Commit Graph

278 Commits

Author SHA1 Message Date
Haitao Pan
f15c384a34 fix: provision local litellm db and qmd fallback 2026-06-14 11:25:28 +08:00
Haitao Pan
6346684af5 fix: support standalone postgres and dynamic litellm path 2026-06-14 11:09:52 +08:00
Haitao Pan
bfb6b17e29 fix: run standalone vault without inventory group 2026-06-14 10:54:22 +08:00
Haitao Pan
2319c592fb feat: support standalone vault deployment 2026-06-14 10:42:41 +08:00
Haitao Pan
41853eedd9 fix: allow bridge validation url override 2026-06-14 10:30:06 +08:00
Haitao Pan
5e359cc5d8 fix: resolve openclaw user uid dynamically 2026-06-14 10:16:27 +08:00
Haitao Pan
4b6b1de8a7 fix: reload openclaw user systemd bus 2026-06-14 10:08:22 +08:00
Haitao Pan
0b344b5bd0 fix: deploy openclaw before bridge validation 2026-06-14 10:02:26 +08:00
Haitao Pan
ae78231fac fix: bootstrap hermes acp shim 2026-06-14 09:54:43 +08:00
Haitao Pan
cd2d4b0046 fix: install caddy for workspace routes 2026-06-14 09:46:55 +08:00
Haitao Pan
7f6854e9de fix: sync agent skills over local connection 2026-06-14 09:33:58 +08:00
Haitao Pan
4c330b7e1c fix: install go for workspace api 2026-06-14 09:27:59 +08:00
Haitao Pan
a15016ef1f feat: install agent cli toolchain 2026-06-14 09:25:30 +08:00
Haitao Pan
e2ae564745 feat: unify ai workspace deployment auth 2026-06-14 09:09:40 +08:00
Haitao Pan
4b7c52057d chore: unify xworkspace console service 2026-06-13 07:43:11 +08:00
Haitao Pan
f3ab617db6 docs: update bootstrap script URL to point to xworkspace-console repo 2026-06-12 19:47:39 +08:00
Haitao Pan
cc41ff61db chore: move bootstrap script to xworkspace-console repo 2026-06-12 19:47:16 +08:00
Haitao Pan
604132e604 chore: move setup-ai-workspace-all-in-one.sh to scripts directory 2026-06-12 19:45:59 +08:00
Haitao Pan
c784b621f6 fix: add force=true to litellm systemd symlink to allow out-of-order creation 2026-06-12 19:33:43 +08:00
Haitao Pan
1f7d85b35d fix: patch tsconfig.json to ES2022 to support Array.at() during dashboard build 2026-06-12 19:27:48 +08:00
Haitao Pan
60269ee222 fix: replace local rsync with git clone for xworkspace-console dashboard to support public bootstrap scripts 2026-06-12 19:25:44 +08:00
Haitao Pan
74b3411336 feat: auto-generate or reuse DEPLOY_TOKEN for local ansible vault 2026-06-12 19:20:12 +08:00
Haitao Pan
811b17962b feat: add bootstrap script setup-ai-workspace-all-in-one.sh for curl|bash deployment 2026-06-12 19:18:05 +08:00
Haitao Pan
56b33a3231 docs: update setup-ai-workspace-all-in-one.md TLDR and params 2026-06-12 16:47:46 +08:00
Haitao Pan
f424327cfb feat: add public_access control to xworkspace-console 2026-06-12 15:31:24 +08:00
Haitao Pan
affd6827b0 docs: add TLDR section to setup-ai-workspace-all-in-one.md 2026-06-12 14:37:21 +08:00
Haitao Pan
7d1a86e412 docs: add setup-ai-workspace-all-in-one deployment guide and security notes 2026-06-12 14:36:10 +08:00
Haitao Pan
944d59f911 feat: standardise public_access controls across roles and introduce global security_level 2026-06-12 14:31:25 +08:00
Haitao Pan
6d6a3a8593 fix: correct yaml formatting in host_vars litellm.yml 2026-06-12 13:03:28 +08:00
Haitao Pan
b8d4df9230 docs: rename var to litellm_api_caddy_strict_whitelist and update documentation 2026-06-12 09:44:24 +08:00
Haitao Pan
1574287a4d feat: add litellm_api_caddy_public_access variable to control Caddy proxy behavior 2026-06-12 09:39:45 +08:00
Haitao Pan
e9dec70225 docs: relax Caddy routing to allow LiteLLM UI backend API calls 2026-06-12 09:36:03 +08:00
Haitao Pan
e3952916af docs: reformat litellm deployment guide to complement readme 2026-06-12 09:21:37 +08:00
Haitao Pan
47d4931ff7 docs: update litellm README to Minimal AI API Gateway spec and clean up config 2026-06-12 09:11:12 +08:00
Haitao Pan
7ef5005ae1 refactor(litellm): remove hardcoded provider API keys from defaults and env templates 2026-06-12 09:08:33 +08:00
Haitao Pan
9196625bd0 feat(litellm): enable STORE_MODEL_IN_DB to allow UI model management 2026-06-11 22:46:22 +08:00
Haitao Pan
a076370b68 security(litellm): move plain text master key to vault encrypted host_vars 2026-06-11 22:45:18 +08:00
Haitao Pan
21cbbca9be fix(litellm): use UI_USERNAME and UI_PASSWORD env vars instead of LITELLM_ prefixed 2026-06-11 22:33:35 +08:00
Haitao Pan
c22a8c8266 feat(litellm): serve UI on api domain and clear default model lists 2026-06-11 21:45:10 +08:00
Haitao Pan
cdf06da6d9 chore: add .gitleaksignore to whitelist false positive public keys from git history 2026-06-11 18:36:56 +08:00
Haitao Pan
a77d2fedfb refactor(litellm): use ansible vault for database password 2026-06-11 18:32:55 +08:00
Haitao Pan
b4ebecc32d refactor(litellm): remove hardcoded database password and use env lookup instead 2026-06-11 18:31:02 +08:00
Haitao Pan
629016185d chore: add gitleaks ignore for public wireguard keys 2026-06-11 18:29:35 +08:00
Haitao Pan
96ad38ff14 fix(litellm): disable Caddy basic auth and remove manual schema application to avoid migration conflicts 2026-06-11 18:28:18 +08:00
Haitao Pan
c1cb19b59b fix(litellm): add PATH to systemd unit to expose prisma-client-py 2026-06-11 17:29:07 +08:00
Haitao Pan
1d8516d160 fix(litellm): add PYTHONPATH to systemd unit, grant all table/sequence permissions to litellm DB user 2026-06-11 17:21:19 +08:00
Haitao Pan
72763856d3 fix(litellm): pin stable DB password in host_vars to prevent random password drift between templates 2026-06-11 17:14:09 +08:00
Haitao Pan
9cde355688 fix(litellm): sslmode=disable for localhost Docker PG, remove environment_variables override from config.yaml 2026-06-11 17:09:49 +08:00
Haitao Pan
e6a3d95578 fix(litellm): install prisma client and generate prisma bindings correctly during deployment 2026-06-11 16:45:22 +08:00
Haitao Pan
814a81f088 feat(litellm): support dynamic master key via extra vars and generate caddy bcrypt hash on the fly 2026-06-11 16:33:17 +08:00