Skip to content

instance.md

Latest commit

 

History

History
50 lines (38 loc) · 5.59 KB

instance.md

File metadata and controls

50 lines (38 loc) · 5.59 KB
Raw

The reference instances

What the public docs no longer name (they describe any instance).
Cloudflare account 3868cbc17be171c90972dd32e41e7783
App Worker openclapper-api, https://openclapper.app (API + Studio; old: fielder-api, https://fielder-api.fielder-worker.workers.dev)
Admin plane Worker openclapper-admin, https://admin.openclapper.app (was fielder-admin)
D1 openclapper-db, 6d7ada22-afa6-4bb2-bd77-59e22d7cc36c (WEUR; was fielder-db)
R2 openclapper-media (WEUR; was fielder-shots)
Zero Trust team weathered-salad-6072.cloudflareaccess.com
Access app for the admin plane "OpenClapper Admin" (9df75d75-ee5b-463a-8387-88925b5abcbb, renamed from "Fielder-Admin" 2026-10-23, the deleted Fielder Worker's destination removed), AUD 727fade57871978d220f144dd28ccd5d99cb5683aa4f736e8856a0a1bb6a2ed7; the reusable policy "Owner auth" (89f333bc-2657-4af2-8670-d32e8b943c45): the owner's email, one-time PIN
Android keys One per environment, made 2026-10-23: production CN=OpenClapper, alias openclapper, SHA-256 5E:B3:BA:F7:…:30:89; staging CN=OpenClapper Staging, alias openclapper-staging, SHA-256 32:C0:B5:35:…:84:D5. Upload keys on Google Play (Play signs with Google-generated keys). In the environments' ANDROID_KEY* secrets and the owner's Bitwarden. The old CN=Fielder key is retired
Google Play Personal developer account. Apps org.openclapper and org.openclapper.staging on the internal testing track; service accounts play-uploader-production / play-uploader-staging in the Google Cloud project openclapper, each invited on its own app only; their keys in PLAY_SERVICE_ACCOUNT_JSON per environment

Staging

First deployed 2026-10-22 (#6) from core main (7ed7fca).
App Worker openclapper-staging-api, https://staging.openclapper.app
Admin plane Worker openclapper-staging-admin, https://staging-admin.openclapper.app
D1 openclapper-staging-db (WEUR, D1_LOCATION), first id a6047bce-a3e6-413d-b510-30c1cb923498; the id changes with every clone (deleted and created again by name), so it is never pinned
R2 openclapper-staging-media
Access app for the admin plane "OpenClapper Admin (staging)" (31edf42f-26b0-44a5-bf5e-5d687239c570), AUD b5992eb5c9f1571536a58f276a33829a19f4a71ebfc36e6b4ce690b4f129966e, the same reusable policy "Owner auth" and login method as production, 24 h sessions
Phone "OpenClapper Staging", org.openclapper.staging, signed with the production key

After a clone, staging holds production's accounts and password hashes (sessions excepted), behind the same Access policy for its admin plane.

History

  • 2026-10-23: Google Play. Both apps on the internal track (first bundles by hand: staging 407, production 11000), uploads from Build APK verified (staging 410). New keys per environment; no key is kept on the owner's machine any more.

  • 2026-10-23: v0.10.0. Production moved to the production GitHub environment; deploy.env and the last repository variable (APP_URL) are gone (#7). Access app renamed "OpenClapper Admin". The owner plans new signing keys for production and staging (the old one is CN=Fielder); installs from the old key are replaced once.

  • 2026-10-22: the repository went public with GitHub environments; production's settings left the repository variables (all but APP_URL), so the staging environment cannot inherit them, and production reads them from deploy.env until #7. Staging deployed twice (resources, then its Access application) and serves staging.openclapper.app; no accounts until the first clone.

  • 2026-10-22: staging planned (#2): its own resources in the same account, settings in the staging GitHub environment, workflows Deploy staging, Build APK staging, Clone production to staging.

  • 2026-10-20: v0.6.0, everything renamed to OpenClapper (#233). The phone app is now org.openclapper (a new app; the old Fielder app can be uninstalled), the submodule is core/, and Build APK takes variant: dev for the development client.

  • 2026-10-20: rename to OpenClapper. D1 and R2 copied to openclapper-db / openclapper-media (25 tables, 183 objects, verified identical); Workers redeploy as openclapper-api / openclapper-admin on openclapper.app / admin.openclapper.app (APP_DOMAIN/ADMIN_DOMAIN). Verified same day (both web clients + APK); the old Workers, fielder-db and fielder-shots were deleted on 2026-10-20. The installed APK still points at the old URL and is abandoned (next build uses APP_URL).

  • 2026-09-13: the service token early builds used was revoked; APKs from before then cannot reach the API.

  • 2026-10-18: multi-user foundation (epic OpenClapper-dev/core#107) merged.

  • 2026-10-19: cutover done. Migrations 0021 + 0022 applied (backup before: .secrets/prod-before-0021.sql in the owner's public checkout), the admin plane behind its own Access app, the app's Access app (AUD 8512a955…) deleted, the bootstrap user has the owner's email and password, the Access fallback removed (OpenClapper-dev/core#118).

  • 2026-10-19: deploy.env moved here from the public checkout; the public Makefile has no deploy targets any more (OpenClapper-dev/core#131). APK builds via Build APK (OpenClapper-dev/core#132).

  • 2026-10-19: EAS removed (OpenClapper-dev/core#135): builds are expo prebuild + Gradle with this instance's own key. APKs from before were signed by an EAS-generated key, so the first own-key APK needs one uninstall of the old app. One product version and releases (OpenClapper-dev/core#136).

Settings

The production and staging GitHub environments of this repository (README.md). Nothing local.