2 Commits

Include renames

Author	SHA1	Message	Date
westfarn	898b1918ba	Drop compromised eMudhra roots from outbound TLS trust (#36) ... Outbound TLS in this image still trusted the compromised eMudhra roots (`emSign ECC Root CA - G3` and `Comodo AAA Services`). - Image install now upgrades `ca-certificates` and regenerates the trust bundle. - `certifi` is locked at 2026.10.23, which drops those roots for `requests` and `httpx`. Merge this, then redeploy prod. Reviewed-on: #36	2026-10-23 09:02:26 -07:00
westfarn	42418fd123	Dockerize scha + Gitea CI/CD auto-deploy via server-infra (#21) ... ## Summary - Dockerize SCHA Wheaton (uv packaging, Dockerfile, compose, entrypoint) and move secrets/DB config to env-driven `scha/settings/`. - Add Gitea Actions: unit tests on push/PR to `master`, auto-deploy on green master push via `server-infra/scripts/deploy.sh --app scha --env prod`. - Prod compose uses shared external Postgres only (no bundled DB); control-node secret template at `.env.prod.example`. Closes #19 (Part A). Depends on companion server-infra PR for catalog/host_apps registration. ## Test plan - [ ] `uv sync --frozen` + `DJANGO_ENV=dev DJANGO_SECRET_KEY=test uv run python manage.py check` - [ ] `docker compose build` succeeds locally - [ ] `docker compose up` serves app against bundled Postgres - [ ] `./scripts/validate-env.sh ~/Documents/secrets/scha/scha_prod.env` passes - [ ] After merge + server-infra catalog live: push to master runs Unit Tests then Deploy Reviewed-on: #21	2026-07-14 03:12:35 -07:00