Commit graph

Select branches

Hide pull requests

bug/7-passports-need-to-always-have-unaffiliated-user-profile

main

#2

#4

#6

Mono Color

• 4b1e6c8c6c Fix typos continuist 2025-08-24 18:04:01 -04:00
• fbe5bd2d94 Improve security #16 continuist 2025-08-24 18:00:07 -04:00
• a2dcc545c5 Improve security #15 continuist 2025-08-24 17:54:19 -04:00
• 7b1e38fb95 Improve security #14 continuist 2025-08-24 17:47:12 -04:00
• 8bbaa715f6 Improve security #13 continuist 2025-08-24 17:43:16 -04:00
• e76baeeb2f Improve security #12 continuist 2025-08-24 17:33:00 -04:00
• e28c94f955 Improve security #11 continuist 2025-08-24 17:18:48 -04:00
• 61acecc570 Improve security #10 continuist 2025-08-24 15:23:31 -04:00
• a9cdd14ffc Improve security #9 continuist 2025-08-24 15:16:30 -04:00
• 06c7b4b211 Improve security further #8 continuist 2025-08-24 15:08:52 -04:00
• c024ad5d0e Improve security further #7 continuist 2025-08-24 14:58:04 -04:00
• c87e60bd46 Improve security further #6 continuist 2025-08-24 14:52:50 -04:00
• 5616dffac5 Fix typo continuist 2025-08-24 14:45:20 -04:00
• 147ead4546 Improve security #5 continuist 2025-08-24 14:43:26 -04:00
• 4508b746cb Improve security further #4 continuist 2025-08-24 14:37:38 -04:00
• 68fcf80217 Improve security further #3 continuist 2025-08-24 14:32:29 -04:00
• 195e82c8e4 Improve security further #2 continuist 2025-08-24 14:27:24 -04:00
• d7258dbd95 Improve security further continuist 2025-08-24 13:50:14 -04:00
• 6c9431767a Further security improvements for docker registry install continuist 2025-08-24 13:31:34 -04:00
• 95331c2d11 Improve security of docker registry install continuist 2025-08-24 13:07:50 -04:00
• 9103f53673 Split out docker registry install steps into separate document continuist 2025-08-24 12:38:52 -04:00
• 7525f936bf Remove Let's Encrypt guide for now to focus on IP-only installs continuist 2025-08-24 11:21:16 -04:00
• 6c30dd20aa Remove podman-compose from CI guide for CI server continuist 2025-08-24 10:46:17 -04:00
• f607d93d21 Changes to podman config for running outside home folder continuist 2025-08-23 23:07:29 -04:00
• 92a306ddc5 Removed no longer needed docker-compose yml for registry continuist 2025-08-22 22:37:51 -04:00
• 98c5fb948f Change from docker to podman and add security hardening continuist 2025-08-18 23:03:06 -04:00
• 0b4fb89e77 Change to use nginx instead of Caddy for docker registry continuist 2025-08-18 18:18:30 -04:00
• bf41839b8c Finish making Caddyfile work correctly continuist 2025-08-16 16:25:23 -04:00
• ab2902098e Remove symlinks from Docker Registry + Caddyfile procedure continuist 2025-08-15 20:59:13 -04:00
• 7a71084628 Remove unneeded config.yml file continuist 2025-08-15 19:45:21 -04:00
• 3d660e53cf Forgot to also add this continuist 2025-08-15 19:12:16 -04:00
• f13148d53e Improve docker registry + Caddy installation security continuist 2025-08-15 19:12:04 -04:00
• ed32d5aaaf Update the CI guide to match the new config files for docker registry + caddy continuist 2025-08-15 18:44:28 -04:00
• 2ec81cd9d1 Fix docker registry + Caddy installation files for IP-only config continuist 2025-08-15 18:30:46 -04:00
• fddc224e3b Consolidate docker registry stuff continuist 2025-08-03 11:22:59 -04:00
• 491deea461 Use own self-signed cert chain for Option A continuist 2025-07-13 15:48:53 -04:00
• 502643b5b0 Include procedures for self-signed cert and Let's Encrypt continuist 2025-07-13 15:18:56 -04:00
• df7386c60d Configure for self-signed TLS continuist 2025-07-13 11:35:11 -04:00
• 838078f896 Use CI service user to run docker registry continuist 2025-07-13 11:06:38 -04:00
• a43f2003d0 Improve Caddyfile and use registry config file continuist 2025-07-13 10:53:33 -04:00
• 03dac72b90 Switch to Caddy + Docker Registry continuist 2025-07-13 10:26:07 -04:00
• 0c7b65ad70 Move sshd config for prod server to correct location continuist 2025-07-12 15:14:07 -04:00
• eacaa2eea6 Add back steps to secure ssh daemon continuist 2025-07-12 15:10:12 -04:00
• ab1d377b2d Use arguments with Dockerfiles continuist 2025-07-12 14:51:52 -04:00
• 9d37a795a0 Use Dockerfiles to perform tests continuist 2025-07-05 13:15:02 -04:00
• 62e3f370b8 Remove hidden stuff too continuist 2025-07-05 13:05:43 -04:00
• e24e3b722a clean workspace folder on the host and DinD at start of run continuist 2025-07-05 13:04:02 -04:00
• 6a7bbd7dd9 Switched to using context variables in ci.yml continuist 2025-07-05 13:01:25 -04:00
• 8ae2b767cb Add debug print statements continuist 2025-07-05 12:57:48 -04:00
• 58b862debe Clone to a workspace folder on the host first continuist 2025-07-05 12:55:45 -04:00
• a0c5bca0ae Changed how git clone works continuist 2025-07-05 12:46:53 -04:00
• 66a1220aaa List what's in the workspace to see what issue might be continuist 2025-07-05 12:37:43 -04:00
