deckle-hosted: kill switch that stops the control plane but keeps the sites online #593
Labels
No labels
bug
enhancement
in-progress
needs-info
needs-triage
p0
ready-for-agent
ready-for-human
wontfix
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
Cloonar/nixos#593
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
For a security incident in deckle-hosted we want to shut the whole platform down (dashboard, login, editor, git, builds) without taking the customers' published sites offline.
Caddy serves the built sites straight from
/var/lib/deckle/data/docroot; the control plane is not in that path. So stoppingdeckle-hosted.servicealready keeps the pages up, but a manualsystemctl stopis undone by the next deploy that changes the unit (every deckle pin bump does).Wanted:
services.deckle-hostedthat switches the control plane off declaratively (unit, image build, trash purge), leaving Caddy and the database dump runningdocs/runbooks/with the immediate stop, the durable flip, and what stops working meanwhile (contact form, appointments widget, redirect hosts, new TLS certificates via the on-demand ask)