ai-workspace-infra/playbooks
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
133 Commits 14 Branches 1 Tag 1.5 MiB
515ba95c75
Commit Graph

133 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Haitao Pan
515ba95c75 feat(gpu_inference): add comprehensive GPU inference infrastructure with Sealos, Ray, and vLLM 2026-04-23 19:17:23 +08:00
Haitao Pan
413d46995b Align xworkmate bridge validation with ACP ingress 2026-04-22 00:04:54 +08:00
Haitao Pan
c478863b74 fix(xworkmate_bridge): fix container reachability and auth token mismatch 2026-04-21 18:02:30 +08:00
Haitao Pan
827d78543a fix(deploy): replace fragile curl ping validation with native uri module 2026-04-21 16:34:05 +08:00
Haitao Pan
747426eb25 Harden xworkmate bridge ping validation 2026-04-21 15:23:49 +08:00
Haitao Pan
73bb2822fd chore(deploy): reduce ping validation retries to 3 2026-04-21 14:25:55 +08:00
Haitao Pan
cb4a4bc023 fix(deploy): improve bridge validation robustness and align gateway paths 2026-04-21 14:18:57 +08:00
Haitao Pan
99ca8b4ee8 fix(deploy): clean up gemini environment and force remove bridge container on deploy 2026-04-21 13:49:36 +08:00
Haitao Pan
b1276eee71 Consolidate bridge deploy to docker role only 2026-04-21 11:00:05 +08:00
Haitao Pan
d375eab837 Fix OpenCode ACP validation marker default 2026-04-21 10:03:40 +08:00
Haitao Pan
746b9407ff Handle immutable ACP service unit uploads 2026-04-20 18:55:07 +08:00
Haitao Pan
3f0e21d237 Handle immutable bridge binary uploads 2026-04-20 18:19:07 +08:00
Haitao Pan
ae5f7c5b4e Align xworkmate bridge playbooks with live services 2026-04-20 17:20:03 +08:00
Haitao Pan
acfe7f564d feat(xfce): refactor XFCE role into install and config tasks, and fix session setup 
- Split XFCE minimal role into install.yml and config.yml for better modularity.
- Restore .xsession setup with NO_BROWSER=true and exec startxfce4.
- Add support for managing user groups and shell.
- Ensure XRDP services are active and enabled on jp-xhttp-contabo.svc.plus.
 2026-04-20 10:53:35 +08:00
Haitao Pan
f20980bdc0 fix(bridge): allow public access to /api/ping and update ACP validation URLs 
- Exempt `/` and `/api/ping` from Bearer token authentication in xworkmate-bridge Caddyfile to fix health check failures (401 Unauthorized).
- Update validation tasks to use `https://{{ xworkmate_bridge_domain }}` instead of `http://127.0.0.1`.
- Correct the upstream ACP paths in validation logic (e.g. `/acp-server/codex`).
- Remove redundant Host headers from validation requests.
 2026-04-18 17:01:12 +08:00
Haitao Pan
5fa35235e1 refactor(acp): reorganize ACP roles and unify ingress under xworkmate-bridge 
- Rename acp_codex, acp_gemini, acp_opencode roles to acp_server_*
- Consolidate ACP deployment logic into xworkmate_bridge role
- Introduce gateway_openclaw role for ingress management
- Update playbooks to use the refactored xworkmate_bridge role
- Unify domain and upstream configuration under xworkmate-bridge.svc.plus
 2026-04-18 14:30:39 +08:00
Haitao Pan
ae1d318332 feat(bridge): templatize runtime configuration and add deployment tasks for xworkmate_bridge role 2026-04-18 12:17:32 +08:00
Haitao Pan
cd92dbc20d chore(domain): complete migration from acp-server.svc.plus to unified xworkmate-bridge.svc.plus 2026-04-18 11:42:57 +08:00
Haitao Pan
