summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorLines
2026-06-01entrypoint: use python3 for resolv.conf edit (sed -i fails on bind mount)yyamashita-3/+8
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-01entrypoint: replace Docker embedded DNS with external resolversyyamashita-0/+5
127.0.0.11 は MX クエリを正しく処理できないため 8.8.8.8/1.1.1.1 に差し替える。 メールコンテナはコンテナ名解決が不要なため問題なし。 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-01Fix milter IPv4 binding and container DNS for MX lookupsyyamashita-3/+6
- opendkim.conf / main.cf: localhost → 127.0.0.1 (getent がIPv6を優先し Postfix の inet_protocols=ipv4 と競合していた) - docker-compose.yml: dns: 8.8.8.8/1.1.1.1 を追加 (Docker embedded DNS が MX クエリを解決できなかった) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-01setup-route53: apply records individually, skip CNAME conflictsyyamashita-12/+22
CNAME が既に存在するドメインへの TXT 追加は競合エラーになるため、 レコードを1件ずつ適用し、競合は SKIP してその他は継続する。 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-01Fix entrypoint: remove chmod on read-only mount, run opendkim as rootyyamashita-6/+3
/etc/opendkim が :ro マウントのため chmod/chown が失敗していた問題を修正。 opendkim.conf で UserID root に変更しコンテナ内でルートとして実行する。 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-01Fix DKIM key generation: use host opendkim-tools instead of Dockeryyamashita-18/+27
Ubuntu 24.04 ホストに直接 apt install して opendkim-genkey を実行する。 Debian Bookworm の Docker 内では OpenSSL 3.x 互換性問題で失敗するため。 setup-route53.py: ホストゾーン自動検出・SERVER_IP 自動取得を追加。 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-01Add Postfix+OpenDKIM MTA with txt-based domain managementyyamashita-1/+380
- mail/ ディレクトリ追加: Postfix + OpenDKIM の Docker コンテナ - mail/domains.txt で送信ドメインを管理(現在: golive.yyamashita.com) - install.sh が domains.txt から KeyTable/SigningTable を動的生成 - setup-route53.py で SPF/DKIM/DMARC を Route 53 に一括設定 - post-receive フックに mail/deploy.sh を追加 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-17Fix cgit CSS/JS 404 and update docsyyamashita-3/+11
- lighttpd.conf: exempt static files from CGI rewrite - deploy.sh: add --build to rebuild image on config changes - CLAUDE.md, Deploy.md: add cgit directory and deploy notes Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-17Use custom Dockerfile for cgit (klakegg/cgit removed from Docker Hub)yyamashita-1/+20
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-17Add cgit web interface at git.yyamashita.comyyamashita-0/+33
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-17Add README.md to each directoryyyamashita-0/+56
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-17Add server/ dir, CLAUDE.md, and SSH key management via install.shyyamashita-74/+105
- server/authorized_keys: root SSH keys managed in repo - server/requirements.md: list of required tools/packages - git/install.sh: now also applies authorized_keys on install - CLAUDE.md: repo overview for Claude Code - Deploy.md: simplified Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-17Update Deploy.md for new directory structureyyamashita-84/+61
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-17Reorganize repo into caddy/, git/, claude/ directoriesyyamashita-134/+49
- caddy/: Caddyfile, docker-compose.yml, deploy.sh (hook runs this only) - git/: repos.txt, hooks/*/post-receive, install.sh, server-setup.sh - claude/: sessions.txt, systemd/claude-code@.service, sync.sh Post-receive hook is now: checkout + bash caddy/deploy.sh Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-17Move tokyo-livehouse-events work tree from /app to /app/tokyo-livehouse-eventsyyamashita-6/+4
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-17Centralize repo and hook management: add repos.txt and install.shyyamashita-32/+79
All bare repo creation is now driven by repos.txt in this repo. install.sh replaces install-hooks.sh and handles both repo creation and hook deployment. Other repos' server-setup.sh no longer manage bare repos or hooks. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-17Remove inline hook from server-setup.sh; hooks managed via install-hooks.shyyamashita-14/+3
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-17Manage all server-side git hooks in this repositoryyyamashita-3/+88
Add server-hooks/<repo>/post-receive for all repos and scripts/install-hooks.sh to deploy them manually on the server. Hooks are not auto-installed on git push for security. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-17Add Claude Code session management via post-receive hookyyamashita-16/+117
Root's post-receive hook now calls scripts/sync-claude-services.sh to manage yyamashita's systemd user services on git push. Sessions are configured in claude-code-sessions.txt (user:repo format). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-16Fix claude daemon: non-root user and PTY allocationyyamashita-2/+13
root 実行時のセキュリティ制限と TTY なし問題を修正。 claude-agent ユーザーを作成し、script コマンドで疑似 TTY を確保する。 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-16Fix claude remote-control command flag syntaxyyamashita-1/+1
--remote-control はサブコマンドではなくオプションフラグのため修正。 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-16Add Claude Code daemon setup for remote sessions per repoyyamashita-0/+77
systemd サービス (claude-infra/tokyo/whoisband) を生成・有効化するセットアップスクリプトを追加。 claude remote-control で各リポジトリの常駐セッションを起動し、claude.ai/code から接続できる。 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-14Add crawler bypass header to skip X-Robots-Tagyyamashita-0/+8
Requests with X-Crawler-Access header and the correct token will have the X-Robots-Tag response header removed, allowing trusted crawlers to index the site. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-13testyyamashita-1/+5
2026-05-09add-referrer-policyyyamashita-1/+1
2026-05-09add-referrer-policyyyamashita-0/+2
2026-05-08Use whoisband.yyamashita.com as whois-band domainyyamashita-1/+1
2026-05-08Add Deploy.md: infra overview and operations guideyyamashita-0/+73
2026-05-08Fix: use external web network (matches tokyo and whois-band)yyamashita-0/+1
2026-05-08Add server-setup.sh: bare repo, web network, Caddy post-receive hookyyamashita-0/+39
2026-05-08Initial: shared Caddy reverse proxy on web networkyyamashita-0/+34