IT Support » DMZ-WEB Infrastructure

*Chapter 9 of the dmz-web documentation · headings are numbered like the cheat sheets · index: [[Wiki]]*

{{>toc}}

Version history of `dmz-web-podman-cheatsheet.md` (this wiki's single-file source) and the scripts in `dmz-web-deploy`. Git tags: `cheatsheet-<version>`.

## 9.1 Cheat sheet

| Version | Date       | Status     | Commit / tag | Changes |

|---------|------------|------------|--------------|---------|

| 1.13    | 2026-10-31 | Latest     | commit:8e53cb8 · `cheatsheet-1.13` | New §5.7: `as-web` (command or shell as websvcmaster from the root shell) and `pf-upgrade.sh` (PF application upgrade in one asked-step-by-step run); `deploy-publish.sh` 1.3 knows both; `pf-mgmt-cheatsheet.md` 1.9. No application change |

| 1.12    | 2026-10-31 | Superseded | commit:3c2ff84 · `cheatsheet-1.12` | PF app 1.1.5: Holding page with a **My position** card, amounts in the asset's own currency, explained unrealized/realized P/L, left-aligned description columns; `pf-install.sh` 1.7, `pf-mgmt-cheatsheet.md` 1.8 |

| 1.11    | 2026-10-31 | Superseded | _(never committed on its own — shipped inside 1.12)_ · `cheatsheet-1.11` | Every heading numbered (chapter, section, subsection: 3, 3.1, 3.1.7) in the cheat sheets and the wiki pages; wiki index with a Chapter column, a chapter line and an automatic table of contents on the long pages; the Git chapter letters A to F are now 3.1.2 to 3.1.7; PF is chapter 8, Releases chapter 9; cross-references updated; the *Health Check* page carries the go-live checklist (6.1). `pf-install.sh` 1.6, `pf-mgmt-cheatsheet.md` 1.7. No application change. |

| 1.10    | 2026-10-31 | Superseded | commit:438872a · `cheatsheet-1.10` | PF app 1.1.4: splits and bonus issues from Yahoo (trades stay as entered, counted in today's share unit; administrator page Splits), grouped Positions/Holdings tables with separators, hover/tap readout on charts, Edit on the holding page, All-period percentage fixed, market-suggested basket no longer drifts; `pf-install.sh` 1.5, `pf-mgmt-cheatsheet.md` 1.6. New table `asset_splits`, new column `users.ideal_basket_base`. |

| 1.9     | 2026-10-31 | Superseded | _(never committed on its own — shipped inside 1.10)_ · `cheatsheet-1.9` | PF app 1.1.3: browser Back stays inside the app (no logout), Delete on the holding page, Trades history by year with filters, commissions shown separately, sortable Positions and analysis tables, exchange-rate fallbacks (QAR), fixes; `pf-install.sh` 1.4, `pf-mgmt-cheatsheet.md` 1.5. No schema change. |

| 1.8     | 2026-10-31 | Superseded | commit:7a11ee0 · `cheatsheet-1.8` | PF app 1.1.2: ideal basket and market-suggested basket, deposits and interest, holding pages, dividend check, 9-digit shares, fund/ETF type, trade form with Total and market price, administrator currency list; [[WordPress]]: what updates where; [[Operations]]: database engines and version upgrades; `pf-install.sh` 1.3, `pf-mgmt-cheatsheet.md` 1.4. |

| 1.7     | 2026-10-29 | Superseded | commit:c494d3e · `cheatsheet-1.7` | PF app 1.1.1: web GUI (first-run administrator page, roles, QR 2FA), total wealth with currency switch and period chart, holdings analysis with buy/hold/sell suggestions, admin-assignable e-mail recovery; `pf-install.sh` 1.2; `pf-mgmt-cheatsheet.md` 1.3. |

| 1.6     | 2026-10-29 | Superseded | commit:586161e · `cheatsheet-1.6` | PF: full application (login + 2FA, transactions, dividend reinvestment, market data, indicators, rebalancing hints) instead of the starter; `pf-install.sh` 1.1 (`--app-src`); `pf-mgmt-cheatsheet.md` 1.2 (wiki page [[PF]]). |

| 1.5     | 2026-10-29 | Superseded | _(never committed on its own — shipped inside 1.6)_ · `cheatsheet-1.5` | New stack PF: overview row, own sheet `pf-mgmt-cheatsheet.md` (wiki page [[PF]]), `pf-install.sh`; §6 "Before go-live checklist"; `deploy-publish.sh` 1.2. |

| 1.4.1   | 2026-10-26 | Superseded | commit:072d94a · `cheatsheet-1.4.1` | Handled packages/files move to `/root/deploy-done/`; `deploy-publish.sh` 1.1.1. |

| 1.4     | 2026-10-26 | Superseded | _(never committed on its own — shipped inside 1.4.1)_ · `cheatsheet-1.4` | Git §F for the release package: `deploy-publish.sh` 1.1 takes one `dmz-web-release-<version>.zip` (files, `wiki/`, `RELEASE`, `SHA256SUMS`), verifies and publishes it, moves it to `/root/deploy-done/`. |

