auto: docs sync 2026-06-29T06:00:08+00:00

Files changed: credentials engine/lint-report.md vault/.obsidian/workspace.json vault/docs/software/central.md
This commit is contained in:
echo6-autocommit 2026-06-29 06:00:08 +00:00
commit 3363f59b4b
4 changed files with 15 additions and 11 deletions

View file

@ -354,6 +354,10 @@ CENTRAL_PG_DSN="postgresql://central:3LNVFQJHsK3e7dOcAdvK3oS6d70f@localhost/cent
# Central Data Hub Master Key
CENTRAL_MASTER_KEY=jfooDHnsS8n5J61bDzmiq6u7QpJhUoEQ/BVk1Sj3PqE=
# Central GUI operator login (http://central.echo6.mesh:8000)
CENTRAL_OPERATOR_USER="admin"
CENTRAL_OPERATOR_PASS="7redditGold"
# Recon VM (CT 1130) — padus PostgreSQL (192.168.1.130 / recon-vm)
# PostgreSQL 16, opened for LAN 2026-05-24 — scram-sha-256, allow 192.168.1.0/24
RECON_PG_HOST=192.168.1.130

View file

@ -1,6 +1,6 @@
# Vault Lint Report
Generated: 2026-06-28T18:00:07Z | Docs scanned: 96 | Elapsed: 0.0s
Generated: 2026-06-29T00:00:11Z | Docs scanned: 96 | Elapsed: 0.0s
## Summary

View file

@ -199,6 +199,8 @@
},
"active": "17bd4a6166f789d0",
"lastOpenFiles": [
"docs/software/central.md.tmp.3603785.6c9205f08816",
"docs/software/central.md.tmp.3603785.ecf07e484b59",
"runbooks/central-deploy-cutover.md.tmp.3603785.4e7865cbcf79",
"runbooks/central-deploy-cutover.md.tmp.3603785.af9622a37ece",
"runbooks/central-deploy-cutover.md.tmp.3603785.45f414c68859",
@ -209,8 +211,6 @@
"docs/software/navi.md.tmp.5281.4b9a09bef001",
"projects/nominatim-v5-reimport.md.tmp.5281.7f47896f6abc",
"runbooks/fleet-magicdns-resolved-migration.md.tmp.5281.0b86b5de4a11",
"runbooks/fleet-magicdns-resolved-migration.md.tmp.5281.f94befc79ce2",
"runbooks/fleet-magicdns-resolved-migration.md.tmp.5281.e8ec4cd814f7",
"runbooks/fleet-magicdns-resolved-migration.md",
"projects/fleet-platform-baseline.md",
"runbooks/toc-cortex-pve9.2-update.md",

View file

@ -64,7 +64,7 @@ All three units are **enabled and active**; deployment survives reboot. Deps: `n
## GUI / API Surface
Authenticated app with login/sessions/CSRF, first-run setup wizard, operator management, adapter configuration, stream viewer, enrichment pipeline, monitoring-area management, API key management, audit log, and manual resend.
Authenticated app with login/sessions/CSRF, first-run setup wizard, operator management, adapter configuration, stream viewer, **JetStream consumer management** (`/consumers` — view + delete consumers; central's own `archive-*` durable consumers are protected/non-deletable; CSRF + audit-logged), enrichment pipeline, monitoring-area management, API key management, audit log, and manual resend.
**Auth-exempt tile endpoints** (used by navi, verified HTTP 200):
@ -91,14 +91,14 @@ navi-traffic (navi's in-VM :8421 extraction service) was **retired on 2026-05-26
Single TimescaleDB hypertable `public.events` (~22 GB, ~3.19 M rows, 331 chunks, compression not enabled). JetStream ~5.86 GB / 20 GB across 12 streams.
## Deploy / Drift Notes (as of 2026-06-27)
## Deploy / State Notes (as of 2026-06-29)
- **Deployed HEAD:** v0.14.5 (detached HEAD, not a branch) — caught up to latest tag since the 2026-06-18 audit.
- **Uncommitted local migration:** `sql/migrations/036_add_avalanche_org_adapter.sql` — untracked on disk, already applied in the DB (avalanche_org row live), but missing from the repo so a clean rebuild would skip it. A PR to commit it is in progress.
- **Stale `pyproject.toml`:** version field shows 0.3.0 (stale); being fixed in the same PR.
- **Stale README:** still reads *"Phase 0 — scaffold, not yet operational"* (stale); being fixed in the same PR.
- **Zero-event adapters:** `avalanche_org` (off-season severity gate — expected) and `eonet` (under investigation) are enabled but have produced no events.
- **Deployed HEAD:** v0.14.7 (detached HEAD — the box tracks tags). All prior drift resolved: migration 036 committed, `pyproject.toml` version current, README operational.
- **Deploy mechanism:** manual, tag-based (`git checkout <tag>``uv sync``central-migrate` → restart). One-command `scripts/deploy.sh` ships in-repo; full procedure in the [[central-deploy-cutover]] runbook. No CI/CD; no automated DB backup (pre-flight `pg_dump` is the only migration safety net; migrations are forward-only).
- **`central-migrate` env gotcha:** manual calls need `cd /opt/central && set -a && . /etc/central/central.env && set +a && …` (the units supply this via WorkingDirectory + EnvironmentFile).
- **EONET:** now **global** as of v0.14.6 (2026-06-28) — `bypass_bbox_filter=True` + the adapter `region` key removed. NOTE: its `events`-table row count is a misleading health signal (dedup + partition expiry); use the CENTRAL_DISASTER stream as the EONET flow signal. `avalanche_org` zero-events is expected (off-season gate).
- **Supervisor CPU** ~17%→~1.4% and **cursors.db** 1.3 GB→496 MB after the v0.14.6 dedup/WAL fix + a VACUUM.
---
*Last updated: 2026-06-27 — Refreshed from live recon; blanks filled, drift notes current.*
*Last updated: 2026-06-29 — v0.14.7 deployed (consumers admin page); drift cleared, EONET global, perf fixes verified.*