1cbe937178 refactor(summary): update deployment summary URLs to match unified bridge paths 2026-04-18 11:37:44 +08:00
Haitao Pan
c82c93d9ff fix(validate): update Caddy fragment path and remove stale file checks 2026-04-18 11:16:53 +08:00
Haitao Pan
74384140e2 refactor(validate): use global xworkmate_bridge_auth_token variable for authentication headers 2026-04-18 10:33:08 +08:00
Haitao Pan
e1a29dc4a0 fix(validate): add Authorization header to bridge and acp ingress checks 2026-04-18 10:31:52 +08:00
Haitao Pan
26499f5602 Add docs.svc.plus deployment playbook 2026-04-14 18:21:01 +08:00
Haitao Pan
c0f1a1c2ee Deploy billing-service from build artifact 2026-04-12 19:05:17 +08:00
Haitao Pan
97d49eaf39 deploy: pass bridge upstream token into runtime 2026-04-12 18:52:53 +08:00
Haitao Pan
27e19c4457 deploy: validate bridge ping over public https 2026-04-12 18:47:33 +08:00
Haitao Pan
9cc0e6bfb8 deploy: allow minimal caddy base config 2026-04-12 18:23:01 +08:00
Haitao Pan
220203b133 deploy: align console ingress and dns contract 2026-04-12 18:14:28 +08:00
Haitao Pan
04fb63881c fix accounts service ghcr login 2026-04-12 17:57:40 +08:00
Haitao Pan
80c545a95c
Merge pull request #6 from x-evor/codex/multi-node-billing-ingestion 
Codex/multi node billing ingestion
 2026-04-12 15:56:26 +08:00
Haitao Pan
6c9bd1e0b0 ops: add us xhttp inventory host 2026-04-12 15:55:13 +08:00
Haitao Pan
130932fc6f deploy: run xworkmate bridge from compose image 2026-04-12 15:00:43 +08:00
Haitao Pan
427eed969e deploy: run xworkmate bridge from compose image 2026-04-12 14:23:23 +08:00
Haitao Pan
4c62883bfc fix: inject image ref into accounts deploy 2026-04-12 14:23:10 +08:00
Haitao Pan
335ee6ef81 feat: wire multi-node billing deployment config 2026-04-12 13:14:41 +08:00
Haitao Pan
d2531f6a22 Make TLS cert name configurable 2026-04-11 12:55:31 +08:00
Haitao Pan
c90bdd9093 Disallow bridge deploy fallback build 2026-04-10 18:04:56 +08:00
Haitao Pan
68d4554be7 Prefer downloaded bridge artifact during deploy 2026-04-10 18:00:50 +08:00
Haitao Pan
bbeaa1c992 Remove default Ansible vault password file 2026-04-10 17:55:36 +08:00
Haitao Pan
a1f21c4030 Fix ansible-core callback compatibility 2026-04-10 17:50:55 +08:00
Haitao Pan
677177548e merge: integrate managed APISIX service deploy 
# Conflicts:
#	roles/vhosts/apisix_service/defaults/main.yml
#	roles/vhosts/apisix_service/files/scripts/healthcheck.sh
#	roles/vhosts/apisix_service/handlers/main.yml
#	roles/vhosts/apisix_service/tasks/main.yml
#	vars/cloudflare_svc_plus_dns.yml
 2026-04-10 17:15:51 +08:00
Haitao Pan
6c728d4911 feat(playbooks): add managed APISIX service deploy 2026-04-10 17:14:38 +08:00
Haitao Pan
e7d9140b86 feat(playbooks): add cloud desktop bootstrap flow 2026-04-10 17:09:59 +08:00
Haitao Pan
19e1f4ef1d Add readonly SSH audit user role and playbooks 2026-04-10 11:08:47 +08:00
Haitao Pan
b8d93ec31c Inject ACP provider auth environment 2026-04-09 19:21:12 +08:00
Haitao Pan
3ce18ef133 chore: simplify xfce xrdp minimal role 2026-04-09 18:59:16 +08:00
Haitao Pan
396a1fad71 chore: harden vhost and xfce xrdp playbooks 2026-04-09 17:45:11 +08:00
Haitao Pan
a209041839 Expose xworkmate bridge public root 2026-04-09 15:26:30 +08:00
Haitao Pan
9ad2740997 Commit remaining local changes 2026-04-09 15:24:38 +08:00
Haitao Pan
c7ffff2825 Fix DNS host expansion and bridge service ownership 2026-04-09 15:00:29 +08:00