scripts/registry-login.sh reads vault.forgejo.registry_token and pipes it to docker login --password-stdin (never echoed, never on argv); 'make registry-login' wires it with the venv binaries. Adds the operator-minted CHANGEME vault stub (fill via make edit-vault) and a per-machine prereq note in the claude-code-setup runbook, so 'make caddy-image-push'/'molecule-image-push' become agent-completable non-interactively. Consumes the 2026-06-15 signal in docs/FRICTION.md. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| access | ||
| backup | ||
| decisions | ||
| hardware | ||
| reviews | ||
| runbooks | ||
| security | ||
| superpowers | ||
| testing | ||
| CAPABILITIES.md | ||
| FRICTION.md | ||
| README.md | ||
| ROADMAP.md | ||
| TODO.md | ||
docs/
Project documentation.
decisions/— Architecture Decision Records (ADRs): the "why" behind the design. Numbered from 001; each records context, the decision, and what was ruled out.runbooks/— step-by-step operational procedures (add a host, add a role, rotate secrets).security/— security baseline, accepted-risk register, per-service checklist + template (ADR-002/004).testing/— testing methodology artifacts + theVERIFY.mdtemplate (ADR-008/017).access/— operational-access doctrine + theACCESS.mdtemplate (ADR-021).backup/— backup doctrine + theBACKUP.mdtemplate (ADR-022).hardware/— capacity reference +/capacity-reviewoutput (ADR-012).reviews/—/review-repoaudit trail.CAPABILITIES.md/ROADMAP.md/TODO.md/FRICTION.md— what boma does, the build order, the backlog, and recurring-friction notes.
For what is actually built vs only designed, see STATUS.md at the repo root —
the ADRs describe intent, not necessarily current reality.