ippadmin/itpp-infrastructure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
94 Commits 2 Branches 0 Tags
26b985f6a443b6071f0864f5271d6fd170c34404
Commit Graph
94 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
root 26b985f6a4 docs: add legal storage policy, DocuSeal deploy template, and app4 migration plan 2026-08-15 15:45:36 -04:00
root 4d43623db6 Add Hosted AI Agent Platform (AgentThread reference) to future projects list 2026-08-14 19:07:14 -04:00
ippadmin 894dd0c21e changelog: backfill app3 docroot migration to per-site users (Aug 12) 2026-08-14 18:25:02 -04:00
root 83c939fc20 docs: redact plaintext admin passwords from git audit reports 2026-08-14 09:37:01 -04:00
root 92d8f4eb6b Add open-source SaaS alternatives to future projects (10 self-hosted replacements) 2026-08-13 06:12:11 -04:00
ippadmin dd13c706d0 TIMAPTA PTA site + email + DNS (timapta.org, ptatima.org) 2026-08-12 14:46:30 -04:00
root c2485ef51b v5.1: 6-seat pool, clean pricing tiers, declared review quantities 2026-08-12 05:14:32 -04:00
root 373060182e v5.0 pricing update: Team C panel recommendations (49/99/,499) 2026-08-12 04:35:18 -04:00
root 42ca1cefb2 Proposal v5.0: 11-judge panel, error-detection thesis, self-review pipeline 2026-08-12 04:19:55 -04:00
root 04540c4293 Spec v2.3: 11-seat pool, 9 vendors, Anthropic restored, GPT-5.6 dead, thesis pivot to error-detection density 2026-08-12 04:02:15 -04:00
root 103620e10a HotNow Savannah v2: city-pivot proposal + full technical docs (Batch 001 research, Aug 11 2026) 2026-08-11 08:48:43 -04:00
ippadmin a51db27080 Add Git environment restructuring plan (Docs-as-Code) 2026-08-09 23:04:55 -04:00
root d2b9e80572 fix: move incident doc to docs/incidents/ — follow repo convention 2026-08-09 20:11:34 -04:00
root c1d048e8b7 fix: reopen incident — 4 of 7 workstreams still outstanding 2026-08-09 20:09:44 -04:00
root 9676065669 incident: TransitPin v2 dispatch failure — Aug 9 2026 
- Full incident report: root cause analysis, timeline, lessons learned
- Documented original instruction vs actual delivery
- Accountability measures: governance rule saved to permanent memory
- Multi-team dispatch governance checklist now active
- Single subagent dispatched instead of 4 coordinated teams
 2026-08-09 19:46:43 -04:00
root 77acbb62d2 audit: closeout report — full narrative with timeline, findings, conductor reviews, guardrails 
15 findings total (10 resolved, 5 open). 2 critical, 5 high, 2 medium, 2 low.
Model attribution: DeepSeek V4 Pro (audit), Sonnet 5 (structural), Gemini Pro (gaps).
20/20 integrity checks pass. Document clean.
 2026-08-09 03:12:29 -04:00
root 7058683131 audit: Sonnet 5 review — all arithmetic reconciled, guardrails hardened 
- Documentation State: 28/15/6→26/17/7 (matches Appendix C)
- Headline accuracy: 'critical services complete'→'6/31, 5/6 critical'
- Fact-reference-before-discovery: now cites concrete script artifact
- Count-validation gate: new guardrail (sums must match declared totals)
- Cron failure alert: added to Detection table
- Remaining Work: STALE/ABSENT/GAP/NOTES→MEDIUM/LOW (severity, not status label)
- Appendix C: auth repo explained, disaster-recovery CRITICAL marker
- Appendix C summary table: 28/15/6→26/17/7+1 with Total=50 row
- New script: pre-audit-fact-check.sh (guardrail artifact)

Sonnet rating: MEDIUM (per-finding quality HIGH, cross-table arithmetic fixed)
 2026-08-09 03:07:05 -04:00
root 59a1e3a3ea audit: Gemini review fixes — 50 repos, 31 services, 4 new findings 
- Corrected repo count: 49→50 (Gitea API verified Aug 9)
- Corrected service count: 24→31 (Server Service Map recount)
- Appendix C: added org-audit+startup-studio to MATCHES, removed 3 non-repo projects
- NEW CRITICAL: DR standby sizing mismatch — app1-bu (4G/80G) can't fail over for Core (15G/503G)
- NEW HIGH: 15 undocumented services elevated from footnote to formal finding
- NEW HIGH: Pre-commit scanner only on 7/50 repos
- NEW: OS/Docker patch management gap identified
- Corrected partial/stale: 14→17 repos
 2026-08-09 03:04:40 -04:00
Sho'Nuff 02b07b06bc audit: N1 resolved (auth2 on app3), Core storage 503G, Appendix C counts fixed, model info added 2026-08-09 02:37:34 -04:00
