ai-workspace-infra/playbooks
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
264 Commits 14 Branches 1 Tag 1.5 MiB
4b7c52057d
Commit Graph

264 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Haitao Pan
4b7c52057d chore: unify xworkspace console service 2026-06-13 07:43:11 +08:00
Haitao Pan
f3ab617db6 docs: update bootstrap script URL to point to xworkspace-console repo 2026-06-12 19:47:39 +08:00
Haitao Pan
cc41ff61db chore: move bootstrap script to xworkspace-console repo 2026-06-12 19:47:16 +08:00
Haitao Pan
604132e604 chore: move setup-ai-workspace-all-in-one.sh to scripts directory 2026-06-12 19:45:59 +08:00
Haitao Pan
c784b621f6 fix: add force=true to litellm systemd symlink to allow out-of-order creation 2026-06-12 19:33:43 +08:00
Haitao Pan
1f7d85b35d fix: patch tsconfig.json to ES2022 to support Array.at() during dashboard build 2026-06-12 19:27:48 +08:00
Haitao Pan
60269ee222 fix: replace local rsync with git clone for xworkspace-console dashboard to support public bootstrap scripts 2026-06-12 19:25:44 +08:00
Haitao Pan
74b3411336 feat: auto-generate or reuse DEPLOY_TOKEN for local ansible vault 2026-06-12 19:20:12 +08:00
Haitao Pan
811b17962b feat: add bootstrap script setup-ai-workspace-all-in-one.sh for curl|bash deployment 2026-06-12 19:18:05 +08:00
Haitao Pan
56b33a3231 docs: update setup-ai-workspace-all-in-one.md TLDR and params 2026-06-12 16:47:46 +08:00
Haitao Pan
f424327cfb feat: add public_access control to xworkspace-console 2026-06-12 15:31:24 +08:00
Haitao Pan
affd6827b0 docs: add TLDR section to setup-ai-workspace-all-in-one.md 2026-06-12 14:37:21 +08:00
Haitao Pan
7d1a86e412 docs: add setup-ai-workspace-all-in-one deployment guide and security notes 2026-06-12 14:36:10 +08:00
Haitao Pan
944d59f911 feat: standardise public_access controls across roles and introduce global security_level 2026-06-12 14:31:25 +08:00
Haitao Pan
6d6a3a8593 fix: correct yaml formatting in host_vars litellm.yml 2026-06-12 13:03:28 +08:00
Haitao Pan
b8d4df9230 docs: rename var to litellm_api_caddy_strict_whitelist and update documentation 2026-06-12 09:44:24 +08:00
Haitao Pan
1574287a4d feat: add litellm_api_caddy_public_access variable to control Caddy proxy behavior 2026-06-12 09:39:45 +08:00
Haitao Pan
e9dec70225 docs: relax Caddy routing to allow LiteLLM UI backend API calls 2026-06-12 09:36:03 +08:00
Haitao Pan
e3952916af docs: reformat litellm deployment guide to complement readme 2026-06-12 09:21:37 +08:00
Haitao Pan
47d4931ff7 docs: update litellm README to Minimal AI API Gateway spec and clean up config 2026-06-12 09:11:12 +08:00
Haitao Pan
7ef5005ae1 refactor(litellm): remove hardcoded provider API keys from defaults and env templates 2026-06-12 09:08:33 +08:00
Haitao Pan
9196625bd0 feat(litellm): enable STORE_MODEL_IN_DB to allow UI model management 2026-06-11 22:46:22 +08:00
Haitao Pan
a076370b68 security(litellm): move plain text master key to vault encrypted host_vars 2026-06-11 22:45:18 +08:00
Haitao Pan
21cbbca9be fix(litellm): use UI_USERNAME and UI_PASSWORD env vars instead of LITELLM_ prefixed 2026-06-11 22:33:35 +08:00
Haitao Pan
c22a8c8266 feat(litellm): serve UI on api domain and clear default model lists 2026-06-11 21:45:10 +08:00
