox-pilot
2026-10-11 16:38:05 +02:00
-
e6295cffc2
clôture Phase 4 : journal (consolidation + push Gitea + zéro secret vérifié)
Effi
2026-10-11 14:14:27 +02:00
-
366c5ca7a7
Phase 4 clôture : PHASE4-RECOLLEMENT §0 consolidé (briques/versions/incidents/.25), README (07e + edge + jellyfin T4.5)
Effi
2026-10-11 14:13:07 +02:00
-
3716eee1c3
T4.7 watchtower : dry-run monitor-only (scanned=2 = edge+watchtower, stateful ignorés), notification alignée generic+http://n8n:5678 (webhook testé 200)
Effi
2026-10-11 14:09:00 +02:00
-
b198710876
T4.6 edge : Caddy (compose/edge + Caddyfile), 07e-deploy-edge.sh, ufw 443 WAN/80/9980, alignement proxies (nextcloud g9-double-run + vaultwarden TRUSTED_HOSTS), preuve X-Forwarded côté app
Effi
2026-10-11 14:05:15 +02:00
-
12093067ae
T4.2/T4.5 : healthcheck collabora retiré (image minimale sans sh/curl) + journal (wizard jellyfin, collabora healthy, re-vérifs complètes)
Effi
2026-10-11 13:42:37 +02:00
-
f718f65ce0
chore: sortir les artefacts playwright-cli du suivi + .gitignore
Effi
2026-10-11 13:37:02 +02:00
-
d76f6438c9
T4.5 Jellyfin : wizard 10.9 + fix EnableLocalPassword + en-tête X-Emby-Authorization (API), cleanup médiathèques, secret jellyfin-admin documenté (03b)
Effi
2026-10-11 13:36:41 +02:00
-
34e0d470c1
T4.2 Nextcloud migré (07c) + Collabora: --o:ssl.enable=false (TLS image par défaut)
Effi
2026-10-11 13:04:34 +02:00
-
a1864c69e7
T4.1 Vaultwarden : import coffre 953 ciphers + 2FA importé + ADMIN_TOKEN argon2 + emergency access activé
Effi
2026-10-11 08:03:10 +02:00
-
e7727a6598
remove test push file
Effi
2026-10-11 07:49:57 +02:00
-
f007f1cf0c
test push clone
g9ops
2026-10-11 05:49:29 +00:00
-
c246427cf5
Phase 4 : kit G9 (scripts + compose) + Gitea T4.4 backend Postgres
Effi
2026-10-11 07:45:00 +02:00