Sho'Nuff 9fd92225fe docs: comprehensive audit summary for external review + architecture.md spec fixes (12vcpu/32gb/1tb verified) 2026-08-09 02:25:37 -04:00
Sho'Nuff 08836e138c docs: critical review fixes — server specs corrected, exec summary fixed, scanner built (gitleaks-style pre-commit hook) 2026-08-09 02:20:31 -04:00
Sho'Nuff 38b5d9bfda docs: comprehensive post-audit report — 11 findings, current state, safeguards, roadmap 2026-08-09 02:07:36 -04:00
Sho'Nuff 905685de4f docs(architecture): mark deployment docs complete, resolve plaintext secrets note 2026-08-09 01:38:15 -04:00
Sho'Nuff d4e3777959 Add live-truth architecture reference doc 
Replaces the archived master-apps-services.md (Jul 16, 2026) which
listed 10+ defunct servers and stale specs (Mattermost, wphost01,
standalone hudu, etc.). This is the new single source of truth.

Cross-references deployment docs being created in org-audit.
 2026-08-09 01:16:24 -04:00
root 489f690303 docs: corrected model usage report — real root causes, fallback blind spot, fixed baseline 2026-08-08 22:54:43 -04:00
root d42f925849 docs: 30-day model usage report — deepseek-v4-pro vs sonnet-5, caching analysis 2026-08-08 22:45:29 -04:00
root 86537b4373 docs: remediation punch list status report — 2026-08-08 2026-08-08 22:34:15 -04:00
root a5315f507e Fix: app1-bu IP 5.161.114.8→5.161.225.131, CPX11→CPX21; Mattermost/noc dns entry updated 2026-08-08 22:14:58 -04:00
Sho'Nuff 21c80b63e6 August 8 cleanup: modelortho inventory, hexclave rename, Mattermost decommission fix 
- README: Add modelortho.com as hosted client under App3 services
- README: Remove Mattermost from backup pipeline table (was decommissioned)
- CHANGELOG: Document Hexclave → Stack Auth rename (2026-08-08)
- backup-plan: Fix fabricated '14 previously-unbacked' count → actual 6
- app1-backup.sh: Remove Mattermost backup section (decommissioned service)
 2026-08-08 21:34:32 -04:00
root db0eed41d2 Add backup status report — 27 targets, zero unbacked 2026-08-08 20:53:22 -04:00
root 069cbacca4 Fold modelortho into shared app3 backup — no standalone job 
- app3-backup.sh now backs up static sites (non-WordPress htdocs)
- modelortho.com picked up automatically alongside 10+ other static sites
- Removed standalone modelortho-backup.sh + cron job
- Static sites row added to backup plan S3 path: app3/static/
 2026-08-08 19:02:59 -04:00
root e752753849 Add modelortho.com backup — daily at 4:30 AM ET to Wasabi S3 
- modelortho-backup.sh: tars htdocs + nginx configs, remote SSH to app3
- Cron: no-agent script, 4:30 AM daily, 14-day S3 retention
- All *.modelortho.com subdomains auto-included
- Backup plan inventory: 26 → 27 targets
 2026-08-08 18:59:40 -04:00
root 48ccd25d33 Document modelortho.com — Anita's independent ortho consulting platform 
- Hosted on app3 CloudPanel, static placeholder live
- DNS in Anita's personal Cloudflare (wildcard *.modelortho.com set)
- Anita's Hermes manages autonomously via SSH + itpp-infra key
- Full skill in her profile: devops/modelortho-management
- ITPP provides server only — no operational responsibility
 2026-08-08 18:55:36 -04:00
root 53d94a7597 M9: DNS cleanup — remove 2 stale iamgmb.com records 
- Deleted village-express.iamgmb.com (no service, no files, no Caddy block)
- Deleted temp.vault.iamgmb.com (no service, no files, no Caddy block)
- Removed redundant-dns-proposal.md (accidental commit from H8)
- Mockup Lab confirmed live at mockup.iamgmb.com
- Timetrex confirmed running (301 redirect to /timetrex/interface/html5/)
- All 19 Cloudflare zones audited — no critical parked domains

iamgmb.com root → app3 CloudPanel (152.53.241.111) — empty/default vhost
 2026-08-08 18:41:09 -04:00
root 76185d7294 H8: Fix stale docs — model chain + schedule table 
- model-chain.md: updated to Aug 8 with 18-model expansion verification
- New models documented: claude-sonnet-4-6, claude-opus-4-8, claude-fable-5,
  gemini-2.5-flash/pro, xai/grok-4.3, gpt-5, gpt-5-mini
- Fixed gemini-3.6-flash → gemini-flash-latest in key model lists
- backup-plan.md: Dawarich/RAGFlow added to schedule table (H6 follow-up)
- Server specs verified accurate (12 vCPU, 31 GB, 1 TB on app1)
- UniFi verified live (302 → /manage)
 2026-08-08 18:37:26 -04:00
root d987bbffc0 H6+H7: Back up RAGFlow + Dawarich. Delete Mattermost. 
