ippadmin/itpp-infrastructure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
77 Commits 2 Branches 0 Tags
59a1e3a3ea3ceda753e7eefd1eea6748ab7d9bc4
Commit Graph
77 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
root 59a1e3a3ea audit: Gemini review fixes — 50 repos, 31 services, 4 new findings 
- Corrected repo count: 49→50 (Gitea API verified Aug 9)
- Corrected service count: 24→31 (Server Service Map recount)
- Appendix C: added org-audit+startup-studio to MATCHES, removed 3 non-repo projects
- NEW CRITICAL: DR standby sizing mismatch — app1-bu (4G/80G) can't fail over for Core (15G/503G)
- NEW HIGH: 15 undocumented services elevated from footnote to formal finding
- NEW HIGH: Pre-commit scanner only on 7/50 repos
- NEW: OS/Docker patch management gap identified
- Corrected partial/stale: 14→17 repos
 2026-08-09 03:04:40 -04:00
Sho'Nuff 02b07b06bc audit: N1 resolved (auth2 on app3), Core storage 503G, Appendix C counts fixed, model info added 2026-08-09 02:37:34 -04:00
Sho'Nuff 9fd92225fe docs: comprehensive audit summary for external review + architecture.md spec fixes (12vcpu/32gb/1tb verified) 2026-08-09 02:25:37 -04:00
Sho'Nuff 08836e138c docs: critical review fixes — server specs corrected, exec summary fixed, scanner built (gitleaks-style pre-commit hook) 2026-08-09 02:20:31 -04:00
Sho'Nuff 38b5d9bfda docs: comprehensive post-audit report — 11 findings, current state, safeguards, roadmap 2026-08-09 02:07:36 -04:00
Sho'Nuff 905685de4f docs(architecture): mark deployment docs complete, resolve plaintext secrets note 2026-08-09 01:38:15 -04:00
Sho'Nuff d4e3777959 Add live-truth architecture reference doc 
Replaces the archived master-apps-services.md (Jul 16, 2026) which
listed 10+ defunct servers and stale specs (Mattermost, wphost01,
standalone hudu, etc.). This is the new single source of truth.

Cross-references deployment docs being created in org-audit.
 2026-08-09 01:16:24 -04:00
root 489f690303 docs: corrected model usage report — real root causes, fallback blind spot, fixed baseline 2026-08-08 22:54:43 -04:00
root d42f925849 docs: 30-day model usage report — deepseek-v4-pro vs sonnet-5, caching analysis 2026-08-08 22:45:29 -04:00
root 86537b4373 docs: remediation punch list status report — 2026-08-08 2026-08-08 22:34:15 -04:00
root a5315f507e Fix: app1-bu IP 5.161.114.8→5.161.225.131, CPX11→CPX21; Mattermost/noc dns entry updated 2026-08-08 22:14:58 -04:00
Sho'Nuff 21c80b63e6 August 8 cleanup: modelortho inventory, hexclave rename, Mattermost decommission fix 
- README: Add modelortho.com as hosted client under App3 services
- README: Remove Mattermost from backup pipeline table (was decommissioned)
- CHANGELOG: Document Hexclave → Stack Auth rename (2026-08-08)
- backup-plan: Fix fabricated '14 previously-unbacked' count → actual 6
- app1-backup.sh: Remove Mattermost backup section (decommissioned service)
 2026-08-08 21:34:32 -04:00
root db0eed41d2 Add backup status report — 27 targets, zero unbacked 2026-08-08 20:53:22 -04:00
root 069cbacca4 Fold modelortho into shared app3 backup — no standalone job 
- app3-backup.sh now backs up static sites (non-WordPress htdocs)
- modelortho.com picked up automatically alongside 10+ other static sites
- Removed standalone modelortho-backup.sh + cron job
- Static sites row added to backup plan S3 path: app3/static/
 2026-08-08 19:02:59 -04:00
root e752753849 Add modelortho.com backup — daily at 4:30 AM ET to Wasabi S3 
- modelortho-backup.sh: tars htdocs + nginx configs, remote SSH to app3
- Cron: no-agent script, 4:30 AM daily, 14-day S3 retention
- All *.modelortho.com subdomains auto-included
- Backup plan inventory: 26 → 27 targets
 2026-08-08 18:59:40 -04:00
root 48ccd25d33 Document modelortho.com — Anita's independent ortho consulting platform 
- Hosted on app3 CloudPanel, static placeholder live
- DNS in Anita's personal Cloudflare (wildcard *.modelortho.com set)
- Anita's Hermes manages autonomously via SSH + itpp-infra key
- Full skill in her profile: devops/modelortho-management
- ITPP provides server only — no operational responsibility
 2026-08-08 18:55:36 -04:00
root 53d94a7597 M9: DNS cleanup — remove 2 stale iamgmb.com records 
- Deleted village-express.iamgmb.com (no service, no files, no Caddy block)
- Deleted temp.vault.iamgmb.com (no service, no files, no Caddy block)
- Removed redundant-dns-proposal.md (accidental commit from H8)
- Mockup Lab confirmed live at mockup.iamgmb.com
- Timetrex confirmed running (301 redirect to /timetrex/interface/html5/)
- All 19 Cloudflare zones audited — no critical parked domains

iamgmb.com root → app3 CloudPanel (152.53.241.111) — empty/default vhost
 2026-08-08 18:41:09 -04:00
root 76185d7294 H8: Fix stale docs — model chain + schedule table 
- model-chain.md: updated to Aug 8 with 18-model expansion verification
- New models documented: claude-sonnet-4-6, claude-opus-4-8, claude-fable-5,
  gemini-2.5-flash/pro, xai/grok-4.3, gpt-5, gpt-5-mini
- Fixed gemini-3.6-flash → gemini-flash-latest in key model lists
- backup-plan.md: Dawarich/RAGFlow added to schedule table (H6 follow-up)
- Server specs verified accurate (12 vCPU, 31 GB, 1 TB on app1)
- UniFi verified live (302 → /manage)
 2026-08-08 18:37:26 -04:00
root d987bbffc0 H6+H7: Back up RAGFlow + Dawarich. Delete Mattermost. 
- dawarich-backup.sh: PostgreSQL dump (6.7MB), daily 4:00 AM
- ragflow-backup.sh: MySQL dump (261KB), daily 4:15 AM
- Both added to app2 inventory, schedule, RPO/RTO (Low tier)
- Unbacked Services section now reads: *(none)*
- Mattermost decommissioned: containers/volumes/compose purged from app1
- noc.itpropartner.com DNS record reserved for NOC replacement
- README + dns-records.md updated
 2026-08-08 18:32:12 -04:00
root 81762a33bd CRITICAL #4: Auth API + Stack Auth backups — auth-api-backup.sh (SQLite hot), hexclave-backup.sh (PG dump + compose). Auth API Core 3:15 AM, Hexclave app3 3:30 AM. Update RPO/RTO tiers. Remove Technitium from Unbacked (now in Low tier). 2026-08-08 18:20:03 -04:00
root be5af418ae CRITICAL #1: Rotate Grafana off admin/admin to random credential stored in Vaultwarden 2026-08-08 18:09:18 -04:00
root c4c6609a81 DR docs audit fix (2026-08-08): fix stale dates, path errors, add RPO/RTO, unbacked services, restore testing, rollback procedure, S3 access instructions 2026-08-08 17:25:27 -04:00
root a522d11c35 docs: nest 19 files into audit/ clients/ infrastructure/ monitoring/ projects/ super-search/ 2026-08-08 13:04:55 -04:00
root 11a1110b81 72hr audit: 4 new docs, port fixes, project-log updated 2026-08-08 12:55:30 -04:00
root a269a17b1f git-audit: 42-repo hygiene audit Aug 8 - credentials, sprawl, nesting 2026-08-08 12:50:12 -04:00
root ca402d3444 Add Katie Watts Design client doc - live on app3 CloudPanel 2026-08-07 11:00:50 -04:00
root 4c172c525b docs: Super Search MCP enhancement execution plan 
- 16 actionable enhancements from Aug 7 2026 scanner report
- Organized by priority: HIGH (4), MEDIUM (7), LOW (5)
- Includes dependency-aware execution order across 4 phases
- Risk register with mitigations
- Source: super-search-enhancement-scanner cron job output
 2026-08-07 10:40:46 -04:00
root de0190283b docs: Git structure audit -- 40 Gitea repos, 13 findings, prioritized action plan 2026-08-07 08:36:59 -04:00
root f0138e5d85 docs: add Uptime Kuma monitoring plan 
- Covers all monitored endpoints across ITPP infrastructure
- Includes alert thresholds and escalation paths
 2026-08-07 08:30:37 -04:00
root 25e6b8cb79 docs: fallback chain overhaul, two-key strategy, operational model update (Aug 6 2026) 2026-08-06 10:59:07 -04:00
