86bfaa8f7c
Add HTTP-only nginx stub and TLS bootstrap doc for ia.enso
...
**Motivations:**
- First deploy failed nginx -t without live cert; document and ship bootstrap vhost.
**Root causes:**
- Full site referenced missing Let’s Encrypt paths; no /var/www/certbot.
**Correctifs:**
- N/A (operational fix applied on proxy; repo documents path).
**Evolutions:**
- ia.enso.4nkweb.com.http-only.conf; README bootstrap steps; feature table row.
**Pages affectées:**
- deploy/nginx/sites/ia.enso.4nkweb.com.http-only.conf
- deploy/nginx/README-ia-enso.md
- docs/features/ia-enso-nginx-proxy-ollama-anythingllm.md
2026-03-23 01:32:40 +01:00
a8a922f3e8
README ia.enso: curl example for /ollama/api/tags
...
**Motivations:**
- Match documented full URL with verification command.
**Root causes:**
- N/A.
**Correctifs:**
- N/A.
**Evolutions:**
- Native Ollama curl check in README.
**Pages affectées:**
- deploy/nginx/README-ia-enso.md
2026-03-23 01:30:21 +01:00
4d35944de7
Document full HTTPS URLs for ia.enso Ollama and AnythingLLM
...
**Motivations:**
- Operators need explicit public URLs in one place.
**Root causes:**
- Paths were documented without full https:// host prefix everywhere.
**Correctifs:**
- N/A.
**Evolutions:**
- Site conf header, README table, services.md, feature doc, deploy script success output.
**Pages affectées:**
- deploy/nginx/sites/ia.enso.4nkweb.com.conf
- deploy/nginx/README-ia-enso.md
- deploy/nginx/deploy-ia-enso-to-proxy.sh
- docs/services.md
- docs/features/ia-enso-nginx-proxy-ollama-anythingllm.md
2026-03-23 01:30:16 +01:00
ec50bb843a
ia.enso nginx: templated backend IP for deploy (default .164)
...
**Motivations:**
- Proxy still targeted wrong host; explicit backend IP at deploy time.
**Root causes:**
- Stale or manually edited site on proxy; repo had literal IP only.
**Correctifs:**
- Upstreams use __IA_ENSO_BACKEND_IP__; deploy script substitutes IA_ENSO_BACKEND_IP (default 192.168.1.164).
**Evolutions:**
- README manual sed path; troubleshooting 502; feature doc table.
**Pages affectées:**
- deploy/nginx/sites/ia.enso.4nkweb.com.conf
- deploy/nginx/deploy-ia-enso-to-proxy.sh
- deploy/nginx/README-ia-enso.md
- docs/features/ia-enso-nginx-proxy-ollama-anythingllm.md
2026-03-23 01:25:00 +01:00
e118486d34
README ia.enso: require TLS files before deploy
...
**Motivations:**
- nginx -t failed on proxy when Let's Encrypt paths missing.
**Root causes:**
- Deploy script assumes live cert paths exist.
**Correctifs:**
- Document cert prerequisite and troubleshooting row.
**Evolutions:**
- N/A.
**Pages affectées:**
- deploy/nginx/README-ia-enso.md
2026-03-23 01:23:18 +01:00
0637f9e76b
Nginx ia.enso: map_hash_bucket_size, legacy http2 listen
...
**Motivations:**
- Deploy failed on proxy: long Bearer token map_hash; unknown http2 directive.
**Root causes:**
- openssl rand -hex 32 exceeds default map_hash_bucket_size.
- Proxy nginx older than http2 on; listen 443 ssl http2 is portable.
**Correctifs:**
- Prepend map_hash_bucket_size 256 to generated maps and bearer example.
- Replace http2 on with listen 443 ssl http2.
- README troubleshooting for map_hash.
**Evolutions:**
- N/A.
**Pages affectées:**
- deploy/nginx/deploy-ia-enso-to-proxy.sh
- deploy/nginx/http-maps/ia-enso-ollama-bearer.map.conf.example
- deploy/nginx/sites/ia.enso.4nkweb.com.conf
- deploy/nginx/README-ia-enso.md
2026-03-23 01:23:15 +01:00
b5d5d74bbd
Fix deploy script: empty DEPLOY_SSH_PROXY_HOST means direct SSH to proxy
...
**Motivations:**
- DEPLOY_SSH_PROXY_HOST= was overridden by default bastion due to ${VAR:-default}.
**Root causes:**
- Bash treats empty VAR as unset for :- expansion, reapplying 4nk.myftp.biz.
**Correctifs:**
- Use -v / empty check: unset bastion when explicitly empty; default only when unset.
**Evolutions:**
- README and failure hint for LAN direct deploy.
