Deploy hephd --mode server on indri as a self-updating LaunchAgent managed by Ansible (ansible/roles/heph, tag heph), making indri the canonical heph hub for the hub-and-spoke task/context system. - Server mode on 0.0.0.0:8787, self-update every 10 minutes (cargo install from the public forge URL; ~/.cargo/bin on the agent PATH). - heph-pwa shell served via --web-root straight from a version-pinned checkout, TLS-terminated at heph.ops.eblu.me through Caddy (new caddy_services entry). - New Authentik device-code (RFC 8628) OIDC app 'heph' (public client) plus a default-device-code-flow bound to the default brand's flow_device_code. - Docs: new services/hephaestus.md service card (incl. Path A seeding runbook and the gilbert spoke caveat), indri.md service list, changelog fragment. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| +external-secrets-main-sha-rebuild.infra.md | ||
| +external-secrets-stable-main-sha.infra.md | ||
| +tailscale-operator-mirror-tailnet-url.bugfix.md | ||
| .gitkeep | ||
| external-secrets-ringtail-nix.infra.md | ||
| heph-indri-hub.infra.md | ||
| local-external-secrets.infra.md | ||
| reviews-jun4.doc.md | ||
| reviews-jun4.infra.md | ||