- dawarich-backup.sh: PostgreSQL dump (6.7MB), daily 4:00 AM
- ragflow-backup.sh: MySQL dump (261KB), daily 4:15 AM
- Both added to app2 inventory, schedule, RPO/RTO (Low tier)
- Unbacked Services section now reads: *(none)*
- Mattermost decommissioned: containers/volumes/compose purged from app1
- noc.itpropartner.com DNS record reserved for NOC replacement
- README + dns-records.md updated
 2026-08-08 18:32:12 -04:00
root 81762a33bd CRITICAL #4: Auth API + Stack Auth backups — auth-api-backup.sh (SQLite hot), hexclave-backup.sh (PG dump + compose). Auth API Core 3:15 AM, Hexclave app3 3:30 AM. Update RPO/RTO tiers. Remove Technitium from Unbacked (now in Low tier). 2026-08-08 18:20:03 -04:00
root be5af418ae CRITICAL #1: Rotate Grafana off admin/admin to random credential stored in Vaultwarden 2026-08-08 18:09:18 -04:00
root c4c6609a81 DR docs audit fix (2026-08-08): fix stale dates, path errors, add RPO/RTO, unbacked services, restore testing, rollback procedure, S3 access instructions 2026-08-08 17:25:27 -04:00
root a522d11c35 docs: nest 19 files into audit/ clients/ infrastructure/ monitoring/ projects/ super-search/ 2026-08-08 13:04:55 -04:00
root 11a1110b81 72hr audit: 4 new docs, port fixes, project-log updated 2026-08-08 12:55:30 -04:00
root a269a17b1f git-audit: 42-repo hygiene audit Aug 8 - credentials, sprawl, nesting 2026-08-08 12:50:12 -04:00
root ca402d3444 Add Katie Watts Design client doc - live on app3 CloudPanel 2026-08-07 11:00:50 -04:00
root 4c172c525b docs: Super Search MCP enhancement execution plan 
- 16 actionable enhancements from Aug 7 2026 scanner report
- Organized by priority: HIGH (4), MEDIUM (7), LOW (5)
- Includes dependency-aware execution order across 4 phases
- Risk register with mitigations
- Source: super-search-enhancement-scanner cron job output
 2026-08-07 10:40:46 -04:00
root de0190283b docs: Git structure audit -- 40 Gitea repos, 13 findings, prioritized action plan 2026-08-07 08:36:59 -04:00
root f0138e5d85 docs: add Uptime Kuma monitoring plan 
- Covers all monitored endpoints across ITPP infrastructure
- Includes alert thresholds and escalation paths
 2026-08-07 08:30:37 -04:00
root 25e6b8cb79 docs: fallback chain overhaul, two-key strategy, operational model update (Aug 6 2026) 2026-08-06 10:59:07 -04:00
root 8561ba98c8 Move CartMyList/CartMySupply docs to dedicated ippadmin/cartmylist repo 2026-08-05 18:57:10 -04:00
root 647316e0de Add CartMyList/CartMySupply analysis, advisory response, and email draft (Aug 5 2026) 2026-08-05 18:52:59 -04:00
root 538876ac16 docs: infrastructure gap assessment + project updates 
- infrastructure-gap-assessment: full audit doc
- project-log: recent completions
- hotnow, hotnow-phase1, ops-portal-runcloud-design-brief, schoolcart PTA docs
- intelsight and schoolcart updates
 2026-08-05 07:34:35 -04:00