2 Commits (f43ade79b0defc09c271129b9dc0dadc470dfd21)

Author	SHA1	Message	Date
nexxo	e6bd6c9354	fix(engine-b): address Codex round 2 (fail-closed webhook, placement lock, clone/admin idempotency) ... - Stripe webhook fails closed when the signing secret is missing (outside local/testing). - ReserveResources places + creates the instance under a per-datacenter lock so concurrent orders can't overcommit a host. - CloneVirtualMachine reserves the vmid + breadcrumb BEFORE cloning, so a crash can't mint a new vmid and orphan the first clone. - CreateCustomerAdmin checks user existence and resets the password instead of re-running user:add on retry. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-25 12:09:21 +02:00
nexxo	446da58061	feat(engine-b): 15-step customer pipeline + DNS/Traefik services ... validate->reserve(placement)->clone->cloudinit->start->guestagent->network-> deploy->nextcloud->admin->dns/tls->backup->monitoring->acceptance->complete. HetznerDnsClient + TraefikWriter (interface+fake+real), CloudReady notification, hosts.node (set by RegisterCapacity). Secrets transient/encrypted, never plaintext. 21 tests incl. mocked end-to-end + crash idempotency. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-25 11:50:26 +02:00