Snapshot of zapier-decisions (maximized NS1 NATS study)
This commit is contained in:
commit
0d99c2cb6a
37 changed files with 5566 additions and 0 deletions
15
TODO.md
Normal file
15
TODO.md
Normal file
|
|
@ -0,0 +1,15 @@
|
|||
# Open todos
|
||||
|
||||
- [ ] Live `api.veraetime.net` with `MOCK_VERAE=false` and admin bind credentials.
|
||||
- [x] Three-node NATS JetStream cluster on distinct Proxmox LXC (`verae-nats-cluster`; test env `NATS_URL` cut over; streams replicas=3).
|
||||
- [ ] NATS nkeys/mTLS on that cluster (accounts file is still the lab stand-in; not flipped so clients keep working on `vmbr1`).
|
||||
- [x] Exclusive JetStream consumer for `verae.zapier.jobs.events` on `verae-jobs-events` (`JOBS_EVENTS_EXCLUSIVE=1`; middleware skips the router).
|
||||
- [x] Auth on CS/sales/accounting HTML via `verae-staff-session` (`STAFF_AUTH=1`).
|
||||
- [x] Staff IAM: named users, roles, permissions (`verae-staff-iam` :3028).
|
||||
- [ ] Zapier Platform `push` of a private app.
|
||||
- [x] Move portal static files fully into `verae-access-web` (`/portal/` public door; API proxied to loopback edge).
|
||||
- [x] Turn IAM on for the running lab (fleet `STAFF_IAM_URL` + restart).
|
||||
- [x] IAM hardening: JSON sessions, login rate-limit, JSON 401 as well as HTML 302, credit principal = IAM username.
|
||||
- [x] Host keep-alive (`verae-keep`) on NS1 with watch+guard; honors admin pause/stop.
|
||||
- [x] Docs synced to IAM, public portal `:3021`, keep, bootstrap server types.
|
||||
- [x] `verae-bootstrap` clones all module repos and installs deps per server type.
|
||||
Loading…
Add table
Add a link
Reference in a new issue