ippadmin/itpp-infrastructure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
108 Commits 2 Branches 0 Tags
f57f67c66126f4423cf2c96153e345cd290d5139
Commit Graph
108 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
root f57f67c661 docs: mark wphost02 decommissioned (2026-08-28); app1-bu is sole Hetzner box 2026-08-28 09:42:36 -04:00
root f5175f1ce0 Sync docs, audit artifacts, project notes, and VerdictTank proposal docs 
- audit/phase-one + phase-two: security audit briefs, findings, credential-rotation plan, Docker-USER hardening scripts, rollback refs
- disaster-recovery/restore-test-log.md + backup-dr-audit-2026-08-10.md
- clients/ (modelortho SEO audit, ai-biz-dev competitive landscape), notes/ (tiktok strategy)
- projects/: front-desk-voice-agent, seo-visibility-checker product plan, hotnow-savannah HTML, resend-transactional-email, backup-dashboard-enhancements, code-review-graph, seo-ci-architecture
- proposals/verdicttank/: architecture v4.0, methodology, judge-pool review, consolidation reasoning, cross-check review
- docs/super-search/firecrawl-provider-strategy.md
- updates: CHANGELOG, model-chain, projects-master-readme, intelsight.io
- .gitignore: exclude nested standalone repos (seo-tool, venturebuilt)
 2026-08-26 02:27:28 -04:00
root 23e9751d38 dns: add voipsimplicity + forefront portal A records (CREATE pending, Core) 2026-08-18 00:32:44 -04:00
root 8cccaa9bf5 Scirium v2: anonymize beachhead customer (strike Wall Orthodontics, Anita Brown); remove Wall-O references entirely 2026-08-17 16:05:21 -04:00
root b2be975179 Scirium v2: define all abbreviations at first use (48 expansions) 2026-08-17 14:21:17 -04:00
root 3de660d9b3 Scirium v2: apply blind-audit remediation (14 fixes, COGS first-use) 2026-08-17 14:06:28 -04:00
root 463bf020f4 liberty-tire-brake: camera proposal v4 (list-price correction + ST16000VE004 storage) 2026-08-16 22:04:00 -04:00
root e27bf78487 brand: Scirium logo (The Cited Element) and design-token SSOT 
Add the official Scirium wordmark production assets and the shared design-token source of truth extracted from the converged landing page.

- Production logo assets (14 files): outlined Fraunces wordmark in color, mono, and reversed SVG; print PNGs at 2700x1000; email-signature PNGs at 270x100; full favicon set (SVG, ICO, 16/32/48/512, apple-touch-icon).
- design-tokens.json (v1.0.0) and design-tokens.css: brand primitives, 20 color tokens per theme, font stacks, shadows, radius and type scale, breakpoints.
- Wordmark integrates theme-adaptive on the live page: ink via currentColor, dot via --highlight, underline via --accent (verified light and dark).
 2026-08-16 15:53:36 -04:00
root 81d17b4e2e add Scirium blind mockup review sprint results 2026-08-16 10:34:29 -04:00
root 64cf1043e7 rebrand Scirium docs (Wall-O -> Scirium) + add v1/v2 documentation package 2026-08-16 09:24:58 -04:00
root 0424b2954a add Scirium vision and positioning spec (single source of truth) 2026-08-16 09:18:23 -04:00
root 65b976027d rename Wall-O to Scirium: move project docs, add vision/positioning spec, changelog entry 2026-08-16 09:18:10 -04:00
root 4c7128f1bd docs: add Wall-O system architecture (integrated and reconciled) 
Consolidated three parallel team sections into wall-o.md; source sections under projects/wall-o/. Reconciled cross-team discrepancies: namespace format, chunk params, top-k, bot identity location, token-cache table, Phase 0 loop, channel naming. No plaintext secrets; Vaultwarden refs only.
