Promote the validated dev head (Feature 07 merge 67e44a5) to main.
Included features (complete and independently reviewed)
Feature 07 - Deployment, Identity and Backups (PR #75; tasks #54, #72, #73, #74 plus the Authentik and Traefik/DNS steps): compose stack, Authentik OIDC, firewall allowlist, Traefik route + TLS + DNS, Litestream replication with a proven restore, nightly media backup, and deploy/RUNBOOK.md.
Already on main
Features 01-06, 08, 09 (previous promotions).
Not included / deferred
Feature 10 (Recipe Grounding and Photos): code tasks are merged into its feature branch; the SearXNG sidecar task is stalled on Feature 07's compose landing (now unblocked) and the feature is not yet task-complete.
Feature 07 task bfe2ac1e (installed-PWA login check on Android and iOS) is a device verification deliberately deferred by the owner; the feature review accepted it as post-merge.
Release checks (release branch 2dbfc74 = dev 67e44a5 + content-neutral main merge)
make test: gofmt clean; go vet ./...; go test -race ./... all packages pass; npm ci, npm run typecheck, npm test (30 files, 334 tests) pass.
make build: web build + embed + CGO_ENABLED=0 go build succeeded.
Authentik login works; firewall restricts 10.60.1.14:8090 to Traefik + host; Litestream replicating to the NAS with a proven restore.
Only overseer merges this pull request into main.
Promote the validated `dev` head (Feature 07 merge 67e44a5) to `main`.
## Included features (complete and independently reviewed)
- Feature 07 - Deployment, Identity and Backups (PR #75; tasks #54, #72, #73, #74 plus the Authentik and Traefik/DNS steps): compose stack, Authentik OIDC, firewall allowlist, Traefik route + TLS + DNS, Litestream replication with a proven restore, nightly media backup, and deploy/RUNBOOK.md.
## Already on main
- Features 01-06, 08, 09 (previous promotions).
## Not included / deferred
- Feature 10 (Recipe Grounding and Photos): code tasks are merged into its feature branch; the SearXNG sidecar task is stalled on Feature 07's compose landing (now unblocked) and the feature is not yet task-complete.
- Feature 07 task bfe2ac1e (installed-PWA login check on Android and iOS) is a device verification deliberately deferred by the owner; the feature review accepted it as post-merge.
## Release checks (release branch 2dbfc74 = dev 67e44a5 + content-neutral main merge)
- `make test`: gofmt clean; `go vet ./...`; `go test -race ./...` all packages pass; `npm ci`, `npm run typecheck`, `npm test` (30 files, 334 tests) pass.
- `make build`: web build + embed + `CGO_ENABLED=0 go build` succeeded.
- `docker build .`: image built successfully.
## Live verification of the promoted content
- https://mealquest.cubecraftlabs.com/health -> 200 with a valid Let's Encrypt certificate, LAN and external.
- Authentik login works; firewall restricts 10.60.1.14:8090 to Traefik + host; Litestream replicating to the NAS with a proven restore.
Only `overseer` merges this pull request into `main`.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
review_agent
Promote the validated
devhead (Feature 07 merge67e44a5) tomain.Included features (complete and independently reviewed)
Already on main
Not included / deferred
Release checks (release branch
2dbfc74= dev67e44a5+ content-neutral main merge)make test: gofmt clean;go vet ./...;go test -race ./...all packages pass;npm ci,npm run typecheck,npm test(30 files, 334 tests) pass.make build: web build + embed +CGO_ENABLED=0 go buildsucceeded.docker build .: image built successfully.Live verification of the promoted content
Only
overseermerges this pull request intomain.Independent Codex gpt-6-sol review: APPROVED for this exact commit.