windyboy
c0c975584a
记录源 Linear→Plane (2026-09-03 起, Plane MCP) + plane.chans.xyz 服务行/upstream 段; inventory + hosts/synapse.chans.xyz.md 补 Plane 部署事实 (Helm plane-ce-1.8.0 / app v1.4.1, ns plane, IngressRoute/自有证书 issuer/PVC 5+5Gi local-path/无备份层); 新增 runbooks/plane-health.md (只读健康检查) 与 docs/plane-hardening/ 草稿 (values.hardened.yaml、secrets.yaml.example 占位、backup/ CronJob), 均为未应用设计稿; .gitignore 增加 .tmp-* agent 临时文件。
Runbook index
Entry point for all runbooks. Before operational work, read the repo entry
AGENTS.md and the spec RUNBOOKS.md. New
runbooks start from _template.md.
Route by intent
| Intent | Runbook | Type |
|---|---|---|
| mailcow health check | mailcow-health.md | read-only |
| mailcow update | mailcow-update.md | change (gated) |
| mailcow SMTP/IMAP client | mailcow-smtp-client.md | reference |
| Vaultwarden health check | vaultwarden-health.md | read-only |
| Vaultwarden SQLite→PG migrate | vaultwarden-sqlite-to-postgres.md | change (destructive) |
| PowerDNS health check | pdns-health.md | read-only |
| RustDesk health check | rustdesk-health.md | read-only |
| Matrix health check | matrix-health.md | read-only |
| Plane health check | plane-health.md | read-only |
| pgdb health check | pgdb-health.md | read-only |
| pgdb DB restore (pg_restore) | pgdb-restore.md | change (procedure) |
| pgdb image/compose update | pgdb-update.md | change (gated) |
| AdGuard Home health check | adguard-home-health.md | read-only |
| Matter packet capture | matter-packet-capture.md | read-only |
| Home Assistant maintenance | home-assistant-maintenance.md | change (gated) |
| matrix_e2ee integration update | matrix-e2ee-update.md | change (gated) |
| Routine Ansible operations | ansible-operations.md | change (allowlisted) |
| Linear issue → mergeable change | issue-to-merge.md | delivery |
| Failing health/playbook run | fix-ci.md | change |
| Release a reviewed change to production | release.md | change (gated) |
| Roll back a change | rollback.md | change (gated) |
| Controlled network configuration | network-change.md | change (gated) |
| Network outage / service recovery | network-recovery.md | recovery |
Notes
fix-ci.md,release.md,rollback.md,network-change.md,network-recovery.mdare adapted from the upstream guide to this repo's VPS-ops context (execution layer is Ansible + SSH + Linear, not a software CI/CD pipeline).- Health runbooks are read-only; they stop (
STOP) when live state conflicts with the expected state instead of mutating production.