ai-workspace-infra/playbooks
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
225 Commits 14 Branches 1 Tag 1.5 MiB
a68cf68d14
Commit Graph

225 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Haitao Pan
a68cf68d14 feat(litellm): restore secure automated DB provisioning using raw sudo psql 2026-06-11 16:09:12 +08:00
Haitao Pan
d57ef6458d chore(litellm): skip automated db provisioning due to missing superuser password 2026-06-11 15:57:25 +08:00
Haitao Pan
4a14572b5b fix(litellm): revert become_user to local TCP password auth 2026-06-11 15:56:43 +08:00
Haitao Pan
e2b7f0366c chore: enable allow_world_readable_tmpfiles to allow postgres db provisioning 2026-06-11 15:55:54 +08:00
Haitao Pan
fc7a23617c fix(litellm): use become_user postgres for db provisioning 2026-06-11 15:50:51 +08:00
Haitao Pan
fc1bff0061 fix(litellm): bypass stunnel and use port 5432 for local DB provisioning 2026-06-11 15:47:09 +08:00
Haitao Pan
db9d564ef3 fix(litellm): install psycopg2 before provisioning db 2026-06-11 15:35:11 +08:00
Haitao Pan
d573a4651b fix(litellm): remove delegate_to 127.0.0.1 in provision-database 2026-06-11 15:33:51 +08:00
Haitao Pan
ce6d970bda feat(litellm): separate api/ui caddy fragments, add models, secure db with sslmode 2026-06-11 15:29:31 +08:00
Haitao Pan
a817a0e732 fix(litellm): install litellm[proxy] to get all deps incl websockets 2026-06-11 11:42:16 +08:00
Haitao Pan
e56cb63032 fix(litellm): add PYTHONPATH env and fix websockets dep for litellm service 2026-06-11 11:41:29 +08:00
Haitao Pan
e5efac92e4 feat: add litellm gateway deployment playbook and role 2026-06-11 10:05:42 +08:00
Haitao Pan
2252d24708 fix: kill legacy http.server, reload systemd and start services after deploy 2026-06-09 20:40:46 +08:00
Haitao Pan
a421eb2e4f
xworkspace-portal.service: serve dashboard on port 17000 (#7) 
* xworkspace-portal.service: use dashboard on port 17000

- Change portal service from python http.server:7000 to npm dev server:17000
- Update chrome app launcher to use port 17000
- Add dashboard source sync and npm install tasks
- Update portal URL and port variables

* production: build dashboard on target with npm run build, serve with npm run preview

- Add xworkspace_console_dashboard_local_src variable for local dashboard path
- Sync dashboard source from controller to target via rsync
- Build dashboard with npm install && npm run build on target
- Serve production build with npm run preview instead of dev
- Copy dist/ and package.json to portal directory for preview server

---------

Co-authored-by: Haitao Pan <manbuzhe2009@qq.com>
 2026-06-09 19:54:24 +08:00
Haitao Pan
aee1f2b5d5 Ensure workspace user exists before provisioning 2026-06-08 18:40:26 +08:00
Haitao Pan
466cb29a1b Install ttyd from official release binary 2026-06-08 18:21:26 +08:00
Haitao Pan
b6d18f5944 Install Chrome source before workspace runtime packages 2026-06-08 18:13:53 +08:00
Haitao Pan
42b8443f91 Allow common HTTP and HTTPS ports 2026-06-08 17:43:53 +08:00
Haitao Pan
8c71b27112 feat(playbook): add xworkspace console runtime setup 2026-06-08 07:14:24 +08:00
Haitao Pan
7e0dc61924 fix: preserve xworkmate bridge review token in ingress 2026-06-07 23:01:47 +08:00
Haitao Pan
f451b5cd20 fix(playbook): move openclaw session contract checks out of deploy validation 
The OpenClaw session contract smoke and SSE long-task stream checks lived in
roles/vhosts/xworkmate_bridge/tasks/validate.yml and ran during the Deploy
stage. They depend on the public OpenClaw gateway producing a 'pong' reply,
which the deployed bridge cannot guarantee end-to-end. When the gateway
returns an empty completion envelope, the entire Deploy job fails after the
bridge binary has already been installed and is healthy.

