Skip to content

docs(sensitive): Miniflux and Memos as deployed on trinity (#147, #145) - #735

Merged
Gerrrt merged 4 commits into
mainfrom
gerrrt/tier-extras-deployed-docs
Sep 29, 2026
Merged

Gerrrt merged 4 commits into
mainfrom
gerrrt/tier-extras-deployed-docs

Conversation

@Gerrrt

@Gerrrt Gerrrt commented Sep 29, 2026

Copy link
Copy Markdown
Owner

What changed

The docs now describe Miniflux and Memos as they run on trinity: deployed 2026-09-29, host overrides in place, no real data yet. Nothing runs differently.

Why

docs/architecture.md, docs/roadmap.md and stacks/sensitive/README.md said both services were "authored, not yet deployed". The changelog is never rewritten, so it gets a new dated entry that corrects the earlier two. The entry also records the sentinel clash fixed in #734, and why Memos is ADR-0059.

Blast radius

Docs only.

  • No change to network segmentation or firewall rules
  • No new port published to a VLAN that could not already reach the service
  • No credential added outside secrets/*.sops.yaml

Verification

  • make validate passes.
  • Checked on trinity before writing:
    • make up STACK=sensitive reported 16 of 16 services healthy.
    • memos.matrix.elysium and miniflux.matrix.elysium both resolve to 10.0.99.40 and return 200 through Caddy on tier-CA certificates.
    • The Miniflux cluster is in ./18/miniflux.
    • backup-volumes.sh --inventory lists both new volumes and exits 0.
  • Still open, and recorded in the roadmap:
    • Memos registration is not closed yet (disallowUserRegistration reads false).
    • The encrypted secrets/sensitive.sops.yaml with Miniflux's keys is not committed.

🤖 Generated with Claude Code

Gerrrt and others added 4 commits September 29, 2026 16:21
The architecture row, the roadmap's Tier extras entries and the stack
README said "authored, not yet deployed". Both went out on 2026-09-29 in
one make up, with all sixteen containers healthy. Both host overrides
resolve, and both names answer 200 through Caddy on tier-CA leaves.

The changelog gets a new entry that corrects the two below it, rather
than an edit to them. It records the sentinel clash #734 fixed, and why
Memos ended up as ADR-0059.

Still open: committing the encrypted secrets file with Miniflux's keys,
and closing Memos registration at first login.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…ployed-docs

# Conflicts:
#	docs/architecture.md
#	docs/changelog.md
#	docs/roadmap.md
…ployed-docs

# Conflicts:
#	docs/architecture.md
…mns (#143)

The Stirling-PDF merge (#732) left a 128-character comment line in
secrets/sensitive.example.yaml, and Lint fails on it for every branch
cut from main since.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@Gerrrt
Gerrrt merged commit edc71ea into main Sep 29, 2026
7 checks passed
@Gerrrt
Gerrrt deleted the gerrrt/tier-extras-deployed-docs branch September 29, 2026 17:02
Gerrrt added a commit that referenced this pull request Sep 29, 2026
Main recorded the Miniflux and Memos deploys (#735). Both changelog entries
are kept, main's first. The architecture row is main's, with only
Stirling-PDF's "authored and not yet deployed" changed to "deployed
2026-09-29". make validate passes.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant