Repository navigation
docs(sensitive): Actual as deployed on trinity, and #142 closed (#142) - #739
Merged
Merged
Conversation
Actual went out on trinity on 2026-09-29. The roadmap's Tier extras entry and the architecture row still said "authored, not yet deployed". #142 closes, so by the roadmap's rule its entry leaves the roadmap and a dated changelog entry records the deploy. The changelog entry corrects the one below it rather than editing it. It was brought up on its own, not by make up: the seed script claimed the empty volume with no network before the first start, then `docker compose up -d --no-deps actual`. Caddy already had the site from the Stirling-PDF make up and was not recreated. Through Caddy the name answers 200 on a tier-CA leaf, and the server reports itself claimed, with password login only. Closes #142 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
3 tasks
Gerrrt
added a commit
that referenced
this pull request
Sep 29, 2026
Main recorded the Actual deploy (#739). Both changelog entries are kept, main's first. The architecture row is main's, with Stirling-PDF, Mealie and linkding each marked deployed 2026-09-29. make validate passes. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What changed
This PR records Actual as deployed on trinity:
Why
The roadmap's rule: when an issue closes, its entry leaves the roadmap and a dated changelog entry goes in, in the same PR. The Miniflux and Memos closes were done the same way, in #735.
Blast radius
Docs only; nothing runs.
secrets/*.sops.yamlVerification
What was checked on trinity after the deploy:
The claim came first.
scripts/seed-actual-password.shreported "claimed with the SOPS password before first start", and--checkafterwards reported "already claimed, and the SOPS password logs in".The container:
sensitive-actualis healthy, read-only,CapDrop=[ALL], user 1001:1001, with a 1 GiB memory limit.Through Caddy:
https://actual.matrix.elysiumanswers 200, the TLS verify return code againstcertificates/tier-ca.pemis 0, and/account/needs-bootstrapreportsbootstrapped: truewith password login only.The host override:
actual.matrix.elysiumresolves to10.0.99.40.Lint and docs:
make lintandcheck_docs.pypass.make validatepasses (lint and docs check, for a docs-only change)Deployed to the lab and confirmed working
Docs updated
Closes #142
🤖 Generated with Claude Code