ippadmin/itpp-infrastructure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
120 Commits 2 Branches 0 Tags
3a51b79b51e45b49e18959e25e383900ad76f481
Commit Graph
52 Commits
Author SHA1 Message Date
root 3a51b79b51 docs: app3 site publish audit 2026-09-12 
- 34 app3-hosted domains tested: 28 publish, 6 not

- boxpilotlogistics.com + vigilanttac.com stuck in apex<->www redirect loops (down)

- voipsimplicity.com + www have no DNS records at all (WordPress install present on app3)

- timapta.org 301s to ptatime.org, which itself has no DNS

- 815bistro.com confirmed NOT on app3: still live on SiteGround 35.212.86.161

- precondition gate for the S3 backup-mirror cleanup
 2026-09-12 08:28:50 -04:00
Sho'Nuff 9af0db089b docs(model-chain): correct V4 Pro retirement claim; record flash cost-map override 
- V4 Pro is NOT retiring Sep 14: DeepSeek reversed the sunset and continues it unchanged at 1.32/3.96, so the legacy name does not auto-route to Flash
- admin-ai built-in map carried the superseded Flash peak rates (0.44 miss / 0.014 cache-hit / 1.32 out)
- applied peak override via /model/update (0.30 miss / 0.006 cache-hit / 1.20 out)
- verified: persisted in litellm_params, API-reported, live call billed 1.71e-05
 2026-09-11 18:31:54 -04:00
Sho'Nuff 13b48e09d7 docs(incidents): Core store corruption root-cause and recovery report 2026-09-11 17:45:50 -04:00
root 525e3cdd7b docs: add llms.txt supply-chain prompt injection advisory 
- Security advisory on the llms.txt / llms-full.txt package-hijack attack
- Documents the research finding (120 misconfigured files, F500 phone-homes, Hermes named)
- Names ITPP/Hermes exposure and lists 5 mitigations + 3 follow-up audit items
- Source: Ars Technica (Dan Goodin), 2026-08-29
 2026-08-29 08:25:29 -04:00
root f57f67c661 docs: mark wphost02 decommissioned (2026-08-28); app1-bu is sole Hetzner box 2026-08-28 09:42:36 -04:00
root f5175f1ce0 Sync docs, audit artifacts, project notes, and VerdictTank proposal docs 
- audit/phase-one + phase-two: security audit briefs, findings, credential-rotation plan, Docker-USER hardening scripts, rollback refs
- disaster-recovery/restore-test-log.md + backup-dr-audit-2026-08-10.md
- clients/ (modelortho SEO audit, ai-biz-dev competitive landscape), notes/ (tiktok strategy)
- projects/: front-desk-voice-agent, seo-visibility-checker product plan, hotnow-savannah HTML, resend-transactional-email, backup-dashboard-enhancements, code-review-graph, seo-ci-architecture
- proposals/verdicttank/: architecture v4.0, methodology, judge-pool review, consolidation reasoning, cross-check review
- docs/super-search/firecrawl-provider-strategy.md
- updates: CHANGELOG, model-chain, projects-master-readme, intelsight.io
- .gitignore: exclude nested standalone repos (seo-tool, venturebuilt)
 2026-08-26 02:27:28 -04:00
root 26b985f6a4 docs: add legal storage policy, DocuSeal deploy template, and app4 migration plan 2026-08-15 15:45:36 -04:00
root 4d43623db6 Add Hosted AI Agent Platform (AgentThread reference) to future projects list 2026-08-14 19:07:14 -04:00
root 83c939fc20 docs: redact plaintext admin passwords from git audit reports 2026-08-14 09:37:01 -04:00
root 92d8f4eb6b Add open-source SaaS alternatives to future projects (10 self-hosted replacements) 2026-08-13 06:12:11 -04:00
ippadmin a51db27080 Add Git environment restructuring plan (Docs-as-Code) 2026-08-09 23:04:55 -04:00
root d2b9e80572 fix: move incident doc to docs/incidents/ — follow repo convention 2026-08-09 20:11:34 -04:00
root 77acbb62d2 audit: closeout report — full narrative with timeline, findings, conductor reviews, guardrails 
15 findings total (10 resolved, 5 open). 2 critical, 5 high, 2 medium, 2 low.
Model attribution: DeepSeek V4 Pro (audit), Sonnet 5 (structural), Gemini Pro (gaps).
20/20 integrity checks pass. Document clean.
 2026-08-09 03:12:29 -04:00
root 7058683131 audit: Sonnet 5 review — all arithmetic reconciled, guardrails hardened 
- Documentation State: 28/15/6→26/17/7 (matches Appendix C)
- Headline accuracy: 'critical services complete'→'6/31, 5/6 critical'
- Fact-reference-before-discovery: now cites concrete script artifact
- Count-validation gate: new guardrail (sums must match declared totals)
- Cron failure alert: added to Detection table
- Remaining Work: STALE/ABSENT/GAP/NOTES→MEDIUM/LOW (severity, not status label)
- Appendix C: auth repo explained, disaster-recovery CRITICAL marker
- Appendix C summary table: 28/15/6→26/17/7+1 with Total=50 row
- New script: pre-audit-fact-check.sh (guardrail artifact)

