323 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Josh	1af95ec8d0	added Dek copy step in pipeline dev->staging	2025-08-09 14:18:44 +00:00
Josh	522a9e54b4	DEK alignment dev-staging	2025-08-09 13:57:47 +00:00
Josh	e54db99f12	Try again	2025-08-08 19:53:47 +00:00
Josh	c6a0305635	same dek staging-dev	2025-08-08 19:25:45 +00:00
Josh	6a4d533c6d	Re-seeded canary	2025-08-08 18:49:56 +00:00
Josh	a9421f568d	dek env separation volumes, etc.	2025-08-08 18:29:16 +00:00
Josh	6d057fb9e2	upgrade Alpine	2025-08-08 15:01:45 +00:00
Josh	c00494a791	trivyignore, ignore-unfixed	2025-08-08 14:46:08 +00:00
Josh	75ed93e4ad	upgrade to bookworm	2025-08-08 14:37:46 +00:00
Josh	81c3c5cb0a	security vulnerabilities upgrades	2025-08-08 14:23:03 +00:00
Josh	11198a675a	removed secret scanning from static files	2025-08-08 13:45:57 +00:00
Josh	fdd8bbe18e	pipeline rewrite v6	2025-08-08 13:30:48 +00:00
Josh	dc38e9fd01	pipeline rewrite v5	2025-08-08 13:29:05 +00:00
Josh	148774e72d	pipline rewrite v4	2025-08-08 13:26:13 +00:00
Josh	44d497ba68	pipeline rewrite v3	2025-08-08 13:22:05 +00:00
Josh	24621e361c	pipeline rewrite v2	2025-08-08 13:14:51 +00:00
Josh	a17934aa11	pipline rewrite	2025-08-08 13:06:32 +00:00
Josh	8044374b50	fixed backslashes in yml	2025-08-08 13:05:21 +00:00
Josh	ab805b90b0	verifyCanary, DEK safeguards	2025-08-08 12:51:57 +00:00
Josh	1d50efe646	DEK isolation	2025-08-07 15:01:03 +00:00
Josh	16e01ab004	removed nginx volume mount from dev and staging ym;	2025-08-07 13:14:47 +00:00
Josh	69fce4f99c	staging docker-compose.yml for field-level	2025-08-07 11:41:40 +00:00
Josh	acc1c56fb1	removed space after comma in preserve lines	2025-08-07 00:49:45 +00:00
Josh	9b3d8c9d4d	brackets removed around ENV	2025-08-07 00:43:10 +00:00
Josh	921daf78ae	updated pipeline for ENV variables vs. hardcoded	2025-08-07 00:39:12 +00:00
Josh	d6bffc6dd5	reverted pipeline back to working and added KMS and DEK secrets	2025-08-06 22:42:46 +00:00
Josh	8c9e0e396a	pipeline	2025-08-06 22:41:24 +00:00
Josh	96fe61e956	fixed pipeline, deploy_all.sh, and encryption.js for field-level. Added fast-fail to encryption.js	2025-08-06 22:34:10 +00:00
Josh	3aef4502f8	Field-level encryption implemented	2025-08-06 19:44:50 +00:00
Josh	1e039bf454	Fixed staging handlecareerclick. .pems are in this one	2025-08-05 15:34:20 +00:00
Josh	d5d3c6d63b	Fixed limited data behavior, All Others in CareerExplorer	2025-08-05 15:18:54 +00:00
Josh	6a57e00dbd	added DB vars to preserve lines	2025-08-05 12:08:39 +00:00
Josh	5aa6e98f5c	pipeline: inject DB_SSL*? into staging deploy step	2025-08-05 12:05:35 +00:00
Josh	12d7f654f4	MySQL TLS, Retirement Chatbar, migrated AI_Risk to MySQL, client certs for MySQL from GCP	2025-08-05 11:20:48 +00:00
Josh	8449dc2a91	Cleanup, all technical fixes prior to prod creation	2025-08-03 18:44:36 +00:00
Josh	66721ee207	updated tag format, nginx Dockerfile	2025-08-01 12:11:26 +00:00
Josh	35a53a3e1f	Fixed dockerfile.nginx for staging	2025-08-01 11:35:55 +00:00
Josh	7ceaa78bb8	Include nginx in deploy_all.sh	2025-08-01 11:21:57 +00:00
Josh	76dbd9b509	pipeline build v53. DB_NAME add	2025-07-31 19:33:00 +00:00
Josh	542b0b29e5	pipline build v52. inline secrets	2025-07-31 17:35:37 +00:00
Josh	5c891a327a	pipline build v51. injecting ALL secrets	2025-07-31 17:33:19 +00:00
Josh	b284b18df8	pipline build v50. Injecting JWT_SECRET	2025-07-31 17:26:56 +00:00
Josh	bfd8eb234c	pipeline build v49. removed STRIPE_PUB_KEY from secret block	2025-07-31 17:24:41 +00:00
Josh	3c11586859	pipeline build v48. add STRIPE_PUB_KEY	2025-07-31 17:21:55 +00:00
Josh	d2963792ee	pipeline build v47. add STRIPE_PUB_KEY	2025-07-31 17:18:45 +00:00
Josh	16397342f7	pipeline build v46. Reverted to working	2025-07-31 17:16:42 +00:00
Josh	3c572dd8c5	pipeline build v45. reverted GCP single block	2025-07-31 17:14:45 +00:00
Josh	6e0123d363	pipeline build v44. reverted and add single GCP secret	2025-07-31 17:13:13 +00:00
Josh	299ca98ebc	pipeline build v43. reverted and added GCP secrets block	2025-07-31 17:08:38 +00:00
Josh	5a626234ed	pipeline build v42. correct reversion v2	2025-07-31 17:04:31 +00:00