dorfteich/docs/architecture/adr
Claude Fable 5 a758c9d78b
All checks were successful
CI / Lint, typecheck, test (pull_request) Successful in 6m45s
CI / Build container images (pull_request) Successful in 1m14s
CI / Auth e2e pack (pull_request) Successful in 8m37s
CI / Import/export fidelity gate (pull_request) Successful in 57s
CD / Build and push images (push) Successful in 21s
CD / Deploy to Test (push) Successful in 12s
CD / Smoke tests against Test (push) Successful in 1m16s
CD / Promote to Int (push) Successful in 28s
CI / Lint, typecheck, test (push) Successful in 6m19s
CI / Build container images (push) Has been skipped
CI / Auth e2e pack (push) Successful in 8m12s
CI / Import/export fidelity gate (push) Successful in 58s
#219: verified reproducible build without network access
The ADR 0024 §4 decision, taken explicitly and both ways: customers
OPERATE prebuilt digest-pinned images (no customer-side build), and
ADDITIONALLY the workspace build is verified to work with networking
disabled - so site-local patching stays possible without internet.

Evidence (docs/vs-nfd/96-offline-build-protokoll.md): pnpm install
--offline --frozen-lockfile plus pnpm build under docker run
--network none (node:22.15.1-alpine + pnpm 11.9.0, the pinned
toolchain), reproduced twice from clean checkouts with identical
results. The offline kit is the pnpm store (~870 MB) plus the build
user's ~/.cache (~460 MB - the prisma engines live there; without the
cache the prisma postinstall fails offline).

The one network dependency found and bounded: the drawio plugin's
installable ZIP fetches its pinned vendor tarball on first build.
Deploy images contain no plugin ZIPs, so the delivery-relevant build is
fully offline (CI=1 skips the fetch, as in CI); an offline ZIP build
pre-seeds the tarball into packages/plugins/drawio/vendor/.

Also catches up the operations manual's scheduler-job table to 10
(read-trail-maintenance was added in #224 without the row here).

Refs #219.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01AUtYMxwTCMHG9mVHnwbFg8
2026-07-31 14:39:35 +02:00
..
0001-typescript-monorepo.md Add architecture documentation, ADRs, and operations concept 2026-07-04 14:36:16 +02:00
0002-postgresql.md Add architecture documentation, ADRs, and operations concept 2026-07-04 14:36:16 +02:00
0003-yjs-crdt-collaboration.md Add architecture documentation, ADRs, and operations concept 2026-07-04 14:36:16 +02:00
0004-tiptap-editor.md Add architecture documentation, ADRs, and operations concept 2026-07-04 14:36:16 +02:00
0005-react-vite-frontend.md Add architecture documentation, ADRs, and operations concept 2026-07-04 14:36:16 +02:00
0006-nestjs-prisma-backend.md Add architecture documentation, ADRs, and operations concept 2026-07-04 14:36:16 +02:00
0007-auth-sessions-oidc-ready.md #190: configurable session lifetime with a server-side idle timeout 2026-07-30 11:11:15 +02:00
0008-plugin-sandbox.md Add architecture documentation, ADRs, and operations concept 2026-07-04 14:36:16 +02:00
0009-import-export-converters.md Add architecture documentation, ADRs, and operations concept 2026-07-04 14:36:16 +02:00
0010-postgres-fulltext-search.md Add architecture documentation, ADRs, and operations concept 2026-07-04 14:36:16 +02:00
0011-file-storage-quotas.md Scaffold pnpm monorepo with lint, format, and test tooling 2026-07-04 19:06:27 +02:00
0012-i18n.md Add architecture documentation, ADRs, and operations concept 2026-07-04 14:36:16 +02:00
0013-versioning-and-trash.md Scaffold pnpm monorepo with lint, format, and test tooling 2026-07-04 19:06:27 +02:00
0014-gitea-actions-cicd.md Move the stage directories to /srv/DOCKER (host consolidation) 2026-07-14 12:43:29 +02:00
0015-backup-strategy.md Add architecture documentation, ADRs, and operations concept 2026-07-04 14:36:16 +02:00
0016-self-hosted-fonts.md Add architecture documentation, ADRs, and operations concept 2026-07-04 14:36:16 +02:00
0017-accessibility-by-default.md docs: ADR 0017 — Barrierefreiheit als Standard-Anforderung 2026-07-21 17:17:26 +02:00
0018-color-theming.md #186: pond accent theming — scoped derivation, cascade pond > user > default 2026-07-29 09:09:36 +02:00
0019-no-security-base-functions.md docs: VS-NfD readiness planning (ist-aufnahme, plan, ADRs 0019-0026, issue drafts) 2026-07-30 01:48:05 +02:00
0020-token-crypto-key-separation.md docs: VS-NfD readiness planning (ist-aufnahme, plan, ADRs 0019-0026, issue drafts) 2026-07-30 01:48:05 +02:00
0021-external-authentication.md #217: map IdP groups and roles onto the permission model 2026-07-31 13:09:11 +02:00
0022-page-classification.md #212: mark attachment downloads by filename prefix and companion file 2026-07-31 07:29:16 +02:00
0023-read-access-audit-trail.md #225: read-trail master switch and written purpose limitation 2026-07-31 12:35:18 +02:00
0024-reproducible-offline-deployment.md #219: verified reproducible build without network access 2026-07-31 14:39:35 +02:00
0025-plugin-trust-model.md docs: VS-NfD readiness planning (ist-aufnahme, plan, ADRs 0019-0026, issue drafts) 2026-07-30 01:48:05 +02:00
0026-backup-target-restriction.md docs: VS-NfD readiness planning (ist-aufnahme, plan, ADRs 0019-0026, issue drafts) 2026-07-30 01:48:05 +02:00