21 Commits

Author	SHA1	Message	Date
Gan, Jimmy	8c23aabd97	fix: make claude-dev preload non-blocking in CI ... Treat server2 preload as best-effort so missing SSH keys do not fail deployment; fall back to normal registry pull during image build. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-03 01:02:06 +08:00
Gan, Jimmy	88c378594e	fix: use explicit server2 SSH target in claude-dev preload ... Replace the runner-only host alias with an explicit SSH user@host so the preload step can resolve and stream the base image tar reliably. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-03 00:59:00 +08:00
Gan, Jimmy	19001edfbd	fix: speed up claude-dev base image availability ... Switch claude-dev to node:20-bookworm-slim and preload the base image from server2 in CI to avoid slow pulls on the NAS runner. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-03 00:56:02 +08:00
Gan, Jimmy	ce061c1977	fix: scope deploy triggers and cancel stale workflow runs ... Limit workflow path triggers to each workflow file, add concurrency groups to cancel outdated runs, and checkout the exact triggering SHA for deterministic deploys. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-03 00:28:02 +08:00
Gan, Jimmy	755a0b6ae9	feat: add CI-gated claude-dev image package ... Define claude-dev capabilities as a tested contract and deploy immutable tags only after smoke checks so daily tooling upgrades remain CI-first and rollback-safe. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-02 23:40:44 +08:00
Gan, Jimmy	20aa6f12a3	perf: add Docker layer caching to dev CI workflow	2026-03-01 18:07:19 +08:00
Gan, Jimmy	4b32929dcc	feat: watchtower tracking, dev environment, security logs page ... - watchtower: docker-compose with label filtering, email notifications - watchtower labels on navidrome, openclaw, immich services - dev env: docker-compose.dev.yml (port 4001), deploy-dev.yml CI workflow - dev.nas.jimmygan.com Caddy site block with Authelia forward_auth - security page: backend router parsing Authelia/Caddy container logs - security page: frontend with stats cards, timeline, top IPs, event log - wired security route into App.svelte and Sidebar	2026-03-01 00:40:14 +08:00
Gan, Jimmy	f1e802e01b	CI: add build step to deploy workflow ... - Clone from local Gitea instead of actions/checkout - Build with legacy builder (DOCKER_BUILDKIT=0) for Docker mirror support - Use npm China mirror (registry.npmmirror.com) in Dockerfile - Combined npm install+build in single RUN step - Removed stale proxy env vars	2026-02-25 21:14:00 +08:00
Gan, Jimmy	7b4c52f646	Fix CI: use --pull never instead of --no-pull	2026-02-21 11:16:07 +08:00
Gan, Jimmy	0c80e07735	Fix CI: remove checkout step that requires GitHub access	2026-02-21 11:14:04 +08:00
Gan, Jimmy	74a4fa1d4b	Fix CI: add --no-pull to avoid Docker Hub pull failure	2026-02-21 11:09:52 +08:00
Gan, Jimmy	a265c6ffb0	Use docker save/load for cross-build deploy from M1 to NAS	2026-02-21 11:05:00 +08:00
Gan, Jimmy	370417b37d	Switch to cross-build from M1 via Gitea container registry	2026-02-21 00:40:46 +08:00
Gan, Jimmy	7225615e2f	Enable Docker BuildKit for faster builds	2026-02-20 23:57:16 +08:00
Gan, Jimmy	5a94df7973	Revert to Github action checkout & add proxy variables	2026-02-20 23:52:34 +08:00
Gan, Jimmy	3fec3c4e4f	Fix checkout action mirror absolute url	2026-02-20 23:28:01 +08:00
Gan, Jimmy	162c5d486d	Add workflow path to trigger	2026-02-20 23:24:04 +08:00
Gan, Jimmy	fc13510fec	Fix action clone timeout by using gitea mirror	2026-02-20 22:29:32 +08:00
Gan, Jimmy	b2064726fd	Fix CI/CD: remove duplicate docker.sock mount ... Runner already passes docker.sock to job containers. Only mount the dashboard volume for deploy.	2026-02-19 10:18:03 +08:00
Gan, Jimmy	6c042b5e09	Fix CI/CD workflow: mount Docker socket into job container ... - Add container volumes for Docker socket, binary, and dashboard path - Update runner-config.yaml with valid_volumes whitelist - Sync source files to NAS volume before rebuilding - Only trigger on dashboard/** path changes	2026-02-19 10:14:24 +08:00
Gan, Jimmy	75c89b1ef9	Fix auth crashes + add CI/CD workflow ... - Fix jose->pyjwt import mismatch - Fix bcrypt->pbkdf2 password hashing - Fix Sidebar logout prop (ReferenceError) - Add .gitea/workflows/deploy.yml for automated deployment	2026-02-19 10:04:38 +08:00