dtoro/oikos
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

cutover: Infisical bootstrapped — running, admin created, awaiting browser setup

Browse Source
This commit is contained in:
authentik Default Admin
2026-07-07 21:46:57 +02:00
parent 129a6710cc
commit 24b8772d72
2 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
scripts/cutover-checklist.md
View File

@@ -9,7 +9,7 @@ Status: [x] = done, [ ] = pending
- [x] **Deploy test**: Docker stack running with api + scheduler + notifier + hermes
- [x] **Caddy config**: `compose/caddy/Caddyfile.oikos` pushed to `dtoro/caddy-conf` (ed20908). Auto-deploys to caddy (121).
- [x] **DNS**: `oikos.hubris.network` already resolves to 192.168.8.175 (mac-mini mesh)
- [ ] **Secrets**: Infisical not yet bootstrapped — blocked by Infisical v0.162.0 KMS migration bug (ERR_CRYPTO_INVALID_KEYLEN). SOPS fallback is active and working. Deferred pending upstream fix or version pin.
- [x] **Secrets**: Infisical bootstrapped 2026-07-07 — running on `:8080` (profile: infisical). Admin account created (`oikos@hubris.network`). ENCRYPTION_KEY fix: must be 32-char raw string, NOT hex (Infisical docs incorrect). Next: complete org/project/machine-identity setup via browser at http://localhost:8080, then wire `OIKOS_SECRET_BACKEND=infisical` to oikos services.
- [x] **Watchdog**: crontab entry added (every 2 min → `scripts/watchdog.sh`). Path fixed 2026-07-07 (was stale worktree path).
## Cutover