• 5c685694f9 Completely clean workspace folder including hidden continuist 2025-07-05 12:35:53 -04:00
• 59233883fc Clean workspace folder first before git clone to DinD continuist 2025-07-05 12:34:18 -04:00
• 8b01d55ecd Create workspace in DinD continuist 2025-07-05 12:32:44 -04:00
• aa7a7e3d1c Give DinD some time to be ready if it's not already running continuist 2025-07-05 12:31:21 -04:00
• cc0c86f3d0 Try to fix DinD already running issue continuist 2025-07-05 12:25:06 -04:00
• 08add38c14 Change ci.yml so it doesn't try to create DinD container if it's already created continuist 2025-07-05 12:22:38 -04:00
• c400f62e81 Use correct stage run on branch conditional continuist 2025-07-05 12:19:09 -04:00
• 546b0e058c Updated to use correct Forgejo env variables and do checkout in DinD container continuist 2025-07-05 12:12:25 -04:00
• cfaac6b308 Fix runs-on in ci.yml continuist 2025-07-05 11:49:26 -04:00
• 667d14c052 Merge branch 'main' of git.gcdo.org:devteam/sharenet continuist 2025-07-05 11:42:44 -04:00
• 9712328f7e Change runner label continuist 2025-07-05 11:42:36 -04:00
• 0e2b258b6f Update README.md continuist 2025-07-05 11:30:25 -04:00
• 2e5fb1e212 Make sure postgres env variables for test stage are consistent continuist 2025-07-05 02:35:10 -04:00
• 40cd2f4797 Make sure prod app deploys to correct app folder continuist 2025-07-05 02:22:55 -04:00
• 5bf93a6bab Minor updates to CI pipeline to bring it into alignment with CI workflow and docker compose .ymls continuist 2025-07-05 02:05:41 -04:00
• bbfd03e9fd Make docker compose .ymls consistent with ci workflow continuist 2025-07-05 01:57:33 -04:00
• f37825f845 Fix prod Forgejo runner install steps continuist 2025-07-05 00:39:42 -04:00
• f95359dda2 Fix prod docker setup continuist 2025-07-04 23:40:07 -04:00
• 3fc060bb64 Remove unneeded SSH setup step continuist 2025-07-04 22:57:27 -04:00
• 7cc06431da Changed Part 2 to use Forgejo runner to clone application continuist 2025-07-04 22:51:36 -04:00
• cf402855ab Remove extra docker-compose installation step continuist 2025-07-04 22:33:49 -04:00
• eb208a49f4 Fix section numering continuist 2025-07-04 22:20:09 -04:00
• 11b0715f71 Fix DinD Harbor cert registration continuist 2025-07-04 18:32:08 -04:00
• f3ebac14f0 Fix Section numbering continuist 2025-07-04 17:30:58 -04:00
• 833448d4f5 Remove unnecessary Step continuist 2025-07-04 16:02:56 -04:00
• 14b6eaeffa Use different names for deploy and service users on both servers continuist 2025-07-04 15:16:14 -04:00
• 07de8f2f6a Fix Harbor install steps continuist 2025-07-01 02:19:53 -04:00
• 2657917ebf Remove unnecessary environment variables in Step 5.4 continuist 2025-07-01 00:57:43 -04:00
• f51ac24c72 Simplify steps to install Harbor CA cert on host docker daemon continuist 2025-07-01 00:40:09 -04:00
• 6e07ea8d0f Clean up steps for configuring DinD container to work with Harbor in CI workflow continuist 2025-06-30 21:40:32 -04:00
• 4a4eddbb72 Update CI DinD container steps continuist 2025-06-30 00:35:53 -04:00
• 117022cac6 Remove unnecessary sections about cleanup continuist 2025-06-30 00:16:28 -04:00
• ce89117aa6 Fix labeling of runners continuist 2025-06-30 00:07:03 -04:00
• 080bb12630 Add section for verifying the test docker compose file works correctly continuist 2025-06-29 23:46:24 -04:00
• cde0024c0a Remove no longer necessary file continuist 2025-06-29 23:35:57 -04:00
• d563e038f2 The test stage of the CI pipeline should have its own docker compose file continuist 2025-06-29 23:32:40 -04:00
• 89789c2863 In the build stage of the CI pipeline, the backend and frontend build in their own isolated docker containers continuist 2025-06-29 23:29:16 -04:00
• 1cba835799 Update Part 2 to use docker compose for deployment to prod continuist 2025-06-29 23:24:16 -04:00
• ffb055922a Reconfigure CI pipeline for DinD continuist 2025-06-29 23:17:34 -04:00
• 36041e9202 Minor fix to diagram continuist 2025-06-29 22:19:50 -04:00
• f11348f209 Consolidate DinD cleanup process continuist 2025-06-29 22:18:13 -04:00
• 86bb5e37b8 Remove no longer needed cleanup script continuist 2025-06-29 22:03:38 -04:00
• a59a7c0e74 Initial update to use Docker-in-Docker for CI continuist 2025-06-29 19:58:03 -04:00
• 1187f7b7a4 Improve human readability of cleanup script continuist 2025-06-29 19:23:39 -04:00
• 5a42d81b38 Remove cleanup script to not check for nonexistent forgejo docker container continuist 2025-06-29 17:58:12 -04:00
• 063a6016ae Update cleanup.sh scrpt to avoid deleting critical infrastructure containers continuist 2025-06-29 17:52:07 -04:00
• faf607b56c Update monitor script for Harbor continuist 2025-06-29 17:40:45 -04:00
• 7e64571ae3 Removed wrong command continuist 2025-06-29 17:26:18 -04:00