8 Commits

Include renames

Author	SHA1	Message	Date
claude-bot	bd4293f53e	fix(nexus-db): enforce UTF8 encoding at install time (issue #8) ... A PostgreSQL cluster/database freezes its encoding at initdb / CREATE DATABASE time; a C (non-UTF-8) locale yields a SQL_ASCII cluster, which makes psycopg3 return bytes and crashes SQLAlchemy. Harden the installer and add a reusable pattern for future DB installers: - ensure_utf8_locale_active: generate AND activate en_US.UTF-8 for the install process before the server package runs initdb; abort if the locale is not actually available - create the database explicitly with TEMPLATE template0 ENCODING 'UTF8' LC_COLLATE/LC_CTYPE 'en_US.UTF-8' instead of inheriting the cluster default - assert_db_encoding_utf8: post-install guard, abort with an actionable message if pg_encoding_to_char is not UTF8 (catches old SQL_ASCII DBs on re-run too) - credentials/README docs use su - postgres -c (minimal LXCs have no sudo)	2026-06-13 14:30:40 +02:00
l.kirchner	09ac4d2507	docs: consolidate duplicate contributing sections, refresh README ... - merge the two contributing sections into one (PR + cross-review rule, both real incidents, CI enforcement in present tense - the suite is live on the homelab runner since K-114/PR #5) - script catalog: runner is in production (PR #6 merged) - usage: document input validation behavior (re-prompt on junk bytes, env values abort when malformed) - pattern: SSH root login prompt (sshd drop-in) and the locale fix in setup_base_apt - repo layout: tests/ added	2026-06-12 16:46:57 +02:00
l.kirchner	a397ade6e1	Merge pull request 'K-114: Input-Validierung in build.func + Mini-CI' (#5) from k114/input-validierung-mini-ci into main ... K-114: Input-Validierung in build.func + Mini-CI (PR #5) — SSH-Root-Login-Prompt, locale-Fix, runs-on homelab	2026-06-12 16:40:37 +02:00
l.kirchner	360db12cc9	docs: README neu strukturiert — vollständiger Katalog, Pattern, Security-Konventionen, PR-Pflicht	2026-06-12 14:58:49 +02:00
l.kirchner	5f532fe10a	K-114: run mini CI on the instance-wide homelab runner	2026-06-12 14:40:42 +02:00
l.kirchner	80e2ec04ff	K-114: input validation in build.func + mini CI (nexus-hub card) ... - validation helpers: sanitize_input trims CR/edge whitespace only; embedded control/non-ASCII bytes FAIL validation and re-prompt with a hint (2026-06-11 incident: invisible byte in a pasted VLAN tag broke pct create mid-run) - never silently stripped - prompt_lxc_config: every prompt validated (uint for CTID/disk/cores/ RAM, VLAN 1-4094, hostname/token formats, IP/CIDR/gateway, DNS list); env-provided values are sanitized + validated too (abort, no re-prompt loop in non-interactive use); helpers reusable for app prompts - tests/test_validation.sh: 34 cases incl. the 2<0x80>0 repro, re-prompt simulation, BASH_REMATCH clobbering regression (is_cidr), env dry-run of prompt_lxc_config without PVE/TTY - tests/check_ct_source.sh: every ct/*.sh must source build.func (bug shipped twice); negative proof via prepared fixture in the test suite - .gitea/workflows/ci.yml: bash -n over all scripts, source-check, validation tests, shellcheck if present (documented skip otherwise) - README: contributions via PR with cross-review (binding)	2026-06-12 03:14:32 +02:00
l.kirchner	ab839b0e85	README: add webapp to the available scripts table	2026-06-05 02:29:35 +02:00
l.kirchner	2b4f08c5eb	Initial commit: README	2026-05-21 23:00:07 +02:00