plan + journal: cutover done 2026-09-07, orchestrator moved, remaining items

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01FqkQq3CDmFWcQ7u1LzoyRz
This commit is contained in:
2026-09-07 21:06:09 +00:00
co-authored by Claude Fable 5.1
parent bf84245d4b
commit 666509d53d
2 changed files with 30 additions and 3 deletions
+10
View File
@@ -1061,3 +1061,13 @@ Plan + live log: `cc-ci-plan/plan-cc-ci-combined-host.md` (on the branch; copy h
.sops/master-age.txt, .cc-ci-logs; nginx oc-* files (root:nginx 0640).
- Open: tailscale auth key revoked (`invalid key: API key does not exist`) → operator issues a
new one. DNS cutover at Gandi (ci, *.ci, ns-acme → 195.201.88.249) → operator.
## Session 2026-09-07 21:10 UTC — CUTOVER DONE; orchestrator now on the new host
CI is served from 195.201.88.249 (DNS repointed by the operator, no tailscale on the new box,
opencode UI on 443 via traefik + basic auth, fail2ban on). `!testme` → Drone build 1326 on the
new box. This session (on the old shared host) is the last one here: cc-ci units runtime-masked
on the old host; a fresh orchestrator session is up on the new box (`ssh root@195.201.88.249`,
`sudo -iu loops tmux attach -t cc-ci-orchestrator`). Details + the two incidents:
`cc-ci-plan/plan-cc-ci-combined-host.md` (log) and README §2a/§7. Operator to merge
notplants-nix `chore/drop-cc-ci`, delete the old CI server in a week, revoke the Hetzner token.