nexxo 864126ec7f Add the SSH identity to the vault, and give deployment config a console page ... The SSH private key CluPilot deploys to every host is now stored through SecretVault (ssh.private_key), preferred over CLUPILOT_SSH_PRIVATE_KEY(_PATH) at all three real consumers — SshTraefikWriter and HostStep::keyLogin. kuma.password/kuma.totp stay in .env: they authenticate a separate Python container at boot, and nothing in this app reads them, so the vault would have nothing to wire them to. A new /admin/infrastructure page, backed by App\Support\ProvisioningSettings, makes the non-secret deployment settings that used to force a shell — DNS zone, WireGuard hub endpoint and public key, Traefik's dynamic-config path, the SSH public key, and the monitoring bridge URL — visible and editable from the console, each wired to every real consumer. WG subnet/hub IP and Kuma's own connection details stay in .env: the compose file and a separate container read those before this application ever does.		2026-07-29 00:52:44 +02:00
..
Billing	Measure availability, and let a customer move down again	2026-07-27 16:41:15 +02:00
Deployment	Update only to a released version, never to whatever landed on main	2026-07-28 22:32:44 +02:00
Devices	Show where an account is signed in, and let it sign the other places out	2026-07-28 23:38:17 +02:00
Dns	Add the SSH identity to the vault, and give deployment config a console page	2026-07-29 00:52:44 +02:00
Mail	Bound the mail test-send and real send to a timeout instead of hanging	2026-07-28 16:36:14 +02:00
Maintenance	Keep the purpose mailer through the queue instead of losing it to the default	2026-07-28 03:50:02 +02:00
Monitoring	Add the SSH identity to the vault, and give deployment config a console page	2026-07-29 00:52:44 +02:00
Proxmox	feat(traffic): meter the monthly allowance, show it, throttle instead of blocking	2026-07-25 23:33:47 +02:00
Secrets	Add the SSH identity to the vault, and give deployment config a console page	2026-07-29 00:52:44 +02:00
Ssh	Add the SSH identity to the vault, and give deployment config a console page	2026-07-29 00:52:44 +02:00
Stripe	Manage the Stripe key from the console, behind a password and a test	2026-07-27 09:01:16 +02:00
Traefik	Add the SSH identity to the vault, and give deployment config a console page	2026-07-29 00:52:44 +02:00
Traffic	feat(billing): the plan catalogue becomes three tables, and config stops selling	2026-07-26 12:05:56 +02:00
Wireguard	Add the SSH identity to the vault, and give deployment config a console page	2026-07-29 00:52:44 +02:00