Files

dtoro 41f22c2d85 trmnl (128): auto-deploy pipeline + LAN DNS record wired

- auto-deploy.md: dtoro/terminalito pipeline (webhook 12, :9797), ALLOWED_HOST_LIST
  += 192.168.8.211, changelog
- 128-trmnl.md: auto-deploy now wired, Technitium A record done, changelog
- 107-dns.md: A record trmnl -> 192.168.8.175 (changelog)
- 104-gitea.md: webhook id 12 + allowed host (changelog)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-24 18:06:56 +02:00

4.1 KiB

Raw Blame History

104 — `gitea`

Self-hosted git server. Source of truth for all dtoro/* repositories that auto-deploy across the lab.

At a glance

Hostname: gitea
IP: 192.168.8.121
Privilege: privileged
Resources: 1 core / 1 GiB RAM / 8 GiB rootfs
Mounts: /mnt/library ↔ /mnt/library (under /mnt/library/repos, owner UID 102 / GID 105 — don't touch from other containers)
Public hostname: git.hubris.network → caddy → :3000
Version: 1.25.4 (last verified)

Service / port map

Service	Listen	Notes
gitea	`:3000`	HTTP web + git over HTTP
gitea SSH	`:22`	git over SSH
`gitea-deploy-webhook`	`127.0.0.1:9797`	Receives push events for the customizations repo

Customizations

/var/lib/gitea/custom is a checkout of dtoro/gitea-customizations.

templates/custom/footer.tmpl injects:
- Online3DViewer v0.18.0 (vendored under public/assets/o3dv/) for inline 3D preview of CAD raw-file links: 3dm, 3ds, 3mf, amf, bim, brep, dae, fbx, fcstd, glb, gltf, ifc, igs, iges, stp, step, stl, obj, off, ply, wrl.
- PlantUML client JS (vanilla, vendored from gitea.com/davidsvantesson/plantuml-code-highlight). Browser calls https://git.hubris.network/_plantuml/img/<encoded> — caddy handle_path /_plantuml/* rewrites and proxies to the PlantUML server on apps (105) :8079.
home.tmpl is the anonymous landing page (Homesauce hero + sign-in/explore buttons).
O3DV binary assets are not tracked — deploy.sh fetches them on first run.

Auto-deploy

Push to dtoro/gitea-customizations master → gitea webhook → http://127.0.0.1:9797/deploy (loopback) → gitea-deploy-webhook.service validates HMAC against /etc/gitea-deploy/secret → runs /opt/gitea-customizations/deploy.sh. Then systemctl restart gitea if templates changed.

app.ini [webhook] ALLOWED_HOST_LIST includes 127.0.0.1, 192.168.8.175, 192.168.8.205, 192.168.8.230, 192.168.8.136, 192.168.8.77 — every webhook target across the lab. Don't strip these when editing app.ini. See auto-deploy for the full list.

Git creds for the deploy service: /etc/gitea-deploy/git-credentials (mode 600), referenced via credential.helper = store --file=/etc/gitea-deploy/git-credentials in the repo's .git/config (because ProtectHome=true blocks /root).

DNS workaround

LXC has /etc/hosts override mapping auth.hubris.network → 192.168.8.175 (router DNS resolves the public IONOS A record, which is a dead end for LAN clients — see DNS). Belt-and-suspenders systemd unit hubris-hosts-override.service re-applies it idempotently. Override line is outside the # --- BEGIN PVE --- markers (Proxmox rewrites inside).

Changelog

2026-06-24 — terminalito deploy webhook (id 12)

Push webhook on dtoro/terminalito → http://192.168.8.211:9797/deploy (trmnl (128)); app.ini ALLOWED_HOST_LIST extended with 192.168.8.211. See auto-deploy.

2026-04-28 — wiki entry created

Initial documentation.

2026-04-22 — `app.ini` ALLOWED_HOST_LIST extended for Artifacto webhook

Added 192.168.8.205. See Artifacto auto-deploy on apps (105).

2026-04-21 — `/etc/hosts` override for `auth.hubris.network` added

For OIDC integration with authentik (124). Outside the PVE markers, with a hubris-hosts-override.service for idempotency.

2026-04-20 — gitea customizations + auto-deploy pipeline shipped

dtoro/gitea-customizations repo created; webhook receiver at loopback :9797 validates HMAC and runs deploy.sh. CAD and PlantUML loaders live in footer.tmpl.

4.1 KiB Raw Blame History

104 — gitea