 marcopan
|
7628eaa579
|
fix(docker): run real questions through trusted Pi gate
|
2026-07-12 19:20:10 +02:00 |
|
 User
|
3f816044c3
|
fix(sql): move ROLE PASSWORD outside DO block (psql skips :var in dollar-quoting)
|
2026-07-12 17:12:26 +02:00 |
|
|
User
|
67d030b24d
|
feat(deploy): docker images, compose, roles SQL, local workspace
- core.Dockerfile: python:3.12-slim + node 22 copied (same bookworm glibc), non-root, tht+pi
- frontend.Dockerfile: vite build (env-driven base/assetsDir) + nginx-unprivileged
- compose.yaml (embedded, omics_network ext, zero host ports) + docker-compose.dev.yml (standalone)
- deploy/sql: thoth_dwh_reader (ro) + thoth_vector_rw (rw) roles
- deploy/thothii.env.example + harness/workspaces/local.yaml (direct DWH+vector, 5438)
- scripts/docker-smoke.sh; .dockerignore; gitignore deploy secrets
- verified: both images build, core health {ok}, config check validates local.yaml
|
2026-07-12 16:49:03 +02:00 |
|
|
marcopan
|
f67d2c97d8
|
fix(security): reject invalid optional bundle values
|
2026-07-12 11:53:15 +02:00 |
|
|
marcopan
|
449a333365
|
fix(security): validate bundle and clean runtime secrets
|
2026-07-12 11:52:02 +02:00 |
|
|
marcopan
|
385646d574
|
docs: complete Docker context settings
|
2026-07-12 11:50:12 +02:00 |
|
|
marcopan
|
07967bf589
|
docs: document one-command Docker installation
|
2026-07-12 11:44:00 +02:00 |
|
|
marcopan
|
70a19f290d
|
feat(compose): use one secret bundle for local services
|
2026-07-12 11:30:43 +02:00 |
|
|
marcopan
|
32a2b71687
|
build(compose): make root startup the default
|
2026-07-12 11:14:36 +02:00 |
|
|
marcopan
|
7f8346ff58
|
docs: keep installation configuration inside ThothII
|
2026-07-12 10:21:53 +02:00 |
|
|
marcopan
|
72bc50ab2e
|
fix(preprocess): enforce local vector startup chain
|
2026-07-12 07:54:09 +02:00 |
|
|
marcopan
|
e40a9d9a56
|
fix(backend): inject provider credentials from file
|
2026-07-12 07:53:22 +02:00 |
|
|
marcopan
|
c6966f3d15
|
fix(preprocess): harden S3 and real Compose jobs
|
2026-07-12 06:01:06 +02:00 |
|
|
marcopan
|
4028ef7821
|
feat(preprocess): add deployment jobs and S3 source
|
2026-07-12 05:42:07 +02:00 |
|
|
marcopan
|
532073d550
|
fix(deploy): isolate local vector compose secrets
|
2026-07-12 02:56:00 +02:00 |
|
|
marcopan
|
6c67235caf
|
fix(vector): close local pgvector final review
|
2026-07-12 02:48:10 +02:00 |
|
|
marcopan
|
015c496bda
|
fix(vector): harden backup restore parity gates
|
2026-07-12 02:29:53 +02:00 |
|
|
marcopan
|
1145ae20bc
|
fix(deploy): align vector bootstrap identity policy
|
2026-07-12 02:04:57 +02:00 |
|
|
marcopan
|
144acf2093
|
fix(deploy): support bootstrap password rotation
|
2026-07-12 01:57:33 +02:00 |
|
|
marcopan
|
62e0ff1f12
|
fix(deploy): reconcile local vector credentials safely
|
2026-07-12 01:50:42 +02:00 |
|
|
marcopan
|
0ca9783f61
|
feat(deploy): add optional local pgvector profile
|
2026-07-12 01:42:37 +02:00 |
|
|
marcopan
|
a3a266fd81
|
fix(deploy): close container final review
|
2026-07-12 00:44:39 +02:00 |
|
|
marcopan
|
767df63a33
|
feat(deploy): add portable external-service stack
|
2026-07-11 22:12:21 +02:00 |
|