ippadmin/itpp-infrastructure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
64 Commits 2 Branches 0 Tags
069cbacca453a8397517a674516f50f1545f11d5
Commit Graph
64 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
root 069cbacca4 Fold modelortho into shared app3 backup — no standalone job 
- app3-backup.sh now backs up static sites (non-WordPress htdocs)
- modelortho.com picked up automatically alongside 10+ other static sites
- Removed standalone modelortho-backup.sh + cron job
- Static sites row added to backup plan S3 path: app3/static/
 2026-08-08 19:02:59 -04:00
root e752753849 Add modelortho.com backup — daily at 4:30 AM ET to Wasabi S3 
- modelortho-backup.sh: tars htdocs + nginx configs, remote SSH to app3
- Cron: no-agent script, 4:30 AM daily, 14-day S3 retention
- All *.modelortho.com subdomains auto-included
- Backup plan inventory: 26 → 27 targets
 2026-08-08 18:59:40 -04:00
root 48ccd25d33 Document modelortho.com — Anita's independent ortho consulting platform 
- Hosted on app3 CloudPanel, static placeholder live
- DNS in Anita's personal Cloudflare (wildcard *.modelortho.com set)
- Anita's Hermes manages autonomously via SSH + itpp-infra key
- Full skill in her profile: devops/modelortho-management
- ITPP provides server only — no operational responsibility
 2026-08-08 18:55:36 -04:00
root 53d94a7597 M9: DNS cleanup — remove 2 stale iamgmb.com records 
- Deleted village-express.iamgmb.com (no service, no files, no Caddy block)
- Deleted temp.vault.iamgmb.com (no service, no files, no Caddy block)
- Removed redundant-dns-proposal.md (accidental commit from H8)
- Mockup Lab confirmed live at mockup.iamgmb.com
- Timetrex confirmed running (301 redirect to /timetrex/interface/html5/)
- All 19 Cloudflare zones audited — no critical parked domains

iamgmb.com root → app3 CloudPanel (152.53.241.111) — empty/default vhost
 2026-08-08 18:41:09 -04:00
root 76185d7294 H8: Fix stale docs — model chain + schedule table 
- model-chain.md: updated to Aug 8 with 18-model expansion verification
- New models documented: claude-sonnet-4-6, claude-opus-4-8, claude-fable-5,
  gemini-2.5-flash/pro, xai/grok-4.3, gpt-5, gpt-5-mini
- Fixed gemini-3.6-flash → gemini-flash-latest in key model lists
- backup-plan.md: Dawarich/RAGFlow added to schedule table (H6 follow-up)
- Server specs verified accurate (12 vCPU, 31 GB, 1 TB on app1)
- UniFi verified live (302 → /manage)
 2026-08-08 18:37:26 -04:00
root d987bbffc0 H6+H7: Back up RAGFlow + Dawarich. Delete Mattermost. 
- dawarich-backup.sh: PostgreSQL dump (6.7MB), daily 4:00 AM
- ragflow-backup.sh: MySQL dump (261KB), daily 4:15 AM
- Both added to app2 inventory, schedule, RPO/RTO (Low tier)
- Unbacked Services section now reads: *(none)*
- Mattermost decommissioned: containers/volumes/compose purged from app1
- noc.itpropartner.com DNS record reserved for NOC replacement
- README + dns-records.md updated
 2026-08-08 18:32:12 -04:00
root 81762a33bd CRITICAL #4: Auth API + Stack Auth backups — auth-api-backup.sh (SQLite hot), hexclave-backup.sh (PG dump + compose). Auth API Core 3:15 AM, Hexclave app3 3:30 AM. Update RPO/RTO tiers. Remove Technitium from Unbacked (now in Low tier). 2026-08-08 18:20:03 -04:00
root be5af418ae CRITICAL #1: Rotate Grafana off admin/admin to random credential stored in Vaultwarden 2026-08-08 18:09:18 -04:00
root c4c6609a81 DR docs audit fix (2026-08-08): fix stale dates, path errors, add RPO/RTO, unbacked services, restore testing, rollback procedure, S3 access instructions 2026-08-08 17:25:27 -04:00