 2026-08-15 18:40:35 -04:00
root 40e80fe6e7 api-master-list: move DocuSeal from app1:3000 to Core:8091 (decommissioned app1 instance) 2026-08-15 17:02:27 -04:00
root 26b985f6a4 docs: add legal storage policy, DocuSeal deploy template, and app4 migration plan 2026-08-15 15:45:36 -04:00
root 4d43623db6 Add Hosted AI Agent Platform (AgentThread reference) to future projects list 2026-08-14 19:07:14 -04:00
ippadmin 894dd0c21e changelog: backfill app3 docroot migration to per-site users (Aug 12) 2026-08-14 18:25:02 -04:00
root 83c939fc20 docs: redact plaintext admin passwords from git audit reports 2026-08-14 09:37:01 -04:00
root 92d8f4eb6b Add open-source SaaS alternatives to future projects (10 self-hosted replacements) 2026-08-13 06:12:11 -04:00
ippadmin dd13c706d0 TIMAPTA PTA site + email + DNS (timapta.org, ptatima.org) 2026-08-12 14:46:30 -04:00
root c2485ef51b v5.1: 6-seat pool, clean pricing tiers, declared review quantities 2026-08-12 05:14:32 -04:00
root 373060182e v5.0 pricing update: Team C panel recommendations (49/99/,499) 2026-08-12 04:35:18 -04:00
root 42ca1cefb2 Proposal v5.0: 11-judge panel, error-detection thesis, self-review pipeline 2026-08-12 04:19:55 -04:00
root 04540c4293 Spec v2.3: 11-seat pool, 9 vendors, Anthropic restored, GPT-5.6 dead, thesis pivot to error-detection density 2026-08-12 04:02:15 -04:00
root 103620e10a HotNow Savannah v2: city-pivot proposal + full technical docs (Batch 001 research, Aug 11 2026) 2026-08-11 08:48:43 -04:00
ippadmin a51db27080 Add Git environment restructuring plan (Docs-as-Code) 2026-08-09 23:04:55 -04:00
root d2b9e80572 fix: move incident doc to docs/incidents/ — follow repo convention 2026-08-09 20:11:34 -04:00
root c1d048e8b7 fix: reopen incident — 4 of 7 workstreams still outstanding 2026-08-09 20:09:44 -04:00
root 9676065669 incident: TransitPin v2 dispatch failure — Aug 9 2026 
- Full incident report: root cause analysis, timeline, lessons learned
- Documented original instruction vs actual delivery
- Accountability measures: governance rule saved to permanent memory
- Multi-team dispatch governance checklist now active
- Single subagent dispatched instead of 4 coordinated teams
 2026-08-09 19:46:43 -04:00
root 77acbb62d2 audit: closeout report — full narrative with timeline, findings, conductor reviews, guardrails 
15 findings total (10 resolved, 5 open). 2 critical, 5 high, 2 medium, 2 low.
Model attribution: DeepSeek V4 Pro (audit), Sonnet 5 (structural), Gemini Pro (gaps).
20/20 integrity checks pass. Document clean.
 2026-08-09 03:12:29 -04:00
root 7058683131 audit: Sonnet 5 review — all arithmetic reconciled, guardrails hardened 
- Documentation State: 28/15/6→26/17/7 (matches Appendix C)
- Headline accuracy: 'critical services complete'→'6/31, 5/6 critical'
- Fact-reference-before-discovery: now cites concrete script artifact
- Count-validation gate: new guardrail (sums must match declared totals)
- Cron failure alert: added to Detection table
- Remaining Work: STALE/ABSENT/GAP/NOTES→MEDIUM/LOW (severity, not status label)
- Appendix C: auth repo explained, disaster-recovery CRITICAL marker
- Appendix C summary table: 28/15/6→26/17/7+1 with Total=50 row
- New script: pre-audit-fact-check.sh (guardrail artifact)

Sonnet rating: MEDIUM (per-finding quality HIGH, cross-table arithmetic fixed)
 2026-08-09 03:07:05 -04:00
root 59a1e3a3ea audit: Gemini review fixes — 50 repos, 31 services, 4 new findings 
- Corrected repo count: 49→50 (Gitea API verified Aug 9)
- Corrected service count: 24→31 (Server Service Map recount)
- Appendix C: added org-audit+startup-studio to MATCHES, removed 3 non-repo projects
- NEW CRITICAL: DR standby sizing mismatch — app1-bu (4G/80G) can't fail over for Core (15G/503G)
- NEW HIGH: 15 undocumented services elevated from footnote to formal finding
- NEW HIGH: Pre-commit scanner only on 7/50 repos
- NEW: OS/Docker patch management gap identified
- Corrected partial/stale: 14→17 repos
 2026-08-09 03:04:40 -04:00
Sho'Nuff 02b07b06bc audit: N1 resolved (auth2 on app3), Core storage 503G, Appendix C counts fixed, model info added 2026-08-09 02:37:34 -04:00
Sho'Nuff 9fd92225fe docs: comprehensive audit summary for external review + architecture.md spec fixes (12vcpu/32gb/1tb verified) 2026-08-09 02:25:37 -04:00
Sho'Nuff 08836e138c docs: critical review fixes — server specs corrected, exec summary fixed, scanner built (gitleaks-style pre-commit hook) 2026-08-09 02:20:31 -04:00
Sho'Nuff 38b5d9bfda docs: comprehensive post-audit report — 11 findings, current state, safeguards, roadmap 2026-08-09 02:07:36 -04:00
Sho'Nuff 905685de4f docs(architecture): mark deployment docs complete, resolve plaintext secrets note 2026-08-09 01:38:15 -04:00
Sho'Nuff d4e3777959 Add live-truth architecture reference doc 
Replaces the archived master-apps-services.md (Jul 16, 2026) which
listed 10+ defunct servers and stale specs (Mattermost, wphost01,
standalone hudu, etc.). This is the new single source of truth.

