nexxo 5cf1964d7d fix(engine-b): default-deny firewall, disk-based capacity, synchronous credential mail ... - applyFirewall sets policy_in=DROP so only 80/443 are exposed. - Capacity/placement account for disk_gb (the real VM allocation), not the smaller Nextcloud user quota — no systematic overcommit. - CloudReady sent synchronously again; the step retries on mail failure with the password preserved (no lost credential in a failed queue job). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>		2026-07-25 12:39:15 +02:00
..
Contracts	fix(engine): address Codex round 2 (poll budget, host error state, wg race)	2026-07-25 10:26:37 +02:00
Events	feat(engine-b): live provisioning progress (admin console + customer dashboard)	2026-07-25 11:57:35 +02:00
Jobs	fix(engine): record wg peer only after verified handshake; async host purge	2026-07-25 11:06:13 +02:00
Steps	fix(engine-b): default-deny firewall, disk-based capacity, synchronous credential mail	2026-07-25 12:39:15 +02:00
PipelineRegistry.php	feat(engine): orchestrator core (state machine + tick + lock)	2026-07-25 09:54:52 +02:00
RunRunner.php	fix(engine): don't reset started_at on poll so step deadlines accumulate	2026-07-25 12:15:26 +02:00
StepResult.php	fix(engine): address Codex round 2 (poll budget, host error state, wg race)	2026-07-25 10:26:37 +02:00