Sonnet rating: MEDIUM (per-finding quality HIGH, cross-table arithmetic fixed)
 2026-08-09 03:07:05 -04:00
root 59a1e3a3ea audit: Gemini review fixes — 50 repos, 31 services, 4 new findings 
- Corrected repo count: 49→50 (Gitea API verified Aug 9)
- Corrected service count: 24→31 (Server Service Map recount)
- Appendix C: added org-audit+startup-studio to MATCHES, removed 3 non-repo projects
- NEW CRITICAL: DR standby sizing mismatch — app1-bu (4G/80G) can't fail over for Core (15G/503G)
- NEW HIGH: 15 undocumented services elevated from footnote to formal finding
- NEW HIGH: Pre-commit scanner only on 7/50 repos
- NEW: OS/Docker patch management gap identified
- Corrected partial/stale: 14→17 repos
 2026-08-09 03:04:40 -04:00
Sho'Nuff 02b07b06bc audit: N1 resolved (auth2 on app3), Core storage 503G, Appendix C counts fixed, model info added 2026-08-09 02:37:34 -04:00
Sho'Nuff 9fd92225fe docs: comprehensive audit summary for external review + architecture.md spec fixes (12vcpu/32gb/1tb verified) 2026-08-09 02:25:37 -04:00
Sho'Nuff 08836e138c docs: critical review fixes — server specs corrected, exec summary fixed, scanner built (gitleaks-style pre-commit hook) 2026-08-09 02:20:31 -04:00
Sho'Nuff 38b5d9bfda docs: comprehensive post-audit report — 11 findings, current state, safeguards, roadmap 2026-08-09 02:07:36 -04:00
Sho'Nuff 905685de4f docs(architecture): mark deployment docs complete, resolve plaintext secrets note 2026-08-09 01:38:15 -04:00
Sho'Nuff d4e3777959 Add live-truth architecture reference doc 
Replaces the archived master-apps-services.md (Jul 16, 2026) which
listed 10+ defunct servers and stale specs (Mattermost, wphost01,
standalone hudu, etc.). This is the new single source of truth.

Cross-references deployment docs being created in org-audit.
 2026-08-09 01:16:24 -04:00
root 489f690303 docs: corrected model usage report — real root causes, fallback blind spot, fixed baseline 2026-08-08 22:54:43 -04:00
root d42f925849 docs: 30-day model usage report — deepseek-v4-pro vs sonnet-5, caching analysis 2026-08-08 22:45:29 -04:00
root 86537b4373 docs: remediation punch list status report — 2026-08-08 2026-08-08 22:34:15 -04:00
root a5315f507e Fix: app1-bu IP 5.161.114.8→5.161.225.131, CPX11→CPX21; Mattermost/noc dns entry updated 2026-08-08 22:14:58 -04:00
root db0eed41d2 Add backup status report — 27 targets, zero unbacked 2026-08-08 20:53:22 -04:00
root 48ccd25d33 Document modelortho.com — Anita's independent ortho consulting platform 
- Hosted on app3 CloudPanel, static placeholder live
- DNS in Anita's personal Cloudflare (wildcard *.modelortho.com set)
- Anita's Hermes manages autonomously via SSH + itpp-infra key
- Full skill in her profile: devops/modelortho-management
- ITPP provides server only — no operational responsibility
 2026-08-08 18:55:36 -04:00
root 53d94a7597 M9: DNS cleanup — remove 2 stale iamgmb.com records 
- Deleted village-express.iamgmb.com (no service, no files, no Caddy block)
- Deleted temp.vault.iamgmb.com (no service, no files, no Caddy block)
- Removed redundant-dns-proposal.md (accidental commit from H8)
- Mockup Lab confirmed live at mockup.iamgmb.com
- Timetrex confirmed running (301 redirect to /timetrex/interface/html5/)
- All 19 Cloudflare zones audited — no critical parked domains

