fix(cutover): remount dashboard and searxng config imports #584

Merged

pdurlej merged 1 commit from codex/m01-remount-dashboard-searxng-config into main

2026-05-29 00:06:17 +02:00

codex commented

2026-05-29 00:02:08 +02:00

Collaborator

Canary status: missing — fire canary 3+3 manually before merge

Summary

Second M01 config-only remount batch after ntfy proved the pattern at runtime.

This PR moves default config bind mounts for two non-core tailnet services to prepared legacy-import paths:

dashboard: /opt/pdurlej-platform/runtime/legacy-import/config/homepage
searxng: /opt/pdurlej-platform/runtime/legacy-import/config/searxng/settings.yml

Both old legacy paths remain available as explicit rollback env vars for one rollback cycle.

Canary Context Pack

Product story

M01 needs active services to stop depending on /opt/vps-home-platform-infra before quarantine/destructive cleanup. dashboard and searxng are small config-only candidates with healthchecks and clear rollback paths.

What changed

compose/apps/compose.yaml: default bind mounts for dashboard and searxng now point at copied legacy-import config paths.
modules/dashboard/runbook.md: documents config source and rollback env var.
modules/searxng/runbook.md: documents settings source and rollback env var.

Why it changed

The legacy root must stop being the default runtime source. This keeps old paths as rollback material while making the canonical release root independent of the legacy project tree.

Files touched

compose/apps/compose.yaml
modules/dashboard/runbook.md
modules/searxng/runbook.md

Relevant context

M01 RS2000 closeout critical path
ntfy remount was applied and reached healthy runtime state
Prior legacy import helper PRs

Runtime evidence

Prep copy already run on RS2000 before this PR:

scripts/cutover/prepare-legacy-import.sh --dry-run --path config/homepage
scripts/cutover/prepare-legacy-import.sh --yes --path config/homepage
target_size 136K /opt/pdurlej-platform/runtime/legacy-import/config/homepage

scripts/cutover/prepare-legacy-import.sh --dry-run --path config/searxng/settings.yml
scripts/cutover/prepare-legacy-import.sh --yes --path config/searxng/settings.yml
target_mode=644 target_size=150 /opt/pdurlej-platform/runtime/legacy-import/config/searxng/settings.yml

No service restart was performed for this PR.

Known constraints

This does not delete or quarantine legacy paths.
This does not migrate searxng_data or any other data volume.
This does not recreate containers before merge.

Explicit out-of-scope

data migration
service restart before merge
destructive cleanup
quarantine/tombstone
core DNS/Traefik/Matrix remounts

Requested decision

Approve this as the next config-only remount batch if checks are green.

Merge blockers

copied config targets missing on RS2000
compose syntax failure
reviewer finds a runtime fallback risk not covered by rollback env vars

Validation

git diff --check: passed
PYTHONPATH=control-plane uv run --project control-plane python -m platformctl.cli validate all --json: passed, exit 0

Spec sources read

compose/apps/compose.yaml — mount declarations
modules/dashboard/runbook.md — operator rollback/runbook update
modules/searxng/runbook.md — operator rollback/runbook update

Non-goals

No DB, no service, no webhooks, no issue/comment mutation, no destructive cleanup.

Canary status: missing — fire canary 3+3 manually before merge ## Summary Second M01 config-only remount batch after `ntfy` proved the pattern at runtime. This PR moves default config bind mounts for two non-core tailnet services to prepared `legacy-import` paths: - `dashboard`: `/opt/pdurlej-platform/runtime/legacy-import/config/homepage` - `searxng`: `/opt/pdurlej-platform/runtime/legacy-import/config/searxng/settings.yml` Both old legacy paths remain available as explicit rollback env vars for one rollback cycle. ## Canary Context Pack ### Product story M01 needs active services to stop depending on `/opt/vps-home-platform-infra` before quarantine/destructive cleanup. `dashboard` and `searxng` are small config-only candidates with healthchecks and clear rollback paths. ### What changed - `compose/apps/compose.yaml`: default bind mounts for `dashboard` and `searxng` now point at copied `legacy-import` config paths. - `modules/dashboard/runbook.md`: documents config source and rollback env var. - `modules/searxng/runbook.md`: documents settings source and rollback env var. ### Why it changed The legacy root must stop being the default runtime source. This keeps old paths as rollback material while making the canonical release root independent of the legacy project tree. ### Files touched - `compose/apps/compose.yaml` - `modules/dashboard/runbook.md` - `modules/searxng/runbook.md` ### Relevant context - M01 RS2000 closeout critical path - `ntfy` remount was applied and reached healthy runtime state - Prior legacy import helper PRs ### Runtime evidence Prep copy already run on RS2000 before this PR: ```text scripts/cutover/prepare-legacy-import.sh --dry-run --path config/homepage scripts/cutover/prepare-legacy-import.sh --yes --path config/homepage target_size 136K /opt/pdurlej-platform/runtime/legacy-import/config/homepage scripts/cutover/prepare-legacy-import.sh --dry-run --path config/searxng/settings.yml scripts/cutover/prepare-legacy-import.sh --yes --path config/searxng/settings.yml target_mode=644 target_size=150 /opt/pdurlej-platform/runtime/legacy-import/config/searxng/settings.yml ``` No service restart was performed for this PR. ### Known constraints - This does not delete or quarantine legacy paths. - This does not migrate `searxng_data` or any other data volume. - This does not recreate containers before merge. ### Explicit out-of-scope - data migration - service restart before merge - destructive cleanup - quarantine/tombstone - core DNS/Traefik/Matrix remounts ### Requested decision Approve this as the next config-only remount batch if checks are green. ### Merge blockers - copied config targets missing on RS2000 - compose syntax failure - reviewer finds a runtime fallback risk not covered by rollback env vars ## Validation - `git diff --check`: passed - `PYTHONPATH=control-plane uv run --project control-plane python -m platformctl.cli validate all --json`: passed, exit 0 ## Spec sources read - `compose/apps/compose.yaml` — mount declarations - `modules/dashboard/runbook.md` — operator rollback/runbook update - `modules/searxng/runbook.md` — operator rollback/runbook update ## Non-goals No DB, no service, no webhooks, no issue/comment mutation, no destructive cleanup.

codex added this to the 01 - RS2000 closeout and legacy cleanup milestone

2026-05-29 00:02:08 +02:00

codex added the

risk/runtime

cutover-gate

phase/03

class/security-sensitive

labels