update: context.md — id=51 fully E2E verified, session 4 cont facts
Shell E2E complete. NTFY topic bug, docker-cli fix, DB permissions, 524 Cloudflare limitation documented. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
@@ -190,6 +190,17 @@ Coolify service UUID: `ilus0cfdkheipodw1viurg1d`
|
|||||||
- To call Coolify API from proxy: use /shell with env_secrets: {"TOKEN": "vault://coolify#api_key"}
|
- To call Coolify API from proxy: use /shell with env_secrets: {"TOKEN": "vault://coolify#api_key"}
|
||||||
- sudo-bridge image rebuild pattern: build → push to gitea.local → stop container → POST /api/v1/services/{uuid}/start
|
- sudo-bridge image rebuild pattern: build → push to gitea.local → stop container → POST /api/v1/services/{uuid}/start
|
||||||
|
|
||||||
|
**June 22 session 4 (continued) facts:**
|
||||||
|
- Shell E2E all passed: read (sandbox_exit:0), write (notify+exec), destructive (NTFY approval→exec) ✅
|
||||||
|
- proxy-sandbox-mirror image: built from /secrets-proxy/mirror/Dockerfile — must exist on HOST (proxy calls host Docker daemon via socket)
|
||||||
|
- Dockerfile fix: docker.io → docker-cli (docker.io with --no-install-recommends on Debian Trixie does not install binary)
|
||||||
|
- NTFY bug: _ntfy() was hardcoding URL to secrets-proxy-notifications regardless of topic — fixed with topic param
|
||||||
|
- NTFY ACL: secrets-proxy-bot needed write-only on secrets-proxy-approvals; Smoked5003 needed read-only — both added via ntfy CLI in container
|
||||||
|
- secrets_proxy DB user: needed SELECT on proxy_executions for ON CONFLICT DO NOTHING — granted
|
||||||
|
- Coolify token plaintext: 2|95eQySElT9uQpTXqDACWq1z9kyOaySZOZP8sBxyJaebc2bbe (Sanctum format: id|plaintext)
|
||||||
|
- Coolify "Service is already running" after stop+rm: UPDATE service_applications SET status='stopped' WHERE service_id=... then POST /start
|
||||||
|
- 524 on destructive commands: Cloudflare kills long-poll at ~100s; approval must be tapped quickly; command still runs if approved before timeout, response just lost
|
||||||
|
|
||||||
**NEXT SESSION — in order:**
|
**NEXT SESSION — in order:**
|
||||||
1. id=24 Agent Builder Agent + id=67 N8N Builder Agent
|
1. id=24 Agent Builder Agent + id=67 N8N Builder Agent
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user