| 1.3     | 2026-10-26 | Superseded | _(never committed on its own — shipped inside 1.4)_ · `cheatsheet-1.3` | Git §F: `deploy-publish.sh` 1.0 — files from `/root` to repo with version checks, commit/tag via `deploy-commit.sh`, wiki zip → Redmine REST API, handled files moved to `/root/deploy-done/`. |

| 1.2.2   | 2026-10-26 | Superseded | _(never committed on its own — shipped inside 1.3)_ · `cheatsheet-1.2.2` | Snipe-IT "Image versions and upgrades": pinned `v8.8.3` + MariaDB digest, no GUI upgrade, six-step upgrade/rollback, unit-file comment rule. |

| 1.2.1   | 2026-10-26 | Superseded | commit:7118d9b · `cheatsheet-1.2.1` | Snipe-IT mail test (General Settings → Test Email, tinker alternative), 2026-10-26 result (internal delivered, external `451 4.4.4 ATTR5`, cause open); Troubleshooting Q&A. |

| 1.2     | 2026-10-25 | Superseded | commit:84a9a24 · `cheatsheet-1.2` | New Troubleshooting chapter; 8181 admin subnets and live-vs-repo `Network=` warning; Snipe-IT chapter (install script, pre-flight, SMTP relay); Snipe-IT 500 / `password_resets` Q&A. |

| 1.1.1   | 2026-10-25 | Superseded | commit:af01c01 · `cheatsheet-1.1.1` | `deploy-commit.sh` 1.1: credential guard narrowed to `key = literal` (prose/comments no longer trip it), `-y` override documented. |

| 1.1     | 2026-10-25 | Superseded | _(not committed — superseded by 1.1.1 before push)_ | Git §C/E: `deploy-commit.sh` (root, `.sh`) replaces the manual commit/push cycle and `deploy-push` — commits as websvcmaster, guards against staged credentials, pushes as root, tags, chowns `.git`; script kept in repo under `root-bin/`. |

| 1.0.1   | 2026-10-25 | Superseded | _(not committed — superseded by 1.1 before push)_ | Git §C/E: root pushes only via `deploy-push` wrapper (push + chown .git back to owner); two new recovery entries (COMMIT_EDITMSG permission denied, "Everything up-to-date" after a missed commit). |

| 1.0     | 2026-10-25 | Superseded | commit:ce3e6e1 · `cheatsheet-1.0` | First versioned release. Restructured by stack (NPM + LE, WordPress, Redmine, Snipe-IT, common ops, health check); git procedure rewritten with per-user steps and recovery list; health-check loop reads `Description=<App> -- <domain>`; replaces unversioned `podman-wordpress-cheatsheet_6.md`. |

Bump the version on every content change (patch: fixes/typos, minor: new section or procedure, major: restructuring), mark the previous row Superseded, commit together with the change it documents.

## 9.2 Scripts

| Script | Version | Date | Status | Commit | Notes |

|--------|---------|------|--------|--------|-------|

| `root-bin/deploy-commit.sh` | 1.2 | 2026-10-26 | Latest | commit:84a9a24 | credential guard ignores code references (`os.environ[..]`, `getenv(..)`, `obj.method(..)`) |

| `root-bin/deploy-commit.sh` | 1.1 | 2026-10-25 | Superseded | commit:af01c01 | credential guard narrowed to `key = literal`; `-y` override |

| `root-bin/deploy-commit.sh` | 1.0 | 2026-10-25 | Superseded | _(not committed)_ | first version: commit as websvcmaster, push as root, tag, chown |

| `snipeit-install.sh` | 1.1 | 2026-10-25 | Latest | commit:c4fb222 (1.1 content), commit:84a9a24 | From/Reply-To always set (unset placeholder gave HTTP 500), SMTP preset to the Exchange Online relay; still defaults to `:latest` image — pass `--app-image` |

| `root-bin/deploy-publish.sh` | 1.3 | 2026-10-31 | Latest | commit:8e53cb8 | ITEMS: `as-web` and `pf-upgrade.sh` |

| `root-bin/as-web` | 1.0 | 2026-10-31 | Latest | commit:8e53cb8 | run a command or a shell as websvcmaster from the root shell (rootless environment set up) |

| `root-bin/pf-upgrade.sh` | 1.0 | 2026-10-31 | Latest | commit:8e53cb8 | PF application upgrade (backup, build, unit, commit, restart site-pf only), asks before each step, `-n` dry run |

| `root-bin/deploy-publish.sh` | 1.2 | 2026-10-29 | Superseded | commit:586161e | publishes `pf-install.sh` and `pf-mgmt-cheatsheet.md` too |

| `root-bin/deploy-publish.sh` | 1.1.1 | 2026-10-26 | Superseded | commit:072d94a | done folder renamed to `/root/deploy-done/` |