iamgmb.com root → app3 CloudPanel (152.53.241.111) — empty/default vhost
 2026-08-08 18:41:09 -04:00
root 76185d7294 H8: Fix stale docs — model chain + schedule table 
- model-chain.md: updated to Aug 8 with 18-model expansion verification
- New models documented: claude-sonnet-4-6, claude-opus-4-8, claude-fable-5,
  gemini-2.5-flash/pro, xai/grok-4.3, gpt-5, gpt-5-mini
- Fixed gemini-3.6-flash → gemini-flash-latest in key model lists
- backup-plan.md: Dawarich/RAGFlow added to schedule table (H6 follow-up)
- Server specs verified accurate (12 vCPU, 31 GB, 1 TB on app1)
- UniFi verified live (302 → /manage)
 2026-08-08 18:37:26 -04:00
root c4c6609a81 DR docs audit fix (2026-08-08): fix stale dates, path errors, add RPO/RTO, unbacked services, restore testing, rollback procedure, S3 access instructions 2026-08-08 17:25:27 -04:00
root a522d11c35 docs: nest 19 files into audit/ clients/ infrastructure/ monitoring/ projects/ super-search/ 2026-08-08 13:04:55 -04:00
root 11a1110b81 72hr audit: 4 new docs, port fixes, project-log updated 2026-08-08 12:55:30 -04:00
root a269a17b1f git-audit: 42-repo hygiene audit Aug 8 - credentials, sprawl, nesting 2026-08-08 12:50:12 -04:00
root ca402d3444 Add Katie Watts Design client doc - live on app3 CloudPanel 2026-08-07 11:00:50 -04:00
root 4c172c525b docs: Super Search MCP enhancement execution plan 
- 16 actionable enhancements from Aug 7 2026 scanner report
- Organized by priority: HIGH (4), MEDIUM (7), LOW (5)
- Includes dependency-aware execution order across 4 phases
- Risk register with mitigations
- Source: super-search-enhancement-scanner cron job output
 2026-08-07 10:40:46 -04:00
root de0190283b docs: Git structure audit -- 40 Gitea repos, 13 findings, prioritized action plan 2026-08-07 08:36:59 -04:00
root f0138e5d85 docs: add Uptime Kuma monitoring plan 
- Covers all monitored endpoints across ITPP infrastructure
- Includes alert thresholds and escalation paths
 2026-08-07 08:30:37 -04:00
root 25e6b8cb79 docs: fallback chain overhaul, two-key strategy, operational model update (Aug 6 2026) 2026-08-06 10:59:07 -04:00
root 538876ac16 docs: infrastructure gap assessment + project updates 
- infrastructure-gap-assessment: full audit doc
- project-log: recent completions
- hotnow, hotnow-phase1, ops-portal-runcloud-design-brief, schoolcart PTA docs
- intelsight and schoolcart updates
 2026-08-05 07:34:35 -04:00
root 7cbef9bd8f docs: model-chain — key was stale, fixed with hermes-agent-v5 Jul 31 2026-07-31 07:14:11 -04:00
root 4cb95b5df2 Update model-chain.md: canonical Fallback Chain vs Operational Models (Jul 27 2026) 2026-07-27 11:41:18 -04:00
root 79a383a3b5 fix: model chain, service locations, dead IPs, stale paths — audit Jul 24 2026 2026-07-24 17:13:54 -04:00
root 5f48e0213a docs: promote claude-sonnet-5 to primary @ admin-ai and demote gpt-5.6-terra to F2 2026-07-24 16:12:34 -04:00
root 54fc46ca14 docs: update model chain and add cost control rollout summary for 2026-07-24 2026-07-24 16:05:35 -04:00
root f5285ae7f1 docs: restore sanitized operational documentation after credential purge 2026-07-23 12:05:47 -04:00
root 26b930f5b4 docs: Super Search v2.1 — circuit breaker, racing search, screenshots 2026-07-21 22:17:01 -04:00
root 3c50ee9900 docs: Super Search CF bypass v2.1 — browserless + detection 2026-07-21 21:58:22 -04:00
root ec04e65121 docs: consolidate project logs, remove homelab content 
- Merged project-log-2026-07-17.md into docs/project-log.md
- Removed duplicate docs/projects-log.md
- Appended July 21 entries: home lab, DNS, Twilio, Gift-a-Roast
- Moved home-lab-state doc to /root/projects/homelab/
- 10 skills patched today
 2026-07-21 19:39:59 -04:00
root 68fe477d78 docs: IRS letter, Caddyfile audit, home lab state (July 21) 
- IRS name change letter for IT Pro Partner LLC
- app2 Caddyfile audit: UNMS/Gitea fixes after Technitium deploy
- Home lab state: QNAP NFS, VM migrations, vm-host-02 cleared
- homelab SSH key deployed to all hosts
 2026-07-21 19:34:16 -04:00
root 93392dd558 docs: add ARCHITECTURE.md for ops-portal and backup-restore 2026-07-20 17:13:16 -04:00