**Pages affectées:**
- deploy/nginx/deploy-ia-enso-to-proxy.sh
- deploy/nginx/README-ia-enso.md
2026-03-23 01:14:18 +01:00
75b8c79556
Restore ia.enso upstreams to 192.168.1.164 for Ollama and AnythingLLM
...
**Motivations:**
- Ollama and AnythingLLM run on 192.168.1.164, not 192.168.1.173.
**Root causes:**
- Previous commit pointed upstreams at the ia host IP by mistake.
**Correctifs:**
- Upstreams back to 192.168.1.164:11434 and :3001; docs aligned.
**Evolutions:**
- N/A.
**Pages affectées:**
- deploy/nginx/sites/ia.enso.4nkweb.com.conf
- deploy/nginx/README-ia-enso.md
- docs/features/ia-enso-nginx-proxy-ollama-anythingllm.md
- docs/infrastructure.md
- docs/services.md
2026-03-23 01:12:51 +01:00
b9157d12b0
Point ia.enso nginx upstreams to IA host 192.168.1.173
...
**Motivations:**
- Ollama and AnythingLLM moved from 192.168.1.164 to the ia LAN host.
**Root causes:**
- Upstreams still targeted 192.168.1.164.
**Correctifs:**
- Set upstream servers to 192.168.1.173:11434 and :3001.
**Evolutions:**
- Docs aligned with ia role IP; note to edit site conf if IP changes.
**Pages affectées:**
- deploy/nginx/sites/ia.enso.4nkweb.com.conf
- deploy/nginx/README-ia-enso.md
- docs/features/ia-enso-nginx-proxy-ollama-anythingllm.md
- docs/infrastructure.md
- docs/services.md
2026-03-23 01:11:47 +01:00
a6bd0ea14c
Document ia.enso nginx proxy (operator guide, cross-links)
...
**Motivations:**
- Single operational reference for deploy script vs manual steps and troubleshooting.
**Root causes:**
- README mixed http-maps manual path with script using conf.d without full operator context.
**Correctifs:**
- Align documentation with deploy script paths and prerequisites.
**Evolutions:**
- Expanded README-ia-enso.md (tables, SSRF context, env vars, rotation, troubleshooting).
- Feature doc table and deployment pointers; links from docs/README, infrastructure, services.
**Pages affectées:**
- deploy/nginx/README-ia-enso.md
- docs/features/ia-enso-nginx-proxy-ollama-anythingllm.md
- docs/README.md
- docs/infrastructure.md
- docs/services.md
2026-03-23 01:04:04 +01:00
f39de69e55
Add SSH deploy script for ia.enso nginx on proxy
...
**Motivations:**
- Apply proxy configuration from a workstation without manual scp steps.
**Root causes:**
- No automation existed for pushing nginx files to 192.168.1.100.
**Correctifs:**
- N/A.
**Evolutions:**
- deploy-ia-enso-to-proxy.sh with ProxyJump, optional generated Bearer token, retry without duplicate websocket map.
**Pages affectées:**
- deploy/nginx/deploy-ia-enso-to-proxy.sh
- deploy/nginx/README-ia-enso.md
- docs/features/ia-enso-nginx-proxy-ollama-anythingllm.md
2026-03-23 01:03:22 +01:00
24077e749e
Add ia.enso.4nkweb.com nginx proxy for Ollama and AnythingLLM
...
**Motivations:**
- Expose Ollama and AnythingLLM via HTTPS paths on the LAN proxy with Bearer auth for Ollama.
**Root causes:**
- Cursor blocks direct requests to private IPs (SSRF policy).
**Correctifs:**
- N/A (new configuration artifacts).
**Evolutions:**
- Nginx site template, HTTP map for Bearer validation, websocket map example, deployment README, services doc link, feature documentation.
**Pages affectées:**
- deploy/nginx/http-maps/ia-enso-ollama-bearer.map.conf.example
- deploy/nginx/http-maps/websocket-connection.map.conf.example
- deploy/nginx/sites/ia.enso.4nkweb.com.conf
- deploy/nginx/README-ia-enso.md
- docs/features/ia-enso-nginx-proxy-ollama-anythingllm.md
- docs/services.md
2026-03-23 00:56:43 +01:00
259fc62cc3
fix(split): stage deploy root files only if present for git add
...
**Motivations:**
- split script failed after subtree split when optional root files (e.g. .dockerignore) were missing on branch test
**Root causes:**
- git add with a missing path in the list fails entirely and stages nothing; git commit then fails under set -e
**Correctifs:**
- add each copied file only if it exists in the deploy repo; skip commit if index empty
**Evolutions:**
- none
**Pages affectées:**
- setup/split-lecoffre-ng-to-five-repos.sh
2026-03-21 18:34:47 +01:00
74cd0050d8
readme
2026-03-21 17:43:45 +01:00
