audit echo vs log across all scripts — outcomes always visible, verbose for per-item loops

2026-06-14 12:40:15 -04:00
parent 4c37ab16fd
commit 3964f6fb46
1010 changed files with 377767 additions and 132 deletions
@@ -0,0 +1,43 @@
+# ── PARTNERSHIP ───────────────────────────────────────────────────────────────────────────────
+# ==============================================================================================
+# HOST1 is always the owner (source of truth) unless --transfer has been run.
+# See README-Partnership.md and master.conf PARTNERSHIP section for full lifecycle docs.
+
+# Auth containers reconfigured on onboard/offboard.
+# Format: "ContainerName|WebUIPort"
+# On onboard → WebUI pointed at owner's Tailscale IP (mirror clicks NPM, gets owner's auth)
+# On offboard → WebUI pointed back at localhost
+    HOST1_PARTNERSHIP_AUTH_WEBUIS=(
+        "NginxProxyManager|81"
+        "Lldap-Gmer4Lfe|17170"
+        "Authelia|9091"
+        "Authelia-Secondary|9092"
+    )
+
+# XML templates (from this server's templates-user/) pushed to mirror during onboard.
+# These become the mirror's active auth stack, backed by the rsync-synced appdata.
+# Update filename if Lldap is renamed to drop the host suffix.
+    HOST1_PARTNERSHIP_AUTH_STACK=(
+        # Dependencies first — Mariadb/Redis must be healthy before Authelia starts
+        "my-Mariadb-Authelia.xml"
+        "my-Mariadb-Authelia-Secondary.xml"
+        "my-Redis-Authelia.xml"
+        "my-Redis-Authelia-Secondary.xml"
+        # Auth apps — deployed after their deps are confirmed healthy
+        "my-Authelia.xml"
+        "my-Authelia-Secondary.xml"
+        "my-NginxProxyManager.xml"
+        "my-Lldap-Gmer4Lfe.xml"
+        # Source of truth — must be available on HOST2 independently of the auth stack
+        "my-Gitea.xml"
+    )
+
+# XML templates pushed to mirror for the arr stack during onboard.
+# Deps (e.g. databases) first if any — same ordering rule as auth stack.
+    HOST1_PARTNERSHIP_ARR_STACK=(
+         "my-Sonarr.xml"
+         "my-Radarr.xml"
+         "my-Lidarr.xml"
+         "my-Prowlarr.xml"
+         "my-Bazarr.xml"
+    )