49 lines
2.0 KiB
Markdown
49 lines
2.0 KiB
Markdown
---
|
|
schema_version: 1
|
|
id: home-server.deployment
|
|
type: reference
|
|
scope: [jupiter, portainer, github, stack-deployment, secrets]
|
|
sensitivity: private-infrastructure
|
|
last_reviewed: "2026-10-06"
|
|
sources:
|
|
- kind: owner-report
|
|
reference: "Portainer GitHub/main/PAT configuration, environment management and manual pull/redeploy workflow, 2026-10-06"
|
|
- kind: owner-report
|
|
reference: "No independent credential recovery; operational rules not established, 2026-10-06"
|
|
related: [home-server.reference, home-server.host, home-server.portainer, home-server.authentication, home-server.backups, home-server.operations]
|
|
update_triggers: [deployment-workflow-change, repository-change, credential-rotation, rollback-policy-change]
|
|
unknowns:
|
|
- github-pat-scopes-and-expiration
|
|
- post-deployment-health-criteria
|
|
---
|
|
|
|
# Deployment
|
|
|
|
| Setting | Source / workflow |
|
|
| --- | --- |
|
|
| Stack definitions | <https://github.com/jayo60013/jupiter-stacks> |
|
|
| Git ref | `main` |
|
|
| Repository authentication | GitHub PAT configured in Portainer |
|
|
| Environment values/secrets | Portainer stack environment settings |
|
|
| Deployment | Manually pull/redeploy each affected stack in Portainer |
|
|
| Portainer itself | [Host shell script](portainer.md), not a managed Compose stack |
|
|
|
|
```text
|
|
Compose change -> push main -> manual Portainer pull/redeploy -> running stack
|
|
```
|
|
|
|
A Git commit is not deployment proof. Installed host Compose version is not
|
|
proof of Portainer's Compose implementation.
|
|
|
|
Recovering deployment requires Portainer state or independently retrievable
|
|
repository credentials and stack environment values. [Portainer backups](backups.md)
|
|
exist; credential/state restoration is untested. Do not put secret values in
|
|
this site or Git.
|
|
|
|
No independent recovery arrangement exists for the PAT or stack secrets.
|
|
Rollback, health-check gates, approval rules and UI-versus-Git drift policy
|
|
are not established; do not assume permission to deploy, stop or delete services.
|
|
|
|
Host apt packages, fstab, RAID assembly, systemd units and Mercury nginx are
|
|
outside the Compose deployment workflow.
|