olsitec/foundation
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
foundation/bootstrap/package.json

22 lines
651 B
JSON
Raw Normal View History

feat(bootstrap): Bun-workspace skeleton + typed config + vendored modules — T02 - Bun workspaces (packages/* + bootstrap); Pulumi nodejs runtime under packagemanager: bun (no npm fallback needed). - bootstrap/config.ts: typed FoundationConfig per CONTRACT_001; loadConfig() fails closed, aggregating all missing+malformed keys in one error. Reads flat dotted keys; image digests excluded (they live in VERSIONS, D5). - bootstrap/Pulumi.foundation.yaml: non-secret placeholders only (RFC-5737 vm.host, .invalid offsite); no encryptionsalt/secrets committed (D2). pulumi preview = 0 resources under the passphrase provider via gitignored file:// state backend. - Stage-1 vendoring: packages/pulumi-{docker,vault} as @olsitec/* (source-only, logic unchanged). vault's 5 type-only imports from modules/olsitec re-homed verbatim into pulumi-vault/olsitec-types.ts to keep the egg self-contained. Realizes PLAN-002 §10 T02; ADR-005 / 000_TOPOLOGY.md §5 Stage-1. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-30 18:06:21 +02:00
{
"name": "@olsitec/foundation-bootstrap",
"private": true,
"version": "0.0.0",
"main": "index.ts",
"description": "The foundation egg — single Pulumi project (PLAN-002 §0, Layer 0).",
"dependencies": {
"@olsitec/pulumi-docker": "workspace:*",
"@olsitec/pulumi-vault": "workspace:*",
feat(bootstrap): shared docker provider + foundation-net precursor (ADR-006) Composition substrate for Wave 2 (T03+): - lib/context.ts: one Docker-over-SSH provider + DeployCtx threaded to component factories; FOUNDATION_DOCKER_HOST override for ephemeral validation. - lib/versions.ts: resolve pinned images from VERSIONS; FOUNDATION_ALLOW_UNPINNED for local validation when digests are still PIN_DIGEST. - components/network.ts: foundation-net (CONTRACT_003 §3.1). - index.ts: phase-orchestration entrypoint with dependsOn gates; Wave-2 slots. - ADR-006: shared-provider + per-component-factory model (egg does not route its phased bootstrap through the monolithic vendored DockerDeployments). Validated: pulumi up over Docker-over-SSH created+verified+destroyed foundation-net on crunchy01 (x86_64); ephemeral, nothing persisted. tsc + preview clean. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-30 18:18:40 +02:00
"@pulumi/docker": "^4.5.8",
feat(bootstrap): real olsitec.net config + DNS records (steps 1+2) CONTRACT_001 amendments: hosts.git, vm.sshPort (default 22; VM uses 222), cloudflare.zoneId. config.ts + lib/context.ts (provider host uses sshPort). - components/dns.ts: forge/vault/s3/git.olsitec.net A -> VM (DNS-only, own CF provider from encrypted token). Deployed + verified authoritative = 204.168.234.72. - Pulumi.foundation.yaml: real config (olsitec.net, vm 204.168.234.72:222, letsencrypt-dns01) + encrypted secrets (cloudflare token, offsite creds). Master passphrase: pass olsitec-foundation/PULUMI_CONFIG_PASSPHRASE. - run.sh: reproducible deploy (passphrase + ssh key from pass/home). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-30 20:47:30 +02:00
"@pulumi/pulumi": "^3.138.0",
feat(bootstrap): postgres data-plane + remote helper (T03) foundation-postgres (postgres:17, digest-pinned in VERSIONS) on foundation-net, internal only (5432 unpublished); named volume foundation-postgres-data with retainOnDelete. The forgejo login role + database are created post-boot by an idempotent, readiness-gated remote.Command (ADR-007), since 5432 isn't reachable from the operator. Adds the generator half of credentials.ts (@pulumi/random → CONTRACT_002 postgres keys) and lib/remote.ts (vmConnection over the VM SSH path). Live on cx33 Helsinki: container healthy, role 'forgejo' + db 'forgejo' present, no published ports. Acceptance T03 met. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-30 21:10:34 +02:00
"@pulumi/cloudflare": "^5.45.0",
"@pulumi/random": "^4.16.8",
"@pulumi/vault": "^4.5.8",
"@pulumi/command": "^1.1.3"
feat(bootstrap): Bun-workspace skeleton + typed config + vendored modules — T02 - Bun workspaces (packages/* + bootstrap); Pulumi nodejs runtime under packagemanager: bun (no npm fallback needed). - bootstrap/config.ts: typed FoundationConfig per CONTRACT_001; loadConfig() fails closed, aggregating all missing+malformed keys in one error. Reads flat dotted keys; image digests excluded (they live in VERSIONS, D5). - bootstrap/Pulumi.foundation.yaml: non-secret placeholders only (RFC-5737 vm.host, .invalid offsite); no encryptionsalt/secrets committed (D2). pulumi preview = 0 resources under the passphrase provider via gitignored file:// state backend. - Stage-1 vendoring: packages/pulumi-{docker,vault} as @olsitec/* (source-only, logic unchanged). vault's 5 type-only imports from modules/olsitec re-homed verbatim into pulumi-vault/olsitec-types.ts to keep the egg self-contained. Realizes PLAN-002 §10 T02; ADR-005 / 000_TOPOLOGY.md §5 Stage-1. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-30 18:06:21 +02:00
},
"devDependencies": {
"@types/node": "^18",
"typescript": "^5.0.0"
}
}
Reference in a new issue Copy permalink