root a522d11c35 docs: nest 19 files into audit/ clients/ infrastructure/ monitoring/ projects/ super-search/ 2026-08-08 13:04:55 -04:00
root 11a1110b81 72hr audit: 4 new docs, port fixes, project-log updated 2026-08-08 12:55:30 -04:00
root a269a17b1f git-audit: 42-repo hygiene audit Aug 8 - credentials, sprawl, nesting 2026-08-08 12:50:12 -04:00
root ca402d3444 Add Katie Watts Design client doc - live on app3 CloudPanel 2026-08-07 11:00:50 -04:00
root 4c172c525b docs: Super Search MCP enhancement execution plan 
- 16 actionable enhancements from Aug 7 2026 scanner report
- Organized by priority: HIGH (4), MEDIUM (7), LOW (5)
- Includes dependency-aware execution order across 4 phases
- Risk register with mitigations
- Source: super-search-enhancement-scanner cron job output
 2026-08-07 10:40:46 -04:00
root de0190283b docs: Git structure audit -- 40 Gitea repos, 13 findings, prioritized action plan 2026-08-07 08:36:59 -04:00
root f0138e5d85 docs: add Uptime Kuma monitoring plan 
- Covers all monitored endpoints across ITPP infrastructure
- Includes alert thresholds and escalation paths
 2026-08-07 08:30:37 -04:00
root 25e6b8cb79 docs: fallback chain overhaul, two-key strategy, operational model update (Aug 6 2026) 2026-08-06 10:59:07 -04:00
root 8561ba98c8 Move CartMyList/CartMySupply docs to dedicated ippadmin/cartmylist repo 2026-08-05 18:57:10 -04:00
root 647316e0de Add CartMyList/CartMySupply analysis, advisory response, and email draft (Aug 5 2026) 2026-08-05 18:52:59 -04:00
root 538876ac16 docs: infrastructure gap assessment + project updates 
- infrastructure-gap-assessment: full audit doc
- project-log: recent completions
- hotnow, hotnow-phase1, ops-portal-runcloud-design-brief, schoolcart PTA docs
- intelsight and schoolcart updates
 2026-08-05 07:34:35 -04:00
root 7f31eb0f98 Add BeachDirect.io business proposal (.2B market, done-for-you vacation rental direct booking) 2026-08-01 13:49:46 -04:00
root 7cbef9bd8f docs: model-chain — key was stale, fixed with hermes-agent-v5 Jul 31 2026-07-31 07:14:11 -04:00
root 100e65c296 Wire API health JSON into Ops Portal (servers page) 2026-07-31 06:56:26 -04:00
Sho'Nuff 5330a9b1b3 Add API health monitoring section to master list 2026-07-31 06:50:59 -04:00
Sho'Nuff 0b56cfc23f Add API master list - internal/external/paid inventory 2026-07-31 06:41:12 -04:00
root fcc9863232 Update backup plan doc with Jul 28 migration changes 
- Remove stale core-services (Vaultwarden, Twenty, SearXNG, Komodo)
- Add new App1 services (Komodo, DocuSeal, Twenty CRM backups)
- Update S3 path table with canonical locations
- Add migration history section (Jul 28)
- Note stale core/ subfolder paths in S3 for reference
- Coverage: 26 backup targets across 6 servers + router
 2026-07-28 20:51:48 -04:00
Sho'Nuff 6e0d793696 IntelSight: add full business proposal (728 lines, 11 sections) + publish to proposals.iamgmb.com/intelsight 
- Copy full IntelSight business proposal from super-search-business repo
- Create 42KB HTML page at /var/www/proposals/intelsight.html (11 sections + appendices)
- Update proposals index to link to IntelSight
- Include deployment status table showing test sites (live/built/not built)

Test sites status:
  intelsight.io        — LIVE (WordPress, app3)
  my.intelsight.io     — NOT BUILT (DNS only, returns 525)
  api.intelsight.io    — NOT CREATED (no DNS record)
  intelsight.co        — LIVE (301 redirect)
 2026-07-27 16:57:19 -04:00