Cross-references deployment docs being created in org-audit.
 2026-08-09 01:16:24 -04:00
root 489f690303 docs: corrected model usage report — real root causes, fallback blind spot, fixed baseline 2026-08-08 22:54:43 -04:00
root d42f925849 docs: 30-day model usage report — deepseek-v4-pro vs sonnet-5, caching analysis 2026-08-08 22:45:29 -04:00
root 86537b4373 docs: remediation punch list status report — 2026-08-08 2026-08-08 22:34:15 -04:00
root a5315f507e Fix: app1-bu IP 5.161.114.8→5.161.225.131, CPX11→CPX21; Mattermost/noc dns entry updated 2026-08-08 22:14:58 -04:00
Sho'Nuff 21c80b63e6 August 8 cleanup: modelortho inventory, hexclave rename, Mattermost decommission fix 
- README: Add modelortho.com as hosted client under App3 services
- README: Remove Mattermost from backup pipeline table (was decommissioned)
- CHANGELOG: Document Hexclave → Stack Auth rename (2026-08-08)
- backup-plan: Fix fabricated '14 previously-unbacked' count → actual 6
- app1-backup.sh: Remove Mattermost backup section (decommissioned service)
 2026-08-08 21:34:32 -04:00
root db0eed41d2 Add backup status report — 27 targets, zero unbacked 2026-08-08 20:53:22 -04:00
root 069cbacca4 Fold modelortho into shared app3 backup — no standalone job 
- app3-backup.sh now backs up static sites (non-WordPress htdocs)
- modelortho.com picked up automatically alongside 10+ other static sites
- Removed standalone modelortho-backup.sh + cron job
- Static sites row added to backup plan S3 path: app3/static/
 2026-08-08 19:02:59 -04:00
root e752753849 Add modelortho.com backup — daily at 4:30 AM ET to Wasabi S3 
- modelortho-backup.sh: tars htdocs + nginx configs, remote SSH to app3
- Cron: no-agent script, 4:30 AM daily, 14-day S3 retention
- All *.modelortho.com subdomains auto-included
- Backup plan inventory: 26 → 27 targets
 2026-08-08 18:59:40 -04:00
root 48ccd25d33 Document modelortho.com — Anita's independent ortho consulting platform 
- Hosted on app3 CloudPanel, static placeholder live
- DNS in Anita's personal Cloudflare (wildcard *.modelortho.com set)
- Anita's Hermes manages autonomously via SSH + itpp-infra key
- Full skill in her profile: devops/modelortho-management
- ITPP provides server only — no operational responsibility
 2026-08-08 18:55:36 -04:00
root 53d94a7597 M9: DNS cleanup — remove 2 stale iamgmb.com records 
- Deleted village-express.iamgmb.com (no service, no files, no Caddy block)
- Deleted temp.vault.iamgmb.com (no service, no files, no Caddy block)
- Removed redundant-dns-proposal.md (accidental commit from H8)
- Mockup Lab confirmed live at mockup.iamgmb.com
- Timetrex confirmed running (301 redirect to /timetrex/interface/html5/)
- All 19 Cloudflare zones audited — no critical parked domains

iamgmb.com root → app3 CloudPanel (152.53.241.111) — empty/default vhost
 2026-08-08 18:41:09 -04:00
root 76185d7294 H8: Fix stale docs — model chain + schedule table 
- model-chain.md: updated to Aug 8 with 18-model expansion verification
- New models documented: claude-sonnet-4-6, claude-opus-4-8, claude-fable-5,
  gemini-2.5-flash/pro, xai/grok-4.3, gpt-5, gpt-5-mini
- Fixed gemini-3.6-flash → gemini-flash-latest in key model lists
- backup-plan.md: Dawarich/RAGFlow added to schedule table (H6 follow-up)
- Server specs verified accurate (12 vCPU, 31 GB, 1 TB on app1)
- UniFi verified live (302 → /manage)
 2026-08-08 18:37:26 -04:00
root d987bbffc0 H6+H7: Back up RAGFlow + Dawarich. Delete Mattermost. 
- dawarich-backup.sh: PostgreSQL dump (6.7MB), daily 4:00 AM
- ragflow-backup.sh: MySQL dump (261KB), daily 4:15 AM
- Both added to app2 inventory, schedule, RPO/RTO (Low tier)
- Unbacked Services section now reads: *(none)*
- Mattermost decommissioned: containers/volumes/compose purged from app1
- noc.itpropartner.com DNS record reserved for NOC replacement
- README + dns-records.md updated
 2026-08-08 18:32:12 -04:00