From 894dd0c21e2266e5d44976f406c74d9147b9652b Mon Sep 17 00:00:00 2001 From: ippadmin Date: Fri, 14 Aug 2026 18:25:02 -0400 Subject: [PATCH] changelog: backfill app3 docroot migration to per-site users (Aug 12) --- CHANGELOG.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index ea70f92..ae5a809 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,12 @@ # itpp-infrastructure — CHANGELOG +## 2026-08-12 — app3 Web Docroot Migration to Per-Site Users + +- **Change:** every app3 nginx vhost moved off the shared `/home/ippadmin/htdocs/` root to a per-site dedicated Linux user with docroot `/home//htdocs/` (security hardening — no more single-owner web tree). +- **Verified mappings (live nginx configs, 2026-08-14):** mockups → `/home/mockups`, proposals → `/home/proposals`, docs → `/home/docs`, support → `/home/support`, my.verdicttank.com → `/home/myverdicttank`, verdicttank.com → `/home/gmb`, my.transitpin.com → `/home/transitpin-dash`. +- **Consequence:** 10+ skills and their reference/script files still referenced the old `/home/ippadmin/htdocs/` paths, causing a wrong-tree deploy on 2026-08-14. Remediated across SKILL.md, references/, and scripts/ (28 files, incl. singular `mockup`/`proposal` domain typos). +- **Rule:** always read `/etc/nginx/sites-enabled/.conf` to confirm the real docroot before deploying. Never assume `ippadmin` owns a site's files. + ## 2026-08-08 — Hexclave Renamed → Stack Auth - **Hexclave** renamed to **Stack Auth**. Now running at `auth2.itpropartner.com` on app3.