10 Commits

Author	SHA1	Message	Date
Echo	86a6c714d4	feat: Complete Azure SSO implementation (v0.1.3) ... - Add SSO session cleanup task (10-min expiry, 60s purge interval) - Change callback to redirect to frontend with tokens as query params - Add sso_callback_url to SecurityConfig with serde default - Add SsoCallbackPage.tsx for handling SSO callback redirects - Add /auth/sso/callback public route to App.tsx - Add Sign in with Microsoft Azure button to LoginPage - Replace insecure decode_jwt_payload with verify_id_token - Implement JWKS caching (1-hour TTL) and RSA signature verification - Validate iss, aud, exp claims on id_token - Add jsonwebtoken dependency to pm-web crate - Update config.example.toml with sso_callback_url setting - Add sso_callback_url to settings response (read-only from TOML)	2026-05-12 17:01:20 +00:00
Echo	f0bd431779	fix: postinst auto-restart services on upgrade and build-package.sh version sync ... - debian/postinst: auto-restart patch-manager-web and patch-manager-worker on upgrade (not fresh install) - debian/postinst: list pending database migrations after upgrade - scripts/build-package.sh: update debian/control Version from VERSION variable to ensure dpkg handles upgrades correctly - tasks/lessons.md: added lessons about service restarts and version sync	2026-05-07 00:55:34 +00:00
Echo	4889ab5d0a	docs: add ESLint lesson to lessons.md	2026-05-06 17:48:08 +00:00
Echo	0e9cb1c915	fix: add HealthCheckListResponse type to match API response structure ... - Added HealthCheckListResponse type { checks: [...], total: number } - Updated healthChecksApi.list() return type to HealthCheckListResponse - Fixed HostDetailPage to use res.data?.checks instead of Array.isArray - Added Target column to health checks table - Added git pre-commit/pre-push hooks to prevent format CI failures - Updated lessons.md	2026-05-06 16:18:29 +00:00
Echo	8a27b136b7	Revert "ci: adapt CI to ubuntu-22.04 runner with proven linux_patch_api patterns" ... This reverts commit f8bac85903.	2026-04-27 03:02:53 +00:00
Echo	f8bac85903	ci: adapt CI to ubuntu-22.04 runner with proven linux_patch_api patterns ... - Pin all jobs to ubuntu-22.04 runner - Use curl -sfL with secrets.GITEATOKEN for checkout - Switch checkout URL to https://gitea-lxc.moon-dragon.us - Install rustup with --default-toolchain stable --profile minimal - Add cargo bin to GITHUB_PATH instead of sourcing per-step - Enforce clippy -D warnings - Ignore RUSTSEC-2025-0134 in cargo audit - Pass GITEA_TOKEN via env for release step	2026-04-27 02:43:46 +00:00
Echo	e07b0c2121	docs: Add lesson about dual-runner root cause	2026-04-24 16:25:08 +00:00
Echo	038c168472	docs: Add lessons for DinD in LXC, native runner, and GitHub action deps ... - Docker-in-Docker fails with SIGKILL in LXC (even --privileged) - Native act_runner binary with systemd is the correct approach - No GitHub action dependencies in Gitea workflows - Dig deeper on infrastructure issues (cascading problems) - Don't remove SSH keys without verifying current access	2026-04-24 01:53:55 +00:00
Echo	a1b2d564e9	docs: Add lessons learned from CI/CD runner troubleshooting ... - CI/CD First: set up pipeline before manual builds - Verify runner before creating workflows - Dig deeper on infrastructure issues (cascading problems) - Don't remove SSH keys without verifying current access path	2026-04-24 01:30:28 +00:00
Echo	c31fc0e6e0	feat: Add Gitea Actions CI/CD pipeline for automated .deb builds ... - .gitea/workflows/build.yml: 3-job pipeline (backend, frontend, package) - Builds on Ubuntu 24.04 container for correct glibc - Tags v* trigger release + .deb upload to Gitea Releases - Master pushes produce dev builds as artifacts - tasks/lessons.md: CI/CD-first lesson captured	2026-04-24 01:12:34 +00:00