10 Commits

Author	SHA1	Message	Date
Sharang Parnerkar	f1710fdb9e	fix: migrate deployment from Hetzner to Coolify (#1) ... ## Summary - Add Coolify deployment configuration (docker-compose, healthchecks, network setup) - Replace deploy-hetzner CI job with Coolify webhook deploy - Externalize postgres, qdrant, S3 for Coolify environment ## All changes since branch creation - Coolify docker-compose with Traefik labels and healthchecks - CI pipeline: deploy-hetzner → deploy-coolify (simple webhook curl) - SQLAlchemy 2.x text() compatibility fixes - Alpine-compatible Dockerfile fixes Co-authored-by: Sharang Parnerkar <parnerkarsharang@gmail.com> Reviewed-on: #1	2026-03-13 10:45:35 +00:00
Benjamin Admin	050f353192	feat(canonical-controls): Canonical Control Library — rechtssichere Security Controls ... Eigenstaendig formulierte Security Controls mit unabhaengiger Taxonomie und Open-Source-Verankerung (OWASP, NIST, ENISA). Keine BSI-Nomenklatur. - Migration 044: 5 DB-Tabellen (frameworks, controls, sources, licenses, mappings) - 10 Seed Controls mit 39 Open-Source-Referenzen - License Gate: Quellen-Berechtigungspruefung (analysis/excerpt/embeddings/product) - Too-Close-Detektor: 5 Metriken (exact-phrase, token-overlap, ngram, embedding, LCS) - REST API: 8 Endpoints unter /v1/canonical/ - Go Loader mit Multi-Index (ID, domain, severity, framework) - Frontend: Control Library Browser + Provenance Wiki - CI/CD: validate-controls.py Job (schema, no-leak, open-anchors) - 67 Tests (8 Go + 59 Python), alle PASS - MkDocs Dokumentation Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-12 19:55:06 +01:00
Benjamin Admin	0b836f7e2d	fix(ci): Run docker compose from helper container with deploy dir mounted ... The runner container has Docker socket but no host filesystem access. docker compose needs to read YAML files, so run build+deploy inside a helper container that has both Docker socket and the deploy dir mounted. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-11 18:31:19 +01:00
Benjamin Admin	18d9eec654	fix(ci): Use --entrypoint sh for alpine/git (default entrypoint is git) ... Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-11 18:14:58 +01:00
Benjamin Admin	339505feed	fix(ci): Fix Hetzner deploy — host filesystem access + network + dependencies ... Problems fixed: 1. Deploy step couldn't access /opt/breakpilot-compliance (host path not mounted in runner container). Now uses alpine/git helper container with host bind-mount for git ops, then docker compose with host paths. 2. breakpilot-network was external:true but Core doesn't run on Hetzner. Override in hetzner.yml creates the network automatically. 3. core-health-check blocks startup waiting for Core. Override in hetzner.yml makes it exit immediately. 4. RAG ingestion script now respects RAG_URL/QDRANT_URL env vars. 5. RAG workflow discovers network dynamically from running containers. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-11 18:11:05 +01:00
Benjamin Admin	5d99d5d47a	feat(ci): Automatisches Deploy auf Hetzner via Gitea Actions ... - Gitea Actions CI um deploy-hetzner Job erweitert - Automatischer Build + Deploy bei Push auf main (nach Tests) - docker-compose.hetzner.yml Override (amd64 statt arm64) - Deploy-Dir: /opt/breakpilot-compliance/ - Baut parallel: admin, backend, ai-sdk, developer-portal - Health Checks nach Deploy Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-11 00:08:27 +01:00
Benjamin Boenisch	2d909a8f8e	fix(ci): update Go to 1.24 for ai-compliance-sdk ... The ai-compliance-sdk go.mod requires go >= 1.24.0 but CI was using golang:1.23-alpine. Updated both Gitea Actions and Woodpecker pipelines. Also updated golangci-lint to v1.62 for Go 1.24 compatibility. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-15 17:43:27 +01:00
Benjamin Boenisch	6b60c2b0f7	fix(ci): replace actions/checkout with manual git clone ... The act_runner cannot create /home/act_runner cache dir inside container images. Replace actions/checkout@v4 with manual git clone using GITHUB_SERVER_URL and GITHUB_REPOSITORY env vars. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-02-15 16:58:31 +01:00
Benjamin Boenisch	8776643045	fix(ci): use docker runner label instead of ubuntu-latest ... The Gitea Actions runner on meghsakha uses label "docker". Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-02-15 16:53:33 +01:00
Benjamin Boenisch	fb625bdb97	ci: add Gitea Actions workflow for external CI ... Adds .gitea/workflows/ci.yaml with lint and test jobs. Runs on gitea.meghsakha.com with Gitea Actions runner. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-02-15 16:39:01 +01:00