docs: Rollout-131-Vorbereitung #186

Closed
patrick wants to merge 3 commits from docs/rollout-131-vorbereitung into main
pull from: docs/rollout-131-vorbereitung
Owner

Bereitet Rollout auf Host 131 vor (Build-Pruefung + Env-Datei-Ergaenzung), OHNE einen Dienst zu starten/neu zu starten -- letzter Schritt bleibt manuell. Neu: deploy/rollout-131-sync.sh (idempotent), deploy/systemd/nexarch-connect-app.service.tmpl, docs/ROLLOUT-131-VORBEREITUNG.md (vollstaendige Schritt-fuer-Schritt-Anleitung, IST-Zustand aller 131-Dienste, fehlende Env-Variablen dokumentiert). Kein Merge, kein Deploy.

🤖 Generated with Claude Code

Bereitet Rollout auf Host 131 vor (Build-Pruefung + Env-Datei-Ergaenzung), OHNE einen Dienst zu starten/neu zu starten -- letzter Schritt bleibt manuell. Neu: deploy/rollout-131-sync.sh (idempotent), deploy/systemd/nexarch-connect-app.service.tmpl, docs/ROLLOUT-131-VORBEREITUNG.md (vollstaendige Schritt-fuer-Schritt-Anleitung, IST-Zustand aller 131-Dienste, fehlende Env-Variablen dokumentiert). Kein Merge, kein Deploy. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
patrick added 1 commit 2026-09-25 23:52:47 +02:00
docs: Rollout-131-Vorbereitung (Sync-Skript, Connect-Unit-Template)
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (pull_request) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Canceled after 0s
CI / Web (dms-browser) (pull_request) Canceled after 0s
CI / Web (pdf-viewer) (pull_request) Canceled after 0s
CI / Web (shl) (pull_request) Canceled after 0s
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s
68896d9c9c
Bereitet den Rollout des main-Standes (54589a4e) auf Host 131 vor, ohne
irgendeinen Dienst zu starten/neu zu starten — das bleibt der letzte
manuelle Schritt (Sicherheitsfilter blockt automatisierte
Production-Deploy-Aktionen).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
patrick added 1 commit 2026-09-26 00:13:16 +02:00
Rollout-131: Sync-Skript real ausgefuehrt, Health-Check + fehlende Deploy-Templates ergaenzt
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / Web (pdf-viewer) (pull_request) Canceled after 0s
CI / Web (shl) (pull_request) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (pull_request) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Canceled after 0s
CI / Web (dms-browser) (pull_request) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
428c6f0cbf
Deploy-Skript sync.sh erweitert: alle bekannten Pflicht-Variablen fuer dms-app
abgedeckt statt nur der kritischsten sechs; App-interne Secrets werden direkt
generiert statt als Platzhalter zu stehen. Real auf Host 131 ausgefuehrt
(2026-09-26): alle 7 Module bauen sauber, 6 von 11 fehlenden dms-app-Variablen
automatisch mit echten Werten befuellt (URLs/Pfade aus bereits laufenden
Diensten auf 131 abgeleitet, ein Secret lokal generiert, ein Service-Token von
policy-api.env uebernommen ohne den Wert je auszugeben). Nur 5 echte TODOs
bleiben (Werte, die ausschliesslich der Nutzer kennt/festlegt).

Fund dabei: account-api auf 131 laeuft noch auf einem Stand vor F-07, Route
/auth/module-jwks fehlt (404) -- Code wurde neu gebaut, Neustart durch den
Nutzer noetig, im Dokument vermerkt.

Neu: deploy/systemd/nexarch-dms-app.service.tmpl und
nexarch-dms-worker.service.tmpl -- gab es bisher gar nicht im Repo, da
dms-app/dms-worker noch nie deployt wurden. deploy/rollout-131-healthcheck.sh
fuer den Health-Check nach dem manuellen Dienststart.

Kein systemctl start/restart/stop ausgefuehrt -- bleibt beim Nutzer.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
patrick added 1 commit 2026-09-26 00:37:30 +02:00
docs: fertiges Rollout-Abschluss-Skript fuer 131
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (pull_request) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Canceled after 0s
CI / Web (dms-browser) (pull_request) Canceled after 0s
CI / Web (pdf-viewer) (pull_request) Canceled after 0s
CI / Web (shl) (pull_request) Canceled after 0s
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s
ce1f5b9370
deploy/rollout-131-apply.sh automatisiert die verbleibenden manuellen
Schritte (Env-Pruefung, Build, Binaries, dms-worker.env, systemd-Units,
account-api-Neustart mit JWKS-Check, Dienststart, Health-Check) in einem
Lauf. Bricht kontrolliert ab bei fehlenden TODO-Werten oder Build-/JWKS-
Fehlern statt blind weiterzumachen. Fuehrt selbst nichts aus dieser Session
heraus aus -- der Nutzer startet es manuell auf 131.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
patrick closed this pull request 2026-10-17 13:38:11 +02:00

Pull request closed

Please reopen this pull request to perform a merge.
Sign in to join this conversation.
No Reviewers
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: scripte/nexarch#186