mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 19:01:54 +00:00
kevinveenbirkenbachandClaude Opus 5
5005c3962a
02_performance deployed matomo with no disable set at all, so svc-net-tor joined the groups. It is exclusive, matomo follows it through tor.enabled in its own services meta, and the clearnet vhost disappears. The assertion two lines down then aborts in TLS before HTTP: 'curl: (35) TLS connect error: tlsv1 unrecognized name', reported as '[FAIL] https://matomo.infinito.example returned HTTP 000, expected 200'. The counter-example sits in the same job: 01_minimal deploys dashboard with the group-conditional services disabled, tor among them, and its clearnet assertion returns 200. This suite tests the inventory, not the transport -- that a dedicated deploy replaces the previous app set. So it takes the route the sibling script already proves, rather than asserting against an onion address the runner never touched. 03_reuse stays untouched: it runs mode=update against the inventory 02 just built. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
23 lines
1.1 KiB
Bash
Executable File
23 lines
1.1 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Deploy on performance hardware — deploy the full set of applications.
|
|
set -euo pipefail
|
|
|
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
|
# shellcheck source=scripts/tests/workspace/utils/common.sh
|
|
source "${SCRIPT_DIR}/../utils/common.sh"
|
|
|
|
echo "Deploying matomo (full cycle: deploy + update pass) so it becomes reachable via its dedicated inventory entry."
|
|
# Exception: the onion provider has to stay out. svc-net-tor is exclusive, so once it joins the groups matomo is served onion-only, loses its clearnet vhost, and the assertion below aborts in TLS before HTTP.
|
|
make compose-deploy mode=reinstall apps="${MATOMO_APP}" full_cycle=true disable=tor
|
|
inspect
|
|
|
|
echo "Re-trusting the CA after the fresh deploy rebuilt the certificates."
|
|
make network-trust-ca
|
|
|
|
echo "Verifying matomo is now reachable after its dedicated deploy."
|
|
assert_http_status 200 "${MATOMO_URL}"
|
|
|
|
echo "Verifying the dashboard is no longer reachable after the matomo-only fresh deploy."
|
|
# Exception: Expect 000 because curl aborts in TLS before HTTP when the removed hostname is missing from the certificate SANs.
|
|
assert_http_status 000 "${DASHBOARD_URL}"
|