edgeguard-native

projekte/edgeguard-native

Fork 0

Commit Graph

Author	SHA1	Message	Date
Debian	106ef95f6d	feat(ctl): edgeguard-ctl migrate + initdb wired into postinst migrate up\|down\|check\|dump (1:1 nmg-ctl-Pattern, ruft internal/database Migrate/MigrateDown/ValidateMigrations/CopyEmbeddedMigrationsTo). initdb prüft pg_roles/pg_database und legt Role + DB idempotent via sudo -u postgres psql an, mit Identifier-Whitelist gegen Injection. postinst wirt die drei Schritte vor systemd-enable: migrate check (Pre-Flight ohne DB), initdb, migrate up (als edgeguard-User via Socket-Peer-Auth). cluster-join/promote/dump-config bleiben explizit Phase-3-Stubs. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-09 08:18:55 +02:00
Debian	9f75eec756	refactor: Angie → nginx + Unbound (DNS Forwarder + Cluster-Split-Horizon) Reverse-Proxy von Angie (eigenes APT-Repo) auf nginx (Distro) umgestellt — vereinfacht Bootstrap (kein angie.software-Repo mehr), reduziert Offene-Punkte (arm64-Verfügbarkeit entfällt). Neuer Service Unbound übernimmt zwei Rollen: Caching-Forwarder mit DNSSEC und Cluster-internes Split-Horizon (Local-Zone eg.cluster, Peer-Adressen aus PG ha_nodes, Reload via unbound-control). Architektur-Spec §7.5 dokumentiert beide Rollen + Config-Schichtung. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-08 23:06:56 +02:00
Felix Netzel	0ceab4c814	chore: initial skeleton - docs/architecture.md: native rewrite plan (5 services + control plane, Active-Active cluster like nmg, Floating-IP for HTTP ingress) - cmd/edgeguard-{api,scheduler,ctl}: minimal Gin + CLI stubs - packaging/debian/edgeguard-{api,ui,meta}: control + maintainer scripts - deploy/systemd/edgeguard-api.service + edgeguard-scheduler.service with hardening defaults - Makefile: build / cross-compile (amd64+arm64) / deb / publish targets - scripts/install.sh + scripts/apt-repo/build-package.sh stubs	2026-05-08 18:45:41 +02:00

Author

SHA1

Message

Date

Debian

106ef95f6d

feat(ctl): edgeguard-ctl migrate + initdb wired into postinst

migrate up|down|check|dump (1:1 nmg-ctl-Pattern, ruft internal/database
Migrate/MigrateDown/ValidateMigrations/CopyEmbeddedMigrationsTo).
initdb prüft pg_roles/pg_database und legt Role + DB idempotent via
sudo -u postgres psql an, mit Identifier-Whitelist gegen Injection.
postinst wirt die drei Schritte vor systemd-enable: migrate check
(Pre-Flight ohne DB), initdb, migrate up (als edgeguard-User via
Socket-Peer-Auth). cluster-join/promote/dump-config bleiben explizit
Phase-3-Stubs.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-09 08:18:55 +02:00

Debian

9f75eec756

refactor: Angie → nginx + Unbound (DNS Forwarder + Cluster-Split-Horizon)

Reverse-Proxy von Angie (eigenes APT-Repo) auf nginx (Distro) umgestellt
— vereinfacht Bootstrap (kein angie.software-Repo mehr), reduziert
Offene-Punkte (arm64-Verfügbarkeit entfällt). Neuer Service Unbound
übernimmt zwei Rollen: Caching-Forwarder mit DNSSEC und Cluster-internes
Split-Horizon (Local-Zone eg.cluster, Peer-Adressen aus PG ha_nodes,
Reload via unbound-control). Architektur-Spec §7.5 dokumentiert beide
Rollen + Config-Schichtung.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-08 23:06:56 +02:00

Felix Netzel

0ceab4c814

chore: initial skeleton

- docs/architecture.md: native rewrite plan (5 services + control plane,
  Active-Active cluster like nmg, Floating-IP for HTTP ingress)
- cmd/edgeguard-{api,scheduler,ctl}: minimal Gin + CLI stubs
- packaging/debian/edgeguard-{api,ui,meta}: control + maintainer scripts
- deploy/systemd/edgeguard-api.service + edgeguard-scheduler.service
  with hardening defaults
- Makefile: build / cross-compile (amd64+arm64) / deb / publish targets
- scripts/install.sh + scripts/apt-repo/build-package.sh stubs

2026-05-08 18:45:41 +02:00

3 Commits