Commit graph

22 commits

Author SHA1 Message Date
af4a98845e
Document CDK app and cdk.json in README
The README described the deployed AWS resources and how to deploy, but
never documented that this is a CDK (infrastructure-as-code) app or what
cdk.json is. Add an Infrastructure (CDK) section covering the app entry
point, the file-share stack, the cdk.json manifest and context cache, and
the synth/diff/deploy commands, so the IaC layer is discoverable.
2026-07-10 15:56:17 -04:00
dependabot[bot]
b85646d84a
build(deps-dev): bump @types/node in the minor-and-patch group (#23)
Some checks are pending
Deploy / deploy (push) Waiting to run
Bumps the minor-and-patch group with 1 update: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node).


Updates `@types/node` from 24.13.2 to 24.13.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 24.13.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-09 19:32:16 -04:00
Adam Moussa
16262eea66
build(deps): migrate CDK app ts-node->tsx, adopt typescript 7 (INFRA-183) (#22)
Some checks failed
Deploy / deploy (push) Has been cancelled
2026-07-08 17:48:26 -04:00
Adam Moussa
d84c9ed9d7
chore(ci): SHA-pin org reusable-workflow caller refs (INFRA-50) (#21)
Some checks failed
Deploy / deploy (push) Has been cancelled
2026-07-06 18:27:22 -04:00
Adam Moussa
f4a7d4d5f8
docs: link Confluence AWS Architecture Map (INFRA-53) (#20)
Some checks are pending
Deploy / deploy (push) Waiting to run
2026-07-06 17:44:25 -04:00
dependabot[bot]
928f531d00
build(deps): bump the minor-and-patch group across 1 directory with 2 updates (#17)
Some checks failed
Deploy / deploy (push) Has been cancelled
2026-07-04 16:34:40 -04:00
seahaven-openswe[bot]
0f3b74e869
fix: stop dependabot from proposing wrong-direction @types/node major bumps (#19)
Some checks are pending
Deploy / deploy (push) Waiting to run
2026-07-04 01:50:03 -04:00
dependabot[bot]
dee783717a
build(deps-dev): bump aws-cdk in the minor-and-patch group (#14)
Some checks failed
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group with 1 update: [aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk).


Updates `aws-cdk` from 2.1128.0 to 2.1128.1
- [Release notes](https://github.com/aws/aws-cdk-cli/releases)
- [Commits](https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1128.1/packages/aws-cdk)

---
updated-dependencies:
- dependency-name: aws-cdk
  dependency-version: 2.1128.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-30 19:46:04 -04:00
dependabot[bot]
2fdc2951a6
build(deps): bump the minor-and-patch group with 2 updates (#13)
Some checks failed
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group with 2 updates: [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib) and [aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk).


Updates `aws-cdk-lib` from 2.258.1 to 2.260.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/commits/v2.260.0/packages/aws-cdk-lib)

Updates `aws-cdk` from 2.1126.0 to 2.1128.0
- [Release notes](https://github.com/aws/aws-cdk-cli/releases)
- [Commits](https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1128.0/packages/aws-cdk)

---
updated-dependencies:
- dependency-name: aws-cdk-lib
  dependency-version: 2.260.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: aws-cdk
  dependency-version: 2.1128.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-22 13:13:49 -04:00
Adam Moussa
c8cd7a114d
Pin @types/node to ^24 to match runtime (#12)
Some checks failed
Deploy / deploy (push) Has been cancelled
Dependabot proposed @types/node 22->25 (#11); pin to ^24 to track the
actual Node runtime per the house rule instead.
2026-06-11 14:38:43 -04:00
dependabot[bot]
851fcd784e
build(deps-dev): bump typescript from 5.7.3 to 6.0.3 (#10)
Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.7.3 to 6.0.3.
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/compare/v5.7.3...v6.0.3)

---
updated-dependencies:
- dependency-name: typescript
  dependency-version: 6.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-11 14:33:08 -04:00
dependabot[bot]
f83caeb0ce
build(deps): bump aws-cdk-lib in the minor-and-patch group (#9)
Bumps the minor-and-patch group with 1 update: [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib).


Updates `aws-cdk-lib` from 2.257.0 to 2.258.1
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/commits/v2.258.1/packages/aws-cdk-lib)

---
updated-dependencies:
- dependency-name: aws-cdk-lib
  dependency-version: 2.258.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-11 14:31:18 -04:00
Adam Moussa
49bc8747b9
Repo hygiene: PR labeler + README badges + dependabot (INFRA-56/57/66) (#8) 2026-06-11 14:14:13 -04:00
Adam Moussa
99a0fc9768
docs: update README for unmanaged data volume, SFTP, cached AMI (#6)
Some checks failed
Deploy / deploy (push) Has been cancelled
Storage architecture changed 2026-06-05 (volume imported by ID, not
CFN-managed) — the old Expanding Storage procedure no longer worked.
2026-06-05 15:54:22 -04:00
Adam Moussa
2c45931741
fix(infra): adopt existing data volume + cache AMI to stop replacement churn (#5)
Some checks are pending
Deploy / deploy (push) Waiting to run
- Import vol-04d951cccacc435b5 (the real 500GiB data volume, orphaned by
  the 2026-06-05 redeploy) via Volume.fromVolumeAttributes — unmanaged,
  so CloudFormation can attach but never create/replace/delete it.
- Remove the inline /dev/xvdf blockDevice (this is what created the
  empty volume that shadowed the data).
- cachedInContext: true + committed cdk.context.json so AMI updates are
  deliberate (uncached lookup replaced the instance on every new AL2023
  release).
- Includes the previously-deployed-but-uncommitted 2026-05-27 work:
  standalone volume pattern, volume-wait userdata, SFTP access.

Deploy replaces the instance once; userdata's blkid guard mounts the
existing filesystem without formatting.
2026-06-05 13:40:05 -04:00
Adam Moussa
dac9f4ed2b
fix(deps): bump aws-cdk-lib pin to 2.257.0 (#4) 2026-06-05 13:07:29 -04:00
Adam Moussa
56be4eea0b
Add dependency-review caller workflow (#3)
* Add dependency-review caller workflow

Add a pull_request-triggered caller that invokes the org-level
callable-dependency-review workflow to scan dependency changes and
fail on high-severity advisories.

* chore: retrigger checks

* chore: retrigger dep review (post-fix)
2026-06-05 12:27:07 -04:00
Adam Moussa
d8b32264c4 Add .env to gitignore 2026-05-14 17:48:10 -04:00
Adam Moussa
00882667e5 Pin aws-cdk-lib to 2.253.1 to fix npm ci
aws-cdk-lib 2.254.0 has a bundled dependency bug where npm ci reports
jsonschema@1.4.1 as missing from the lock file. Pinning to 2.253.1
which is proven working in CI (same version as forgejo).
2026-05-14 15:47:21 -04:00
Adam Moussa
939ff7122c Set node-version to 24 in CI/CD workflows
Lock file generated with npm 11 (Node 24) is incompatible with npm 10
(Node 22) in CI — npm ci fails on missing transitive dependencies.
2026-05-14 15:41:54 -04:00
Adam Moussa
cced82c0d7 Remove unused FB_HASH variable from user data
FileBrowser's users add command hashes internally.
2026-05-14 15:35:51 -04:00
Adam Moussa
427242499d Initial file-share stack
CDK stack deploying a t4g.small EC2 instance with Samba and FileBrowser
for personal file storage over the site-to-site VPN. Includes 500 GiB
gp3 data volume with daily DLM snapshots.
2026-05-14 15:23:38 -04:00