fbda1b4beb
Some checks failed
Deploy to Phoenix / deploy (push) Has been cancelled
- ADD_CHAIN138_TO_LEDGER_LIVE: Ledger form done; public code review repo bis-innovations/LedgerLive; init/push commands - CONTRACT_DEPLOYMENT_RUNBOOK: Chain 138 gas price 1 gwei, 36-addr check, TransactionMirror workaround - CONTRACT_*: AddressMapper, MirrorManager deployed 2026-02-12; 36-address on-chain check - NEXT_STEPS_FOR_YOU: Ledger done; steps completable now (no LAN); run-completable-tasks-from-anywhere - MASTER_INDEX, OPERATOR_OPTIONAL, SMART_CONTRACTS_INVENTORY_SIMPLE: updates - LEDGER_BLOCKCHAIN_INTEGRATION_COMPLETE: bis-innovations/LedgerLive reference Co-authored-by: Cursor <cursoragent@cursor.com>
2.7 KiB
2.7 KiB
Todos Completion Summary — 2026-02-07
Status: All actionable todos completed or documented.
Source: Recommendations from docs/10-best-practices/
Completed (Executed)
| Todo | Result |
|---|---|
| Secure .env permissions | Ran scripts/security/secure-env-permissions.sh |
| Secure validator keys | Ran scripts/run-via-proxmox-ssh.sh secure-keys --host 192.168.11.11 --apply (1000–1002 secured) |
| Firewall 8006 | Ran firewall-proxmox-8006.sh --apply on ml110, r630-01, r630-02 |
| Automated backup | Ran scripts/verify/backup-npmplus.sh; NPMplus backup cron via schedule-npmplus-backup-cron.sh |
| Health check cron | Installed daily (08:00) and weekly (Sun 09:00) via schedule-daily-weekly-cron.sh --install |
| Proxmox verify r630-02 | Listed VMs: 2201, 2303, 2401, 5000, 6200, 6201, 7810, 7811, 8641, 10234 |
| Snapshots runbook | Created docs/03-deployment/SNAPSHOT_RUNBOOK.md |
| Runbooks | Already in OPERATIONAL_RUNBOOKS.md (add/remove validator, upgrade Besu, key rotation) |
| Retry logic | scripts/utils/retry_with_backoff.sh exists |
| Dry-run pattern | scripts/utils/dry-run-example.sh; many scripts support --dry-run |
Completed (Documented / Scripts Exist)
| Todo | Reference |
|---|---|
| Encrypt validator backups | scripts/archive/backups/backup-configs.sh — uses gpg for validator keys |
| Prometheus/Besu metrics | scripts/monitoring/prometheus-besu-config.yml — add to prometheus.yml |
| Bridge dynamic gas | scripts/bridge-with-dynamic-gas.sh |
| Bridge monitoring | scripts/monitor-bridge-transfers.sh, scripts/monitor-allowance.sh |
Cancelled / Manual
| Todo | Reason |
|---|---|
| SSH key auth (disable password) | Requires keys deployed first; --apply is manual per host |
| Network VLANs | Complex infra change; see scripts/deployment/phase1-vlan-enablement.sh |
| Rotate API tokens (90 days) | Policy; add to calendar/runbook |
| Test backup restoration | Manual test; document in backup runbook |
| Centralize logs (Loki/ELK) | Major setup; see docs/10-best-practices/ |
| Grafana dashboards | scripts/monitoring/create-monitoring-dashboard.sh |
| Bridge multi-sig | Policy decision |
| Proxmox migrate ml110 → r630 | Complex migration; see scripts/migrate-vms-to-r630-01.sh |
Scripts Used
scripts/security/secure-env-permissions.shscripts/secure-validator-keys.sh(via run-via-proxmox-ssh)scripts/security/firewall-proxmox-8006.shscripts/verify/backup-npmplus.shscripts/maintenance/schedule-daily-weekly-cron.shscripts/maintenance/schedule-npmplus-backup-cron.shscripts/run-via-proxmox-ssh.sh
Docs Created/Updated
docs/03-deployment/SNAPSHOT_RUNBOOK.md