IT Support » DMZ-WEB Infrastructure

Version history of `dmz-web-podman-cheatsheet.md` (this wiki's single-file source) and the scripts in `dmz-web-deploy`. Git tags: `cheatsheet-<version>`.

## Cheat sheet

| Version | Date       | Status     | Commit / tag | Changes |

|---------|------------|------------|--------------|---------|

| 1.6     | 2026-10-29 | Latest     | commit:a18ea51 · `cheatsheet-1.6` | PF: full application (login + 2FA, transactions, dividend reinvestment, market data, indicators, rebalancing hints) instead of the starter; `pf-install.sh` 1.1 (`--app-src`); `pf-mgmt-cheatsheet.md` 1.2 (wiki page [[PF]]). |

| 1.5     | 2026-10-29 | Superseded | _(never committed on its own — shipped inside 1.6)_ · `cheatsheet-1.5` | New stack PF: overview row, own sheet `pf-mgmt-cheatsheet.md` (wiki page [[PF]]), `pf-install.sh`; §6 "Before go-live checklist"; `deploy-publish.sh` 1.2. |

| 1.4.1   | 2026-10-26 | Superseded | commit:072d94a · `cheatsheet-1.4.1` | Handled packages/files move to `/root/deploy-done/`; `deploy-publish.sh` 1.1.1. |

| 1.4     | 2026-10-26 | Superseded | _(never committed on its own — shipped inside 1.4.1)_ · `cheatsheet-1.4` | Git §F for the release package: `deploy-publish.sh` 1.1 takes one `dmz-web-release-<version>.zip` (files, `wiki/`, `RELEASE`, `SHA256SUMS`), verifies and publishes it, moves it to `/root/deploy-done/`. |

| 1.3     | 2026-10-26 | Superseded | _(never committed on its own — shipped inside 1.4)_ · `cheatsheet-1.3` | Git §F: `deploy-publish.sh` 1.0 — files from `/root` to repo with version checks, commit/tag via `deploy-commit.sh`, wiki zip → Redmine REST API, handled files moved to `/root/deploy-done/`. |

| 1.2.2   | 2026-10-26 | Superseded | _(never committed on its own — shipped inside 1.3)_ · `cheatsheet-1.2.2` | Snipe-IT "Image versions and upgrades": pinned `v8.8.3` + MariaDB digest, no GUI upgrade, six-step upgrade/rollback, unit-file comment rule. |

| 1.2.1   | 2026-10-26 | Superseded | commit:7118d9b · `cheatsheet-1.2.1` | Snipe-IT mail test (General Settings → Test Email, tinker alternative), 2026-10-26 result (internal delivered, external `451 4.4.4 ATTR5`, cause open); Troubleshooting Q&A. |

| 1.2     | 2026-10-25 | Superseded | commit:84a9a24 · `cheatsheet-1.2` | New Troubleshooting chapter; 8181 admin subnets and live-vs-repo `Network=` warning; Snipe-IT chapter (install script, pre-flight, SMTP relay); Snipe-IT 500 / `password_resets` Q&A. |

| 1.1.1   | 2026-10-25 | Superseded | commit:af01c01 · `cheatsheet-1.1.1` | `deploy-commit.sh` 1.1: credential guard narrowed to `key = literal` (prose/comments no longer trip it), `-y` override documented. |

| 1.1     | 2026-10-25 | Superseded | _(not committed — superseded by 1.1.1 before push)_ | Git §C/E: `deploy-commit.sh` (root, `.sh`) replaces the manual commit/push cycle and `deploy-push` — commits as websvcmaster, guards against staged credentials, pushes as root, tags, chowns `.git`; script kept in repo under `root-bin/`. |

| 1.0.1   | 2026-10-25 | Superseded | _(not committed — superseded by 1.1 before push)_ | Git §C/E: root pushes only via `deploy-push` wrapper (push + chown .git back to owner); two new recovery entries (COMMIT_EDITMSG permission denied, "Everything up-to-date" after a missed commit). |

| 1.0     | 2026-10-25 | Superseded | commit:ce3e6e1 · `cheatsheet-1.0` | First versioned release. Restructured by stack (NPM + LE, WordPress, Redmine, Snipe-IT, common ops, health check); git procedure rewritten with per-user steps and recovery list; health-check loop reads `Description=<App> -- <domain>`; replaces unversioned `podman-wordpress-cheatsheet_6.md`. |