Move these checks to the GitHub Actions validate stage in xworkmate-bridge
where they belong. The bridge's own deploy validation now only asserts the
bridge's own state (Caddy config, systemd unit, ports, /api/ping, /acp/rpc
capabilities, routing.resolve).
 2026-06-05 19:28:38 +08:00
Haitao Pan
6c234f9544 fix(playbook): update openclaw smoke tests to poll for async task completion 2026-06-04 14:48:31 +08:00
Haitao Pan
6d3418284a fix(playbook): adjust system-level xworkmate-bridge.service to run as ubuntu user and ensure the user exists 2026-06-04 14:36:24 +08:00
Haitao Pan
d7199c511b fix(playbook): stop, disable, and clean up obsolete user-level xworkmate-serve service to prevent port 8787 conflicts 2026-06-04 14:30:13 +08:00
Haitao Pan
61eb40624d fix(xworkmate_bridge): resolve config.yaml PermissionError during deployment caused by immutable flag 2026-06-04 11:48:09 +08:00
Haitao Pan
dcdc9bea7b feat: Remote Desktop Ansible Deployment for xworkmate-bridge 2026-06-03 10:49:49 +08:00
Haitao Pan
2f2e9d8f9b fix: pin OpenClaw Codex plugin 2026-06-01 14:53:18 +08:00
Haitao Pan
ba4daa3597 fix: align bridge OpenClaw protocol 4 deployment 2026-06-01 13:48:52 +08:00
Haitao Pan
402faa02e1 fix: validate bridge token consistency 2026-06-01 10:02:13 +08:00
Haitao Pan
ce0dd3cee1 Wire review bridge token deployment 2026-05-30 10:34:51 +08:00
Haitao Pan
e3921518ba Unify AI agent runtime deployment 2026-05-26 14:11:01 +08:00
Haitao Pan
003d48e748 Merge branch 'codex/acp-connection-closed-cleanup' 2026-05-26 13:56:22 +08:00
Haitao Pan
69e7691287 chore: align AI agent runtime playbooks 2026-05-26 12:58:56 +08:00
Haitao Pan
71e3449622 Use SSE curl for OpenClaw validation 2026-05-26 11:29:25 +08:00
Haitao Pan
805a3fbda9 Focus bridge validation on OpenClaw RPC 2026-05-26 11:26:21 +08:00
Haitao Pan
22662cc538 Validate OpenClaw through bridge RPC 2026-05-26 11:06:22 +08:00
Haitao Pan
7fbba293a0 Fix Hermes deploy validation status check 2026-05-23 16:04:50 +08:00
Haitao Pan
f51958a4a2 chore: set xworkmate bridge openclaw active budget to five 2026-05-22 19:13:26 +08:00
Haitao Pan
aa674a7dac fix: serialize xworkmate bridge openclaw tasks 2026-05-22 19:10:31 +08:00
Haitao Pan
9765158371 fix: validate ebook over public HTTPS 2026-05-20 16:35:46 +08:00
Haitao Pan
5ff5e2f1eb fix: validate ebook vhost over local TLS 2026-05-20 16:35:03 +08:00
Haitao Pan
dfad2a0a5c fix: use Caddy conf.d for ebook vhost 2026-05-20 16:34:30 +08:00
Haitao Pan
cd131e79f4 fix: keep ebook deploy on Node 24 hosts 2026-05-20 16:28:43 +08:00
Haitao Pan
29dd6a38b7 feat: deploy modern IT history ebook 2026-05-20 16:27:54 +08:00
Haitao Pan
ae1e5813a9 fix: allow OpenClaw bridge validation to finish 2026-05-18 17:53:55 +08:00
Haitao Pan
4b2ab8401b Align XFCE XRDP browser setup with Chrome deb 2026-05-18 05:42:17 +08:00
Haitao Pan
72bee745b3 tune openclaw default thinking for gateway tasks 2026-05-15 12:29:01 +08:00
Haitao Pan
0c3e673e78 fix openclaw gateway default model deploy config 2026-05-15 12:10:31 +08:00
Haitao Pan
07f72e2c46 Relax bridge SSE keepalive validation 2026-05-11 14:45:27 +08:00
Haitao Pan
ad49ba1b22 Configure OpenClaw admission through bridge config 2026-05-11 13:21:41 +08:00