63b2effe03
feat: runner install resolves the latest release when --version is omitted
...
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-11 18:44:43 +00:00
e395d6754a
feat: runner bootstrap role — defaults tag:ci, refuses tag:server
...
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-11 18:36:25 +00:00
9730e4336c
docs: --labels replaces the default label set, not appends
...
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-11 17:51:08 +00:00
e463493bd1
feat: runner install command — GitHub Actions runner as an unprivileged systemd service
...
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-11 17:41:09 +00:00
5fb342d64d
fix: bootstrap installs openssh-server — sshd_config.d does not exist on pristine images
...
Found by the Incus rehearsal (prod-migration Task 4): cloud images ship
openssh-server, container/VM images do not; the hardening drop-in and
'systemctl restart ssh' both presume it. A rig box is SSH-managed by
definition, so the dependency is explicit now. No-op on cloud images.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-11 10:38:14 +00:00
df17851108
refactor: rename deployor to rig; canonical heavy-duty/rig URLs
2026-07-11 08:25:48 +00:00
33c27452ac
feat: coolify install command — required version pin, AUTOUPDATE=false
2026-07-11 08:25:11 +00:00
c19bb7d99a
fix: die() prints only the message, not the exit code
2026-07-11 08:25:11 +00:00
aa4185f9ed
feat: bootstrap command — hardening, unattended-upgrades, tailscale join
2026-07-11 08:25:11 +00:00