feat: workspace-bootstrap — init SSH/git/Cursor для Mac и Windows

Единый workspace.local.env для адресов и паролей, init-machine, Set-GitRemotes, push-safe и check-no-secrets для политики kalinamall/github.
2026-06-14 19:34:52 +10:00
parent 8e2a4ac1b9
commit 834595df6b
18 changed files with 813 additions and 8 deletions
@@ -0,0 +1,3 @@
+# Строки для hosts (подставляются IP из workspace.local.env)
+__GITEA_KALINAMALL_IP__ __GITEA_KALINAMALL_HOST__ __GITEA_KALINAMALL_HOST_PUBLIC__
+__GITEA_KALINAMALL_IP__ sac.kalinamall.ru sac-api.kalinamall.ru
@@ -0,0 +1,22 @@
+# Список репозиториев PapaTramp / PTah
+# github: false — не добавлять remote github, не пушить на GitHub
+
+repos:
+  - name: reverse-proxy
+    github: true
+
+  - name: security-alert-center
+    github: true
+
+  - name: seaca
+    github: false
+
+  - name: rdp-login-monitor
+    github: true
+    github_name: RDP-login-monitor
+
+  - name: ssh-monitor
+    github: true
+
+  - name: Answer.and.other.shit
+    github: false
@@ -0,0 +1,28 @@
+# Сгенерировано init-machine.sh — ручные правки могут быть перезаписаны
+# Блок BEGIN WORKSPACE-BOOTSTRAP … END
+
+Host github.com
+    User git
+    IdentityFile __SSH_KEY_PATH__
+    IdentitiesOnly yes
+
+Host __GITEA_KALINAMALL_HOST__ __GITEA_KALINAMALL_HOST_PUBLIC__
+    User git
+    HostName __GITEA_KALINAMALL_HOST__
+    Port __GITEA_KALINAMALL_SSH_PORT__
+    IdentityFile __SSH_KEY_PATH__
+    IdentitiesOnly yes
+
+Host __GITEA_HOME_HOST__ __GITEA_HOME_HOST_PUBLIC__
+    User git
+    HostName __GITEA_HOME_HOST__
+    Port __GITEA_HOME_SSH_PORT__
+    IdentityFile __SSH_KEY_PATH__
+    IdentitiesOnly yes
+
+Host haproxy haproxy.kalinamall.ru __SSH_HAPROXY_IP__
+    User __SSH_HAPROXY_USER__
+    IdentityFile __SSH_KEY_PATH__
+    IdentitiesOnly yes
+
+# END WORKSPACE-BOOTSTRAP
@@ -0,0 +1,57 @@
+# Копия: config/workspace.local.env (не коммитить!)
+# Все адреса, логины и пароли для init-скриптов — только в workspace.local.env
+
+# --- Профиль машины: home-mac | home-win | work-win ---
+MACHINE_PROFILE="home-mac"
+
+# --- Git (identity) ---
+GIT_USER_NAME="Your Name"
+GIT_USER_EMAIL="you@example.com"
+
+# --- SSH-ключ для Git (создаётся init-machine, если файла нет) ---
+SSH_KEY_BASENAME="id_ed25519_kalinamall"
+SSH_KEY_COMMENT="papatramp"
+
+# --- Корпоративный Gitea (remote: kalinamall) ---
+GITEA_KALINAMALL_HOST="git.kalinamall.lan"
+GITEA_KALINAMALL_HOST_PUBLIC="git.kalinamall.ru"
+GITEA_KALINAMALL_IP="192.168.160.129"
+GITEA_KALINAMALL_SSH_PORT="2222"
+GITEA_KALINAMALL_ORG="PapaTramp"
+
+# --- Домашний Gitea (remote: home) ---
+GITEA_HOME_HOST="git.papatramp.lan"
+GITEA_HOME_HOST_PUBLIC="git.papatramp.ru"
+GITEA_HOME_SSH_PORT="2222"
+GITEA_HOME_ORG="PapaTramp"
+
+# --- GitHub (remote: github) ---
+GITHUB_USER="PTah"
+
+# --- Каталог проектов ---
+PROJECTS_DIR_MAC="${HOME}/Documents/Cursor/Projects"
+PROJECTS_DIR_WIN="C:/Users/papat/Projects"
+
+# --- Push ---
+PUSH_HOME="yes"
+PUSH_GITHUB="yes"
+
+# --- /etc/hosts (опционально: yes — init добавит строки из hosts.template) ---
+UPDATE_HOSTS="yes"
+
+# --- SSH на серверы (для справки / будущих скриптов; не для git remote) ---
+SSH_HAPROXY_IP="192.168.160.117"
+SSH_HAPROXY_USER="papatramp"
+SSH_HAPROXY_PASSWORD=""
+
+SSH_GIT_SERVER_IP="192.168.160.129"
+SSH_GIT_SERVER_USER="papatramp"
+SSH_GIT_SERVER_PASSWORD=""
+
+SSH_SAC_SERVER_IP="192.168.160.145"
+SSH_SAC_SERVER_USER="papatramp"
+SSH_SAC_SERVER_PASSWORD=""
+
+# --- Админ / VPN (справочно) ---
+ADMIN_PUBLIC_IP="5.100.81.121"
+VPN_CIDR="192.168.128.0/17"