docs: document operations/+web/ layers and live ci-web.service deployment

CLAUDE.md and docs/ARCHITECTURE.md were still missing the operations/ and web/ packages added by the web-UI plan (W0-W7). Also records that ci-web.service is now live on this host (LAN + Gitea OIDC) in docs/WEB-UI.md and closes plans/web-ui-management-plan.md with a status header.
This commit is contained in:
2026-07-23 22:52:32 +02:00
parent 1a96330de2
commit 907e79818e
4 changed files with 49 additions and 0 deletions
+12
View File
@@ -12,6 +12,18 @@ config key referenced below.
---
## 0. Current deployment on this host
Live since 2026-07-23: `ci-web.service` is enabled + running, bound to the
LAN (`192.168.10.11:8800`), authenticating against `https://gitea.emulab.it`
via OIDC. Only the allowlisted Gitea user(s) in `/var/lib/ci/config.toml`'s
`[web].allowed_users` can log in. Manage it exactly as described in §4 below
(`systemctl status/restart ci-web.service`, `journalctl -u ci-web.service -f`).
`WebSessionSecret` and `WebOidcClientSecret` are already stored in the
`ci-runner` keyring — no action needed unless they're rotated (§3/§6).
---
## 1. Prerequisites
- The Linux host already bootstrapped by `setup-host-linux.sh` (`ci-runner`