root 1056e386f7 schoolcart: add verified domain name options table to immediate decisions 2026-07-27 16:26:43 -04:00
root b81d3882e2 Update SchoolCart pricing: Quick Cart .99, Premium .99 (named carts), Family Pass 9.99/yr, School Plan FREE + PTA donation 2026-07-27 16:16:49 -04:00
root 6ea1200a9d Add SchoolCart business proposal — full market analysis, revenue model, GTM plan 2026-07-27 16:00:03 -04:00
root 4cb95b5df2 Update model-chain.md: canonical Fallback Chain vs Operational Models (Jul 27 2026) 2026-07-27 11:41:18 -04:00
root b6a8a31bfb docs: add IntelSight.io site documentation 
- DNS records: intelsight.io + intelsight.co zones on Cloudflare
- CloudPanel WordPress setup on app3 (152.53.241.111)
- Credentials, SSL issuance workflow, backup status
- Hudu password vault entry created (ID 129)
- Fixed root A record (was 152.153.241.111 → corrected to 152.53.241.111)
- Fixed intelsight.co redirect (added dummy A record for DNS resolution)
- my.intelsight.io DNS ready but site not yet created
 2026-07-26 15:31:43 -04:00
root cfceae14e4 docs: add IntelSight.io site documentation — CloudPanel WordPress on app3 2026-07-26 14:20:06 -04:00
root 661be04b22 Add MSP Operations Kit templates: DPA, SOW, service order, QBR scorecard, risk waiver, monthly review 2026-07-25 19:06:16 -04:00
root 79a383a3b5 fix: model chain, service locations, dead IPs, stale paths — audit Jul 24 2026 2026-07-24 17:13:54 -04:00
root 5f48e0213a docs: promote claude-sonnet-5 to primary @ admin-ai and demote gpt-5.6-terra to F2 2026-07-24 16:12:34 -04:00
root 54fc46ca14 docs: update model chain and add cost control rollout summary for 2026-07-24 2026-07-24 16:05:35 -04:00
root 98bb0e4d27 docs: capture missed-call lead recovery future project 2026-07-23 19:52:45 -04:00
root f5285ae7f1 docs: restore sanitized operational documentation after credential purge 2026-07-23 12:05:47 -04:00
root e44bba1826 sanitize: redact secrets from docs, add forefront-broadband-map, exclude backup dir 
- Redact credentials/keys from README, key-inventory, model-chain, ops-portal docs, project-log, systems-networks-team, app3
- Add forefront-broadband-map.md with sanitized content
- Add .gitignore to permanently exclude .backup-before-sanitize-20260723/ and .env files
- No credentials rotated; no history rewritten
 2026-07-23 12:03:10 -04:00
root b9dfed9eb2 Verify FCC API access for Forefront map 2026-07-21 23:52:50 -04:00
root efeabf61a1 Record FCC token status for Forefront map 2026-07-21 23:47:34 -04:00
root 34c91d52da Confirm Forefront map access posture 2026-07-21 23:02:59 -04:00
root 6035fc44b8 Update Forefront map implementation plan 2026-07-21 22:59:45 -04:00
root 7996e5efb9 Add Forefront map validation answers 2026-07-21 22:56:10 -04:00
root 0b92e77e1d Refine Forefront broadband map requirements 2026-07-21 22:47:27 -04:00
root a255847e69 Add Forefront broadband map future project 2026-07-21 22:39:48 -04:00
root 26b930f5b4 docs: Super Search v2.1 — circuit breaker, racing search, screenshots 2026-07-21 22:17:01 -04:00
root 3c50ee9900 docs: Super Search CF bypass v2.1 — browserless + detection 2026-07-21 21:58:22 -04:00
root ec04e65121 docs: consolidate project logs, remove homelab content 
- Merged project-log-2026-07-17.md into docs/project-log.md
- Removed duplicate docs/projects-log.md
- Appended July 21 entries: home lab, DNS, Twilio, Gift-a-Roast
- Moved home-lab-state doc to /root/projects/homelab/
- 10 skills patched today
 2026-07-21 19:39:59 -04:00