864126ec7f
tests / pest (push) Failing after 7m28s
Details
tests / assets (push) Successful in 19s
Details
tests / release (push) Has been skipped
Details
The SSH private key CluPilot deploys to every host is now stored through SecretVault (ssh.private_key), preferred over CLUPILOT_SSH_PRIVATE_KEY(_PATH) at all three real consumers — SshTraefikWriter and HostStep::keyLogin. kuma.password/kuma.totp stay in .env: they authenticate a separate Python container at boot, and nothing in this app reads them, so the vault would have nothing to wire them to. A new /admin/infrastructure page, backed by App\Support\ProvisioningSettings, makes the non-secret deployment settings that used to force a shell — DNS zone, WireGuard hub endpoint and public key, Traefik's dynamic-config path, the SSH public key, and the monitoring bridge URL — visible and editable from the console, each wired to every real consumer. WG subnet/hub IP and Kuma's own connection details stay in .env: the compose file and a separate container read those before this application ever does. |
||
|---|---|---|
| .. | ||
| CompleteHostOnboarding.php | ||
| ConfigureProxmox.php | ||
| ConfigureWireguard.php | ||
| CreateAutomationToken.php | ||
| EstablishSshTrust.php | ||
| HostStep.php | ||
| InstallProxmoxVe.php | ||
| PrepareBaseSystem.php | ||
| RebootIntoPveKernel.php | ||
| RegisterCapacity.php | ||
| RegisterHostDns.php | ||
| SecureHostFirewall.php | ||
| ValidateHostInput.php | ||
| VerifyProxmoxApi.php | ||