Add Proxmox worker CT, off-box watch, backup, and tagged deploy.
Some checks are pending
offline / test (push) Waiting to run

NS1 is the Proxmox host. verae-proxmox creates LXC 510 (verae-px-worker
10.10.10.20 on vmbr1) with a private NATS proxy on 10.10.10.1:4222.
verae-uptime GET-watches public doors; verae-backup snapshots SQLite and
worm/tree data; verae-deploy does host-deps + checkout + npm ci.
Fleet overlays/ns1 are checked in (start.sh no longer rewrites JSON).
User systemd + linger for keep and fleet survive reboot.
This commit is contained in:
George Lambert 2026-09-11 23:35:44 -04:00
parent 2d51d7a0dd
commit 7a5e25639e
69 changed files with 1087 additions and 118 deletions

View file

@ -0,0 +1,20 @@
# verae-deploy
Upgrade cloned Forgejo modules **on the machine that runs them**. Order: `host-deps.sh``git fetch` → checkout tag/branch → `npm ci` (or `npm install`) → `npm rebuild`.
**Forgejo:** https://git.georgelambert.org/marchon/verae-deploy
**SSH:** `ssh://git@git.georgelambert.org:2223/marchon/verae-deploy.git`
```bash
export VERAE_SRC=$HOME/verae-src
export VERAE_BOOTSTRAP=$HOME/verae-src/verae-bootstrap # or sibling clone
export DEPLOY_TYPE=ns1-all-in-one
bash scripts/deploy.sh main
# then: systemctl --user restart verae-keep-guard verae-fleet
```
Writes `$VERAE_SRC/<repo>/.deployed-ref` and `$VERAE_SRC/.deployed`. Does **not** force-push. Prefer tags (`v2026-09-12`) once you cut them.
Do **not** copy `node_modules` from macOS. Rebuild `better-sqlite3` on Linux.
Does not speak NATS.