1.2 KiB
1.2 KiB
Open todos
- Live
api.veraetime.netwithMOCK_VERAE=falseand admin bind credentials. - Three-node NATS JetStream cluster on distinct Proxmox LXC (
verae-nats-cluster; test envNATS_URLcut over; streams replicas=3). - NATS nkeys/mTLS on that cluster (accounts file is still the lab stand-in; not flipped so clients keep working on
vmbr1). - Exclusive JetStream consumer for
verae.zapier.jobs.eventsonverae-jobs-events(JOBS_EVENTS_EXCLUSIVE=1; middleware skips the router). - Auth on CS/sales/accounting HTML via
verae-staff-session(STAFF_AUTH=1). - Staff IAM: named users, roles, permissions (
verae-staff-iam:3028). - Zapier Platform
pushof a private app. - Move portal static files fully into
verae-access-web(/portal/public door; API proxied to loopback edge). - Turn IAM on for the running lab (fleet
STAFF_IAM_URL+ restart). - IAM hardening: JSON sessions, login rate-limit, JSON 401 as well as HTML 302, credit principal = IAM username.
- Host keep-alive (
verae-keep) on NS1 with watch+guard; honors admin pause/stop. - Docs synced to IAM, public portal
:3021, keep, bootstrap server types. verae-bootstrapclones all module repos and installs deps per server type.