Add Proxmox worker CT, off-box watch, backup, and tagged deploy.
Some checks are pending
offline / test (push) Waiting to run

NS1 is the Proxmox host. verae-proxmox creates LXC 510 (verae-px-worker
10.10.10.20 on vmbr1) with a private NATS proxy on 10.10.10.1:4222.
verae-uptime GET-watches public doors; verae-backup snapshots SQLite and
worm/tree data; verae-deploy does host-deps + checkout + npm ci.
Fleet overlays/ns1 are checked in (start.sh no longer rewrites JSON).
User systemd + linger for keep and fleet survive reboot.
This commit is contained in:
George Lambert 2026-09-11 23:35:44 -04:00
parent 2d51d7a0dd
commit 7a5e25639e
69 changed files with 1087 additions and 118 deletions

View file

@ -32,6 +32,10 @@ Summaries, NATS contracts, and message flows for every Verae Time × Zapier modu
| verae-staff-iam | https://git.georgelambert.org/marchon/verae-staff-iam |
| verae-keep | https://git.georgelambert.org/marchon/verae-keep |
| verae-bootstrap | https://git.georgelambert.org/marchon/verae-bootstrap |
| verae-uptime | https://git.georgelambert.org/marchon/verae-uptime |
| verae-backup | https://git.georgelambert.org/marchon/verae-backup |
| verae-deploy | https://git.georgelambert.org/marchon/verae-deploy |
| verae-proxmox | https://git.georgelambert.org/marchon/verae-proxmox |
Clone (SSH port 2223):

View file

@ -0,0 +1,3 @@
# NATS — verae-backup
Copies JetStream store directory if present. No client connection.

View file

@ -0,0 +1,3 @@
# verae-backup
Nightly tar of SQLite, IAM, keep, worm/tree runtime, optional JetStream dir. Restore is dry-run unless `--apply`.

View file

@ -0,0 +1,3 @@
# NATS — verae-deploy
None during deploy. Archive hosts still need nats-server from host-deps.

View file

@ -0,0 +1,3 @@
# verae-deploy
`host-deps` + git checkout tag/branch + npm ci/rebuild on the target OS. Restart keep/fleet after.

View file

@ -0,0 +1,3 @@
# NATS — verae-proxmox
Guest clients use `nats://10.10.10.1:4222` (socat to host loopback). Never bind NATS on vmbr0.

View file

@ -0,0 +1,3 @@
# verae-proxmox
LXC 510 `verae-px-worker` on NS1 `vmbr1` `10.10.10.20`. Extra worm/tree copies. Private NATS proxy `10.10.10.1:4222`.

View file

@ -0,0 +1,3 @@
# NATS — verae-uptime
None. HTTPS only.

View file

@ -0,0 +1,3 @@
# verae-uptime
Off-box HTTPS GET of public doors. `--once` for cron (exit 2 on failure); loop serves `/status` on `:3870`.