docs: Rollout-131-Vorbereitung #186

Closed
patrick wants to merge 3 commits from docs/rollout-131-vorbereitung into main
pull from: docs/rollout-131-vorbereitung
3 Commits
Author SHA1 Message Date
patrickandClaude Sonnet 5 ce1f5b9370 docs: fertiges Rollout-Abschluss-Skript fuer 131
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (pull_request) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Canceled after 0s
CI / Web (dms-browser) (pull_request) Canceled after 0s
CI / Web (pdf-viewer) (pull_request) Canceled after 0s
CI / Web (shl) (pull_request) Canceled after 0s
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s
deploy/rollout-131-apply.sh automatisiert die verbleibenden manuellen
Schritte (Env-Pruefung, Build, Binaries, dms-worker.env, systemd-Units,
account-api-Neustart mit JWKS-Check, Dienststart, Health-Check) in einem
Lauf. Bricht kontrolliert ab bei fehlenden TODO-Werten oder Build-/JWKS-
Fehlern statt blind weiterzumachen. Fuehrt selbst nichts aus dieser Session
heraus aus -- der Nutzer startet es manuell auf 131.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-26 00:37:28 +02:00
patrickandClaude Sonnet 5 428c6f0cbf Rollout-131: Sync-Skript real ausgefuehrt, Health-Check + fehlende Deploy-Templates ergaenzt
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / Web (pdf-viewer) (pull_request) Canceled after 0s
CI / Web (shl) (pull_request) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (pull_request) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Canceled after 0s
CI / Web (dms-browser) (pull_request) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
Deploy-Skript sync.sh erweitert: alle bekannten Pflicht-Variablen fuer dms-app
abgedeckt statt nur der kritischsten sechs; App-interne Secrets werden direkt
generiert statt als Platzhalter zu stehen. Real auf Host 131 ausgefuehrt
(2026-09-26): alle 7 Module bauen sauber, 6 von 11 fehlenden dms-app-Variablen
automatisch mit echten Werten befuellt (URLs/Pfade aus bereits laufenden
Diensten auf 131 abgeleitet, ein Secret lokal generiert, ein Service-Token von
policy-api.env uebernommen ohne den Wert je auszugeben). Nur 5 echte TODOs
bleiben (Werte, die ausschliesslich der Nutzer kennt/festlegt).

Fund dabei: account-api auf 131 laeuft noch auf einem Stand vor F-07, Route
/auth/module-jwks fehlt (404) -- Code wurde neu gebaut, Neustart durch den
Nutzer noetig, im Dokument vermerkt.

Neu: deploy/systemd/nexarch-dms-app.service.tmpl und
nexarch-dms-worker.service.tmpl -- gab es bisher gar nicht im Repo, da
dms-app/dms-worker noch nie deployt wurden. deploy/rollout-131-healthcheck.sh
fuer den Health-Check nach dem manuellen Dienststart.

Kein systemctl start/restart/stop ausgefuehrt -- bleibt beim Nutzer.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-26 00:13:08 +02:00
patrickandClaude Sonnet 5 68896d9c9c docs: Rollout-131-Vorbereitung (Sync-Skript, Connect-Unit-Template)
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (pull_request) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Canceled after 0s
CI / Web (dms-browser) (pull_request) Canceled after 0s
CI / Web (pdf-viewer) (pull_request) Canceled after 0s
CI / Web (shl) (pull_request) Canceled after 0s
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s
Bereitet den Rollout des main-Standes (54589a4e) auf Host 131 vor, ohne
irgendeinen Dienst zu starten/neu zu starten — das bleibt der letzte
manuelle Schritt (Sicherheitsfilter blockt automatisierte
Production-Deploy-Aktionen).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-25 23:52:16 +02:00