root 8561ba98c8 Move CartMyList/CartMySupply docs to dedicated ippadmin/cartmylist repo 2026-08-05 18:57:10 -04:00
root 647316e0de Add CartMyList/CartMySupply analysis, advisory response, and email draft (Aug 5 2026) 2026-08-05 18:52:59 -04:00
root 538876ac16 docs: infrastructure gap assessment + project updates 
- infrastructure-gap-assessment: full audit doc
- project-log: recent completions
- hotnow, hotnow-phase1, ops-portal-runcloud-design-brief, schoolcart PTA docs
- intelsight and schoolcart updates
 2026-08-05 07:34:35 -04:00
root 7f31eb0f98 Add BeachDirect.io business proposal (.2B market, done-for-you vacation rental direct booking) 2026-08-01 13:49:46 -04:00
root 7cbef9bd8f docs: model-chain — key was stale, fixed with hermes-agent-v5 Jul 31 2026-07-31 07:14:11 -04:00
root 100e65c296 Wire API health JSON into Ops Portal (servers page) 2026-07-31 06:56:26 -04:00
Sho'Nuff 5330a9b1b3 Add API health monitoring section to master list 2026-07-31 06:50:59 -04:00
Sho'Nuff 0b56cfc23f Add API master list - internal/external/paid inventory 2026-07-31 06:41:12 -04:00
root fcc9863232 Update backup plan doc with Jul 28 migration changes 
- Remove stale core-services (Vaultwarden, Twenty, SearXNG, Komodo)
- Add new App1 services (Komodo, DocuSeal, Twenty CRM backups)
- Update S3 path table with canonical locations
- Add migration history section (Jul 28)
- Note stale core/ subfolder paths in S3 for reference
- Coverage: 26 backup targets across 6 servers + router
 2026-07-28 20:51:48 -04:00
Sho'Nuff 6e0d793696 IntelSight: add full business proposal (728 lines, 11 sections) + publish to proposals.iamgmb.com/intelsight 
- Copy full IntelSight business proposal from super-search-business repo
- Create 42KB HTML page at /var/www/proposals/intelsight.html (11 sections + appendices)
- Update proposals index to link to IntelSight
- Include deployment status table showing test sites (live/built/not built)

Test sites status:
  intelsight.io        — LIVE (WordPress, app3)
  my.intelsight.io     — NOT BUILT (DNS only, returns 525)
  api.intelsight.io    — NOT CREATED (no DNS record)
  intelsight.co        — LIVE (301 redirect)
 2026-07-27 16:57:19 -04:00
root 1056e386f7 schoolcart: add verified domain name options table to immediate decisions 2026-07-27 16:26:43 -04:00
root b81d3882e2 Update SchoolCart pricing: Quick Cart .99, Premium .99 (named carts), Family Pass 9.99/yr, School Plan FREE + PTA donation 2026-07-27 16:16:49 -04:00
root 6ea1200a9d Add SchoolCart business proposal — full market analysis, revenue model, GTM plan 2026-07-27 16:00:03 -04:00
root 4cb95b5df2 Update model-chain.md: canonical Fallback Chain vs Operational Models (Jul 27 2026) 2026-07-27 11:41:18 -04:00
root b6a8a31bfb docs: add IntelSight.io site documentation 
- DNS records: intelsight.io + intelsight.co zones on Cloudflare
- CloudPanel WordPress setup on app3 (152.53.241.111)
- Credentials, SSL issuance workflow, backup status
- Hudu password vault entry created (ID 129)
- Fixed root A record (was 152.153.241.111 → corrected to 152.53.241.111)
- Fixed intelsight.co redirect (added dummy A record for DNS resolution)
- my.intelsight.io DNS ready but site not yet created
 2026-07-26 15:31:43 -04:00
root cfceae14e4 docs: add IntelSight.io site documentation — CloudPanel WordPress on app3 2026-07-26 14:20:06 -04:00
root 661be04b22 Add MSP Operations Kit templates: DPA, SOW, service order, QBR scorecard, risk waiver, monthly review 2026-07-25 19:06:16 -04:00
root 79a383a3b5 fix: model chain, service locations, dead IPs, stale paths — audit Jul 24 2026 2026-07-24 17:13:54 -04:00
root 5f48e0213a docs: promote claude-sonnet-5 to primary @ admin-ai and demote gpt-5.6-terra to F2 2026-07-24 16:12:34 -04:00
root 54fc46ca14 docs: update model chain and add cost control rollout summary for 2026-07-24 2026-07-24 16:05:35 -04:00