7 Commits

Include renames

Author	SHA1	Message	Date
notplantsandClaude Fable 5.1	9b99f81f5f	nix: export the CI server as nixosModules.cc-ci-server ... The whole server (every service module, the harness tooling, sops wiring, acme-dns) becomes one reusable module, nix/modules/default.nix, so another flake can run cc-ci on a host it defines. First consumer: the cc-ci-orchestrator repo's `#cc-ci` host, which runs the CI server and the orchestrator together on one Hetzner machine. Two things the modules hard-coded become options (nix/modules/options.nix): - cc-ci.publicIPv4 — acme-dns's listen address and ns-acme glue record. - cc-ci.sopsFile — the secrets.yaml path; defaults to the secrets/ submodule, but a consumer that imports cc-ci as a plain input (no private submodule) points it at the deployed --recursive checkout and sops-nix reads it at activation (validateSopsFiles off for that case). The standalone host (nix/hosts/cc-ci-hetzner) now only carries hardware, networking and identity and imports the module via the flake. Verified: the `#cc-ci` system derivation is byte-identical before and after (/nix/store/ckp1244bz86fz3qbx81n5kx60c1lak3m-…531670d.drv on both). Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01FqkQq3CDmFWcQ7u1LzoyRz	2026-09-07 19:56:58 +00:00
autonomic-bot	148d4c9381	feat: prepare restricted acme-dns renewal	2026-08-31 17:08:15 +00:00
autonomic-botandClaude Opus 4.8	8b8fc1ff8e	claim(M1-nixenv): single-source harness runtime env — ccciPyEnv+ccciRuntimeTools+cc-ci-run in packages.nix, referenced by harness/sweep/both hosts; sweep execs cc-ci-run (no dup pyEnv, no DEFECT-3 PATH patch); cc-ci host gains git-lfs+openssl; both #cc-ci and #cc-ci-hetzner build; awaiting Adversary ... Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-17 17:23:28 +00:00
autonomic-botandClaude Sonnet 4.6	3ec24b09d6	feat(host): add git-lfs to cc-ci-hetzner systemPackages ... Required by test_lfs_roundtrip.py for the M2 LFS capstone run on the lfs-plain-gitea PR branch. Also revert the same change from the Incus host (cc-ci/configuration.nix) where it was mistakenly added. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-15 20:10:45 +00:00
autonomic-bot	9a7772563a	style: repo-wide lint pass — make the lint gate green again ... Push builds have been RED on the lint step since ~build 209 from accumulated formatting drift. This is the mechanical cleanup: ruff format + ruff --fix (UP038 isinstance unions, SIM105 contextlib.suppress, UP031 f-strings, SIM115 tempfile context manager), shfmt -i 2 -ci, nixpkgs-fmt/statix/deadnix (merged attrsets, dropped unused lib args), yamllint, and shell quoting fixes in tests/lasuite-docs/setup_custom_tests.sh. No behaviour changes intended; lint: PASS, unit tests: 138 passed.	2026-06-09 21:56:15 +00:00
autonomic-botandClaude Opus 4.8	f5a6f7196f	feat(reports): static site at report.ci.commoninternet.net for the weekly Recipe Report ... nginx:alpine swarm service serving /var/lib/cc-ci-reports behind traefik (Host(report.ci.commoninternet.net) + wildcard TLS), deployed by a reconcile oneshot mirroring dashboard.nix. The /recipe-report skill writes the weekly HTML pages there; nginx serves them live. report.ci.* already resolves (wildcard *.ci DNS) and is covered by the wildcard cert. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-02 22:56:21 +00:00
autonomic-botandClaude Sonnet 4.6	4237cc03f5	nix: add cc-ci-hetzner host (cpx32, nixos-infect hardware, all root SSH keys) ... Port from terraform-hetzner branch. Adds the Hetzner cc-ci flake host with all 3 root authorized keys so nixos-rebuild doesn't lock out SSH access. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-31 03:00:36 +00:00