Bump the version on every content change (patch: fixes/typos, minor: new section or procedure, major: restructuring), mark the previous row Superseded, commit together with the change it documents.

## Scripts

| Script | Version | Date | Status | Commit | Notes |

|--------|---------|------|--------|--------|-------|

| `root-bin/deploy-commit.sh` | 1.2 | 2026-10-26 | Latest | commit:84a9a24 | credential guard ignores code references (`os.environ[..]`, `getenv(..)`, `obj.method(..)`) |

| `root-bin/deploy-commit.sh` | 1.1 | 2026-10-25 | Superseded | commit:af01c01 | credential guard narrowed to `key = literal`; `-y` override |

| `root-bin/deploy-commit.sh` | 1.0 | 2026-10-25 | Superseded | _(not committed)_ | first version: commit as websvcmaster, push as root, tag, chown |

| `snipeit-install.sh` | 1.1 | 2026-10-25 | Latest | commit:c4fb222 (1.1 content), commit:84a9a24 | From/Reply-To always set (unset placeholder gave HTTP 500), SMTP preset to the Exchange Online relay; still defaults to `:latest` image — pass `--app-image` |

| `root-bin/deploy-publish.sh` | 1.2 | 2026-10-29 | Latest | commit:a18ea51 | publishes `pf-install.sh` and `pf-mgmt-cheatsheet.md` too |

| `root-bin/deploy-publish.sh` | 1.1.1 | 2026-10-26 | Superseded | commit:072d94a | done folder renamed to `/root/deploy-done/` |

| `root-bin/deploy-publish.sh` | 1.1 | 2026-10-26 | Superseded | _(never committed on its own — shipped inside 1.1.1)_ | release package (zip + `RELEASE` + `SHA256SUMS`), safe unpack, checksum check; wiki read from a directory |

| `root-bin/deploy-publish.sh` | 1.0 | 2026-10-26 | Superseded | _(never committed on its own — shipped inside 1.1)_ | first release: loose files + wiki zip → repo, commit/tag, Redmine REST, tidy |

| `pf-install.sh` | 1.1 | 2026-10-29 | Latest | commit:a18ea51 | full application: `--app-src` instead of `--init-app`, image tag 1.1.0, start period 90 s |

| `pf-install.sh` | 1.0 | 2026-10-29 | Superseded | _(never committed on its own — shipped inside 1.1)_ | PF stack installer (two networks, TimescaleDB, NPM wiring with live-vs-repo guard) |

| `pf-mgmt-cheatsheet.md` | 1.2 | 2026-10-29 | Latest | commit:a18ea51 | application, DRIP rules, users/2FA, endpoints (1.1: installer-based procedure; 1.0 was an uncommitted draft) |

| `pf-mgmt-cheatsheet.md` | 1.1 | 2026-10-29 | Superseded | _(never committed on its own — shipped inside 1.2)_ | PF stack sheet around `pf-install.sh` |

| `check-sites.sh` | 1.0 | 2026-10-25 | Latest | commit:ce3e6e1 (+x in commit:af01c01) | first versioned release; `Description=.* -- ` sed; `--version`/`--help` |

## Repository history

Not kept by hand — see the project's **Repository** tab (all revisions, diffs, tags) and **Activity**. Initial import: commit:cc4880f.

Redmine link syntax used above: `commit:<hash>` → commit page, `source:path` → file at HEAD, `source:path@<hash>` → file at that revision, e.g. source:dmz-web-podman-cheatsheet.md@cheatsheet-1.0.