13 Commits

Author SHA1 Message Date
dfc978deef README ia.enso: Cursor ERROR_BAD_USER_API_KEY vs proxy OK
**Motivations:**
- Operators confuse nginx Bearer with Cursor user API key error.

**Root causes:**
- Cursor validates or routes chat through its backend; custom URL can still fail in-app.

**Correctifs:**
- N/A.

**Evolutions:**
- README Cursor subsection + forum link.

**Pages affectées:**
- deploy/nginx/README-ia-enso.md
2026-03-23 02:05:21 +01:00
86bfaa8f7c Add HTTP-only nginx stub and TLS bootstrap doc for ia.enso
**Motivations:**
- First deploy failed nginx -t without live cert; document and ship bootstrap vhost.

**Root causes:**
- Full site referenced missing Let’s Encrypt paths; no /var/www/certbot.

**Correctifs:**
- N/A (operational fix applied on proxy; repo documents path).

**Evolutions:**
- ia.enso.4nkweb.com.http-only.conf; README bootstrap steps; feature table row.

**Pages affectées:**
- deploy/nginx/sites/ia.enso.4nkweb.com.http-only.conf
- deploy/nginx/README-ia-enso.md
- docs/features/ia-enso-nginx-proxy-ollama-anythingllm.md
2026-03-23 01:32:40 +01:00
a8a922f3e8 README ia.enso: curl example for /ollama/api/tags
**Motivations:**
- Match documented full URL with verification command.

**Root causes:**
- N/A.

**Correctifs:**
- N/A.

**Evolutions:**
- Native Ollama curl check in README.

**Pages affectées:**
- deploy/nginx/README-ia-enso.md
2026-03-23 01:30:21 +01:00
4d35944de7 Document full HTTPS URLs for ia.enso Ollama and AnythingLLM
**Motivations:**
- Operators need explicit public URLs in one place.

**Root causes:**
- Paths were documented without full https:// host prefix everywhere.

**Correctifs:**
- N/A.

**Evolutions:**
- Site conf header, README table, services.md, feature doc, deploy script success output.

**Pages affectées:**
- deploy/nginx/sites/ia.enso.4nkweb.com.conf
- deploy/nginx/README-ia-enso.md
- deploy/nginx/deploy-ia-enso-to-proxy.sh
- docs/services.md
- docs/features/ia-enso-nginx-proxy-ollama-anythingllm.md
2026-03-23 01:30:16 +01:00
ec50bb843a ia.enso nginx: templated backend IP for deploy (default .164)
**Motivations:**
- Proxy still targeted wrong host; explicit backend IP at deploy time.

**Root causes:**
- Stale or manually edited site on proxy; repo had literal IP only.

**Correctifs:**
- Upstreams use __IA_ENSO_BACKEND_IP__; deploy script substitutes IA_ENSO_BACKEND_IP (default 192.168.1.164).

**Evolutions:**
- README manual sed path; troubleshooting 502; feature doc table.

**Pages affectées:**
- deploy/nginx/sites/ia.enso.4nkweb.com.conf
- deploy/nginx/deploy-ia-enso-to-proxy.sh
- deploy/nginx/README-ia-enso.md
- docs/features/ia-enso-nginx-proxy-ollama-anythingllm.md
2026-03-23 01:25:00 +01:00
e118486d34 README ia.enso: require TLS files before deploy
**Motivations:**
- nginx -t failed on proxy when Let's Encrypt paths missing.

**Root causes:**
- Deploy script assumes live cert paths exist.

**Correctifs:**
- Document cert prerequisite and troubleshooting row.

**Evolutions:**
- N/A.

**Pages affectées:**
- deploy/nginx/README-ia-enso.md
2026-03-23 01:23:18 +01:00
0637f9e76b Nginx ia.enso: map_hash_bucket_size, legacy http2 listen
**Motivations:**
- Deploy failed on proxy: long Bearer token map_hash; unknown http2 directive.

**Root causes:**
- openssl rand -hex 32 exceeds default map_hash_bucket_size.
- Proxy nginx older than http2 on; listen 443 ssl http2 is portable.

**Correctifs:**
- Prepend map_hash_bucket_size 256 to generated maps and bearer example.
- Replace http2 on with listen 443 ssl http2.
- README troubleshooting for map_hash.

**Evolutions:**
- N/A.

**Pages affectées:**
- deploy/nginx/deploy-ia-enso-to-proxy.sh
- deploy/nginx/http-maps/ia-enso-ollama-bearer.map.conf.example
- deploy/nginx/sites/ia.enso.4nkweb.com.conf
- deploy/nginx/README-ia-enso.md
2026-03-23 01:23:15 +01:00
b5d5d74bbd Fix deploy script: empty DEPLOY_SSH_PROXY_HOST means direct SSH to proxy
**Motivations:**
- DEPLOY_SSH_PROXY_HOST= was overridden by default bastion due to ${VAR:-default}.

**Root causes:**
- Bash treats empty VAR as unset for :- expansion, reapplying 4nk.myftp.biz.

**Correctifs:**
- Use -v / empty check: unset bastion when explicitly empty; default only when unset.

**Evolutions:**
- README and failure hint for LAN direct deploy.

**Pages affectées:**
- deploy/nginx/deploy-ia-enso-to-proxy.sh
- deploy/nginx/README-ia-enso.md
2026-03-23 01:14:18 +01:00
75b8c79556 Restore ia.enso upstreams to 192.168.1.164 for Ollama and AnythingLLM
**Motivations:**
- Ollama and AnythingLLM run on 192.168.1.164, not 192.168.1.173.

**Root causes:**
- Previous commit pointed upstreams at the ia host IP by mistake.

**Correctifs:**
- Upstreams back to 192.168.1.164:11434 and :3001; docs aligned.

**Evolutions:**
- N/A.

**Pages affectées:**
- deploy/nginx/sites/ia.enso.4nkweb.com.conf
- deploy/nginx/README-ia-enso.md
- docs/features/ia-enso-nginx-proxy-ollama-anythingllm.md
- docs/infrastructure.md
- docs/services.md
2026-03-23 01:12:51 +01:00
b9157d12b0 Point ia.enso nginx upstreams to IA host 192.168.1.173
**Motivations:**
- Ollama and AnythingLLM moved from 192.168.1.164 to the ia LAN host.

**Root causes:**
- Upstreams still targeted 192.168.1.164.

**Correctifs:**
- Set upstream servers to 192.168.1.173:11434 and :3001.

**Evolutions:**
- Docs aligned with ia role IP; note to edit site conf if IP changes.

**Pages affectées:**
- deploy/nginx/sites/ia.enso.4nkweb.com.conf
- deploy/nginx/README-ia-enso.md
- docs/features/ia-enso-nginx-proxy-ollama-anythingllm.md
- docs/infrastructure.md
- docs/services.md
2026-03-23 01:11:47 +01:00
a6bd0ea14c Document ia.enso nginx proxy (operator guide, cross-links)
**Motivations:**
- Single operational reference for deploy script vs manual steps and troubleshooting.

**Root causes:**
- README mixed http-maps manual path with script using conf.d without full operator context.

**Correctifs:**
- Align documentation with deploy script paths and prerequisites.

**Evolutions:**
- Expanded README-ia-enso.md (tables, SSRF context, env vars, rotation, troubleshooting).
- Feature doc table and deployment pointers; links from docs/README, infrastructure, services.

**Pages affectées:**
- deploy/nginx/README-ia-enso.md
- docs/features/ia-enso-nginx-proxy-ollama-anythingllm.md
- docs/README.md
- docs/infrastructure.md
- docs/services.md
2026-03-23 01:04:04 +01:00
f39de69e55 Add SSH deploy script for ia.enso nginx on proxy
**Motivations:**
- Apply proxy configuration from a workstation without manual scp steps.

**Root causes:**
- No automation existed for pushing nginx files to 192.168.1.100.

**Correctifs:**
- N/A.

**Evolutions:**
- deploy-ia-enso-to-proxy.sh with ProxyJump, optional generated Bearer token, retry without duplicate websocket map.

**Pages affectées:**
- deploy/nginx/deploy-ia-enso-to-proxy.sh
- deploy/nginx/README-ia-enso.md
- docs/features/ia-enso-nginx-proxy-ollama-anythingllm.md
2026-03-23 01:03:22 +01:00
24077e749e Add ia.enso.4nkweb.com nginx proxy for Ollama and AnythingLLM
**Motivations:**
- Expose Ollama and AnythingLLM via HTTPS paths on the LAN proxy with Bearer auth for Ollama.

**Root causes:**
- Cursor blocks direct requests to private IPs (SSRF policy).

**Correctifs:**
- N/A (new configuration artifacts).

**Evolutions:**
- Nginx site template, HTTP map for Bearer validation, websocket map example, deployment README, services doc link, feature documentation.

**Pages affectées:**
- deploy/nginx/http-maps/ia-enso-ollama-bearer.map.conf.example
- deploy/nginx/http-maps/websocket-connection.map.conf.example
- deploy/nginx/sites/ia.enso.4nkweb.com.conf
- deploy/nginx/README-ia-enso.md
- docs/features/ia-enso-nginx-proxy-ollama-anythingllm.md
- docs/services.md
2026-03-23 00:56:43 +01:00