| `root-bin/deploy-publish.sh` | 1.1 | 2026-10-26 | Superseded | _(never committed on its own — shipped inside 1.1.1)_ | release package (zip + `RELEASE` + `SHA256SUMS`), safe unpack, checksum check; wiki read from a directory |

| `root-bin/deploy-publish.sh` | 1.0 | 2026-10-26 | Superseded | _(never committed on its own — shipped inside 1.1)_ | first release: loose files + wiki zip → repo, commit/tag, Redmine REST, tidy |

| `pf-install.sh` | 1.7 | 2026-10-31 | Latest | commit:3c2ff84 | app image 1.1.5 (no schema change) |

| `pf-install.sh` | 1.6 | 2026-10-31 | Superseded | _(never committed on its own — shipped inside 1.12)_ | cross-reference to the numbered PF sheet (section 8.5); app image 1.1.4 unchanged |

| `pf-install.sh` | 1.5 | 2026-10-31 | Superseded | commit:438872a | app image 1.1.4 (new table `asset_splits`, new column `users.ideal_basket_base`) |

| `pf-install.sh` | 1.4 | 2026-10-31 | Superseded | _(never committed on its own — shipped inside 1.5)_ | app image 1.1.3 (no schema change) |

| `pf-install.sh` | 1.3 | 2026-10-31 | Superseded | commit:7a11ee0 | app image 1.1.2, history entry, commented `PF_SUGGEST_MAX_TILT` line in the unit |

| `pf-install.sh` | 1.2 | 2026-10-29 | Superseded | commit:c494d3e | app image 1.1.1, first-run GUI "Next" text, commented SMTP lines |

| `pf-install.sh` | 1.1 | 2026-10-29 | Superseded | commit:a18ea51 | full application: `--app-src` instead of `--init-app`, image tag 1.1.0, start period 90 s |

| `pf-install.sh` | 1.0 | 2026-10-29 | Superseded | _(never committed on its own — shipped inside 1.1)_ | PF stack installer (two networks, TimescaleDB, NPM wiring with live-vs-repo guard) |

| `pf-mgmt-cheatsheet.md` | 1.9 | 2026-10-31 | Latest | commit:8e53cb8 | §8.3.1 points to `pf-upgrade.sh`; no application change |

| `pf-mgmt-cheatsheet.md` | 1.8 | 2026-10-31 | Superseded | commit:3c2ff84 | app 1.1.5: My position card, own-currency amounts, explained P/L, left-aligned description columns |

| `pf-mgmt-cheatsheet.md` | 1.7 | 2026-10-31 | Superseded | _(never committed on its own — shipped inside 1.12)_ | numbered headings as chapter 8 of the documentation (8.1 to 8.5.7), cross-references updated; no application change |

| `pf-mgmt-cheatsheet.md` | 1.6 | 2026-10-31 | Superseded | commit:438872a | app 1.1.4: splits and bonus issues (§8.5.5), grouped tables, hover readout on charts, Edit on the holding page, All-period percentage, market-suggested basket fix, upgrade steps for 1.1.4 |

| `pf-mgmt-cheatsheet.md` | 1.5 | 2026-10-31 | Superseded | _(never committed on its own — shipped inside 1.6)_ | app 1.1.3: Back button, Delete on holding page, Trades history by year with filters, commissions, sortable tables, tarball 1.1.3 upgrade steps (health wait, root-only commands) |

| `pf-mgmt-cheatsheet.md` | 1.4 | 2026-10-31 | Superseded | commit:7a11ee0 | app 1.1.2: ideal basket, deposits and interest, holding pages, dividend check, 9-digit shares, fund/ETF type, Total and market price in the trade form, administrator currency list, upgrade check commands |

| `pf-mgmt-cheatsheet.md` | 1.3 | 2026-10-29 | Superseded | commit:c494d3e | web GUI, roles, first run, e-mail recovery, wealth chart, holdings analysis, upgrade from tarball |

| `pf-mgmt-cheatsheet.md` | 1.2 | 2026-10-29 | Superseded | commit:a18ea51 | application, DRIP rules, users/2FA, endpoints (1.1: installer-based procedure; 1.0 was an uncommitted draft) |

| `pf-mgmt-cheatsheet.md` | 1.1 | 2026-10-29 | Superseded | _(never committed on its own — shipped inside 1.2)_ | PF stack sheet around `pf-install.sh` |

| `check-sites.sh` | 1.0 | 2026-10-25 | Latest | commit:ce3e6e1 (+x in commit:af01c01) | first versioned release; `Description=.* -- ` sed; `--version`/`--help` |

## 9.3 Repository history

Not kept by hand — see the project's **Repository** tab (all revisions, diffs, tags) and **Activity**. Initial import: commit:cc4880f.

Redmine link syntax used above: `commit:<hash>` → commit page, `source:path` → file at HEAD, `source:path@<hash>` → file at that revision, e.g. source:dmz-web-podman-cheatsheet.md@cheatsheet-1.0.