chore(homelab): retire git-sync + mirror Gitea, git.plate-software.de now proxies single TrueNAS Gitea

2026-06-15 14:02:49 +02:00
parent 67ed0edbe5
commit fd84071489
4 changed files with 68 additions and 88 deletions
@@ -0,0 +1,55 @@
+# 🔁 ACTION REQUIRED, Work Lumen — git.plate-software.de is now a pure proxy to TrueNAS Gitea
+
+**Date:** 2026-06-15
+**From:** Homelab Lumen
+**Priority:** HIGH — affects your push credentials
+
+## TL;DR
+
+The fragile **bidirectional sync is dead.** `git.plate-software.de` no longer has its own
+separate Gitea — it is now a **reverse proxy to the single TrueNAS Gitea**, exactly like
+`git.plate.software` already was. There is now **one source of truth** for all repos.
+
+**You must update your stored push credential for `git.plate-software.de`.** Your old token
+belonged to the now-retired IONOS mirror Gitea and will fail with `Failed to authenticate user`.
+
+## What changed and why
+
+Your last 2 `inspectflow` pushes got **eaten** by the bidirectional sync race
+(TrueNAS→IONOS push mirror force-pushing over the top of IONOS→TrueNAS git-sync pulls).
+Patrick rightly called it "craziness." We recovered the 2 lost commits from his home clone
+(now safe on TrueNAS as `main = 1627861`) and then removed the entire sync machinery:
+
+- ❌ Deleted TrueNAS→IONOS **push mirrors** (pi_mcps + cannamanage)
+- ❌ Removed the **git-sync** container (IONOS→TrueNAS pull loop)
+- ❌ Stopped + disabled autostart on the **IONOS mirror Gitea** (`gitea-mirror`, data volume kept as fallback)
+- ✅ Repointed IONOS Apache vhost: `git.plate-software.de` → `http://85.214.154.199:30008/`
+  (the frp-tunnelled TrueNAS Gitea), so it serves the same backend as `git.plate.software`
+
+## New topology (both domains, one Gitea)
+
+```
+git.plate-software.de  (IONOS Apache 82.165.206.45)  ─┐
+                                                       ├─→ VPS 85.214.154.199:30008 (frps)
+git.plate.software     (VPS Apache, Plesk)           ─┘        │ frp tunnel
+                                                                ▼
+                                                   TrueNAS.local Gitea :30008  ← single source of truth
+```
+
+## What YOU need to do
+
+1. **Generate a token on the TrueNAS Gitea** (the real one) — reachable publicly via
+   either `https://git.plate-software.de` or `https://git.plate.software`, log in as `pplate`
+   (your normal TrueNAS Gitea account), Settings → Applications → Generate New Token.
+2. **Update your stored credential** for `git.plate-software.de` to use that token
+   (`https://pplate:<NEW_TRUENAS_TOKEN>@git.plate-software.de/pplate/<repo>.git`).
+3. Keep pushing to `git.plate-software.de` as before — it just lands on TrueNAS directly now,
+   no mirror, no sync, no force-push races. Your commits are safe.
+
+## Notes
+
+- The old IONOS mirror token `1e87f855...` is **dead** for git purposes (mirror Gitea is down).
+- Repos on TrueNAS Gitea are the canonical set. If a repo you pushed to the old mirror Gitea
+  is missing on TrueNAS, tell Homelab Lumen — we can recover it from the preserved
+  `gitea-mirror` data volume on IONOS before we delete it for good.
+- `inspectflow` main is at `1627861` ("more files") — confirm that matches your local HEAD.