Skip to content

dev2: c0ncerts.com self-hosted Supabase + subnet_octet override - #210

Merged
ralyodio merged 1 commit into
masterfrom
ops/c0ncerts-supabase
Oct 26, 2026
Merged

ralyodio merged 1 commit into
masterfrom
ops/c0ncerts-supabase

Conversation

@ralyodio

Copy link
Copy Markdown
Contributor
  • c0ncerts.com gets its own self-hosted Supabase stack (supabase-stack), gateway supabase.c0ncerts.com, app env via secret: refs (values in credentials.json + vault c0ncerts-com--prod).
  • New sites.d key subnet_octet: bittorrented.com sits on c0ncerts' derived 10.200.78.0/24, which broke the c0ncerts redeploy (network create failed, site down a few minutes). c0ncerts now uses 10.200.178.0/24.

🤖 Generated with Claude Code

…ride

c0ncerts.com never had a production database (Supabase env unset since
Railway), so its accounts page was dead. New stack c0ncerts-com-supabase
(api 8278, db 5578), gateway supabase.c0ncerts.com, env via secret: refs.

The redeploy then collided with bittorrented.com, which was hand-built on
c0ncerts' 10.200.78.0/24 on 2026-10-05; sites.d subnet_octet moves a site
to a free /24 (c0ncerts -> 178) without touching the other stack.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@github-actions

Copy link
Copy Markdown

ThreatCrush Security Scan

41 finding(s)

HIGH/CRITICAL: 15 | MEDIUM: 12 | LOW: 14

Severity Rule Location
HIGH py-ssrf-outbound-request dev2/dev2-site:151
HIGH py-ssrf-outbound-request dev2/dev2-site:1062
HIGH py-ssrf-outbound-request dev2/dev2-site:1800
HIGH sh-remote-script-execution root-ubuntu.sh:3262
HIGH sh-remote-script-execution root-ubuntu.sh:3263
HIGH sh-remote-script-execution root-ubuntu.sh:5168
HIGH sh-remote-script-execution root-ubuntu.sh:5172
HIGH sh-remote-script-execution root-w3bs-os.sh:3639
HIGH sh-remote-script-execution root-w3bs-os.sh:3640
HIGH sh-remote-script-execution root-w3bs-os.sh:5569
HIGH sh-remote-script-execution root-w3bs-os.sh:5579
HIGH sh-remote-script-execution root-w3bs-os.sh:5586
HIGH sh-remote-script-execution root-w3bs-os.sh:5602
HIGH sh-remote-script-execution root-w3bs-os.sh:5607
HIGH sh-plaintext-download root-w3bs-os.sh:6289
MEDIUM sql-template-interpolation dev2/dev2-site:1289
MEDIUM sql-template-interpolation dev2/dev2-site:1366
MEDIUM sh-remote-script-execution root-ubuntu.sh:5376
MEDIUM redos-nested-quantifier src/domain-free.ts:56
MEDIUM redos-nested-quantifier src/emoji.ts:167
MEDIUM redos-nested-quantifier src/icon.ts:166
MEDIUM redos-nested-quantifier src/mail.ts:1047
MEDIUM sql-template-interpolation src/users-dump.ts:487
MEDIUM sql-string-concatenation src/users-dump.ts:507
MEDIUM sql-template-interpolation src/users-dump.ts:540
MEDIUM sql-string-concatenation src/users-dump.ts:574
MEDIUM redos-nested-quantifier src/wcag.ts:556
LOW secret-generic-credential src/credentials.ts:36
LOW secret-generic-credential src/credentials.ts:53
LOW secret-generic-credential src/credentials.ts:56
LOW secret-generic-credential src/credentials.ts:61
LOW secret-generic-credential src/user-export.ts:689
LOW secret-generic-credential src/user-export.ts:695
LOW secret-generic-api-key test/credentials.test.ts:208
LOW secret-generic-credential test/mail.test.ts:141
LOW secret-generic-credential test/proxy.test.ts:69
LOW secret-generic-credential test/proxy.test.ts:85
LOW secret-generic-credential test/shorten.test.ts:36
LOW secret-database-url test/users-dump.test.ts:108
LOW secret-database-url test/users-dump.test.ts:119
LOW secret-database-url test/users-dump.test.ts:120

Snippets are redacted; ThreatCrush never prints matched credential material.

@ralyodio
ralyodio merged commit bed5169 into master Oct 26, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant