dezky

Author	SHA1	Message	Date
Ronni Baslund	35bc7b6c31	chore(infra): production manifests + CI for scheduling apps ci / typecheck (map[dir:apps/booking name:booking]) (push) Has been cancelled Details ci / typecheck (map[dir:apps/portal name:portal]) (push) Has been cancelled Details ci / typecheck (map[dir:apps/website name:website]) (push) Has been cancelled Details ci / typecheck (map[dir:services/platform-api name:platform-api]) (push) Has been cancelled Details ci / test (push) Has been cancelled Details	2026-06-07 09:27:44 +02:00
Ronni Baslund	3831c85285	feat(infra): production host bootstrap and bare-metal Stalwart scaffolding Host provisioning for the single-server production target: SSH + firewall hardening (nftables allowlist), k3s node registration, bare-metal Stalwart install with systemd units and TLS cert-sync from the cluster secret, and Restic encrypted backup/restore (primary + DR) with timer units. Host-specific secrets live in config.env (gitignored); config.env.example is the template. Also gitignores MemPalace per-project files.	2026-06-07 00:19:48 +02:00