Haitao Pan
cdf06da6d9 chore: add .gitleaksignore to whitelist false positive public keys from git history 2026-06-11 18:36:56 +08:00
Haitao Pan
a77d2fedfb refactor(litellm): use ansible vault for database password 2026-06-11 18:32:55 +08:00
Haitao Pan
b4ebecc32d refactor(litellm): remove hardcoded database password and use env lookup instead 2026-06-11 18:31:02 +08:00
Haitao Pan
629016185d chore: add gitleaks ignore for public wireguard keys 2026-06-11 18:29:35 +08:00
Haitao Pan
96ad38ff14 fix(litellm): disable Caddy basic auth and remove manual schema application to avoid migration conflicts 2026-06-11 18:28:18 +08:00
Haitao Pan
c1cb19b59b fix(litellm): add PATH to systemd unit to expose prisma-client-py 2026-06-11 17:29:07 +08:00
Haitao Pan
1d8516d160 fix(litellm): add PYTHONPATH to systemd unit, grant all table/sequence permissions to litellm DB user 2026-06-11 17:21:19 +08:00
Haitao Pan
72763856d3 fix(litellm): pin stable DB password in host_vars to prevent random password drift between templates 2026-06-11 17:14:09 +08:00
Haitao Pan
9cde355688 fix(litellm): sslmode=disable for localhost Docker PG, remove environment_variables override from config.yaml 2026-06-11 17:09:49 +08:00
Haitao Pan
e6a3d95578 fix(litellm): install prisma client and generate prisma bindings correctly during deployment 2026-06-11 16:45:22 +08:00
Haitao Pan
814a81f088 feat(litellm): support dynamic master key via extra vars and generate caddy bcrypt hash on the fly 2026-06-11 16:33:17 +08:00
Haitao Pan
ed8a78e932 fix(litellm): configure actual master key and basic auth hash 2026-06-11 16:26:59 +08:00
Haitao Pan
d5a17a8301 fix(litellm): allow access to root path on ui domain instead of returning 404 2026-06-11 16:15:06 +08:00
Haitao Pan
01af16cd54 fix(litellm): use docker exec for pg provisioning 2026-06-11 16:14:03 +08:00
Haitao Pan
a68cf68d14 feat(litellm): restore secure automated DB provisioning using raw sudo psql 2026-06-11 16:09:12 +08:00
Haitao Pan
d57ef6458d chore(litellm): skip automated db provisioning due to missing superuser password 2026-06-11 15:57:25 +08:00
Haitao Pan
4a14572b5b fix(litellm): revert become_user to local TCP password auth 2026-06-11 15:56:43 +08:00
Haitao Pan
e2b7f0366c chore: enable allow_world_readable_tmpfiles to allow postgres db provisioning 2026-06-11 15:55:54 +08:00
Haitao Pan
fc7a23617c fix(litellm): use become_user postgres for db provisioning 2026-06-11 15:50:51 +08:00
Haitao Pan
fc1bff0061 fix(litellm): bypass stunnel and use port 5432 for local DB provisioning 2026-06-11 15:47:09 +08:00
Haitao Pan
db9d564ef3 fix(litellm): install psycopg2 before provisioning db 2026-06-11 15:35:11 +08:00
Haitao Pan
d573a4651b fix(litellm): remove delegate_to 127.0.0.1 in provision-database 2026-06-11 15:33:51 +08:00
Haitao Pan
ce6d970bda feat(litellm): separate api/ui caddy fragments, add models, secure db with sslmode 2026-06-11 15:29:31 +08:00
Haitao Pan
a817a0e732 fix(litellm): install litellm[proxy] to get all deps incl websockets 2026-06-11 11:42:16 +08:00
Haitao Pan
e56cb63032 fix(litellm): add PYTHONPATH env and fix websockets dep for litellm service 2026-06-11 11:41:29 +08:00