infra/.claude/reference
Viktor Barzin f8e8f31306 stem95su: scheduled Drive->site sync CronJob (every 15m)
Reverses the earlier on-demand-only call now that the content is actively
maintained. New stacks/stem95su/gdrive-sync.tf:

- CronJob stem95su-gdrive-sync (*/15) mounts the content PVC RW and
  `rclone sync`s the read-only Drive folder "claude" (stem claude/files)
  onto it. In-cluster, so it mirrors straight to NFS (no rsync/ssh hop).
  rclone/rclone:1.74.3; scope=drive.readonly; empty-source guard +
  --max-delete 25; .DS_Store excluded. A dead token surfaces as a failed Job.
- ESO ExternalSecret stem95su-rclone <- Vault secret/stem95su (rclone_conf).

Requires the GCP OAuth app published to Production (else the refresh token
expires ~weekly); re-mint + update secret/stem95su after publishing.

Verified: manual job ran guard OK + rclone "nothing to transfer", site 200.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-09 08:16:08 +00:00
..
authentik-state.md matrix/authentik: remove orphaned Matrix OAuth2 app + provider (post-tuwunel) 2026-06-08 12:32:49 +00:00
github-api.md [ci skip] Sunset Drone CI: remove all artifacts, DNS, configs, and references 2026-02-23 19:38:55 +00:00
known-issues.md add infrastructure agent team: 8 specialized agents + 14 diagnostic scripts 2026-03-15 02:01:07 +00:00
patterns.md stem95su: host STEM platform for 95. СУ (public NFS-backed static site) 2026-06-07 15:21:21 +00:00
proxmox-inventory.md workstation: correct devvm RAM (8->24GB) + record 8G swap & capacity budget [ci skip] 2026-06-08 13:48:52 +00:00
service-catalog.md stem95su: scheduled Drive->site sync CronJob (every 15m) 2026-06-09 08:16:08 +00:00
upgrade-config.json matrix: migrate Synapse -> tuwunel (Rust homeserver, fresh start, federated) 2026-06-08 11:58:17 +00:00